$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: EdroOxlNxbckuKbikctvrQt/j5yuilWKXvQOzQcNDLc= Subject key identifier: 28:09:69:13:AD:71:F8:C5:E8:D6:DB:9D:BD:FF:A5:3B:2D:7D:6F:11 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019A4F62C0CB12E1361DA5C42D7C5EBA567B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 17AE Signing time: Tue 04 Nov 2025 15:01:03 +0000 Manifest this update: Tue 04 Nov 2025 15:01:03 +0000 Manifest next update: Wed 05 Nov 2025 15:01:03 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: ttVl9ZzTGUShHH2XhWq+UhoG2U3R8Z7bzLAYuEBYmww=) 2: 1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa (hash: m8wwCwecp0KG21zfw+PHnUnhiPotAg/Kcldtw5QJnwI=) 3: 6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa (hash: qSzWqPlKHdtkFhY0N3iiqf+44mjD24bSbWGh/QepF9U=) 4: 7DLgW1_AEJnFRBnMP9DUZFvxjOk.roa (hash: raPeEfqiYW57HqMcse3rmHrWriulB1kH4YGu8bRaYZQ=) 5: 7fJvelaeWRPaeeOqQiVdqp5Exxc.roa (hash: u3Jlx57PaTOE1SJ38utPoD5WJWb3hvAAlv0+GWsZJkE=) 6: CjTVhDRUdYeYGpfw19vf8IdBcu4.roa (hash: mdffuqPdTXZApk9676GRStovFZhT4PmFv7pCJJymj+I=) 7: DvLbsc5ECTtzWXwAHat2lS2CmCQ.roa (hash: 27SjmQLahfEV8/oOJ8A2X0mKS+LdBuzCoqfA36DRon0=) 8: E8kn7aEukt3A02XfkuhthKBKbNM.roa (hash: Tt0umHn7tFpaKFeQtx4HB3IwGyxvBq1weMf6aMmIN9c=) 9: Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa (hash: 6g02bbz7+35Jk54vCdrzHk533LcEU45qtdmE3cJZevQ=) 10: Jv8CRfjds1b_ZfNR_DA8H4cnRe4.roa (hash: 73nQMY7oUme6InpZuiFQ8pzh3gvcuZ+jCA6e3CNfQE4=) 11: JxvXv1SK_8H7hNIOu3azheEUN_c.roa (hash: x34KV2+MPw2bH9bEpIO2qyGptTiGLHv6QYjhlgGztgA=) 12: LmQkPTctK2jSGiSfsndjKmsIN1s.roa (hash: nFCXSPzYZ400StRreKtw2z+wi7uGbR4CjXlF+FAF7u4=) 13: R4plGPMvWUjpa9aukliAnhzGe2A.roa (hash: oscewSfDrM/B93KPAN0LoRkJw9vGJj8ctioIUb2phK4=) 14: Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa (hash: oKk2du3XesafVCaeuT8l0tzTai4bCgh0qNTFPpfoKhU=) 15: akkUXfA8yjmbAbge7T9s-UuKdck.roa (hash: bTuwJwUzkex/N9xt02kabUmVlqjLA6HLXLMaFWG1Vj4=) 16: dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa (hash: jx6o6656P1/2uAu6tNuMhpveGEMTalzlqd0P2gLiCYA=) 17: dT4eKxKuiMlejujStpkeBlqhlOM.roa (hash: jTmPsaj5YAbHSTlj3nB1Krnj3ip2XzfaIfy6VeLkbfc=) 18: eXmLXScgkQlZFJY2owYgI3HJtns.roa (hash: aE7sjemkm9QvnBnknfgKs5kPN5UFKUUkPmfsuOVG/yw=) 19: gIUxN2GBsUoK8BYbrzLOZ4zooEs.roa (hash: NGAW89R8AdDYifyIj10//HgW4r1O80XD0St/aLijhJg=) 20: gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa (hash: wCggpARdDyZ/wAC1b4ExDASBW4uAEwHa8r5dk7EAX70=) 21: iPBzS_uwUzrjrIw4HXWeXeuGKQk.roa (hash: YuRhgQ6UmgVdtdBtX9QYtthLyJmtsPqkTXpg5SmzCCs=) 22: itabYXi3irEL53byV06jkZ3aC48.roa (hash: QjaQucmPtw8duEVnsbQImiTK3kNOasMc0swqbwK8Lu8=) 23: v7T9_oyFYAPN_vUJUuEgZ_WQNJI.roa (hash: XchZv6OupInQB4mmV3EszoeFc599qe/XG+jbFEKYskA=) 24: zZcPwXd3-9CVbOi6b88i7sOrBco.roa (hash: 2GF7Rjb8NN/bKnG12nbz2lxITDWGz7Whf8AG3sw8XcQ=) 25: zhUAhL2EdvfFS-YlGh5Iqcos6Ww.roa (hash: gyYfNwxUTJ6w/PF/66IV9SQklQuOl14GHolxHTxn8Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:c0:cb:12:e1:36:1d:a5:c4:2d:7c:5e:ba:56:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Nov 4 15:01:03 2025 GMT Not After : Nov 5 15:01:03 2025 GMT Subject: CN=28096913ad71f8c5e8d6db9dbdffa53b2d7d6f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:05:67:4a:e3:40:1a:d0:cd:80:a9:19:0f:0d: 58:30:d5:18:90:1b:42:3f:86:b4:69:fe:93:4d:44: 9e:8f:3b:09:98:ae:0f:56:ff:b1:bf:84:ab:0b:97: 27:55:64:19:a1:fd:8d:bc:17:b3:ac:b6:13:5f:7e: 12:b5:d5:c1:96:c3:0a:7a:78:f2:fe:93:5c:29:23: eb:72:bb:81:5a:be:a6:b5:b3:f8:cf:7e:19:b8:51: 9c:25:d6:d1:b2:bf:db:8e:4f:b8:d1:27:05:b5:0b: 44:83:3f:e2:ba:34:af:f7:78:ea:e4:fa:86:50:36: d2:dc:b1:0d:56:55:ce:f7:6e:fd:3d:7c:44:16:fc: a3:f4:de:cf:53:1a:b6:ba:31:50:a8:f9:09:a9:49: 89:be:c8:1e:35:40:5d:ae:36:87:9b:06:0a:32:77: 91:82:a4:b7:df:4c:e9:96:1d:8c:a9:55:c5:b7:20: 0c:21:9f:17:43:6c:ed:3f:13:92:86:41:ab:00:6b: c4:70:1e:b3:67:17:21:0c:42:41:85:f2:27:b9:20: 66:3b:a0:e6:12:fd:9d:0c:27:7c:af:76:2e:c0:31: 6f:07:85:5f:9e:51:69:88:ba:8b:b3:fa:86:6f:49: 81:f4:a2:25:49:5a:24:fb:9b:07:fa:0b:cd:a1:6c: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:09:69:13:AD:71:F8:C5:E8:D6:DB:9D:BD:FF:A5:3B:2D:7D:6F:11 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:83:bf:8f:8b:eb:82:0e:d4:d9:7c:7d:87:68:a5:d5:6f:1a: 3b:fe:c8:59:c5:42:fe:a2:69:23:03:89:f1:5a:ba:fc:cd:00: 65:aa:aa:ab:60:72:12:af:cd:eb:1a:9b:37:95:e7:08:f5:5c: a3:10:92:f8:c2:44:57:31:3d:52:3a:8c:50:a2:94:22:ae:98: a7:e5:81:74:1f:09:50:bc:24:9d:f7:60:e7:84:37:08:be:8e: a6:d4:79:ab:4d:a5:47:cf:af:83:93:16:35:37:53:d2:ab:4f: 51:2e:50:f2:cf:8f:ce:9d:f0:c0:34:36:b9:fa:8b:e7:57:94: 40:90:a7:be:09:38:3b:23:b1:3f:8e:f1:7d:1f:e9:18:ac:76: ec:1f:b9:77:59:6a:eb:98:10:92:45:87:b6:2a:16:ec:ac:4e: 3b:8f:d0:ab:bb:73:0a:b9:66:c0:11:33:9e:6e:cc:85:83:06: 85:a8:ea:96:e4:bd:12:3d:d4:df:de:a1:a7:bb:2a:ce:9e:2a: cc:40:c0:58:64:38:60:1f:e8:33:98:3e:e6:a4:94:cc:85:7c: 3d:27:42:dd:7a:ae:e9:f2:12:40:ee:6a:da:fd:d3:fa:3d:21: 96:66:7c:22:8b:d1:26:f4:48:12:78:af:75:83:40:23:ab:8b: 86:09:6f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYsDLEuE2HaXELXxeulZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjUxMTA0MTUwMTAzWhcNMjUxMTA1MTUwMTAzWjAzMTEwLwYDVQQD EygyODA5NjkxM2FkNzFmOGM1ZThkNmRiOWRiZGZmYTUzYjJkN2Q2ZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwVnSuNAGtDNgKkZDw1YMNUYkBtC P4a0af6TTUSejzsJmK4PVv+xv4SrC5cnVWQZof2NvBezrLYTX34StdXBlsMKenjy /pNcKSPrcruBWr6mtbP4z34ZuFGcJdbRsr/bjk+40ScFtQtEgz/iujSv93jq5PqG UDbS3LENVlXO9279PXxEFvyj9N7PUxq2ujFQqPkJqUmJvsgeNUBdrjaHmwYKMneR gqS330zplh2MqVXFtyAMIZ8XQ2ztPxOShkGrAGvEcB6zZxchDEJBhfInuSBmO6Dm Ev2dDCd8r3YuwDFvB4VfnlFpiLqLs/qGb0mB9KIlSVok+5sH+gvNoWxdZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgJaROtcfjF6Nbbnb3/pTstfW8RMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIO/j4vr gg7U2Xx9h2il1W8aO/7IWcVC/qJpIwOJ8Vq6/M0AZaqqq2ByEq/N6xqbN5XnCPVc oxCS+MJEVzE9UjqMUKKUIq6Yp+WBdB8JULwknfdg54Q3CL6OptR5q02lR8+vg5MW NTdT0qtPUS5Q8s+Pzp3wwDQ2ufqL51eUQJCnvgk4OyOxP47xfR/pGKx27B+5d1lq 65gQkkWHtioW7KxOO4/Qq7tzCrlmwBEznm7MhYMGhajqluS9Ej3U396hp7sqzp4q zEDAWGQ4YB/oM5g+5qSUzIV8PSdC3Xqu6fISQO5q2v3T+j0hlmZ8IovRJvRIEniv dYNAI6uLhglvOg== -----END CERTIFICATE-----Generated at Tue Nov 4 22:24:58 2025 by rpki-client