$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: RgorkjX94IeCegjFLHZCNOIzwbBx1GnwVa8SujoiRgU= Subject key identifier: 06:E5:90:58:BE:55:85:6A:40:C4:B3:04:7C:C0:B0:F9:07:6B:78:D3 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019A4E18B3D591A254B61AF3B439521CD920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0A17 Signing time: Tue 04 Nov 2025 09:00:32 +0000 Manifest this update: Tue 04 Nov 2025 09:00:32 +0000 Manifest next update: Wed 05 Nov 2025 09:00:32 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: DoWqFe7cQN39nEMGK3u8BBNcjhQ98ISVPdSBm6PtroU=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: xSgK9fLOFfBtEQ1GwOtLlJ5fFSc.roa (hash: 21NNCvjDiYlOHMOd6bhzk9x3nNYhc0a1y7zhHVR1Jbg=) 18: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:b3:d5:91:a2:54:b6:1a:f3:b4:39:52:1c:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Nov 4 09:00:32 2025 GMT Not After : Nov 5 09:00:32 2025 GMT Subject: CN=06e59058be55856a40c4b3047cc0b0f9076b78d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:ab:27:09:f7:19:8f:2b:1a:c1:96:c9:8f: df:cb:77:36:92:30:84:c9:da:2c:72:c1:70:36:6a: 6e:1d:9a:20:e3:91:d3:a4:32:4f:97:f8:49:64:15: a1:ea:81:df:9f:41:f1:3d:d9:c6:6f:02:d2:14:4a: 2f:81:50:5a:97:4b:82:10:90:48:d8:98:56:26:8d: dd:a9:e8:c0:f2:60:e7:d2:b1:a7:3b:f5:40:a0:ed: 51:3e:e6:03:aa:01:e0:11:68:f0:e4:a7:79:02:b9: fb:0e:77:1e:41:3f:69:c1:68:2b:a8:0a:6c:59:71: fa:3c:65:10:98:43:7f:91:da:59:45:29:b0:a6:30: d8:1e:73:3c:50:c6:ab:18:75:7d:f3:33:b8:52:f0: 0b:87:74:52:6d:30:1a:03:3a:1f:19:19:07:a3:2b: 90:7b:29:3e:ad:7e:30:43:d2:d5:95:a7:7b:bd:3b: 10:fb:b4:92:d0:73:33:aa:0c:ef:c9:d9:10:c0:d6: 80:41:3c:ea:7c:75:76:b7:a6:0c:f3:74:0f:a2:a6: 81:fc:f5:cb:82:3e:46:51:6d:a9:3d:e2:cf:ce:f9: 45:13:d4:1f:57:7d:0a:de:ef:9b:bf:22:ec:3d:65: 1c:11:47:fc:02:96:ce:69:57:df:2e:b3:d2:3f:76: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E5:90:58:BE:55:85:6A:40:C4:B3:04:7C:C0:B0:F9:07:6B:78:D3 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:78:65:be:10:01:02:1d:1b:f7:b3:ed:10:eb:6f:d2:2e:6c: cf:ff:c4:23:68:53:a8:0c:a8:6d:91:9c:c2:26:c8:73:84:d9: a5:65:ab:04:90:6f:e4:b6:78:71:a9:7b:21:32:10:f1:21:c9: b8:e4:a9:2a:f9:0f:ec:cc:0b:42:22:1f:32:08:78:e7:9f:90: ac:12:d4:c2:8d:20:7f:b0:a9:96:e1:e2:1a:45:1f:a6:1c:5a: 70:97:bf:a4:43:58:5b:7a:6d:60:43:bb:43:b4:b0:12:55:dc: bf:65:97:14:fb:1c:d4:94:73:3f:71:ce:7b:c8:a6:a3:1f:fd: c2:92:db:01:22:a7:ca:a7:1d:89:d7:a3:53:d3:9a:d0:9e:46: 9e:7f:ef:11:7a:c1:7d:4b:17:b1:b8:24:7f:5d:fc:cd:f3:af: a2:d7:f4:32:a8:b5:4a:d9:d2:16:d7:3b:30:06:d1:89:3c:aa: 4e:8f:8b:7b:ab:53:27:aa:60:fc:2b:15:29:ac:1d:52:a7:bb: 82:3c:de:38:3d:87:4f:68:01:e9:96:09:a7:97:b1:ea:90:dc: 6e:ee:56:eb:cb:97:3f:47:55:fd:47:63:8a:64:9a:a7:e3:d3: fb:2f:23:34:37:5a:f5:7d:b2:6c:85:53:47:59:09:e1:56:7e: 46:06:48:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGLPVkaJUthrztDlSHNkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUxMTA0MDkwMDMyWhcNMjUxMTA1MDkwMDMyWjAzMTEwLwYDVQQD EygwNmU1OTA1OGJlNTU4NTZhNDBjNGIzMDQ3Y2MwYjBmOTA3NmI3OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhKrJwn3GY8rGsGWyY/fy3c2kjCE ydoscsFwNmpuHZog45HTpDJPl/hJZBWh6oHfn0HxPdnGbwLSFEovgVBal0uCEJBI 2JhWJo3dqejA8mDn0rGnO/VAoO1RPuYDqgHgEWjw5Kd5Arn7DnceQT9pwWgrqAps WXH6PGUQmEN/kdpZRSmwpjDYHnM8UMarGHV98zO4UvALh3RSbTAaAzofGRkHoyuQ eyk+rX4wQ9LVlad7vTsQ+7SS0HMzqgzvydkQwNaAQTzqfHV2t6YM83QPoqaB/PXL gj5GUW2pPeLPzvlFE9QfV30K3u+bvyLsPWUcEUf8ApbOaVffLrPSP3YA3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAblkFi+VYVqQMSzBHzAsPkHa3jTMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3hlvhAB Ah0b97PtEOtv0i5sz//EI2hTqAyobZGcwibIc4TZpWWrBJBv5LZ4cal7ITIQ8SHJ uOSpKvkP7MwLQiIfMgh455+QrBLUwo0gf7CpluHiGkUfphxacJe/pENYW3ptYEO7 Q7SwElXcv2WXFPsc1JRzP3HOe8imox/9wpLbASKnyqcdidejU9Oa0J5Gnn/vEXrB fUsXsbgkf138zfOvotf0Mqi1StnSFtc7MAbRiTyqTo+Le6tTJ6pg/CsVKawdUqe7 gjzeOD2HT2gB6ZYJp5ex6pDcbu5W68uXP0dV/UdjimSap+PT+y8jNDda9X2ybIVT R1kJ4VZ+RgZIFw== -----END CERTIFICATE-----Generated at Tue Nov 4 14:48:12 2025 by rpki-client