$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: dBgs8XhKxDLrve2JAEBigM/PNpPsAinHtuij04ufmgA= Subject key identifier: 0A:81:24:19:77:03:52:99:55:27:5E:2E:00:96:15:64:7F:51:E8:D9 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019A4E4F608278BCBD889FFBC75E299EB26D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 12B6 Signing time: Tue 04 Nov 2025 10:00:15 +0000 Manifest this update: Tue 04 Nov 2025 10:00:15 +0000 Manifest next update: Wed 05 Nov 2025 10:00:15 +0000 Files and hashes: 1: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=) 2: 45MvjfGKCC1KtPdc7nQX95sIMOQ.roa (hash: OJaP8IeT3Uy1A2hRxBoDBgRDgpbDvNEt1ZVBIoH1VAY=) 3: 7jwxCTrpuBYCzl_mE2RCtp0REXI.roa (hash: +ypxyRmQFEVXeIrygXjJlGbbYxoSAkj90Kr5Ppz5cVM=) 4: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=) 5: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: fq7OAyDnRBqIgC6VO7qkIpMRhIgo4Q1i4hcf9IjeBp0=) 6: GdGQJlcViYWnbchDaO0lHg2ksrM.roa (hash: Im3JlPn5hM+/gIGKgd3X6+K5SCpxUeL0GAn1BTDR/iY=) 7: JS4HdBrbtnwjf3ioeu2kVfrsKWk.roa (hash: af+hY4hrX5r9rr7bdbLVSaWMR8FkV862x0g+pEnOaKA=) 8: NSYavHGFkjW9fPOW1IOQ-kAXpiw.roa (hash: bIlwmcqM0xR+NaQTXsekU/G4W1PV6OipwVLIIvkpte8=) 9: Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa (hash: M6uYkLbVdZzoxMrzslJAyf+dKNKxxdwwoY8rXjymTu4=) 10: Q2qnyLydoV_350r3ktyvCayeB4A.roa (hash: VKvgtQJ7GEIFvBeuyv+3v21yRGy73uTpFRdHzIJJWeo=) 11: UzvoNIBCTayYuI6U30KDrmerNuU.roa (hash: ER4WPs+jwzqBTn7Puvn1t7r63jTe9VQjgZr+2QHU1CA=) 12: bZqocWZwcU5ZaTTgVW1c4s9fiMo.roa (hash: V7YCD7e4GhCq4YTEJi9oA8hOwYBama0jJDytOGcYv1s=) 13: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=) 14: cdQEhr1O999um7MubPp-AySW3SU.roa (hash: kCWL/fzpDob5h7QESa50Y8FlUEupbCUO8I1kcI0W7jU=) 15: cyBS3fAo042cEWYq-ULKBfWmEYM.roa (hash: lGLWllBey91le8GZeS3K6F+EddIaYMAhM6BNqVcxruc=) 16: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=) 17: fwVrtZ5ukpHJADRQ973fQLlwSq8.roa (hash: +fmmqMgZKKsqId3qofqToV4Cyb2Bc8ldGVtgwbDXlj8=) 18: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:60:82:78:bc:bd:88:9f:fb:c7:5e:29:9e:b2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Nov 4 10:00:15 2025 GMT Not After : Nov 5 10:00:15 2025 GMT Subject: CN=0a8124197703529955275e2e009615647f51e8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ee:79:5d:d4:30:4c:e0:3e:40:55:85:49:db: e1:ec:12:0f:33:66:db:2e:13:c4:d3:f0:01:30:3c: a2:96:cc:fa:41:29:d3:fb:e0:cb:90:48:61:b5:28: db:bc:f5:38:dc:19:dc:f0:5d:1a:e6:f6:d3:09:31: 5b:c7:96:79:e2:be:dc:66:d2:df:9c:42:bb:ec:af: 98:52:16:0f:5e:80:98:d9:82:02:e9:94:90:43:36: 2a:9d:c9:c2:a8:e9:5e:33:76:07:ff:06:1d:75:b0: c4:1a:58:ac:8b:81:cf:7d:02:a6:23:be:70:7a:91: 62:13:e4:a2:49:f3:d2:9e:a0:17:db:d5:fa:1b:66: 00:96:83:2e:dc:f6:be:c0:2b:74:6b:7c:a5:c3:18: 8a:70:1f:39:7e:ae:93:b7:15:44:b1:6b:19:11:2f: 37:6e:fc:04:03:fb:b8:ab:14:7b:9c:e9:1e:b4:a7: 5c:1c:a4:03:bb:4f:2f:eb:bb:b3:f7:4d:57:04:5c: 74:2e:5a:07:5a:c0:85:fe:7e:f5:b8:86:4a:71:86: 7f:1b:c6:1f:26:1c:5f:bb:fa:b5:9f:a7:8c:aa:18: f8:fc:a0:22:9d:04:2f:e0:bd:cd:01:f5:05:b7:38: 66:8b:87:0e:8b:41:9a:c5:68:3c:7d:82:7d:89:7c: 5b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:81:24:19:77:03:52:99:55:27:5E:2E:00:96:15:64:7F:51:E8:D9 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:84:ef:cf:30:db:ca:59:d1:73:c8:2b:9f:87:4c:e2:a8:3c: f7:f2:b1:65:82:2f:09:39:29:88:a8:6b:a3:ea:79:91:0d:9e: 8b:0b:34:c4:27:1d:e8:c8:53:3f:c3:41:13:39:d4:db:c0:9c: 54:0f:78:4e:1b:c0:ce:57:da:64:43:8a:9c:11:05:2a:78:33: 10:25:bc:c9:eb:29:9b:0b:9a:33:85:f3:d5:4f:8c:79:81:0f: eb:22:fa:b1:65:63:1d:a1:f0:70:59:bc:21:8c:7e:d4:79:f7: 13:9e:f2:9f:d8:92:40:25:5b:ba:21:36:db:d7:d8:91:e3:83: f9:18:81:f4:18:db:0e:e4:05:2b:b4:6e:0f:70:4d:da:b1:12: 75:3e:3c:34:c1:52:45:44:01:28:ee:c0:b2:64:37:d9:40:59: 93:92:25:c8:19:51:10:03:28:20:5c:4f:b3:8a:19:3a:c0:fd: ea:c9:51:cf:bc:ba:13:6f:d4:46:54:c5:4f:19:cd:97:c0:ab: 7e:ce:40:3b:58:e0:4a:bb:5b:36:2f:8a:ae:a4:ea:22:1b:5e: 1d:31:13:bf:2b:da:02:19:09:7e:3a:40:4e:98:41:6a:bf:9b: ec:0b:06:23:27:8d:87:2d:09:d0:85:93:38:c8:5b:96:7e:de: d2:18:8b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT2CCeLy9iJ/7x14pnrJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMTA0MTAwMDE1WhcNMjUxMTA1MTAwMDE1WjAzMTEwLwYDVQQD EygwYTgxMjQxOTc3MDM1Mjk5NTUyNzVlMmUwMDk2MTU2NDdmNTFlOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u55XdQwTOA+QFWFSdvh7BIPM2bb LhPE0/ABMDyilsz6QSnT++DLkEhhtSjbvPU43Bnc8F0a5vbTCTFbx5Z54r7cZtLf nEK77K+YUhYPXoCY2YIC6ZSQQzYqncnCqOleM3YH/wYddbDEGlisi4HPfQKmI75w epFiE+SiSfPSnqAX29X6G2YAloMu3Pa+wCt0a3ylwxiKcB85fq6TtxVEsWsZES83 bvwEA/u4qxR7nOketKdcHKQDu08v67uz901XBFx0LloHWsCF/n71uIZKcYZ/G8Yf Jhxfu/q1n6eMqhj4/KAinQQv4L3NAfUFtzhmi4cOi0GaxWg8fYJ9iXxbgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqBJBl3A1KZVSdeLgCWFWR/UejZMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeITvzzDb ylnRc8grn4dM4qg89/KxZYIvCTkpiKhro+p5kQ2eiws0xCcd6MhTP8NBEznU28Cc VA94ThvAzlfaZEOKnBEFKngzECW8yespmwuaM4Xz1U+MeYEP6yL6sWVjHaHwcFm8 IYx+1Hn3E57yn9iSQCVbuiE229fYkeOD+RiB9BjbDuQFK7RuD3BN2rESdT48NMFS RUQBKO7AsmQ32UBZk5IlyBlREAMoIFxPs4oZOsD96slRz7y6E2/URlTFTxnNl8Cr fs5AO1jgSrtbNi+KrqTqIhteHTETvyvaAhkJfjpATphBar+b7AsGIyeNhy0J0IWT OMhbln7e0hiLQw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:08:29 2025 by rpki-client