$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: ROW34s6oxkbEsywSk625GVXhoR9ArfLjsOFV8as8b9Q= Subject key identifier: AF:C8:AC:20:A4:A8:3E:87:78:71:6F:F5:A0:38:F4:85:69:65:FE:22 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019A4DE18A30B6030FF7A1CBF46C0FE75B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 141C Signing time: Tue 04 Nov 2025 08:00:17 +0000 Manifest this update: Tue 04 Nov 2025 08:00:17 +0000 Manifest next update: Wed 05 Nov 2025 08:00:17 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: yWB5bNkCAG72CbyE6Ft6cqUkqyUgLc2Jnl+JPBFtUew=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:8a:30:b6:03:0f:f7:a1:cb:f4:6c:0f:e7:5b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Nov 4 08:00:17 2025 GMT Not After : Nov 5 08:00:17 2025 GMT Subject: CN=afc8ac20a4a83e8778716ff5a038f4856965fe22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:dc:96:d7:7b:d5:b7:1a:19:ec:b7:81:fe: a0:ae:1b:ab:b3:4d:6e:16:d5:ab:49:3e:38:8a:ab: a9:5f:a9:5e:1e:aa:49:77:5d:b5:64:de:8e:0e:37: cc:d7:ab:8e:88:28:7c:a5:b8:03:dd:35:91:47:d1: eb:e8:2c:62:12:93:96:15:ad:e8:4f:e9:d1:44:9b: 46:a0:53:37:29:44:d1:ec:3e:c8:35:02:da:53:67: 66:e8:b3:69:58:4f:f2:dd:94:0e:05:e3:5d:4d:4b: 7f:ce:3f:ec:74:b1:0a:f5:e0:d9:71:c0:b8:44:de: 8b:95:e0:72:88:31:7d:bb:c5:48:ef:6b:13:84:9a: ce:0d:78:8e:5a:88:86:52:f7:e6:4e:07:20:27:7e: a7:5a:f4:86:f3:e8:13:a3:a1:28:4f:6f:98:e3:1c: 0b:b8:70:ef:9c:c9:87:7a:58:dd:bc:eb:65:0d:f1: 6b:46:64:49:16:7e:49:23:7a:96:a2:c0:40:a0:02: f5:1e:00:b0:c1:89:03:b0:b6:e1:3d:e5:62:50:22: d6:ce:6c:cf:2b:08:1f:6f:94:46:59:b5:89:50:d9: 18:00:33:b7:4f:4c:bc:63:4a:59:10:b9:8e:26:6e: 8a:8a:4f:4b:b4:b1:b4:42:f3:b5:87:1b:ff:4c:04: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C8:AC:20:A4:A8:3E:87:78:71:6F:F5:A0:38:F4:85:69:65:FE:22 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8c:e4:1b:e3:06:20:e3:11:b9:30:c8:a3:fd:cd:bc:8e:6e: 68:b8:a7:d1:17:07:31:94:d2:8d:1d:26:e3:1b:6b:f4:4f:dc: 55:5c:80:b1:42:f2:fd:a7:99:50:23:65:57:54:fa:41:6c:66: c3:da:ab:e8:a4:7c:c3:3d:51:7e:8b:c0:bc:2f:b6:63:49:d9: 77:37:57:13:da:61:6e:44:ac:9f:14:3c:6e:6e:93:13:c5:52: 7b:91:39:e0:cd:90:5d:34:dc:cc:76:9b:d2:10:72:74:b2:99: 2b:c7:0d:54:03:42:b6:f5:6d:41:6b:31:d8:67:6c:07:16:be: ba:ec:7a:2b:3b:45:fc:21:58:c5:6a:73:4a:d6:72:92:3d:95: f5:5f:2c:5c:b3:ef:7f:44:93:75:90:27:af:42:b0:63:7c:3b: 52:ad:87:c3:de:ed:52:c7:1e:c6:19:5c:9f:94:1a:c1:59:23: e9:e3:9f:4c:c1:d8:41:ab:d8:0e:e9:9a:4f:18:66:58:14:59: 63:36:eb:fa:bb:2b:b2:f0:0d:d5:37:41:70:d7:ff:19:eb:20: 66:a4:a2:83:de:3e:85:26:46:04:c1:a8:4f:be:3e:61:9e:5e: 3f:70:f2:ea:11:a2:05:d6:e7:0d:2d:da:f4:6e:33:7b:5c:5e: 9e:5b:a1:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4YowtgMP96HL9GwP51tLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUxMTA0MDgwMDE3WhcNMjUxMTA1MDgwMDE3WjAzMTEwLwYDVQQD EyhhZmM4YWMyMGE0YTgzZTg3Nzg3MTZmZjVhMDM4ZjQ4NTY5NjVmZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBrcltd71bcaGey3gf6grhurs01u FtWrST44iqupX6leHqpJd121ZN6ODjfM16uOiCh8pbgD3TWRR9Hr6CxiEpOWFa3o T+nRRJtGoFM3KUTR7D7INQLaU2dm6LNpWE/y3ZQOBeNdTUt/zj/sdLEK9eDZccC4 RN6LleByiDF9u8VI72sThJrODXiOWoiGUvfmTgcgJ36nWvSG8+gTo6EoT2+Y4xwL uHDvnMmHeljdvOtlDfFrRmRJFn5JI3qWosBAoAL1HgCwwYkDsLbhPeViUCLWzmzP Kwgfb5RGWbWJUNkYADO3T0y8Y0pZELmOJm6Kik9LtLG0QvO1hxv/TATPqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/IrCCkqD6HeHFv9aA49IVpZf4iMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIzkG+MG IOMRuTDIo/3NvI5uaLin0RcHMZTSjR0m4xtr9E/cVVyAsULy/aeZUCNlV1T6QWxm w9qr6KR8wz1RfovAvC+2Y0nZdzdXE9phbkSsnxQ8bm6TE8VSe5E54M2QXTTczHab 0hBydLKZK8cNVANCtvVtQWsx2GdsBxa+uux6KztF/CFYxWpzStZykj2V9V8sXLPv f0STdZAnr0KwY3w7Uq2Hw97tUscexhlcn5QawVkj6eOfTMHYQavYDumaTxhmWBRZ Yzbr+rsrsvAN1TdBcNf/GesgZqSig94+hSZGBMGoT74+YZ5eP3Dy6hGiBdbnDS3a 9G4ze1xenluhbw== -----END CERTIFICATE-----Generated at Tue Nov 4 14:41:58 2025 by rpki-client