$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: 2hqBISptVYYuICUfM14OEWeJZW8rap+QGQgoGttUFuI= Subject key identifier: 9B:4D:31:47:7A:73:56:C0:AE:1F:37:32:DB:FB:28:09:C0:49:63:0E Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019A4DE171755510060D6347ECA666B67D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 0E8A Signing time: Tue 04 Nov 2025 08:00:11 +0000 Manifest this update: Tue 04 Nov 2025 08:00:11 +0000 Manifest next update: Wed 05 Nov 2025 08:00:11 +0000 Files and hashes: 1: 4czWj5aZMB_R86nok0e-gmmw8FA.roa (hash: Gv8YcKmGHmiLJguwO6BvvZVFENIayfRvLi+jAcPEdhE=) 2: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=) 3: 4vux7awz3E36tFDHIazA7-jkwq4.roa (hash: wB2NxL5iO7Z/8XbFdlxXumlf3zZuQEhQW8UuOP6HgoY=) 4: 6sCOzHkQ-muwDrkw5pOHoUfXNBk.roa (hash: 7FwYeaXkfgVbCXFiUge2n1VEhJxyS2ClQiqjC+nu4kY=) 5: F0suYji7pyda6Pgm_yX79A_qaTE.roa (hash: XG7UorX0bbwleiT45k2X3jyWBSNu43oe/Y2K8gmt6hs=) 6: Jr5Ueq6kDwQSf4OCEjyXWyv4DJM.roa (hash: MSHb++tsJ50vTtX0YOcOx6674SSj9sRa1aeYtEOqqp0=) 7: OM9sp83gq8JLzkuTWdaZtycRFbg.roa (hash: 6zlXFie+AwK2F8W6WJu8AHXI3dxTSD6r6hI+SWEgdaY=) 8: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=) 9: REOoP6Y8-wsgon83LmwFQJMZALc.roa (hash: A4lQGU6MhGm6OdwWVbHE5BG8fr09wGeJM7NnUUCETR0=) 10: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=) 11: XDeCLHaiVkzWf79sZ4KqDvjzIWs.roa (hash: mdSEOgj58o+M0FHsb2DdMQVIKduX1cG2ZN8Y1VO59WE=) 12: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: yzBZwLwL4cMq1vbJQYVHgTFvbpY/nd9ZZLXL08ZtG/g=) 13: b7gCLwwMzjZjbVS32gLXIFWwbUk.roa (hash: D2c9HayWxHwINiQBbZzPgdJmQPa3/hDkJ/z9pkwYKxE=) 14: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=) 15: fK9EW2umljzRQTYND4AfmE35XCA.roa (hash: 9sqICXJrZxXGs4HmQ6by183Nbrj675bqVnqLvT99NXw=) 16: fzvvk5bzP10N2OQNounBbEQbNsE.roa (hash: RKFAzkj15rOGrQMxeuqq2cZQnvwnI2ibWU1wR/fhdrE=) 17: od1ADzeqOn5bVC20zBnBeUVSNKw.roa (hash: VVSLdqnSFTyWUJsI+ZA3ZZGNebOqLFzR1C2rEUolb/0=) 18: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=) 19: z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa (hash: RiWOkvqrTFK0brETv9UpsQbvKc3QbmQ0OasKxFLAePE=) 20: zLs5eIQla7JvuOsDIVylY_LlW9Y.roa (hash: EWXm1Aj94qBaUfmc96DwvRvWK77ZtmJaOaVeqhh7Bw8=) 21: zWw8lAKfrFF4RG-Mj_n5dY-0UOY.roa (hash: DKYofoTdihA+aTa5YdADLPg4Qah6RWaucr279EDCxes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:71:75:55:10:06:0d:63:47:ec:a6:66:b6:7d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Nov 4 08:00:11 2025 GMT Not After : Nov 5 08:00:11 2025 GMT Subject: CN=9b4d31477a7356c0ae1f3732dbfb2809c049630e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:de:58:db:5a:3f:5d:96:9e:81:43:fb:f6:29: 92:19:ed:01:6c:b8:6a:bf:c7:fd:dc:0d:68:f6:96: 8d:72:ae:d8:ab:24:87:88:ba:bf:a1:5f:bb:d8:5b: 96:46:43:d0:ea:7f:9d:93:3d:93:b9:e1:72:5d:e4: 8f:9d:00:3e:52:58:2b:15:53:4c:e3:21:be:64:bb: e5:0c:8b:11:f6:18:fa:0b:1c:09:1e:06:88:c9:5a: 6d:0d:e2:6a:f5:5b:29:dc:5f:05:87:d1:20:f9:e6: 8c:77:39:1c:52:5d:29:cb:97:00:98:27:4e:6c:00: 34:f6:42:80:e2:6d:6c:07:c1:4c:1d:ba:18:58:67: c2:08:58:07:69:20:f2:49:f7:eb:10:62:85:01:22: 08:37:d2:1c:d2:25:44:0f:f9:1d:aa:f6:c9:05:d0: 94:4d:16:2e:7b:a8:be:2d:69:78:a8:6a:be:58:b2: 25:bd:e6:f5:5d:ff:19:20:19:20:8e:9e:33:ba:fc: 46:61:10:c3:7e:0a:85:64:dd:b2:6d:b9:cf:f8:6f: 31:3f:e8:31:1f:83:ef:90:3a:3c:4e:3a:a4:01:a8: ce:21:fb:56:72:13:e5:6d:8e:ec:31:28:41:ef:89: 85:76:4f:60:fc:ad:16:2c:97:71:72:c0:45:02:4d: ed:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4D:31:47:7A:73:56:C0:AE:1F:37:32:DB:FB:28:09:C0:49:63:0E X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0d:69:38:16:4a:d7:bd:55:96:42:ee:8e:f0:05:2e:39:7a: 00:97:9a:79:e6:b6:74:8c:3a:77:7a:b8:1a:32:ef:ec:aa:be: fd:d0:a4:3a:b3:71:d3:37:94:a6:28:ac:6d:2e:e8:d4:5e:c1: 83:0b:5b:d4:8e:39:62:be:50:6a:9f:e8:bf:99:fa:e9:95:ce: d8:f5:f1:e0:1e:07:59:9d:b8:a2:8f:49:e3:83:ff:85:17:79: b0:31:cc:d7:08:b3:61:7f:5c:16:1c:0a:73:5a:87:1f:9d:67: 9c:53:bb:f9:5e:59:00:fc:72:66:75:0a:40:3a:25:5e:77:1d: 1b:53:18:c0:b0:ea:30:d7:d2:96:91:b2:c8:e2:d4:2e:3a:32: 31:fe:84:27:68:d4:c3:3f:18:69:11:0c:6b:c3:b4:c9:ee:4f: de:5a:33:f6:5c:66:75:8e:4c:de:df:59:ad:fb:2a:0f:64:0e: e1:6b:13:dd:2c:96:9f:79:49:be:9f:96:8e:2d:e1:0e:13:04: 9e:45:4a:b5:08:10:67:02:96:d2:e5:37:35:7f:96:73:ca:19: bc:86:02:4b:6e:d6:d8:db:05:b2:7b:a3:d5:03:58:4f:f1:1d: 6b:4b:50:77:15:75:fd:c7:c1:e4:a3:51:b7:5a:7c:f7:3f:16: e4:1c:05:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4XF1VRAGDWNH7KZmtn1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjUxMTA0MDgwMDExWhcNMjUxMTA1MDgwMDExWjAzMTEwLwYDVQQD Eyg5YjRkMzE0NzdhNzM1NmMwYWUxZjM3MzJkYmZiMjgwOWMwNDk2MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd5Y21o/XZaegUP79imSGe0BbLhq v8f93A1o9paNcq7YqySHiLq/oV+72FuWRkPQ6n+dkz2TueFyXeSPnQA+UlgrFVNM 4yG+ZLvlDIsR9hj6CxwJHgaIyVptDeJq9Vsp3F8Fh9Eg+eaMdzkcUl0py5cAmCdO bAA09kKA4m1sB8FMHboYWGfCCFgHaSDySffrEGKFASIIN9Ic0iVED/kdqvbJBdCU TRYue6i+LWl4qGq+WLIlveb1Xf8ZIBkgjp4zuvxGYRDDfgqFZN2ybbnP+G8xP+gx H4PvkDo8TjqkAajOIftWchPlbY7sMShB74mFdk9g/K0WLJdxcsBFAk3txwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtNMUd6c1bArh83Mtv7KAnASWMOMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmg1pOBZK 171VlkLujvAFLjl6AJeaeea2dIw6d3q4GjLv7Kq+/dCkOrNx0zeUpiisbS7o1F7B gwtb1I45Yr5Qap/ov5n66ZXO2PXx4B4HWZ24oo9J44P/hRd5sDHM1wizYX9cFhwK c1qHH51nnFO7+V5ZAPxyZnUKQDolXncdG1MYwLDqMNfSlpGyyOLULjoyMf6EJ2jU wz8YaREMa8O0ye5P3loz9lxmdY5M3t9ZrfsqD2QO4WsT3SyWn3lJvp+Wji3hDhME nkVKtQgQZwKW0uU3NX+Wc8oZvIYCS27W2NsFsnuj1QNYT/Eda0tQdxV1/cfB5KNR t1p89z8W5BwFaA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:48:42 2025 by rpki-client