$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft File: um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json) Hash identifier: xWhFxSNEifItFqwGn048Rr0jRaD3SEsb9E+5GMeywYY= Subject key identifier: 6B:DE:66:55:39:EB:61:1C:CC:EB:6E:55:82:11:0D:57:AB:2B:56:19 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019A4F2B7675D8B3FAD9466BE413F3B768A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft Manifest number: 175B Signing time: Tue 04 Nov 2025 14:00:39 +0000 Manifest this update: Tue 04 Nov 2025 14:00:39 +0000 Manifest next update: Wed 05 Nov 2025 14:00:39 +0000 Files and hashes: 1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=) 2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=) 3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=) 4: 4jbpG5i18QRhmCr9yrMLNOcu90Y.roa (hash: Mxn2pU0MzyDmQt1+keJ1l8Si0RmBi6nlFmZMVkc6X0o=) 5: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=) 6: 8m_iN48OrKW4x6JibU8Yu_QM4vc.roa (hash: 2Fkyji+g7nElxHnvy/AxMQIhvq/s0PIvDvv0pl8Gntc=) 7: 8nc4NhvOMvpeI7x8HxaniFHDjBc.roa (hash: W0V1Q9lbexj58dphki1c4Du/LSeRBEEqibb5v1Fs0mM=) 8: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=) 9: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=) 10: B_fHo9iRmOH0Z6MgaH2RmDDE9Ww.roa (hash: /u0u23OqbkYYGS4XqOoGemOKcNss5lVOzhuFpkd96vg=) 11: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=) 12: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=) 13: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=) 14: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=) 15: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=) 16: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=) 17: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=) 18: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=) 19: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=) 20: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=) 21: PyDNaTyA11pWOBO_EU0TL9ZCtUs.roa (hash: tk+IvpPvYwomRcN7VzBG3C42OQu2aShk7Y1GF6RA7co=) 22: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=) 23: R9gd9olo67uwC-kmrgG1_1cQvV4.roa (hash: SOVTrWbUc+t1UDE/N7lK/bdJS7LdpOB52xojrqLEUjQ=) 24: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=) 25: WEL3oc5azhy9ZWp4nLdXctmBFG8.roa (hash: g5kGcvNuUN81dhYfAooi3+Xk2T/CVoaILpPChD6A2xA=) 26: WT-GZLslFpz7tQemEuS3upR8DIQ.roa (hash: z52DbyoPRqp5Jhc+beypTnWSTAHlbvNvC0/Czw77X6s=) 27: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=) 28: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=) 29: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=) 30: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=) 31: iMbrwNK4IguyMKxM1ZNx5He2Y2s.roa (hash: 8kge5f7eyNVcYrnIQWWdj7AgoT2lwxSMFiktTKdI8VI=) 32: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=) 33: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=) 34: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=) 35: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=) 36: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=) 37: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=) 38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: Q8dDsPY5pFmAeZGpJoOciGichQy+lXMJlaItoW9zRCE=) 39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=) 40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:76:75:d8:b3:fa:d9:46:6b:e4:13:f3:b7:68:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Nov 5 14:00:39 2025 GMT Subject: CN=6bde665539eb611ccceb6e5582110d57ab2b5619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:1b:1f:a0:8c:51:3e:74:e6:1f:9c:a0:ed: 6c:b6:ef:e8:73:56:94:89:91:d5:6d:66:c4:8e:e8: e9:f3:61:d5:63:c3:5d:da:61:0e:cd:2a:64:77:46: 47:28:32:33:c8:15:80:b9:fd:4d:41:88:74:52:35: 53:2f:36:90:f5:eb:38:fa:eb:4c:d4:7b:4f:49:b3: 37:4c:25:6e:11:7f:4f:1b:a0:05:e2:0c:20:c0:90: a0:d4:9d:74:ac:58:c7:70:e2:27:e1:b3:9f:bb:db: 0a:55:be:c0:a1:85:36:54:0a:94:36:ae:c5:55:1d: 17:84:72:ef:af:70:15:f2:18:c0:a3:52:47:56:ef: 8a:c1:8e:b6:e9:a3:a0:29:1c:2f:9b:be:11:a2:9a: c6:ec:26:e1:35:d5:d9:72:12:92:1b:cd:f9:cf:4b: fa:98:ca:41:e6:6f:66:ab:fb:a4:01:09:9f:0e:d6: 7a:ed:b3:e4:09:c9:64:88:ec:3d:c7:bc:c5:13:43: c1:a0:9a:3c:fb:ce:79:04:b4:07:3e:f4:2f:9f:31: 1b:27:9f:77:0c:75:ca:f2:42:4d:3e:9e:21:7b:1e: 85:6d:e7:36:8a:a5:eb:ed:10:c8:b9:6a:76:ec:38: 55:33:9b:dc:6d:ec:a9:4d:f0:95:60:80:eb:07:f9: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DE:66:55:39:EB:61:1C:CC:EB:6E:55:82:11:0D:57:AB:2B:56:19 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:70:9c:76:4c:ec:01:03:9c:f6:5e:5b:27:a4:42:a3:71:e2: 43:ea:d9:35:54:e0:e7:f3:00:b3:3e:2e:09:87:cf:37:30:4b: 2e:c5:db:25:27:f1:33:a5:85:c0:8d:3a:2c:03:76:3b:99:69: 33:50:3a:85:41:5d:de:dc:01:c3:de:fa:f0:2a:74:58:51:89: f7:77:0b:8f:ff:93:ea:ba:cb:c6:c2:90:86:f0:a9:02:6d:46: 04:a9:87:bc:18:48:74:66:f2:98:65:59:1e:01:b0:79:b2:85: a1:af:2a:d4:f9:ed:fa:e7:d2:ac:44:30:19:f9:8b:63:0b:b6: 0b:1d:da:b8:7c:89:9d:a5:63:6c:e0:42:5e:3f:90:cc:f9:55: 4d:0c:a1:6f:72:7f:e6:4b:fe:50:b6:90:b8:00:2a:3f:ed:c3: 9e:01:aa:8d:ba:f4:0e:b1:df:6a:df:5f:f4:16:12:a8:c2:ec: c6:16:17:3c:e3:1d:bf:d9:30:84:4b:fa:0b:30:57:c9:5f:6a: 82:08:76:6b:43:ea:11:66:f5:93:ee:45:18:db:ba:1b:b3:39: 0e:62:c7:67:a4:7c:c2:bd:21:ed:eb:03:21:dc:d8:3f:97:3a: b4:8e:8b:98:8b:57:9a:c6:e0:61:5f:13:3b:bb:47:27:44:b2: 54:d6:b4:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK3Z12LP62UZr5BPzt2ikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjUxMTA0MTQwMDM5WhcNMjUxMTA1MTQwMDM5WjAzMTEwLwYDVQQD Eyg2YmRlNjY1NTM5ZWI2MTFjY2NlYjZlNTU4MjExMGQ1N2FiMmI1NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn00bH6CMUT505h+coO1stu/oc1aU iZHVbWbEjujp82HVY8Nd2mEOzSpkd0ZHKDIzyBWAuf1NQYh0UjVTLzaQ9es4+utM 1HtPSbM3TCVuEX9PG6AF4gwgwJCg1J10rFjHcOIn4bOfu9sKVb7AoYU2VAqUNq7F VR0XhHLvr3AV8hjAo1JHVu+KwY626aOgKRwvm74RoprG7CbhNdXZchKSG835z0v6 mMpB5m9mq/ukAQmfDtZ67bPkCclkiOw9x7zFE0PBoJo8+855BLQHPvQvnzEbJ593 DHXK8kJNPp4hex6Fbec2iqXr7RDIuWp27DhVM5vcbeypTfCVYIDrB/kdmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGveZlU562EczOtuVYIRDVerK1YZMB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXCcdkzs AQOc9l5bJ6RCo3HiQ+rZNVTg5/MAsz4uCYfPNzBLLsXbJSfxM6WFwI06LAN2O5lp M1A6hUFd3twBw9768Cp0WFGJ93cLj/+T6rrLxsKQhvCpAm1GBKmHvBhIdGbymGVZ HgGwebKFoa8q1Pnt+ufSrEQwGfmLYwu2Cx3auHyJnaVjbOBCXj+QzPlVTQyhb3J/ 5kv+ULaQuAAqP+3DngGqjbr0DrHfat9f9BYSqMLsxhYXPOMdv9kwhEv6CzBXyV9q ggh2a0PqEWb1k+5FGNu6G7M5DmLHZ6R8wr0h7esDIdzYP5c6tI6LmItXmsbgYV8T O7tHJ0SyVNa0gg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:23:13 2025 by rpki-client