$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: a8j/zI2mCf6nhtQCm1TWkVVptwakW0yIbDl5Ai14mtA= Subject key identifier: 4D:56:8B:D4:E3:BC:95:23:BF:B5:46:E0:13:E9:E8:04:E5:C4:FF:DA Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019A4E4FD0307665160CDF345AA8E4187A8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 1001 Signing time: Tue 04 Nov 2025 10:00:44 +0000 Manifest this update: Tue 04 Nov 2025 10:00:44 +0000 Manifest next update: Wed 05 Nov 2025 10:00:44 +0000 Files and hashes: 1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=) 2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=) 3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=) 4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=) 5: 9Viq0D0yeyudHsOyGwiWq4c9Zm8.roa (hash: F3Gen1bFVipiyLDRBWS2zGC6+19TslOL2dJD3LXtkbA=) 6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=) 7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=) 8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: JXcsQT+UwYoLFigykCaMx9XdTrjdBNSNw0QMmvLHmpI=) 9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=) 10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=) 11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=) 12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=) 13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=) 14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=) 15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=) 16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=) 17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=) 18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=) 19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=) 20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=) 21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=) 22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=) 23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=) 24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=) 25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=) 26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=) 27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:d0:30:76:65:16:0c:df:34:5a:a8:e4:18:7a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Nov 4 10:00:44 2025 GMT Not After : Nov 5 10:00:44 2025 GMT Subject: CN=4d568bd4e3bc9523bfb546e013e9e804e5c4ffda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:3e:ca:fd:8b:f3:c8:4a:ba:e6:e6:5b:19: 68:c8:6c:6e:5d:73:dd:20:13:c9:1f:b8:59:d5:8a: 5e:f1:54:22:88:bb:c0:f1:01:d2:9d:18:95:d6:67: 30:9a:03:bf:f4:7b:88:aa:5e:02:a0:70:32:3c:e3: e1:b0:96:b2:3f:48:33:e0:ac:49:7d:ad:22:16:7d: 8c:5e:6f:18:f2:ae:49:31:7d:93:ee:53:1c:7b:66: 75:a4:30:f0:1d:7a:2b:a4:30:6a:39:74:0a:c0:ca: 29:6a:16:9f:87:91:0f:25:59:dc:24:2f:f6:ed:67: ba:07:d7:bd:85:81:d9:f7:b0:ba:5f:4b:3c:44:e1: 2c:e4:12:6b:9d:38:9b:c9:6c:18:78:32:4d:4a:6a: f3:46:8e:bc:6a:a4:a9:26:a7:67:9a:83:c7:c8:a2: 4e:ee:cc:12:09:12:da:7d:f4:e1:20:74:ad:68:13: 93:58:a0:42:00:cd:c7:f2:0b:58:a8:0e:14:0c:51: 79:d3:f3:a2:ab:93:08:02:7e:9a:fe:91:3c:38:7e: 18:7f:be:d2:c2:6c:5e:08:bf:0d:03:dd:ab:73:2e: 21:8f:83:12:8c:a6:80:2e:bd:53:3e:13:70:30:5a: 02:75:6a:9a:44:d5:f0:b2:4b:8f:6a:ad:59:39:96: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:56:8B:D4:E3:BC:95:23:BF:B5:46:E0:13:E9:E8:04:E5:C4:FF:DA X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:be:ca:00:a9:81:a8:06:79:3e:b7:69:9f:92:9d:44:0b:26: ed:df:fc:84:ee:68:18:69:0a:71:8e:d2:65:8f:c2:7b:da:20: 27:34:d0:c1:46:25:39:09:6f:d3:7d:8e:60:2f:a4:fe:60:20: 5e:91:ef:8a:fb:82:1d:bf:94:c7:6b:78:8d:5e:05:44:40:e7: d7:28:cc:1d:3d:a3:00:c3:b7:f9:aa:b9:1e:25:55:97:0a:60: 32:a3:c6:c8:8a:19:c6:e8:9f:48:50:d2:dd:15:24:39:e3:17: 8c:80:53:e8:55:f9:fb:f1:1b:78:99:82:5b:06:8c:31:31:4b: ca:18:2a:2c:0a:50:6d:f7:b3:86:4c:75:a8:bd:5e:22:7a:1f: 4a:83:11:8f:50:6e:23:10:93:79:e8:c3:1c:6b:05:75:7a:07: f3:fa:37:a7:31:7c:73:87:f3:2b:a1:98:95:cd:9d:3f:ff:8c: cc:39:f5:e1:b8:17:27:97:56:1e:2c:f9:54:a9:68:00:ec:86: fe:e3:5b:e3:c4:37:6b:78:04:7d:f5:da:a2:8c:b0:81:ea:f7: ee:01:16:ad:38:f3:6a:bd:bf:55:90:63:39:98:ef:9b:b3:42: b6:ca:e8:63:03:e2:87:07:6b:f3:7f:c3:be:ee:fb:fc:4f:47: 03:49:ac:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT9AwdmUWDN80WqjkGHqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjUxMTA0MTAwMDQ0WhcNMjUxMTA1MTAwMDQ0WjAzMTEwLwYDVQQD Eyg0ZDU2OGJkNGUzYmM5NTIzYmZiNTQ2ZTAxM2U5ZTgwNGU1YzRmZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvM+yv2L88hKuubmWxloyGxuXXPd IBPJH7hZ1Ype8VQiiLvA8QHSnRiV1mcwmgO/9HuIql4CoHAyPOPhsJayP0gz4KxJ fa0iFn2MXm8Y8q5JMX2T7lMce2Z1pDDwHXorpDBqOXQKwMopahafh5EPJVncJC/2 7We6B9e9hYHZ97C6X0s8ROEs5BJrnTibyWwYeDJNSmrzRo68aqSpJqdnmoPHyKJO 7swSCRLaffThIHStaBOTWKBCAM3H8gtYqA4UDFF50/Oiq5MIAn6a/pE8OH4Yf77S wmxeCL8NA92rcy4hj4MSjKaALr1TPhNwMFoCdWqaRNXwskuPaq1ZOZas8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1Wi9TjvJUjv7VG4BPp6ATlxP/aMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfr7KAKmB qAZ5Prdpn5KdRAsm7d/8hO5oGGkKcY7SZY/Ce9ogJzTQwUYlOQlv032OYC+k/mAg XpHvivuCHb+Ux2t4jV4FREDn1yjMHT2jAMO3+aq5HiVVlwpgMqPGyIoZxuifSFDS 3RUkOeMXjIBT6FX5+/EbeJmCWwaMMTFLyhgqLApQbfezhkx1qL1eInofSoMRj1Bu IxCTeejDHGsFdXoH8/o3pzF8c4fzK6GYlc2dP/+MzDn14bgXJ5dWHiz5VKloAOyG /uNb48Q3a3gEffXaooywger37gEWrTjzar2/VZBjOZjvm7NCtsroYwPihwdr83/D vu77/E9HA0ms9Q== -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:16 2025 by rpki-client