$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: 2X31nq4OhtA3wUVdqXeo/2ykM8dbm9lZDvIm2aArLbo= Subject key identifier: 77:72:68:9E:78:52:08:28:A9:58:11:B1:B4:D6:53:B7:41:FC:0B:F1 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019A4E4F90B6B7F9BF44915575C60A0E1586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1716 Signing time: Tue 04 Nov 2025 10:00:28 +0000 Manifest this update: Tue 04 Nov 2025 10:00:28 +0000 Manifest next update: Wed 05 Nov 2025 10:00:28 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: Z92UgB+v/8VWRUmiPP/s/Z5NWiB6e6QQI2UohmNIG0w=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:90:b6:b7:f9:bf:44:91:55:75:c6:0a:0e:15:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Nov 4 10:00:28 2025 GMT Not After : Nov 5 10:00:28 2025 GMT Subject: CN=7772689e78520828a95811b1b4d653b741fc0bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:24:74:a7:e7:5e:1b:c7:59:f5:ca:d2:ea: c9:cf:d7:1a:f9:e1:92:91:96:0c:e1:ca:62:ce:8f: b6:59:c8:e6:a5:fd:dc:23:85:db:c4:44:9b:3d:20: 2f:41:ff:f5:52:22:7d:c8:92:2d:5b:46:14:a0:f3: 93:d1:6c:e5:9f:4b:8e:fd:70:e5:c6:71:f1:48:ea: d2:2f:95:0f:e5:5d:6e:3f:e6:50:69:11:87:16:85: f8:f1:03:3b:34:45:18:44:2e:97:27:d7:2d:41:e1: fd:3f:2f:56:ce:bd:a1:b6:a4:ea:e3:83:a3:65:f7: a7:2f:d2:d9:5b:49:43:8f:8c:19:63:7e:c3:90:5f: 6d:46:b9:bc:86:e4:f8:e5:fa:88:10:b1:ed:d6:d5: 27:02:85:5e:b4:f9:54:ff:1a:e3:c7:a5:87:2f:26: 72:f2:31:87:1e:a8:fe:6e:c9:c0:3a:30:35:71:19: a5:d3:a6:60:03:dc:28:3a:af:71:41:2e:c9:a9:3b: d3:0c:51:c3:c3:de:7c:12:da:96:6d:c4:e1:0c:75: 89:95:94:21:f3:c3:83:a6:90:fa:6f:73:03:e9:dd: 85:56:e1:a4:5f:de:4d:0a:dc:58:52:a8:93:7c:b9: e3:89:41:63:54:8a:1f:71:88:ba:bd:0a:e9:1b:15: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:72:68:9E:78:52:08:28:A9:58:11:B1:B4:D6:53:B7:41:FC:0B:F1 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:58:bb:dd:f1:3b:72:36:53:49:b8:11:2d:7a:c8:28:8c:53: 9e:7d:06:a5:22:6c:00:85:29:0d:f1:28:cb:f8:aa:0f:58:4f: 80:12:0a:b5:35:d6:2c:1a:20:3f:a2:ed:a2:17:10:33:47:e2: 63:91:49:4e:44:4f:45:28:70:de:6e:42:6c:0e:94:74:0c:2a: d9:11:78:2a:54:70:79:05:3c:a1:e1:b0:a2:31:f2:1e:02:70: d9:17:37:d2:74:73:45:6e:cc:81:4a:22:ce:c0:44:01:ce:50: f8:d4:95:c8:d7:f4:95:da:fc:68:50:b8:e5:79:d2:0c:fb:24: f9:66:74:94:8c:85:83:07:11:ec:fe:75:f0:6c:5d:bb:c1:7b: 27:1d:32:ac:48:5d:44:1d:78:29:33:cd:44:cb:d1:d6:1d:1a: 26:90:b4:ce:92:34:37:fc:df:16:b7:80:f4:db:d4:1b:f6:84: 66:e1:0f:fc:0c:5d:ff:48:f0:6e:aa:9f:f4:4d:82:cc:ee:d0: 76:61:d1:ec:47:82:5d:55:11:46:0d:98:5c:89:ab:a4:0c:26: c6:d3:6d:3e:c9:68:f5:ef:9f:a0:b5:6f:81:19:d2:65:d0:b6: e6:ee:bc:97:63:26:e8:64:3d:6b:8b:be:f5:b4:c5:aa:ff:44: 89:a5:2f:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT5C2t/m/RJFVdcYKDhWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUxMTA0MTAwMDI4WhcNMjUxMTA1MTAwMDI4WjAzMTEwLwYDVQQD Eyg3NzcyNjg5ZTc4NTIwODI4YTk1ODExYjFiNGQ2NTNiNzQxZmMwYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JYkdKfnXhvHWfXK0urJz9ca+eGS kZYM4cpizo+2Wcjmpf3cI4XbxESbPSAvQf/1UiJ9yJItW0YUoPOT0Wzln0uO/XDl xnHxSOrSL5UP5V1uP+ZQaRGHFoX48QM7NEUYRC6XJ9ctQeH9Py9Wzr2htqTq44Oj ZfenL9LZW0lDj4wZY37DkF9tRrm8huT45fqIELHt1tUnAoVetPlU/xrjx6WHLyZy 8jGHHqj+bsnAOjA1cRml06ZgA9woOq9xQS7JqTvTDFHDw958EtqWbcThDHWJlZQh 88ODppD6b3MD6d2FVuGkX95NCtxYUqiTfLnjiUFjVIofcYi6vQrpGxW3HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdyaJ54UggoqVgRsbTWU7dB/AvxMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA11i73fE7 cjZTSbgRLXrIKIxTnn0GpSJsAIUpDfEoy/iqD1hPgBIKtTXWLBogP6LtohcQM0fi Y5FJTkRPRShw3m5CbA6UdAwq2RF4KlRweQU8oeGwojHyHgJw2Rc30nRzRW7MgUoi zsBEAc5Q+NSVyNf0ldr8aFC45XnSDPsk+WZ0lIyFgwcR7P518Gxdu8F7Jx0yrEhd RB14KTPNRMvR1h0aJpC0zpI0N/zfFreA9NvUG/aEZuEP/Axd/0jwbqqf9E2CzO7Q dmHR7EeCXVURRg2YXImrpAwmxtNtPslo9e+foLVvgRnSZdC25u68l2Mm6GQ9a4u+ 9bTFqv9EiaUvqQ== -----END CERTIFICATE-----Generated at Tue Nov 4 15:07:59 2025 by rpki-client