$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: OSanb0/r+WO+sgj9pXrCCKsYuIfe936ZnuOpM9fAJxk= Subject key identifier: 3D:CD:55:E1:C6:87:13:30:FB:F3:89:9F:14:BE:63:59:FF:DE:E7:F3 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019A4E18DC713FA99FB4421F7CD86A862082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 1725 Signing time: Tue 04 Nov 2025 09:00:43 +0000 Manifest this update: Tue 04 Nov 2025 09:00:43 +0000 Manifest next update: Wed 05 Nov 2025 09:00:43 +0000 Files and hashes: 1: 0Oc2gUlOBhHggQCKLFtd_Q9SZu8.roa (hash: lO8VRv7zTZ1lZGexXwpCSSefCLh4/ylUfznYotZ/r9I=) 2: 1-SnnIDOhH63HQ_N0BxypNJP3QjU.roa (hash: fAjpmK6Zca137o7vGKPycBeoqRjl3sX6zuEiOW/w6J8=) 3: 1-tVuMhvJHoeYNSWvwIs4Uj-ZhRk.roa (hash: ZcAfnmmPqdN3AkoVqXCV/iL8CT5WscJ/XlK/uMPt5lg=) 4: 1yKKrsNupGDzzD03jZOpe8iPhUA.roa (hash: HrCCQdsLhhK0Dd1/JhgsMNYCYEDcKrntK3e2NJtO0xE=) 5: 64sC994hi2WYh6eTSxEzaxlZ1_8.roa (hash: B08XbDrWOA66KC5S+jrPQzf/aaibB9EmnAg/mlaAA/4=) 6: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (hash: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=) 7: 8fRQ2gaaSUyxlPfMmZU6YlBuF9s.roa (hash: J9iYhZ57NpzmVPmwg60w1m9TXW93kheuWUSOq5fqcNo=) 8: CYNZ0RAHrT9vV8_0mrfX5LM1kug.roa (hash: O/PKWyYrv2+2Dwkphq4C7HezWG7bAEi2rS0D+m+yIdU=) 9: MhqcPUVWdGpPrfIWk_ee5vpXfV4.roa (hash: VZyy53zNRKBJnQR8hOjgwk1ZMB+3U3h7IQWl1MMyJAE=) 10: OnRHsiqDeR9lPOPphyyOmOlqHJI.roa (hash: sc+Pmya8TqVV8sQvDFxWsBcLjxza8djqPlBaIMjD3rA=) 11: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (hash: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=) 12: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (hash: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=) 13: a-yIKeqgoYQNBR0ZqftsK2VKwtA.roa (hash: rYqhW3CVRIKIDuB7VC8t0ykZxEcqYyXyUHcCODKusRw=) 14: aEX6iGvtmMCBLbcN3D9lR9wWfYs.roa (hash: ck3g/sMwdLbMyNkBAAhpjxk0gLfl6oyVxwY3SE1wY/I=) 15: clP1LLso4z020v4QpmTmPRbZSto.roa (hash: lQLaEJcBPi63juWNagsHVyBgAJjdQuoynWou1IAm/GM=) 16: cvexNa_0mj6FW8KZpLGAFQIE4OA.roa (hash: iCleYEjTV16uifIQzD0T3cEabw9bGQHX0EZMLPEVxN4=) 17: e6KXF5wF0vO-qqTzdKeyh2Ean8Y.roa (hash: KHUWWv5iYnIrkVVVgtcwtIxqcrf8XOGEsuNQcxfs8gw=) 18: iX51NeJFLA8hZbYydiWCSJNdBac.roa (hash: feK/rKksTFQbgNdFYUDfTjFuIeyOIK8QXCIqWjoXBaI=) 19: l5nptPnNKKQFhoiS91lJWqnWlyE.roa (hash: e570cnA3CxKqJo/gWfnmYUg3TNwae9HIQvRpHl8vuuY=) 20: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (hash: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=) 21: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (hash: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=) 22: mclNf4bSFt9zruWTpd4m4MEyVzM.roa (hash: XlAEFr1TWS3BT/lafylN5Pl3NVyaBtZCZ/ZvLEzRc/k=) 23: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (hash: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=) 24: piCyct0NVy-piTUDW9-m-zFaGCY.roa (hash: vC+LbNogTxwCzmTJZpmElrpfct/lmLrelfVwT361cKc=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: FfOynv8pdSEYy3v1jKXO8BKimVekvjJ0W8IdA2hdjVA=) 26: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (hash: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:dc:71:3f:a9:9f:b4:42:1f:7c:d8:6a:86:20:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Nov 4 09:00:43 2025 GMT Not After : Nov 5 09:00:43 2025 GMT Subject: CN=3dcd55e1c6871330fbf3899f14be6359ffdee7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:95:c9:b5:24:04:31:5c:ff:05:85:be:1d: 50:b5:6e:11:ae:7f:95:78:a1:9c:bc:82:8e:61:cc: 91:f4:ad:b7:4b:c4:69:ea:fb:cd:12:70:96:dc:a4: 9f:c7:b1:9d:8d:30:b1:8f:1b:0c:3f:2d:90:51:61: 29:0b:4c:b1:c3:c9:1e:5c:05:c6:61:3e:dd:b6:ae: 09:41:b3:88:8e:d1:0f:f5:cb:9a:5f:a6:31:51:58: 25:1d:a9:72:f3:4c:10:5d:f6:2b:db:c0:4a:65:e7: 47:26:d8:13:e3:aa:a9:eb:e0:58:a7:7f:f6:61:df: 68:b9:29:4a:77:e4:c4:4a:99:62:ce:3e:6b:93:e3: 32:03:6d:a4:51:7e:ae:59:98:2a:3b:51:e8:74:c2: ea:fc:5c:5c:38:a4:28:4e:10:4e:4b:9f:5e:07:c9: e7:ac:a5:5b:64:77:80:63:0c:59:f6:1a:35:82:0d: 03:00:e4:e8:79:5b:e7:5d:3b:d9:c8:2e:a3:6b:3d: 90:fd:d9:8f:53:27:36:e0:ee:a7:80:0a:9d:20:36: 95:d0:fd:2f:d3:bf:58:ae:a1:82:ac:b8:cf:26:8b: 91:c2:e2:fe:39:77:84:bc:39:bb:28:3a:0c:41:ac: 34:5e:13:de:1d:3e:5e:8f:d9:c5:34:76:69:59:d9: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CD:55:E1:C6:87:13:30:FB:F3:89:9F:14:BE:63:59:FF:DE:E7:F3 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:eb:0c:c6:36:6f:05:d7:b9:8c:21:10:6c:27:7d:dd:4c:8f: fc:8e:05:2b:98:03:4f:4d:24:a1:d3:04:1c:17:10:c3:06:57: 43:d3:c0:23:68:f1:ec:52:c3:b9:3c:a6:b5:69:71:d6:39:45: 0e:76:9c:23:ae:db:ff:4b:42:28:13:e8:f4:1e:74:6a:65:ac: 69:03:4f:ee:e6:29:f2:14:38:df:1a:ef:ad:dc:80:46:8d:29: 8d:e3:b4:9f:3d:10:78:68:dd:13:34:6f:c4:38:16:29:d2:91: 29:90:85:c7:71:b4:67:18:b5:41:d8:ad:da:fd:68:fd:a7:9c: dc:7c:0f:26:81:90:b9:a9:6d:d0:22:26:81:b7:a9:72:3e:3c: 1a:b7:a2:0c:13:49:77:2c:53:dc:31:e5:82:a5:18:c3:ff:a4: 66:04:2c:72:13:a1:89:c1:55:a2:d8:bb:5c:ee:31:cb:b6:23: 50:6b:92:00:87:ca:9f:34:bf:1d:d7:16:55:e0:1d:39:13:33: 10:38:a5:c5:9b:fa:cb:52:e7:2d:8d:9a:83:bd:9e:c4:79:9d: 3b:74:1d:92:79:07:eb:8f:11:5e:68:2e:3a:c6:40:43:3b:79: 3f:29:d6:e9:88:1c:06:6c:43:20:9d:27:93:3d:1e:bd:36:65: 93:0a:8b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGNxxP6mftEIffNhqhiCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjUxMTA0MDkwMDQzWhcNMjUxMTA1MDkwMDQzWjAzMTEwLwYDVQQD EygzZGNkNTVlMWM2ODcxMzMwZmJmMzg5OWYxNGJlNjM1OWZmZGVlN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunOVybUkBDFc/wWFvh1QtW4Rrn+V eKGcvIKOYcyR9K23S8Rp6vvNEnCW3KSfx7GdjTCxjxsMPy2QUWEpC0yxw8keXAXG YT7dtq4JQbOIjtEP9cuaX6YxUVglHaly80wQXfYr28BKZedHJtgT46qp6+BYp3/2 Yd9ouSlKd+TESplizj5rk+MyA22kUX6uWZgqO1HodMLq/FxcOKQoThBOS59eB8nn rKVbZHeAYwxZ9ho1gg0DAOToeVvnXTvZyC6jaz2Q/dmPUyc24O6ngAqdIDaV0P0v 079YrqGCrLjPJouRwuL+OXeEvDm7KDoMQaw0XhPeHT5ej9nFNHZpWdkN+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3NVeHGhxMw+/OJnxS+Y1n/3ufzMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOsMxjZv Bde5jCEQbCd93UyP/I4FK5gDT00kodMEHBcQwwZXQ9PAI2jx7FLDuTymtWlx1jlF DnacI67b/0tCKBPo9B50amWsaQNP7uYp8hQ43xrvrdyARo0pjeO0nz0QeGjdEzRv xDgWKdKRKZCFx3G0Zxi1Qdit2v1o/aec3HwPJoGQualt0CImgbepcj48GreiDBNJ dyxT3DHlgqUYw/+kZgQschOhicFVoti7XO4xy7YjUGuSAIfKnzS/HdcWVeAdORMz EDilxZv6y1LnLY2ag72exHmdO3QdknkH648RXmguOsZAQzt5PynW6YgcBmxDIJ0n kz0evTZlkwqL2w== -----END CERTIFICATE-----Generated at Tue Nov 4 10:47:25 2025 by rpki-client