$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: vGM799McC9ohknRnrE0qdtuTxgjwjiFqYrJaA3bNAlE= Subject key identifier: 22:15:C1:9D:98:7D:4C:31:84:87:27:B4:91:E4:BF:96:0A:9E:3E:73 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019A4F2B0697187CA4EBE43DAF56DB3F7FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1271 Signing time: Tue 04 Nov 2025 14:00:10 +0000 Manifest this update: Tue 04 Nov 2025 14:00:10 +0000 Manifest next update: Wed 05 Nov 2025 14:00:10 +0000 Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=) 2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=) 3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=) 4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=) 5: P1aEjNsd0SJfPVikfoYHI7ubFMI.roa (hash: DuGgYnJ4n5Dj5BJqboFm/1FmaNs0vaXsoWw3QLn5rAo=) 6: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=) 7: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=) 8: _8MCzl0l1tQuihsF_I64BRSs2tc.roa (hash: hgK1WfvVvkljiSPw5yBzGlfOpy6Z+LRSv3D2IqqcYQ4=) 9: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: AB/pYHJuG0A9LGBxZ7EFAfQPf2XHzlxl/qk/4bAtsa4=) 10: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=) 11: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=) 12: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=) 13: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=) 14: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=) 15: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=) 16: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (hash: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=) 17: zaK7g2klAtwCGQFnfe_zrOgOJdA.roa (hash: tBmARlQQAzmv3v9ImSbiUoVw1kndaC1qx7ql+RM5QpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:06:97:18:7c:a4:eb:e4:3d:af:56:db:3f:7f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Nov 4 14:00:10 2025 GMT Not After : Nov 5 14:00:10 2025 GMT Subject: CN=2215c19d987d4c31848727b491e4bf960a9e3e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:c4:a9:47:49:c7:ae:25:dc:0e:05:3f:27: 84:62:94:03:33:9b:92:0b:fd:da:f3:7e:07:67:18: 35:45:5d:d8:50:b5:ee:a6:c1:f1:16:3e:ec:22:db: a0:05:e6:f0:e7:11:a5:c5:c3:22:fb:cd:94:66:c0: c5:ec:81:0f:64:86:4b:c9:c2:1c:f2:7b:85:b3:8f: c1:8a:cd:c9:d0:e1:c0:c2:09:7f:ca:14:3f:16:71: 15:3b:4b:ed:cc:15:23:ae:6a:8b:b7:28:2d:8d:1d: 29:a6:d8:e7:cd:98:7c:3f:34:32:0a:7c:02:ed:8c: c0:73:c5:8e:70:3c:6c:98:1e:e4:3e:36:b0:cb:4b: 35:bf:2e:39:9a:84:a7:a0:ec:47:46:49:bd:80:23: 06:97:97:10:10:4a:f5:80:b5:4f:1a:43:4d:51:2c: ea:c8:49:93:29:47:62:c3:e4:11:2b:60:00:54:4f: ae:02:98:4a:c3:ae:f9:ae:42:dd:09:dd:a7:f7:8f: f8:3e:93:71:7e:5f:49:b2:7e:79:ff:c5:7b:7f:f0: 37:2a:1c:ad:b8:e2:3d:f4:3a:a5:e7:73:72:a4:bb: bc:32:37:d1:bf:27:fd:ef:dc:25:e1:ad:da:dc:ea: b7:f7:8e:e7:8d:11:2c:2a:2e:4f:1b:32:01:d1:d2: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:C1:9D:98:7D:4C:31:84:87:27:B4:91:E4:BF:96:0A:9E:3E:73 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:25:b1:14:74:1a:46:3a:7c:74:c3:33:2e:d5:26:b0:57:15: 5f:f2:fc:64:24:7a:af:e7:f8:ee:d9:32:fe:63:25:21:16:4f: 75:4c:35:3c:47:ae:a9:da:a4:86:77:9f:ef:19:7d:96:d0:d1: e1:94:93:5b:8b:31:07:3a:e8:f3:c7:1e:33:c9:15:a9:f7:14: 8e:ab:ee:d1:4b:6a:55:7d:da:0e:c0:2d:e3:49:98:66:f0:d0: bd:bd:aa:39:c5:49:e6:b6:06:b3:44:0d:42:69:25:6a:ea:23: 6d:1f:21:3b:09:3b:e0:3e:e2:24:f6:35:82:15:27:ba:dc:a2: 8a:91:86:2a:05:61:a1:eb:73:9e:4c:2d:d9:2d:7a:e5:c0:72: 74:47:1d:34:fc:bb:53:06:45:db:19:c7:25:25:98:01:68:11: ee:b6:f7:07:01:47:9b:e9:ca:74:d9:22:5c:35:fb:55:53:52: ab:66:82:d9:7f:f3:35:f7:69:1c:f5:02:9d:4f:52:da:c6:d9: 8d:f9:05:fe:fc:4a:81:0c:ea:60:ec:da:e2:23:b8:47:3f:a9: c8:45:d0:08:ca:3d:32:f7:2d:c7:4f:15:fe:b2:13:eb:6f:f7: 0e:76:8c:95:b4:ac:82:f1:39:cc:0c:08:5f:5c:05:40:68:1c: ab:d8:85:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPKwaXGHyk6+Q9r1bbP3/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjUxMTA0MTQwMDEwWhcNMjUxMTA1MTQwMDEwWjAzMTEwLwYDVQQD EygyMjE1YzE5ZDk4N2Q0YzMxODQ4NzI3YjQ5MWU0YmY5NjBhOWUzZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdvEqUdJx64l3A4FPyeEYpQDM5uS C/3a834HZxg1RV3YULXupsHxFj7sItugBebw5xGlxcMi+82UZsDF7IEPZIZLycIc 8nuFs4/Bis3J0OHAwgl/yhQ/FnEVO0vtzBUjrmqLtygtjR0pptjnzZh8PzQyCnwC 7YzAc8WOcDxsmB7kPjawy0s1vy45moSnoOxHRkm9gCMGl5cQEEr1gLVPGkNNUSzq yEmTKUdiw+QRK2AAVE+uAphKw675rkLdCd2n94/4PpNxfl9Jsn55/8V7f/A3Khyt uOI99Dql53NypLu8MjfRvyf979wl4a3a3Oq3947njREsKi5PGzIB0dIifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIVwZ2YfUwxhIcntJHkv5YKnj5zMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSWxFHQa Rjp8dMMzLtUmsFcVX/L8ZCR6r+f47tky/mMlIRZPdUw1PEeuqdqkhnef7xl9ltDR 4ZSTW4sxBzro88ceM8kVqfcUjqvu0UtqVX3aDsAt40mYZvDQvb2qOcVJ5rYGs0QN QmklauojbR8hOwk74D7iJPY1ghUnutyiipGGKgVhoetznkwt2S165cBydEcdNPy7 UwZF2xnHJSWYAWgR7rb3BwFHm+nKdNkiXDX7VVNSq2aC2X/zNfdpHPUCnU9S2sbZ jfkF/vxKgQzqYOza4iO4Rz+pyEXQCMo9Mvctx08V/rIT62/3DnaMlbSsgvE5zAwI X1wFQGgcq9iF/A== -----END CERTIFICATE-----Generated at Tue Nov 4 22:45:36 2025 by rpki-client