$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: V4GnzOtNT0sK8Mvv2QApTzCHGCLhig8t3Fa6coMfm2U= Subject key identifier: B2:49:A9:36:7F:87:0A:6F:D6:4B:FA:72:E8:17:3D:D0:74:97:51:BD Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019A4E1904036ABC11BC7CAEC639BAC08B19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 171B Signing time: Tue 04 Nov 2025 09:00:53 +0000 Manifest this update: Tue 04 Nov 2025 09:00:53 +0000 Manifest next update: Wed 05 Nov 2025 09:00:53 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: ZiFyDJzljGCVRIgw4gwq1ZPXzC/2TqjlHSvBMkYl6Cg=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:19:04:03:6a:bc:11:bc:7c:ae:c6:39:ba:c0:8b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Nov 4 09:00:53 2025 GMT Not After : Nov 5 09:00:53 2025 GMT Subject: CN=b249a9367f870a6fd64bfa72e8173dd0749751bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:39:0c:6c:b5:45:79:45:7a:93:e2:43:08: f6:6a:3d:c5:18:51:20:1b:d8:20:d5:2c:08:ed:09: e4:48:c1:82:d9:9d:5f:d8:bc:95:c7:3e:bb:52:a4: 92:b3:f5:01:d1:5d:97:fa:6a:fa:ae:44:62:42:91: 98:df:a9:19:0f:c5:fa:16:f1:f1:dc:80:30:13:e0: 75:41:93:47:a8:58:77:c0:89:37:e2:8a:47:51:5e: f1:1f:72:59:e8:35:3a:69:6f:04:b9:05:d6:44:ff: 49:21:5e:30:49:09:c0:1f:b0:db:42:95:6b:f4:b0: 6f:d4:ab:ff:25:b6:13:d0:7f:8a:ed:93:f5:68:f0: f2:42:f6:10:ee:f2:67:ce:fc:53:9f:fc:4f:cc:58: b1:62:0b:23:4c:20:08:db:ef:80:ce:64:46:4b:8b: c7:97:79:58:40:1a:03:25:23:69:fa:30:28:bb:6f: ed:85:44:1f:92:40:a2:b7:6b:3a:a0:bb:f6:bb:97: 42:07:82:38:a0:03:e0:ba:90:3c:99:7c:77:e7:94: e0:e3:64:ff:59:18:61:99:c6:62:90:9a:db:53:00: a0:b2:9f:91:22:3d:6d:a3:4d:fb:e2:54:67:45:c7: 93:00:64:9f:67:33:5f:46:99:b8:74:fb:68:73:22: 8e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:49:A9:36:7F:87:0A:6F:D6:4B:FA:72:E8:17:3D:D0:74:97:51:BD X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1a:10:f0:19:5f:21:ae:60:e9:4d:90:81:76:94:9d:d0:fe: 13:d0:a2:44:d2:2b:1e:00:53:67:2c:71:40:ee:fc:51:9b:06: 45:2f:92:7f:9b:6b:ca:72:cc:90:77:0c:18:ff:e9:f9:cb:e9: 7e:78:74:af:29:e3:60:f1:98:d7:be:ed:0d:8f:7a:64:96:ee: 77:24:54:65:30:55:cd:fa:b0:90:53:17:cd:0f:04:bd:18:8c: af:1b:b3:b5:b7:72:60:dd:e4:ce:87:fa:ae:c5:81:85:0e:20: 99:14:8d:15:03:47:f2:37:e1:c7:97:65:d1:d6:98:1f:2c:a8: 1d:6f:7c:92:fb:92:59:50:fc:c7:5c:bf:0f:b2:c5:53:6c:41: e1:d6:bb:fc:ad:3c:5e:9f:35:fa:b6:00:72:4c:cb:00:62:ee: 0b:77:2c:64:7d:44:d6:35:86:34:ff:79:26:f2:c1:64:c6:6b: 43:da:80:d6:6b:f8:ae:80:02:24:4e:30:8d:5f:49:ba:49:24: f0:f3:f3:dc:d0:ad:c5:2e:96:42:18:1a:9c:e9:94:b1:cf:2d: 8c:da:ce:cd:d6:24:9b:da:7e:c6:50:d7:d2:d3:3d:a2:e3:95: 67:26:bb:20:e9:ed:31:b4:f7:b3:d0:ce:f0:6e:02:3c:14:6d: b2:9e:a3:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGQQDarwRvHyuxjm6wIsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUxMTA0MDkwMDUzWhcNMjUxMTA1MDkwMDUzWjAzMTEwLwYDVQQD EyhiMjQ5YTkzNjdmODcwYTZmZDY0YmZhNzJlODE3M2RkMDc0OTc1MWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJI5DGy1RXlFepPiQwj2aj3FGFEg G9gg1SwI7QnkSMGC2Z1f2LyVxz67UqSSs/UB0V2X+mr6rkRiQpGY36kZD8X6FvHx 3IAwE+B1QZNHqFh3wIk34opHUV7xH3JZ6DU6aW8EuQXWRP9JIV4wSQnAH7DbQpVr 9LBv1Kv/JbYT0H+K7ZP1aPDyQvYQ7vJnzvxTn/xPzFixYgsjTCAI2++AzmRGS4vH l3lYQBoDJSNp+jAou2/thUQfkkCit2s6oLv2u5dCB4I4oAPgupA8mXx355Tg42T/ WRhhmcZikJrbUwCgsp+RIj1to0374lRnRceTAGSfZzNfRpm4dPtocyKONQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJJqTZ/hwpv1kv6cugXPdB0l1G9MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRoQ8Blf Ia5g6U2QgXaUndD+E9CiRNIrHgBTZyxxQO78UZsGRS+Sf5trynLMkHcMGP/p+cvp fnh0rynjYPGY177tDY96ZJbudyRUZTBVzfqwkFMXzQ8EvRiMrxuztbdyYN3kzof6 rsWBhQ4gmRSNFQNH8jfhx5dl0daYHyyoHW98kvuSWVD8x1y/D7LFU2xB4da7/K08 Xp81+rYAckzLAGLuC3csZH1E1jWGNP95JvLBZMZrQ9qA1mv4roACJE4wjV9Jukkk 8PPz3NCtxS6WQhganOmUsc8tjNrOzdYkm9p+xlDX0tM9ouOVZya7IOntMbT3s9DO 8G4CPBRtsp6jPQ== -----END CERTIFICATE-----Generated at Tue Nov 4 17:37:13 2025 by rpki-client