$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: lPb8WA+nhlQuXRv863yo9x1qKxkmSOilb1v2e+mil0Y= Subject key identifier: E2:1C:08:9D:4C:E2:E5:7B:96:68:A5:CE:06:14:96:37:FB:DC:BD:F5 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019A4DE155DBDAD03D2542E5A97A420E106B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 1721 Signing time: Tue 04 Nov 2025 08:00:04 +0000 Manifest this update: Tue 04 Nov 2025 08:00:04 +0000 Manifest next update: Wed 05 Nov 2025 08:00:04 +0000 Files and hashes: 1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=) 2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=) 3: 9_Q9394Z0x8fvCcB_kRxWDxzDcY.roa (hash: PanjpRDM1BRIDuCXhHGHPFsUr4cddWBhZ/XLoqFj9Jg=) 4: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=) 5: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=) 6: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=) 7: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=) 8: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=) 9: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=) 10: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=) 11: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=) 12: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=) 13: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=) 14: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: 8KhD/BtLQxsfFTb11FaV+TcqJMPpaWKvdn76FrhLJE0=) 15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=) 16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=) 17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=) 18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=) 19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=) 20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=) 21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:55:db:da:d0:3d:25:42:e5:a9:7a:42:0e:10:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Nov 4 08:00:04 2025 GMT Not After : Nov 5 08:00:04 2025 GMT Subject: CN=e21c089d4ce2e57b9668a5ce06149637fbdcbdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:9a:37:e8:d0:86:16:db:e3:c4:e5:03:87: 14:a6:0a:b0:0b:68:cb:e1:a0:2e:7e:eb:2e:68:b4: f7:5c:45:0a:0f:46:8b:59:b7:0e:bd:64:9b:b0:fb: 91:be:aa:ef:f2:ce:21:11:21:c3:4d:27:89:5f:a0: d6:f6:d0:10:9b:cb:84:c4:4c:a5:5e:be:01:f8:a0: 2c:1d:d7:be:52:33:33:c7:26:61:3d:69:9e:11:24: 95:9e:4d:5d:91:1f:ef:07:5f:a8:07:b4:f4:a4:45: a3:14:3a:a8:35:80:f8:6c:d6:39:1c:90:00:2e:45: 8e:cd:f8:cd:87:23:e9:16:10:b6:da:af:aa:c6:be: cf:e0:1d:1c:eb:52:fa:b6:16:fc:06:48:88:eb:09: 83:a7:02:53:19:46:bc:6c:72:22:3c:3f:f9:3b:04: dc:55:64:ad:4a:cf:a4:71:9d:be:96:70:eb:99:aa: 73:e0:31:64:f6:bb:5b:c6:95:f3:c4:d3:ee:e6:64: 0b:28:29:27:bc:79:a2:8a:36:a6:e5:f5:6f:1b:93: fc:35:c5:9f:c9:08:ca:1d:4f:96:ca:34:95:c3:4e: 77:5c:9c:87:92:56:48:c3:6e:2a:90:5e:ae:ed:70: 21:03:2e:02:c0:e1:57:c0:ad:af:13:cc:23:45:47: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1C:08:9D:4C:E2:E5:7B:96:68:A5:CE:06:14:96:37:FB:DC:BD:F5 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:84:c5:0c:d4:3a:d4:05:09:2d:07:ee:6f:61:36:ad:cf:39: e4:45:a9:13:3d:d6:7e:c6:1e:11:9c:86:d6:9a:4e:6c:63:91: b9:85:10:6c:f6:6f:aa:e5:25:6d:82:12:de:ca:ad:e2:53:82: 45:a8:0e:69:eb:6b:51:1c:49:5f:02:f6:b3:27:40:be:6d:2b: 19:4d:38:ec:25:af:de:b3:91:05:db:e6:3d:7d:a8:f6:16:76: bd:2b:2a:a0:56:54:20:24:22:c7:50:19:81:70:46:61:93:16: af:86:5a:fb:01:65:3b:52:9c:d1:03:3e:c1:4e:7d:e2:72:7b: d1:ca:a9:71:9d:97:47:d6:e2:f4:d7:43:eb:03:58:6b:ed:19: af:9c:0e:46:e3:0e:7e:75:ed:b3:dc:d8:f8:b3:c6:e3:ab:81: 4b:88:42:86:21:e7:63:fa:ef:0d:8b:f4:a4:38:a4:22:e9:08: 4e:c0:7e:f6:2a:40:87:e7:e8:a4:2d:92:11:23:fa:00:c1:7c: 5d:db:b7:ac:c6:20:30:10:f4:07:d1:fb:8a:46:94:57:fd:7f: 32:e1:a6:7e:a4:fd:d9:99:bf:53:90:d2:28:a4:7e:f7:0c:2a: 18:f7:d7:37:bf:f9:70:3e:b6:39:e4:da:95:4c:7e:7c:33:aa: 9a:be:d7:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4VXb2tA9JULlqXpCDhBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjUxMTA0MDgwMDA0WhcNMjUxMTA1MDgwMDA0WjAzMTEwLwYDVQQD EyhlMjFjMDg5ZDRjZTJlNTdiOTY2OGE1Y2UwNjE0OTYzN2ZiZGNiZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+OaN+jQhhbb48TlA4cUpgqwC2jL 4aAufusuaLT3XEUKD0aLWbcOvWSbsPuRvqrv8s4hESHDTSeJX6DW9tAQm8uExEyl Xr4B+KAsHde+UjMzxyZhPWmeESSVnk1dkR/vB1+oB7T0pEWjFDqoNYD4bNY5HJAA LkWOzfjNhyPpFhC22q+qxr7P4B0c61L6thb8BkiI6wmDpwJTGUa8bHIiPD/5OwTc VWStSs+kcZ2+lnDrmapz4DFk9rtbxpXzxNPu5mQLKCknvHmiijam5fVvG5P8NcWf yQjKHU+WyjSVw053XJyHklZIw24qkF6u7XAhAy4CwOFXwK2vE8wjRUdtvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIcCJ1M4uV7lmilzgYUljf73L31MB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4TFDNQ6 1AUJLQfub2E2rc855EWpEz3WfsYeEZyG1ppObGORuYUQbPZvquUlbYIS3sqt4lOC RagOaetrURxJXwL2sydAvm0rGU047CWv3rORBdvmPX2o9hZ2vSsqoFZUICQix1AZ gXBGYZMWr4Za+wFlO1Kc0QM+wU594nJ70cqpcZ2XR9bi9NdD6wNYa+0Zr5wORuMO fnXts9zY+LPG46uBS4hChiHnY/rvDYv0pDikIukITsB+9ipAh+fopC2SESP6AMF8 Xdu3rMYgMBD0B9H7ikaUV/1/MuGmfqT92Zm/U5DSKKR+9wwqGPfXN7/5cD62OeTa lUx+fDOqmr7XdQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:52:25 2025 by rpki-client