$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: XcAg7cRg7wkwSAYUI8O/xzTqajBMn7gmXpYnodSKMjI= Subject key identifier: A2:88:C7:42:7D:A5:51:7F:0D:E4:FD:BD:66:34:18:58:19:72:05:03 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019A4E4F62CEAA7CAA961BB9EC1D339EC93D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1732 Signing time: Tue 04 Nov 2025 10:00:16 +0000 Manifest this update: Tue 04 Nov 2025 10:00:16 +0000 Manifest next update: Wed 05 Nov 2025 10:00:16 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: dLgz0jf+1MdDvJhfbouVGxwDAP8WwCM/aPVUxBnqriY=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 10: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 11: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 12: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 13: jt3cdzogC_GhOHVIdQu1LfkbDrM.roa (hash: 4TbqHgl6LIIhOvKU0Ma8NpMAoh5pYOvW9g1cZnc89eY=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:62:ce:aa:7c:aa:96:1b:b9:ec:1d:33:9e:c9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Nov 4 10:00:16 2025 GMT Not After : Nov 5 10:00:16 2025 GMT Subject: CN=a288c7427da5517f0de4fdbd6634185819720503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:32:8d:3b:0d:d9:53:86:b1:b1:fd:39:68: c9:7b:57:94:42:ae:68:33:1b:7c:8d:a4:7f:a0:0a: 41:9a:77:41:c1:bc:92:ae:9e:3a:b5:97:c9:c2:fa: 34:6f:cd:5c:ae:b0:8f:b1:9a:c9:a0:9f:c4:49:47: 1f:66:7f:0b:9c:86:fb:27:e6:98:f3:b4:ce:9e:d1: 7a:c6:ba:3f:90:fb:76:5a:04:8c:df:2d:4c:80:14: bf:55:70:73:dd:d9:d2:22:13:6c:26:d8:32:4f:8b: 08:d9:63:fd:5e:02:5a:84:2f:89:43:3d:d6:f1:1f: 20:5a:7b:c3:54:ba:0c:33:d5:d7:9c:6f:7f:8e:6a: 74:82:5c:07:0d:04:72:12:d5:06:73:19:f3:3e:f0: fd:35:e9:dd:57:1e:c4:b4:be:e6:99:08:44:48:ae: 26:64:6e:49:7e:26:4b:c6:78:2f:f5:a0:57:55:e5: 61:21:d5:4b:f0:08:25:b1:8f:68:fb:e8:02:93:ac: 9a:24:29:f5:70:35:0f:da:ce:47:ea:5a:a9:de:46: a1:29:01:da:4f:8e:da:3d:ff:14:4b:12:f0:01:58: de:00:80:fd:60:f8:96:3d:8d:22:cf:65:92:7a:87: 35:22:35:c9:4f:b4:8c:e0:26:4b:06:ed:a5:ee:36: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:88:C7:42:7D:A5:51:7F:0D:E4:FD:BD:66:34:18:58:19:72:05:03 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3e:a0:66:f0:2b:44:75:28:9a:f4:8a:a9:c6:5f:b0:74:40: 90:0d:d6:3d:85:96:74:60:09:b8:46:a5:99:74:71:0e:dc:2c: 48:d7:f0:a0:c3:af:02:c7:7e:67:4d:ab:a6:2d:92:aa:25:8d: f4:b7:9f:0e:ef:6e:2b:93:1d:82:f2:e0:03:78:13:0f:fa:47: 88:c5:bd:c1:34:13:1a:73:89:c2:37:cc:bf:d6:c9:4d:09:dc: c8:9c:36:c6:5f:c4:df:46:e5:af:27:10:26:d4:86:e9:6a:0d: 2f:99:2f:13:2d:fb:4d:4d:c3:44:73:ed:0a:5c:a0:5d:d3:44: 53:7c:43:09:8c:50:e4:48:67:d5:0d:cc:f6:98:6b:49:73:71: 16:88:e0:25:db:17:36:ba:9b:9d:07:69:15:e7:f5:f4:b4:e1: ce:62:dc:cb:a6:a1:fe:13:80:f9:82:73:f8:62:85:00:35:7d: 8c:d5:39:22:16:ac:8c:bf:7c:02:dd:32:b2:17:1c:80:57:33: d3:52:59:36:72:de:5c:69:fb:00:48:a4:fe:3d:a2:ed:5c:0e: 57:c2:a2:15:c5:ed:ef:ef:57:8a:c0:80:e8:cb:e0:5d:4a:6e: 91:35:dc:2f:69:d9:d7:fc:73:74:7a:ab:05:c8:a4:fc:bc:53: e0:ff:2b:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT2LOqnyqlhu57B0znsk9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUxMTA0MTAwMDE2WhcNMjUxMTA1MTAwMDE2WjAzMTEwLwYDVQQD EyhhMjg4Yzc0MjdkYTU1MTdmMGRlNGZkYmQ2NjM0MTg1ODE5NzIwNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCgyjTsN2VOGsbH9OWjJe1eUQq5o Mxt8jaR/oApBmndBwbySrp46tZfJwvo0b81crrCPsZrJoJ/ESUcfZn8LnIb7J+aY 87TOntF6xro/kPt2WgSM3y1MgBS/VXBz3dnSIhNsJtgyT4sI2WP9XgJahC+JQz3W 8R8gWnvDVLoMM9XXnG9/jmp0glwHDQRyEtUGcxnzPvD9NendVx7EtL7mmQhESK4m ZG5JfiZLxngv9aBXVeVhIdVL8AglsY9o++gCk6yaJCn1cDUP2s5H6lqp3kahKQHa T47aPf8USxLwAVjeAID9YPiWPY0iz2WSeoc1IjXJT7SM4CZLBu2l7jbA/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKIx0J9pVF/DeT9vWY0GFgZcgUDMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALT6gZvAr RHUomvSKqcZfsHRAkA3WPYWWdGAJuEalmXRxDtwsSNfwoMOvAsd+Z02rpi2SqiWN 9LefDu9uK5MdgvLgA3gTD/pHiMW9wTQTGnOJwjfMv9bJTQncyJw2xl/E30blrycQ JtSG6WoNL5kvEy37TU3DRHPtClygXdNEU3xDCYxQ5Ehn1Q3M9phrSXNxFojgJdsX NrqbnQdpFef19LThzmLcy6ah/hOA+YJz+GKFADV9jNU5IhasjL98At0yshccgFcz 01JZNnLeXGn7AEik/j2i7VwOV8KiFcXt7+9XisCA6MvgXUpukTXcL2nZ1/xzdHqr Bcik/LxT4P8rKA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:50:14 2025 by rpki-client