$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: 2kaHJDdg70SsXLt4gHTB78WCXHomG6rOMik+KNvC6ss= Subject key identifier: E8:91:8F:10:BD:4C:7A:CC:46:B6:44:7B:B3:12:15:E1:C5:45:96:CA Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019A4E4F93FA360A68A5FF3AC09DA5CE6492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0AE3 Signing time: Tue 04 Nov 2025 10:00:29 +0000 Manifest this update: Tue 04 Nov 2025 10:00:29 +0000 Manifest next update: Wed 05 Nov 2025 10:00:29 +0000 Files and hashes: 1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=) 2: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=) 3: 3_vCPXMxLInxH4KSM9i76JRc3wI.roa (hash: KQnR/Rw1eBymAhNe+aNyzbKPfZJwc7vaoArCKIxxfkQ=) 4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=) 5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=) 6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=) 7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=) 8: CIRls3stTp9BOjHce35suioz25Y.crl (hash: 6kzuubX49Q+WWRwVl7/fACKCzhY0ZIapJixeZ/EGRMs=) 9: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=) 10: E41iAo-YhWo417aVu3UFCXW5I0U.roa (hash: FPYq7/mqqnQsvVNvJMzlmLszXu5+IG0MN3SMAMVazpQ=) 11: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=) 12: Gg2fBgym98lzpgGOw525Psta200.roa (hash: ITzizygNHqGF0ltRY0tg7IiIoexFvZtpbGrKT1PyRcQ=) 13: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=) 14: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=) 15: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=) 16: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=) 17: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=) 18: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=) 19: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=) 20: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=) 21: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=) 22: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=) 23: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=) 24: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=) 25: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=) 26: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=) 27: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:93:fa:36:0a:68:a5:ff:3a:c0:9d:a5:ce:64:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Nov 4 10:00:29 2025 GMT Not After : Nov 5 10:00:29 2025 GMT Subject: CN=e8918f10bd4c7acc46b6447bb31215e1c54596ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:39:54:4a:ad:0b:e2:39:97:2b:b8:0e:cd: 36:5b:64:07:bc:78:05:08:b0:20:ec:7b:e5:f0:24: c4:12:af:c1:b1:e1:65:2a:59:3e:15:da:07:18:59: 87:98:d6:de:4e:b1:34:1b:04:81:b0:16:63:97:1e: 9b:08:f1:ea:c1:25:47:1c:63:73:28:35:a4:a0:a6: 95:1f:25:4c:47:f9:55:48:b7:38:12:e1:17:ce:ee: 2e:b6:bd:f2:70:3b:92:4a:13:ca:ab:5c:e9:38:45: 2a:d3:60:87:aa:e2:c2:b3:96:1d:ec:89:f7:69:1c: fd:f8:44:09:93:5a:ca:dc:5e:19:5d:cc:de:a6:ef: d7:68:1a:24:ae:43:46:5b:70:b5:ed:eb:f2:42:1f: 35:c6:bd:65:87:67:2e:f3:6d:0d:b2:5f:06:da:f4: c0:b5:25:6c:30:45:1d:07:1d:1f:0d:1b:3a:38:84: 67:d3:1e:41:7e:85:9a:9e:d6:19:d4:f3:23:4c:a2: 54:c1:7b:df:25:44:6f:5d:75:2e:c7:66:73:8e:42: 58:78:c0:70:d9:88:3b:4f:95:a2:37:2d:05:0e:e8: fe:55:f3:0c:14:3b:40:fb:6c:00:98:b5:d9:a5:ed: 1b:52:b3:0e:22:ce:f8:0a:05:65:df:4f:fe:cf:4c: c4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:91:8F:10:BD:4C:7A:CC:46:B6:44:7B:B3:12:15:E1:C5:45:96:CA X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4a:88:29:ca:2a:49:fd:91:81:1d:33:e4:0e:c2:2f:c7:6d: c6:57:1b:bf:90:19:9c:10:2a:82:c0:bf:1a:fe:ee:53:fa:3e: 45:dd:92:d2:6e:b3:c6:b8:03:bf:ec:40:fa:47:16:3e:d3:1b: 5e:16:e9:67:05:bb:93:cd:af:5b:e4:a0:b5:51:7f:f3:09:2f: 7c:37:79:64:b4:17:6e:07:1d:88:fd:8a:6d:81:35:1b:5b:4e: 3a:3c:5f:67:b8:12:9b:0a:23:b5:be:4d:d6:9a:15:42:26:52: b8:d0:5e:90:00:94:6a:20:20:12:a3:9c:7f:02:df:28:c9:63: df:5a:f0:2c:72:40:f5:9e:0b:01:3b:06:69:c5:18:a1:61:1e: b6:77:2c:76:48:dd:ac:a7:55:84:80:e3:af:67:8a:e3:58:2c: 94:cb:1e:b3:b1:55:9a:2b:da:e6:d2:b7:34:1f:f0:a2:fe:73: 3d:17:c9:e4:a7:f7:93:63:6e:52:cb:f5:45:bd:05:73:a3:7e: 7b:b2:f7:39:74:b6:ec:9f:61:ff:97:71:0f:01:50:1c:f7:97: 6a:7d:16:f3:e8:16:00:a8:a7:f0:33:af:8b:82:46:ec:5b:c7: 0f:e4:a1:c7:99:7b:17:58:71:53:75:68:4d:62:40:1d:8d:d4: 33:86:76:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT5P6Ngpopf86wJ2lzmSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMTA0MTAwMDI5WhcNMjUxMTA1MTAwMDI5WjAzMTEwLwYDVQQD EyhlODkxOGYxMGJkNGM3YWNjNDZiNjQ0N2JiMzEyMTVlMWM1NDU5NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvU5VEqtC+I5lyu4Ds02W2QHvHgF CLAg7Hvl8CTEEq/BseFlKlk+FdoHGFmHmNbeTrE0GwSBsBZjlx6bCPHqwSVHHGNz KDWkoKaVHyVMR/lVSLc4EuEXzu4utr3ycDuSShPKq1zpOEUq02CHquLCs5Yd7In3 aRz9+EQJk1rK3F4ZXczepu/XaBokrkNGW3C17evyQh81xr1lh2cu820Nsl8G2vTA tSVsMEUdBx0fDRs6OIRn0x5BfoWantYZ1PMjTKJUwXvfJURvXXUux2ZzjkJYeMBw 2Yg7T5WiNy0FDuj+VfMMFDtA+2wAmLXZpe0bUrMOIs74CgVl30/+z0zETwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiRjxC9THrMRrZEe7MSFeHFRZbKMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0qIKcoq Sf2RgR0z5A7CL8dtxlcbv5AZnBAqgsC/Gv7uU/o+Rd2S0m6zxrgDv+xA+kcWPtMb XhbpZwW7k82vW+SgtVF/8wkvfDd5ZLQXbgcdiP2KbYE1G1tOOjxfZ7gSmwojtb5N 1poVQiZSuNBekACUaiAgEqOcfwLfKMlj31rwLHJA9Z4LATsGacUYoWEetncsdkjd rKdVhIDjr2eK41gslMses7FVmiva5tK3NB/wov5zPRfJ5Kf3k2NuUsv1Rb0Fc6N+ e7L3OXS27J9h/5dxDwFQHPeXan0W8+gWAKin8DOvi4JG7FvHD+Shx5l7F1hxU3Vo TWJAHY3UM4Z2rQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:39 2025 by rpki-client