$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: 15Ljp5Q2LZbKGZAJyB56RgjV5POzFRe9KnM3sEJVMmw= Subject key identifier: DA:AE:93:E1:FF:2F:11:DC:DD:30:E9:70:84:3D:26:B4:B2:3D:B9:21 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019A4F996B9267F7262854708D7B13B1996C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 123E Signing time: Tue 04 Nov 2025 16:00:45 +0000 Manifest this update: Tue 04 Nov 2025 16:00:45 +0000 Manifest next update: Wed 05 Nov 2025 16:00:45 +0000 Files and hashes: 1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=) 2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=) 3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=) 4: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=) 5: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (hash: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=) 6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=) 7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=) 8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=) 9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=) 10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=) 11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=) 12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=) 13: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=) 14: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=) 15: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=) 16: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=) 17: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=) 18: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=) 19: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=) 20: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: VaMGYQ8BhmU4FWVVLsSzpHGIzaaWNRQFLXvWProQVRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:6b:92:67:f7:26:28:54:70:8d:7b:13:b1:99:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Nov 4 16:00:45 2025 GMT Not After : Nov 5 16:00:45 2025 GMT Subject: CN=daae93e1ff2f11dcdd30e970843d26b4b23db921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:54:32:4c:1a:9c:56:cb:3f:e8:8a:67:d3: ae:d1:b4:df:9d:e3:ff:0c:e2:4d:f6:61:30:aa:43: 8e:a0:a5:62:d9:2f:31:85:eb:4d:41:46:ba:8e:d9: 7f:36:11:95:d7:20:ad:39:13:18:d2:ca:5c:5e:c7: 12:6c:ce:c1:b1:ab:2a:0a:40:f2:7c:c0:4f:3f:ab: 02:81:20:10:7a:e3:df:8a:1f:16:d9:6e:bb:60:d2: d2:1b:80:2f:18:8c:33:72:ce:1f:5e:92:d2:f9:7d: 96:66:22:93:cc:d6:61:a3:37:4d:59:6d:f0:d9:95: 6f:18:07:20:a2:28:da:00:e4:aa:a3:4b:b7:2c:0e: 7b:5c:1c:7d:fb:e4:4a:95:e6:5f:c5:1c:c6:b4:9e: bc:10:ef:5e:24:d3:08:91:5d:99:e2:16:55:18:5a: a5:ea:43:b7:8c:f4:11:32:5c:65:1d:e1:51:b6:15: 99:2e:66:81:26:0f:88:8e:0c:92:41:07:7b:87:d6: 90:4a:be:2b:20:31:ae:68:70:39:f9:93:52:64:f5: a0:30:53:0e:42:97:6b:6d:4f:ea:7b:54:d0:8a:ac: 9b:17:1d:75:f6:29:fc:05:6b:e6:3f:53:75:b5:5d: ce:0f:c9:ba:48:a5:34:d4:39:56:78:f6:c6:41:cf: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:93:E1:FF:2F:11:DC:DD:30:E9:70:84:3D:26:B4:B2:3D:B9:21 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:78:c1:e3:51:61:99:2d:c3:a7:fb:dc:2b:b2:7e:a2:d1:84: 6c:9e:81:31:2f:e7:5d:f3:1a:bb:3d:5f:53:56:f5:d3:25:29: 68:b2:bd:89:be:7f:94:c2:cb:be:4a:51:cd:89:b5:19:04:93: 95:e4:a0:3d:0c:d0:45:8e:ef:41:3e:2c:19:55:21:47:40:e3: 78:84:10:9c:08:3e:ff:16:5b:c9:6d:61:f6:f1:08:12:c0:de: d0:09:fc:a8:2f:02:8a:b8:ce:77:67:37:4b:db:fb:52:f3:ff: 95:2a:f0:f6:aa:07:c7:6c:51:27:33:b2:3a:1c:5c:52:e1:b3: 85:00:3f:a8:a3:14:c9:f6:36:3f:a4:73:01:16:79:2b:2f:a7: 3d:6b:12:8e:3f:a2:01:a2:00:f8:c0:40:6e:1b:2d:8f:5d:fa: c2:bd:60:14:98:17:c3:f8:d9:9d:c0:3b:d6:a5:d4:c7:03:cc: 4e:47:27:86:b5:76:7d:fb:17:84:a3:54:b1:d4:1f:15:a5:82: f6:e4:f7:d3:91:05:9d:14:54:b7:7c:74:af:4c:93:5e:dd:7a: e6:61:c5:c0:66:a5:f7:19:35:ed:bf:f4:38:24:f1:5f:12:a3: 08:99:10:0e:c9:2f:a3:25:b3:20:3c:e9:ac:ae:bd:a1:0e:9d: b6:18:34:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmWuSZ/cmKFRwjXsTsZlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUxMTA0MTYwMDQ1WhcNMjUxMTA1MTYwMDQ1WjAzMTEwLwYDVQQD EyhkYWFlOTNlMWZmMmYxMWRjZGQzMGU5NzA4NDNkMjZiNGIyM2RiOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsutUMkwanFbLP+iKZ9Ou0bTfneP/ DOJN9mEwqkOOoKVi2S8xhetNQUa6jtl/NhGV1yCtORMY0spcXscSbM7BsasqCkDy fMBPP6sCgSAQeuPfih8W2W67YNLSG4AvGIwzcs4fXpLS+X2WZiKTzNZhozdNWW3w 2ZVvGAcgoijaAOSqo0u3LA57XBx9++RKleZfxRzGtJ68EO9eJNMIkV2Z4hZVGFql 6kO3jPQRMlxlHeFRthWZLmaBJg+IjgySQQd7h9aQSr4rIDGuaHA5+ZNSZPWgMFMO QpdrbU/qe1TQiqybFx119in8BWvmP1N1tV3OD8m6SKU01DlWePbGQc8yZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNquk+H/LxHc3TDpcIQ9JrSyPbkhMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHjB41Fh mS3Dp/vcK7J+otGEbJ6BMS/nXfMauz1fU1b10yUpaLK9ib5/lMLLvkpRzYm1GQST leSgPQzQRY7vQT4sGVUhR0DjeIQQnAg+/xZbyW1h9vEIEsDe0An8qC8CirjOd2c3 S9v7UvP/lSrw9qoHx2xRJzOyOhxcUuGzhQA/qKMUyfY2P6RzARZ5Ky+nPWsSjj+i AaIA+MBAbhstj136wr1gFJgXw/jZncA71qXUxwPMTkcnhrV2ffsXhKNUsdQfFaWC 9uT305EFnRRUt3x0r0yTXt165mHFwGal9xk17b/0OCTxXxKjCJkQDskvoyWzIDzp rK69oQ6dthg0EQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:16:13 2025 by rpki-client