$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: Bv+5Ng9Qw5m6hUIzz5izy7OZhujKi4Sj3ZxMIkDSvFg= Subject key identifier: E8:E4:81:23:71:78:38:4E:DC:E2:B2:0B:BD:EB:9D:29:E7:3D:28:0D Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019A4E868ABB6F60DFED68293D364ED5BC62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0D7B Signing time: Tue 04 Nov 2025 11:00:31 +0000 Manifest this update: Tue 04 Nov 2025 11:00:31 +0000 Manifest next update: Wed 05 Nov 2025 11:00:31 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 80WC0WqP1t9PzxhBKhAFkcZqf1I.roa (hash: UwkQHVIknQbR2ZUXNL3+lgAOmSDcXEXHci6JqknMhb4=) 5: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 6: DDFDdL4wIG-xoeAynt1YMKtbfho.roa (hash: iGAUYDIlZc13eU1AIjcX3CLjQZ/Wgbfnl/75KPHzqCA=) 7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: LOtaQ8T2GfA5OD/DuDZ0UZF5L488aZ/Ve3fv9arxHM0=) 8: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 9: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 10: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 11: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 12: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 13: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 14: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 15: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 16: cQbzTwAiOsuLmS8yMnawGgo51Ps.roa (hash: btxyyqBZ8nyik4l7LMQMxSprq0qm/QjygLtxi11EF/E=) 17: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 18: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 19: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 20: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 21: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 22: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 23: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 24: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 25: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 26: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 27: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:8a:bb:6f:60:df:ed:68:29:3d:36:4e:d5:bc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Nov 4 11:00:31 2025 GMT Not After : Nov 5 11:00:31 2025 GMT Subject: CN=e8e481237178384edce2b20bbdeb9d29e73d280d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:71:09:c4:38:3e:a3:90:6b:0d:e5:e6:07: db:87:96:ad:ba:3a:f4:04:4f:70:eb:80:61:50:9f: d4:08:73:a7:f5:f2:ab:4e:88:82:46:07:18:bd:03: 79:f3:85:b7:c3:d8:e9:5d:91:f7:63:14:de:b6:24: d4:f6:c0:e0:5a:1d:57:b2:d4:c3:74:34:80:5c:dd: cd:b8:ee:e0:b9:7b:fd:87:47:79:1b:b4:59:7e:32: 88:0e:56:da:1c:60:92:e0:64:08:5c:c2:f2:42:e9: 9e:b0:7b:25:b7:3e:d0:e0:13:1a:a7:8d:47:b7:db: eb:95:68:f4:62:d5:10:0a:4f:92:0e:75:11:53:ac: 29:92:a1:42:18:13:cd:00:5a:dc:1d:37:13:3c:db: e9:9b:f2:dd:e1:46:11:c4:3c:0e:c1:25:1f:28:14: 69:a4:a7:98:d0:fd:d5:35:27:40:f7:ea:ba:bb:44: a3:27:fe:cd:b4:24:02:d1:61:66:9c:7d:48:e4:02: 4f:c5:45:6a:dd:9c:cb:cb:8e:fc:09:56:90:2b:37: bb:ca:da:ce:38:c7:2d:75:c2:58:6e:7a:68:17:74: 3b:f1:26:12:42:6c:ce:99:e7:67:76:4e:a3:d3:5c: a5:20:12:ad:a8:2a:ab:d3:77:9e:04:8c:45:be:42: 15:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E4:81:23:71:78:38:4E:DC:E2:B2:0B:BD:EB:9D:29:E7:3D:28:0D X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:61:fc:0f:62:32:b4:c2:79:aa:03:95:dc:a8:de:cd:76:d1: e2:af:98:dd:12:7e:c9:04:eb:54:4b:ae:00:69:ca:27:30:c9: 24:f0:aa:f4:8a:02:7a:0c:6d:98:09:dc:91:e5:10:ee:c6:4f: c3:e5:2c:31:57:b5:59:d3:d5:65:7f:7b:0a:87:e7:1f:61:e7: 3c:a2:82:bf:9b:b5:ca:40:73:f1:e3:32:2a:50:44:14:0b:58: 44:c4:26:90:63:29:20:95:21:5d:5a:c9:c6:fe:60:11:3b:90: 51:77:6f:f1:9c:a2:26:88:36:f1:96:45:d6:75:14:c0:45:d5: 47:df:c4:8d:62:1f:cb:a4:5a:05:db:41:15:43:bd:e5:7f:f5: 31:eb:69:86:b4:05:37:0d:a1:d6:03:5c:fa:ee:61:4f:82:58: 12:4d:ee:7e:5d:36:4a:65:d9:50:15:ef:c4:33:01:3e:95:7b: 0f:1c:d6:e9:71:0f:af:2f:02:79:35:6c:29:e4:8d:a7:94:9a: 37:fe:ef:43:75:84:68:29:56:92:e8:a7:cc:d7:4b:0e:d6:96: 53:e5:91:6e:1a:b7:c0:75:5c:83:bf:17:69:cd:ad:f4:d1:df: 7c:88:09:56:c3:e3:6b:02:90:80:4f:ec:4d:3e:b6:83:d8:e4: 16:87:10:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhoq7b2Df7WgpPTZO1bxiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMTA0MTEwMDMxWhcNMjUxMTA1MTEwMDMxWjAzMTEwLwYDVQQD EyhlOGU0ODEyMzcxNzgzODRlZGNlMmIyMGJiZGViOWQyOWU3M2QyODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt5xCcQ4PqOQaw3l5gfbh5atujr0 BE9w64BhUJ/UCHOn9fKrToiCRgcYvQN584W3w9jpXZH3YxTetiTU9sDgWh1XstTD dDSAXN3NuO7guXv9h0d5G7RZfjKIDlbaHGCS4GQIXMLyQumesHsltz7Q4BMap41H t9vrlWj0YtUQCk+SDnURU6wpkqFCGBPNAFrcHTcTPNvpm/Ld4UYRxDwOwSUfKBRp pKeY0P3VNSdA9+q6u0SjJ/7NtCQC0WFmnH1I5AJPxUVq3ZzLy478CVaQKze7ytrO OMctdcJYbnpoF3Q78SYSQmzOmedndk6j01ylIBKtqCqr03eeBIxFvkIVtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjkgSNxeDhO3OKyC73rnSnnPSgNMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmH8D2Iy tMJ5qgOV3KjezXbR4q+Y3RJ+yQTrVEuuAGnKJzDJJPCq9IoCegxtmAnckeUQ7sZP w+UsMVe1WdPVZX97CofnH2HnPKKCv5u1ykBz8eMyKlBEFAtYRMQmkGMpIJUhXVrJ xv5gETuQUXdv8ZyiJog28ZZF1nUUwEXVR9/EjWIfy6RaBdtBFUO95X/1MetphrQF Nw2h1gNc+u5hT4JYEk3ufl02SmXZUBXvxDMBPpV7DxzW6XEPry8CeTVsKeSNp5Sa N/7vQ3WEaClWkuinzNdLDtaWU+WRbhq3wHVcg78Xac2t9NHffIgJVsPjawKQgE/s TT62g9jkFocQKg== -----END CERTIFICATE-----Generated at Tue Nov 4 17:36:40 2025 by rpki-client