$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: cGn2f9Yf0FkIlkS/8wFU7QGVvr0pq1vI1zKkNB3HmDo= Subject key identifier: 19:02:1A:63:E9:0B:4C:7B:0E:03:0F:15:14:8A:EE:3D:BD:73:10:49 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019A4FCFBCFCB6C1C57FD77B2D354AAA1E76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 1713 Signing time: Tue 04 Nov 2025 17:00:05 +0000 Manifest this update: Tue 04 Nov 2025 17:00:05 +0000 Manifest next update: Wed 05 Nov 2025 17:00:05 +0000 Files and hashes: 1: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=) 2: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=) 3: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=) 4: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=) 5: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=) 6: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=) 7: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=) 8: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=) 9: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=) 10: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=) 11: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=) 12: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: ZNl6TU5sJNmfkSchclMiwZyXTPhGbk4XoYbk4r60cNU=) 13: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=) 14: p9yFoBCMLxcx2kyLnzIglbUZt8Q.roa (hash: fbxtSkZt340A9KV6V1MZj2gG37RK0K88NQoLtoEEGa0=) 15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=) 16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:cf:bc:fc:b6:c1:c5:7f:d7:7b:2d:35:4a:aa:1e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Nov 4 17:00:05 2025 GMT Not After : Nov 5 17:00:05 2025 GMT Subject: CN=19021a63e90b4c7b0e030f15148aee3dbd731049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:6d:f6:4a:db:a1:e7:92:5b:40:60:2f:55: 19:74:b6:1f:75:1d:e5:c3:a5:12:39:67:85:68:0a: 28:21:f4:fe:cf:a4:f0:ab:77:90:7c:21:20:7c:a2: e2:3f:50:f0:8c:98:ad:31:bb:1a:f2:52:c9:f8:f2: a5:b4:25:02:81:5b:78:7d:42:a1:ca:42:27:ad:06: 2a:7a:c5:54:d2:7f:e4:0a:f0:03:86:47:fa:65:f4: 2b:5f:12:62:bd:d8:1f:e0:cd:d5:ad:26:9f:63:fe: 8b:af:55:3d:2d:89:10:37:52:ce:60:c6:b2:b7:b7: 19:30:7f:3d:da:db:9e:64:c7:f5:63:64:61:01:bc: 6e:02:02:f4:86:c6:55:2a:1a:08:6a:13:f7:3d:6c: 52:7e:a1:5e:1c:e5:98:49:72:53:04:dd:3b:9b:b9: 67:ee:fc:82:4b:15:e2:ed:04:63:19:2e:04:cd:64: a4:1e:86:71:e5:9e:a4:a9:84:53:15:9d:16:40:97: 27:ed:b0:c9:74:5e:5a:e0:e1:1a:b4:94:ae:e7:1e: 81:6d:f7:dd:c9:e6:a5:3f:2d:01:2e:40:86:59:43: 9c:eb:09:07:9d:37:f5:88:ff:66:7a:f5:10:93:36: 3f:63:0a:21:96:f0:94:fd:a8:93:ba:a6:c2:1b:64: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:02:1A:63:E9:0B:4C:7B:0E:03:0F:15:14:8A:EE:3D:BD:73:10:49 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:20:0a:e6:aa:85:25:99:92:23:f1:9e:55:a4:3d:21:fe:13: d8:dc:d8:c3:5f:06:10:82:c3:4e:6d:94:ed:60:b3:dc:87:a2: 65:44:25:56:3d:16:20:cb:94:fd:03:2b:85:61:59:a7:ab:e9: e2:ec:9a:bc:e8:12:90:f3:ca:45:56:2e:30:82:9d:71:ff:a0: a2:41:e1:2e:5f:84:8b:53:e6:5e:81:d6:e0:9b:b5:69:5a:4e: 59:59:d3:15:0a:86:24:fa:6a:4a:77:ec:98:d0:dc:21:07:c8: c3:3f:e8:18:bb:89:26:96:93:11:f6:54:6a:4a:86:8b:7c:37: 3e:6a:88:ad:69:bd:c2:8b:89:ea:e2:6d:22:d5:5f:e1:a8:43: b7:e4:43:31:01:5a:d8:ef:08:b5:2e:e5:53:6d:b9:3b:ec:0f: 58:9b:78:66:ce:44:90:17:69:2c:14:e2:29:c5:93:8f:2c:99: 86:95:8a:ab:21:1d:5c:c7:b5:41:1e:d2:f8:64:bd:f5:79:b3: 2f:9d:d5:46:dd:64:ab:3b:b3:b0:01:c6:5b:95:23:6e:6f:73: 27:c4:06:18:24:4d:d2:25:2b:78:0a:77:29:ab:25:73:3c:20: 8e:fc:04:ab:91:61:85:6a:02:e5:4d:27:e2:8d:97:50:2b:b5: 0c:09:76:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPz7z8tsHFf9d7LTVKqh52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjUxMTA0MTcwMDA1WhcNMjUxMTA1MTcwMDA1WjAzMTEwLwYDVQQD EygxOTAyMWE2M2U5MGI0YzdiMGUwMzBmMTUxNDhhZWUzZGJkNzMxMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuURt9krboeeSW0BgL1UZdLYfdR3l w6USOWeFaAooIfT+z6Twq3eQfCEgfKLiP1DwjJitMbsa8lLJ+PKltCUCgVt4fUKh ykInrQYqesVU0n/kCvADhkf6ZfQrXxJivdgf4M3VrSafY/6Lr1U9LYkQN1LOYMay t7cZMH892tueZMf1Y2RhAbxuAgL0hsZVKhoIahP3PWxSfqFeHOWYSXJTBN07m7ln 7vyCSxXi7QRjGS4EzWSkHoZx5Z6kqYRTFZ0WQJcn7bDJdF5a4OEatJSu5x6Bbffd yealPy0BLkCGWUOc6wkHnTf1iP9mevUQkzY/YwohlvCU/aiTuqbCG2QOcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkCGmPpC0x7DgMPFRSK7j29cxBJMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliAK5qqF JZmSI/GeVaQ9If4T2NzYw18GEILDTm2U7WCz3IeiZUQlVj0WIMuU/QMrhWFZp6vp 4uyavOgSkPPKRVYuMIKdcf+gokHhLl+Ei1PmXoHW4Ju1aVpOWVnTFQqGJPpqSnfs mNDcIQfIwz/oGLuJJpaTEfZUakqGi3w3PmqIrWm9wouJ6uJtItVf4ahDt+RDMQFa 2O8ItS7lU225O+wPWJt4Zs5EkBdpLBTiKcWTjyyZhpWKqyEdXMe1QR7S+GS99Xmz L53VRt1kqzuzsAHGW5Ujbm9zJ8QGGCRN0iUreAp3KaslczwgjvwEq5FhhWoC5U0n 4o2XUCu1DAl2iQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:36:04 2025 by rpki-client