$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft File: 10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json) Hash identifier: D0CkrKOg8MyThmfO1rHLNeeNdlFac7xm4QF+738UFXQ= Subject key identifier: A0:46:76:E2:BC:2B:9F:C2:B8:50:26:71:CF:EF:78:12:20:14:FD:94 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019A515063B7187E0B4D70C78D6832F2FA06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft Manifest number: 17AF Signing time: Wed 05 Nov 2025 00:00:14 +0000 Manifest this update: Wed 05 Nov 2025 00:00:14 +0000 Manifest next update: Thu 06 Nov 2025 00:00:14 +0000 Files and hashes: 1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: kj8N5FQ7Ry53bjZOuAo21HOsNczG+Ko+ifDgmjgV0Jw=) 2: 1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa (hash: m8wwCwecp0KG21zfw+PHnUnhiPotAg/Kcldtw5QJnwI=) 3: 6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa (hash: qSzWqPlKHdtkFhY0N3iiqf+44mjD24bSbWGh/QepF9U=) 4: 7DLgW1_AEJnFRBnMP9DUZFvxjOk.roa (hash: raPeEfqiYW57HqMcse3rmHrWriulB1kH4YGu8bRaYZQ=) 5: 7fJvelaeWRPaeeOqQiVdqp5Exxc.roa (hash: u3Jlx57PaTOE1SJ38utPoD5WJWb3hvAAlv0+GWsZJkE=) 6: CjTVhDRUdYeYGpfw19vf8IdBcu4.roa (hash: mdffuqPdTXZApk9676GRStovFZhT4PmFv7pCJJymj+I=) 7: DvLbsc5ECTtzWXwAHat2lS2CmCQ.roa (hash: 27SjmQLahfEV8/oOJ8A2X0mKS+LdBuzCoqfA36DRon0=) 8: E8kn7aEukt3A02XfkuhthKBKbNM.roa (hash: Tt0umHn7tFpaKFeQtx4HB3IwGyxvBq1weMf6aMmIN9c=) 9: Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa (hash: 6g02bbz7+35Jk54vCdrzHk533LcEU45qtdmE3cJZevQ=) 10: Jv8CRfjds1b_ZfNR_DA8H4cnRe4.roa (hash: 73nQMY7oUme6InpZuiFQ8pzh3gvcuZ+jCA6e3CNfQE4=) 11: JxvXv1SK_8H7hNIOu3azheEUN_c.roa (hash: x34KV2+MPw2bH9bEpIO2qyGptTiGLHv6QYjhlgGztgA=) 12: LmQkPTctK2jSGiSfsndjKmsIN1s.roa (hash: nFCXSPzYZ400StRreKtw2z+wi7uGbR4CjXlF+FAF7u4=) 13: R4plGPMvWUjpa9aukliAnhzGe2A.roa (hash: oscewSfDrM/B93KPAN0LoRkJw9vGJj8ctioIUb2phK4=) 14: Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa (hash: oKk2du3XesafVCaeuT8l0tzTai4bCgh0qNTFPpfoKhU=) 15: akkUXfA8yjmbAbge7T9s-UuKdck.roa (hash: bTuwJwUzkex/N9xt02kabUmVlqjLA6HLXLMaFWG1Vj4=) 16: dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa (hash: jx6o6656P1/2uAu6tNuMhpveGEMTalzlqd0P2gLiCYA=) 17: dT4eKxKuiMlejujStpkeBlqhlOM.roa (hash: jTmPsaj5YAbHSTlj3nB1Krnj3ip2XzfaIfy6VeLkbfc=) 18: eXmLXScgkQlZFJY2owYgI3HJtns.roa (hash: aE7sjemkm9QvnBnknfgKs5kPN5UFKUUkPmfsuOVG/yw=) 19: gIUxN2GBsUoK8BYbrzLOZ4zooEs.roa (hash: NGAW89R8AdDYifyIj10//HgW4r1O80XD0St/aLijhJg=) 20: gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa (hash: wCggpARdDyZ/wAC1b4ExDASBW4uAEwHa8r5dk7EAX70=) 21: iPBzS_uwUzrjrIw4HXWeXeuGKQk.roa (hash: YuRhgQ6UmgVdtdBtX9QYtthLyJmtsPqkTXpg5SmzCCs=) 22: itabYXi3irEL53byV06jkZ3aC48.roa (hash: QjaQucmPtw8duEVnsbQImiTK3kNOasMc0swqbwK8Lu8=) 23: v7T9_oyFYAPN_vUJUuEgZ_WQNJI.roa (hash: XchZv6OupInQB4mmV3EszoeFc599qe/XG+jbFEKYskA=) 24: zZcPwXd3-9CVbOi6b88i7sOrBco.roa (hash: 2GF7Rjb8NN/bKnG12nbz2lxITDWGz7Whf8AG3sw8XcQ=) 25: zhUAhL2EdvfFS-YlGh5Iqcos6Ww.roa (hash: gyYfNwxUTJ6w/PF/66IV9SQklQuOl14GHolxHTxn8Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:50:63:b7:18:7e:0b:4d:70:c7:8d:68:32:f2:fa:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Nov 5 00:00:14 2025 GMT Not After : Nov 6 00:00:14 2025 GMT Subject: CN=a04676e2bc2b9fc2b8502671cfef78122014fd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:a0:06:12:26:25:a6:32:82:be:c3:70:da: 7d:37:90:c7:da:66:96:56:90:38:b9:d7:78:43:f6: 05:48:c9:4e:c6:64:06:df:be:72:b8:5c:13:be:af: d2:0c:68:2c:15:9d:b7:b7:44:f1:c1:61:60:3f:87: 96:09:ae:02:2b:73:86:54:3f:11:c9:62:da:fe:38: 27:9e:0f:fb:07:3a:35:92:72:5e:2d:88:52:26:08: 32:5a:f1:27:1e:7e:e6:05:d5:60:33:31:53:d2:2d: db:f8:60:b5:9d:d3:1b:75:0c:40:b1:c0:f9:5d:9e: 84:87:d6:3b:13:e3:6c:b8:81:fa:9d:92:09:92:86: d9:0d:a8:e3:52:cc:98:4a:c6:81:a8:32:99:ee:70: b1:e0:9e:05:9b:06:5d:66:d5:8d:f6:8d:a1:59:1b: b2:d3:58:7a:dd:8f:13:df:71:5c:ab:97:9f:8b:76: 71:af:98:ea:cc:53:46:f8:ba:98:e1:eb:b6:ff:0b: aa:ce:9a:05:0c:21:db:3a:4d:73:2c:6c:91:a0:8d: 9d:db:cc:b6:aa:43:50:b4:55:58:a6:d6:bb:d7:11: 87:78:0d:f4:f6:9c:a0:31:c2:64:69:b3:ea:8a:7c: f6:2b:d8:19:39:96:fa:83:18:c8:a1:66:02:d4:80: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:46:76:E2:BC:2B:9F:C2:B8:50:26:71:CF:EF:78:12:20:14:FD:94 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:43:a7:87:fd:df:1f:16:be:42:2e:c2:eb:6c:6e:9f:c7:bb: 77:f9:2e:c3:9a:7e:31:05:be:5e:4f:f8:02:4b:23:58:40:cd: 4d:c1:bb:e6:eb:8e:50:56:18:51:43:40:aa:88:87:53:10:9f: 2f:e4:3a:0f:11:0d:7c:cd:8e:51:50:4a:6d:36:72:52:63:5a: 99:92:72:fb:f2:dc:1d:26:3b:91:54:72:a2:4a:f8:88:2c:24: 94:20:6b:ce:57:22:40:91:1d:90:5d:f4:b7:f6:cb:47:51:c9: f9:06:8a:97:3e:2f:8e:f5:8f:3b:a4:b3:d8:fe:6f:dd:ba:35: a9:2d:73:16:2e:06:c1:aa:53:ed:46:75:3a:58:43:36:59:98: d3:4f:2f:4d:15:1a:ba:ad:9f:66:15:be:6d:7e:64:9f:28:fc: c8:09:24:f3:a2:e2:c8:be:f9:36:57:40:17:94:41:df:93:b6: 01:c2:13:76:ad:e9:8d:9f:bb:ce:f9:b0:50:c1:7d:53:16:a6: 17:88:a5:21:73:08:5a:01:43:f1:4c:e5:32:cb:11:41:0e:a0: 4a:a9:c0:57:42:af:f5:0b:b8:08:8c:6c:52:7d:80:ec:31:a0: e4:8e:78:c0:6f:7a:6d:02:0e:2e:75:d9:61:df:0a:74:d2:23: 51:26:b7:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRUGO3GH4LTXDHjWgy8voGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjUxMTA1MDAwMDE0WhcNMjUxMTA2MDAwMDE0WjAzMTEwLwYDVQQD EyhhMDQ2NzZlMmJjMmI5ZmMyYjg1MDI2NzFjZmVmNzgxMjIwMTRmZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryCgBhImJaYygr7DcNp9N5DH2maW VpA4udd4Q/YFSMlOxmQG375yuFwTvq/SDGgsFZ23t0TxwWFgP4eWCa4CK3OGVD8R yWLa/jgnng/7Bzo1knJeLYhSJggyWvEnHn7mBdVgMzFT0i3b+GC1ndMbdQxAscD5 XZ6Eh9Y7E+NsuIH6nZIJkobZDajjUsyYSsaBqDKZ7nCx4J4FmwZdZtWN9o2hWRuy 01h63Y8T33Fcq5efi3Zxr5jqzFNG+LqY4eu2/wuqzpoFDCHbOk1zLGyRoI2d28y2 qkNQtFVYpta71xGHeA309pygMcJkabPqinz2K9gZOZb6gxjIoWYC1IAeFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBGduK8K5/CuFAmcc/veBIgFP2UMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUOnh/3f Hxa+Qi7C62xun8e7d/kuw5p+MQW+Xk/4AksjWEDNTcG75uuOUFYYUUNAqoiHUxCf L+Q6DxENfM2OUVBKbTZyUmNamZJy+/LcHSY7kVRyokr4iCwklCBrzlciQJEdkF30 t/bLR1HJ+QaKlz4vjvWPO6Sz2P5v3bo1qS1zFi4GwapT7UZ1OlhDNlmY008vTRUa uq2fZhW+bX5knyj8yAkk86LiyL75NldAF5RB35O2AcITdq3pjZ+7zvmwUMF9Uxam F4ilIXMIWgFD8UzlMssRQQ6gSqnAV0Kv9Qu4CIxsUn2A7DGg5I54wG96bQIOLnXZ Yd8KdNIjUSa34Q== -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:28 2025 by rpki-client