$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: ehX5Va3RfoltIpSYHM56ks94Vnn9KQ3mRCQC2I+xRxE= Subject key identifier: 3A:FF:96:F9:7A:A7:22:A7:A5:77:04:DD:C7:D2:19:68:33:F0:DF:53 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019A503DD026A72DA55318390821B9A919ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 1748 Signing time: Tue 04 Nov 2025 19:00:19 +0000 Manifest this update: Tue 04 Nov 2025 19:00:19 +0000 Manifest next update: Wed 05 Nov 2025 19:00:19 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 10: bilb14WArW1Ov7SsrYk0Wsxs1vU.roa (hash: vP2MTh6QB6vRojmbG2tYWTOri2gn+m2SiJ7LuQrhK/Y=) 11: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 12: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: IkQIPJ6oqD3D1eMVA4WxeA2iQDq7I7B750FxNxph6zA=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3d:d0:26:a7:2d:a5:53:18:39:08:21:b9:a9:19:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Nov 4 19:00:19 2025 GMT Not After : Nov 5 19:00:19 2025 GMT Subject: CN=3aff96f97aa722a7a57704ddc7d2196833f0df53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:23:de:7c:a0:9a:c8:09:9e:03:e7:a5:fd:d6: e0:ee:cc:60:2b:94:ef:c9:35:28:11:f4:e2:79:04: f3:52:82:b9:2a:17:ab:93:c3:f1:de:be:06:dc:09: cb:d2:8c:6a:31:af:88:5e:ed:d2:ed:bc:3b:87:5f: ed:83:d8:d1:da:e7:4d:10:b0:f1:69:d0:95:5b:25: 37:db:75:c2:b1:8a:98:ad:35:10:d6:97:19:8a:d0: 1a:96:78:b8:a8:1b:aa:6b:aa:b1:8b:da:3e:69:7d: 74:8e:8e:c7:7b:61:ff:2f:60:ef:ed:eb:5d:e5:4a: 6d:9d:a7:6a:a3:e5:e9:84:a1:ed:b5:d8:40:63:7c: ba:49:c1:e6:d0:da:a8:27:8d:d1:b3:e0:18:b5:8c: 7d:72:fb:7f:65:90:68:52:71:b1:e9:18:e8:22:e1: b6:92:bf:94:0e:44:94:0a:ad:95:8f:6f:c5:6c:5b: fd:29:1a:34:3f:dc:ce:99:b1:12:ae:fa:1f:f5:fe: 4d:91:1b:e4:2a:64:5a:3f:79:18:c4:36:1a:4c:95: a9:d3:bc:66:73:cc:7f:96:b4:62:a4:3a:47:c7:e9: 05:5e:62:4d:83:37:d1:70:15:f7:f8:bf:41:c1:0c: a4:b2:d1:f7:7e:90:41:ea:97:bc:4a:f4:77:06:2f: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FF:96:F9:7A:A7:22:A7:A5:77:04:DD:C7:D2:19:68:33:F0:DF:53 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:86:ae:7a:1a:a5:4c:1c:f5:1f:4f:28:fa:ce:0f:3f:1b:3a: 48:82:65:66:2d:7c:6d:e4:85:03:8f:fe:7a:7c:73:6a:15:8b: e2:dd:e5:04:eb:9d:10:9c:1e:53:43:f1:21:4a:f1:5a:22:db: cb:08:77:17:d5:b8:4c:7d:7d:05:81:bd:36:a0:b6:1d:d6:15: c3:36:13:94:c7:52:cc:97:e4:48:e7:cd:a3:fb:b5:bc:c4:e5: 59:44:3a:ec:de:40:9f:a2:f5:46:2e:6e:79:80:d5:3b:de:4e: 11:cc:ef:ec:57:70:b9:7a:a2:89:31:b8:37:40:5c:14:93:df: 21:e7:ef:70:ee:89:51:3a:ed:36:6b:7b:fe:9a:53:21:06:37: 7d:50:76:85:75:e4:89:69:5d:ea:f4:9c:82:b3:74:b5:2c:1b: d5:75:52:f4:db:73:8e:56:09:d9:46:8c:27:1e:ed:c9:8e:a2: 27:a0:bf:37:d5:8c:11:5f:64:89:67:29:96:a6:48:96:52:3e: 45:17:7e:c6:f9:5e:24:68:81:ca:94:b4:61:d2:5e:fc:80:83: 6a:67:1c:8c:0e:10:ae:01:0d:40:36:04:fe:0b:be:9b:a6:c5: cf:99:57:60:30:2c:9f:a6:df:6f:5c:61:9f:5c:47:ad:05:b1: 1f:39:ab:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPdAmpy2lUxg5CCG5qRntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUxMTA0MTkwMDE5WhcNMjUxMTA1MTkwMDE5WjAzMTEwLwYDVQQD EygzYWZmOTZmOTdhYTcyMmE3YTU3NzA0ZGRjN2QyMTk2ODMzZjBkZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SPefKCayAmeA+el/dbg7sxgK5Tv yTUoEfTieQTzUoK5Kherk8Px3r4G3AnL0oxqMa+IXu3S7bw7h1/tg9jR2udNELDx adCVWyU323XCsYqYrTUQ1pcZitAalni4qBuqa6qxi9o+aX10jo7He2H/L2Dv7etd 5Uptnadqo+XphKHttdhAY3y6ScHm0NqoJ43Rs+AYtYx9cvt/ZZBoUnGx6RjoIuG2 kr+UDkSUCq2Vj2/FbFv9KRo0P9zOmbESrvof9f5NkRvkKmRaP3kYxDYaTJWp07xm c8x/lrRipDpHx+kFXmJNgzfRcBX3+L9BwQykstH3fpBB6pe8SvR3Bi/jMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDr/lvl6pyKnpXcE3cfSGWgz8N9TMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoauehql TBz1H08o+s4PPxs6SIJlZi18beSFA4/+enxzahWL4t3lBOudEJweU0PxIUrxWiLb ywh3F9W4TH19BYG9NqC2HdYVwzYTlMdSzJfkSOfNo/u1vMTlWUQ67N5An6L1Ri5u eYDVO95OEczv7FdwuXqiiTG4N0BcFJPfIefvcO6JUTrtNmt7/ppTIQY3fVB2hXXk iWld6vScgrN0tSwb1XVS9NtzjlYJ2UaMJx7tyY6iJ6C/N9WMEV9kiWcplqZIllI+ RRd+xvleJGiBypS0YdJe/ICDamccjA4QrgENQDYE/gu+m6bFz5lXYDAsn6bfb1xh n1xHrQWxHzmrdg== -----END CERTIFICATE-----Generated at Tue Nov 4 22:16:40 2025 by rpki-client