$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json) Hash identifier: oJdjWsNUwmlpLkl7vyEq6iek5QjcUsas8LAnvtZxsXI= Subject key identifier: B8:F4:92:C7:4F:92:71:47:F5:FA:9E:B7:80:0E:CF:17:19:2E:B9:9D Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019A4D7464BB788A316D78843283FD4ADA8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft Manifest number: 1735 Signing time: Tue 04 Nov 2025 06:01:04 +0000 Manifest this update: Tue 04 Nov 2025 06:01:04 +0000 Manifest next update: Wed 05 Nov 2025 06:01:04 +0000 Files and hashes: 1: 6_4Zh3O6ZTreuktkHjfNsOfp20c.roa (hash: IHBYXC/iSuYVHMlBmOHgNgl61Qvof4DId2NC68M2Wf4=) 2: 7uP2hsNrWUTvLUi0EnlsUMplx8I.roa (hash: AAh5/zqxGEJwKpq1li09A8ITxq8BmEm8Nx1Peaplcw8=) 3: 86yMutrW94jAoFqGGLp05wok-EU.roa (hash: n1wMq7WI5xCKfeBBnyW3L0LanP1i1DJdVv+DH8sxYDQ=) 4: 8I00PdszB0BEA0F7L15RCYSGXrs.roa (hash: jIMi5XC40219hEu2jWaX/R/11c/v1KgoG9InqbBDCDw=) 5: 9d4vehXr1KQWWuNr4btcQyeNAOw.roa (hash: eCac0MYwoiBRqhdE7NB6xf6R3V4kbMphNX58B/5kKw4=) 6: BtYymVysztiqPvFalU2qw0BxdUI.roa (hash: fnna/fe+7wvOm7SoakeRGOUh4jW8Mh/j9bKBLG7yuY8=) 7: CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa (hash: 044BEtCX+z6xTX9a6h7LlWK6XDMZtx+8nHOMokajsWY=) 8: N04EfiNPlhcajYlah0Fj2OOKHzU.roa (hash: yfI+goH5HcOi2fBAbSu0epVzVunJlIpi1BFzU7kE07c=) 9: OziayBrDeGWUdwbC1v4ioKqEXUE.roa (hash: sdMj7SQqeh6lx/KCs9+nJuEWA4sxx9zFl43XaHKaZJk=) 10: ShiiryAcjD3F8ggUPDXzBzE0UB0.roa (hash: DaTZCgy4f8wa4YkJRs70W6ngBWHSz7ZCBqDO4OgIbKc=) 11: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: m5lAWnodB+XAiR6OXEUL4RtJFWkqYveHm5l5P7/0UTI=) 12: W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa (hash: 1ojxt/gCQbbmS26YV73zKnO5/4dtGXpP+YX1jufGKFE=) 13: W8m4GdEAUuyje4ea6tzLvpxGtOg.roa (hash: 2JXP9CUcUNLp3qYldxK3ZT/r0Zo+MqdT+NrTwUE+MCA=) 14: XA_JQUwBuB_5Bfu8Z1_Pku4UGIs.roa (hash: oqIiAXdBgyeEaTThnTERPbspWHbAcUhHISkkJ+TPcRM=) 15: _lT4fkaMoWdr8qyjDYgJWGLKNqk.roa (hash: cVeyU0qmwSSa/gArA5yocN/Gvczol71ofdn37Qssh2E=) 16: gCAZgdSrRRMO_a_bk-rlD9yUdBI.roa (hash: CiDZa7qTV5sD4Pxr/bWaU0/l61ZZMF4KbuusyXElF3s=) 17: h8tPDjA1OFAFTFOZDX2QcoPajT8.roa (hash: D2D71dyeEW0POzOSRVEi2ki37gqunzi/KvsZFZxTyj0=) 18: hhOCjjctZE2elUUQzzzNpbofAzE.roa (hash: ASnnd7IdpidxDt7bVAWlgtZPqmulJpJGw53xxAdtVc8=) 19: jmOmNUc4t1mTnx_PtEJXCVu45y0.roa (hash: n3LhYp07YltOPPJGprQBK9Drn6QgmpJsE3I8Z6cF5gc=) 20: mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa (hash: 4o5/uQYVaiCLx5hp640nZnYAh3ZNcq2J4p5PzINcxjY=) 21: nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa (hash: OO+ivo9odQV4h2/ZIswWA1KIA2RuonmMWgLO5WJNfks=) 22: vPs-BjoRFrtMzT81xNA12pTdrhk.roa (hash: zq1ZtiMPWWfT0qVyKbdcFXzXLMMx3LqD6xTMODLy5ro=) 23: y3uok7EZQrGXpn3Ez_3aS9Y6NLI.roa (hash: hrdKFgJqexlTl1buWV8DIV1mCnkxg43ZkPO8Ouc4I54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:74:64:bb:78:8a:31:6d:78:84:32:83:fd:4a:da:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Nov 4 06:01:04 2025 GMT Not After : Nov 5 06:01:04 2025 GMT Subject: CN=b8f492c74f927147f5fa9eb7800ecf17192eb99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:be:51:3b:38:fb:3b:00:ac:c9:56:3b:43: a3:c1:6e:6e:1c:ea:2d:35:ac:9f:90:ca:2f:14:be: 3d:49:48:24:92:80:be:9f:28:0b:b0:4f:fb:d4:c9: b7:da:20:48:dc:c6:5f:ea:78:10:c1:ed:d1:0f:1c: a7:16:f9:a4:a8:49:35:6b:25:55:5e:d8:9a:47:8d: 81:4b:1f:8d:2f:7e:01:b7:cb:72:9b:f5:5e:06:13: e2:87:62:bd:aa:14:ad:72:d0:f6:9a:60:bc:2e:50: 7f:83:0c:65:c4:f8:1a:7f:70:41:1f:94:9b:2e:4c: 3f:d3:a2:e7:8d:2f:0b:be:32:86:80:fe:84:c7:ca: 5a:e6:4d:48:e2:7d:d4:b5:24:94:98:0d:58:dd:3f: 01:3b:12:47:09:a9:dd:93:59:d1:d1:95:c2:36:64: f2:84:c8:b0:2e:46:e0:6c:ed:73:a5:62:3c:48:b4: 6e:70:93:60:43:d3:88:ad:9d:2d:33:a0:73:d2:14: f3:d5:4f:0c:33:bc:f2:d6:36:cc:05:96:2b:df:8b: 09:69:5a:78:cb:d6:bc:68:16:c6:43:d8:59:2e:fe: 4e:fd:fa:99:32:6b:f4:c1:bb:a4:39:4e:13:45:59: bb:e5:39:46:23:4c:6a:fd:de:a1:af:32:b8:56:16: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F4:92:C7:4F:92:71:47:F5:FA:9E:B7:80:0E:CF:17:19:2E:B9:9D X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:67:28:aa:d0:85:be:25:0c:19:18:45:d2:bb:72:db:64:e7: 06:2f:56:05:1b:ed:5c:42:cd:d0:be:4d:48:20:3c:0e:fe:68: 26:38:32:0c:6c:17:b0:fe:c1:8c:5d:7a:11:b1:c5:33:57:08: 96:cd:68:2b:fb:03:ff:05:f7:3a:90:53:b9:68:66:37:1e:d5: 31:4f:bb:aa:7d:ed:1a:46:94:0e:d4:34:0c:f3:b1:17:b7:90: b8:5b:14:86:58:d1:74:0e:29:01:b0:22:ee:c3:c7:26:11:21: ea:cb:f3:a8:4e:1f:61:eb:03:3f:8d:b9:81:7a:7b:e7:54:42: 56:35:ef:ea:4d:01:16:c4:25:2e:39:a3:08:00:58:96:94:08: 95:77:96:a0:ac:86:02:a4:dd:18:ed:28:16:77:d8:54:76:8b: 94:f7:9f:3c:34:70:ee:3d:3c:94:09:1e:26:f6:0e:0c:82:96: 43:94:52:3a:9a:a2:71:14:5e:ff:e2:a1:e2:03:21:e5:5a:47: 05:61:b5:f3:eb:a7:ae:04:4b:7e:df:94:e3:fe:cc:33:cf:cb: 9b:e2:1e:8b:06:35:b9:a9:76:dc:ac:f2:ce:3c:af:47:93:12: 05:c2:d1:a0:c0:71:86:fc:a6:27:1d:ee:f6:8f:2e:86:97:6a: d2:23:8d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNdGS7eIoxbXiEMoP9StqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjUxMTA0MDYwMTA0WhcNMjUxMTA1MDYwMTA0WjAzMTEwLwYDVQQD EyhiOGY0OTJjNzRmOTI3MTQ3ZjVmYTllYjc4MDBlY2YxNzE5MmViOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV2+UTs4+zsArMlWO0OjwW5uHOot NayfkMovFL49SUgkkoC+nygLsE/71Mm32iBI3MZf6ngQwe3RDxynFvmkqEk1ayVV XtiaR42BSx+NL34Bt8tym/VeBhPih2K9qhStctD2mmC8LlB/gwxlxPgaf3BBH5Sb Lkw/06LnjS8LvjKGgP6Ex8pa5k1I4n3UtSSUmA1Y3T8BOxJHCandk1nR0ZXCNmTy hMiwLkbgbO1zpWI8SLRucJNgQ9OIrZ0tM6Bz0hTz1U8MM7zy1jbMBZYr34sJaVp4 y9a8aBbGQ9hZLv5O/fqZMmv0wbukOU4TRVm75TlGI0xq/d6hrzK4VhYOvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj0ksdPknFH9fqet4AOzxcZLrmdMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2coqtCF viUMGRhF0rty22TnBi9WBRvtXELN0L5NSCA8Dv5oJjgyDGwXsP7BjF16EbHFM1cI ls1oK/sD/wX3OpBTuWhmNx7VMU+7qn3tGkaUDtQ0DPOxF7eQuFsUhljRdA4pAbAi 7sPHJhEh6svzqE4fYesDP425gXp751RCVjXv6k0BFsQlLjmjCABYlpQIlXeWoKyG AqTdGO0oFnfYVHaLlPefPDRw7j08lAkeJvYODIKWQ5RSOpqicRRe/+Kh4gMh5VpH BWG18+unrgRLft+U4/7MM8/Lm+IeiwY1ual23KzyzjyvR5MSBcLRoMBxhvymJx3u 9o8uhpdq0iONdg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:20:22 2025 by rpki-client