$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: wofv3E/m8rtA00A7sudZoSBwe1oUCSsIQp1lQVpzEPA= Subject key identifier: 09:36:3E:4A:23:11:C3:81:4D:3D:F5:D6:05:E8:EC:0A:3D:B5:EB:D6 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019A50AB92ACBC4266A0DE52E9E64D6073F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 13C4 Signing time: Tue 04 Nov 2025 21:00:12 +0000 Manifest this update: Tue 04 Nov 2025 21:00:12 +0000 Manifest next update: Wed 05 Nov 2025 21:00:12 +0000 Files and hashes: 1: 1-DCahpulJuiQi8zdfIBNVSBP_a0.roa (hash: nTSeDU5/i/b0oztZzrG2CtOkwm9ZNipV4GkBR8TKl3w=) 2: 1-S5qpnBw1ylZG1spddvT9f57eco.roa (hash: maWJwVVWyYP373g2CIlTAWvamrZD0BLeDX8OlPQnHj0=) 3: 4HUEzjvO1URr-UPygZ4Bs6_KT9Q.roa (hash: 8gqeOkmM8zl20dUfCC3W3gzkl4K07sQTxtiB6AnAR2Q=) 4: 6QviIP7RKjJfXyJHP71i3FDYWL4.roa (hash: QwitosOHcwHPVpSg5VFkyXo/VZmtnyWUke/Nxvg71U0=) 5: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=) 6: 8rwWZi4spjQVqa4jtS9v8fqNE5I.roa (hash: mh6barGghhF0GUA74ZJ5iP4OJOtYcuU25+Ys7lgbD7E=) 7: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (hash: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=) 8: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=) 9: CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa (hash: 9jgYa3vRUAb8QbrmXxskhHH0R6D/iCZRnkTtWpWyrOU=) 10: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=) 11: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=) 12: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=) 13: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=) 14: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=) 15: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=) 16: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=) 17: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=) 18: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=) 19: W5sU-ZO6WBhRXGkiRRiQQs5_9rk.roa (hash: buoQ3JOzvBjf3H+zLixOxcXYRqSn97Vev1LEOeeiEno=) 20: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (hash: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=) 21: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=) 22: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=) 23: gdi_J_c0GtCc5x443kexg-b8wPs.roa (hash: Aw5kYwxs8AG4Z/q8iT+6fyl5oYGYb5LB9ortXvdtI9I=) 24: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=) 25: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=) 26: i0SeWpSdogsaJx8W0_kVOAU_lRM.roa (hash: zq4L3oJxr9W9+WWee/L9rMw2rGgwNa6vusNf5ygshpI=) 27: i7VszA84SZS6OuHdokjMypdaGJc.roa (hash: m3y569SYJ1HX7ytRuzexHPJwkziPyzH7M0vjR2GZNvA=) 28: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=) 29: pWKwCP_lM1lV6k1_8iA6jNpjHqg.roa (hash: RStEnKPVfL8STTUgjI+bGS1TABSbUFHPohIVOs18xGk=) 30: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=) 31: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: 2NmEY5L0CLicHwLP9+MSpDslpLL+gGk+BCBz2eEa8+w=) 32: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=) 33: wr8foz5Mir5CdXg4AJzu9v_vxAA.roa (hash: ixM1cMPLJGFu51fGqV4fl5yayoYnJRWGn/rjQ5uu5VM=) 34: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:ab:92:ac:bc:42:66:a0:de:52:e9:e6:4d:60:73:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Nov 4 21:00:12 2025 GMT Not After : Nov 5 21:00:12 2025 GMT Subject: CN=09363e4a2311c3814d3df5d605e8ec0a3db5ebd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:45:8c:f0:23:cb:06:0b:fd:80:6b:ef:71: 5b:29:12:0a:17:48:4f:ba:95:05:48:68:8a:73:e4: 7d:47:85:3d:47:d6:93:74:d9:ea:1c:1d:18:ae:af: 60:74:24:ba:b6:a0:bd:12:08:8d:e4:63:21:69:81: 5a:21:6a:14:62:5e:df:ee:bc:27:dd:30:b4:b7:bc: 3a:9d:85:a4:bf:08:90:a5:ba:01:fe:a1:65:95:a9: db:b1:f7:39:d2:6a:1e:3e:97:1d:e2:3b:a0:88:31: c2:6b:e0:8a:fe:0c:4c:66:e5:3f:1d:1f:4f:8f:fa: 17:3e:6e:2b:cd:fa:f2:4d:8b:27:a2:6c:08:3a:80: 90:0e:dd:ff:bd:f7:24:6a:e6:31:18:7f:18:63:4a: 18:d5:c9:06:24:bd:42:33:0f:58:e5:e9:03:f2:c5: cd:6b:5e:28:65:86:50:7b:5a:2d:16:7a:03:5d:bb: af:8b:ff:d9:71:aa:fa:c5:73:8c:d8:ff:51:e1:35: b8:78:dc:77:f0:61:53:5f:04:18:35:ab:d0:d4:0c: 00:bb:74:27:04:82:02:32:c1:f4:99:dc:47:95:c2: f8:5f:60:0c:2c:ce:fb:0a:63:96:45:ee:ad:a6:eb: 91:05:6b:e1:3e:06:c7:b2:2e:6b:04:ff:9b:d1:71: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:36:3E:4A:23:11:C3:81:4D:3D:F5:D6:05:E8:EC:0A:3D:B5:EB:D6 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:47:7a:01:e2:34:a4:a1:72:36:65:72:87:af:04:6d:81:4a: 81:58:a5:07:aa:f3:a1:44:57:92:eb:64:70:57:43:fb:5d:33: e2:0c:57:9e:41:c7:12:08:00:c0:99:42:5c:6b:3b:ca:58:ce: 50:1d:9e:d7:6d:0b:93:bd:dc:18:3b:a7:4b:de:5f:36:27:44: 5a:d1:23:99:5a:68:7f:09:3e:3f:6e:da:6e:fd:96:97:77:e2: d6:28:bc:e5:4f:00:8c:37:c3:1c:9f:e0:8a:8f:81:20:59:21: 95:ce:8e:8d:a3:0b:1d:7f:de:8b:7d:16:5e:55:28:ca:ac:6a: dc:08:83:74:42:70:e4:6f:7a:07:87:a9:b0:64:a5:b2:98:a3: e2:35:6b:e8:47:1d:2c:2d:b3:ea:18:1a:54:17:23:ec:8f:3d: 4f:2b:12:6b:59:11:1e:3c:92:a6:b8:a6:6c:bd:52:da:68:6a: f9:8c:36:57:09:10:85:b2:e8:9f:67:ea:66:ec:3f:28:5f:df: 72:f9:7a:b4:80:aa:32:4d:11:4d:1f:87:9e:fa:03:5d:6e:2b: a0:a4:dd:dc:e4:61:0d:4c:b9:bc:e2:43:d9:d1:75:e1:61:c6: 5c:74:ab:15:dd:56:ae:db:a5:de:2a:cd:49:ec:9b:17:e3:cc: 56:31:47:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQq5KsvEJmoN5S6eZNYHPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMTA0MjEwMDEyWhcNMjUxMTA1MjEwMDEyWjAzMTEwLwYDVQQD EygwOTM2M2U0YTIzMTFjMzgxNGQzZGY1ZDYwNWU4ZWMwYTNkYjVlYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyRFjPAjywYL/YBr73FbKRIKF0hP upUFSGiKc+R9R4U9R9aTdNnqHB0Yrq9gdCS6tqC9EgiN5GMhaYFaIWoUYl7f7rwn 3TC0t7w6nYWkvwiQpboB/qFllanbsfc50moePpcd4jugiDHCa+CK/gxMZuU/HR9P j/oXPm4rzfryTYsnomwIOoCQDt3/vfckauYxGH8YY0oY1ckGJL1CMw9Y5ekD8sXN a14oZYZQe1otFnoDXbuvi//Zcar6xXOM2P9R4TW4eNx38GFTXwQYNavQ1AwAu3Qn BIICMsH0mdxHlcL4X2AMLM77CmOWRe6tpuuRBWvhPgbHsi5rBP+b0XHytQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk2PkojEcOBTT311gXo7Ao9tevWMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUd6AeI0 pKFyNmVyh68EbYFKgVilB6rzoURXkutkcFdD+10z4gxXnkHHEggAwJlCXGs7yljO UB2e120Lk73cGDunS95fNidEWtEjmVpofwk+P27abv2Wl3fi1ii85U8AjDfDHJ/g io+BIFkhlc6OjaMLHX/ei30WXlUoyqxq3AiDdEJw5G96B4epsGSlspij4jVr6Ecd LC2z6hgaVBcj7I89TysSa1kRHjySprimbL1S2mhq+Yw2VwkQhbLon2fqZuw/KF/f cvl6tICqMk0RTR+HnvoDXW4roKTd3ORhDUy5vOJD2dF14WHGXHSrFd1Wrtul3irN SeybF+PMVjFHIA== -----END CERTIFICATE-----Generated at Wed Nov 5 01:55:15 2025 by rpki-client