$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: hy31DVzlIK/nguHkkEzOuG3jNxruCn2kQ421l/jxIU4= Subject key identifier: CC:67:D2:B1:F6:2D:9E:BD:BA:38:B2:02:C7:C3:80:C1:25:F4:99:0C Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019A4E4FCF2BF84E1E96343DF2B62359F16B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 16AC Signing time: Tue 04 Nov 2025 10:00:44 +0000 Manifest this update: Tue 04 Nov 2025 10:00:44 +0000 Manifest next update: Wed 05 Nov 2025 10:00:44 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: d-sWN4azI8sU7mlb0U-920Rsmtc.roa (hash: eiusVr40X1jFuIAj+CFi96eXy2bKXAQXnB20dKkv/70=) 14: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: YSmUQDAfGsZrb6T1qRzCPRoB1lmYf7BNwyaib60TdRE=) 15: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 16: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 17: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:cf:2b:f8:4e:1e:96:34:3d:f2:b6:23:59:f1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Nov 4 10:00:44 2025 GMT Not After : Nov 5 10:00:44 2025 GMT Subject: CN=cc67d2b1f62d9ebdba38b202c7c380c125f4990c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:ad:12:00:3c:b1:82:f5:f8:54:34:ca:a9: 2c:57:5d:c5:91:d0:df:36:08:fd:57:7c:9f:e4:0d: 3a:c1:2d:ed:73:d1:39:30:37:89:f9:28:7f:29:08: f4:20:95:43:5f:c1:29:16:11:03:f5:56:4f:b2:25: 20:fd:6c:60:53:38:9b:c4:e8:39:2e:5a:ac:79:b8: d2:9e:63:5a:79:1c:0f:11:b7:9c:a8:96:9a:a1:02: f6:56:b9:b6:eb:ed:2e:dd:4d:8d:ae:9e:43:c1:05: f9:20:eb:46:49:b3:bf:67:58:bf:f9:db:e1:3d:41: 86:ad:fc:2d:72:79:4c:eb:15:ad:4e:78:42:85:20: fd:8e:cb:1b:98:d8:cc:da:74:c4:8d:d6:58:16:bb: 9f:b3:30:04:dc:b8:10:b3:46:ae:09:f6:b1:ee:4d: ac:d9:8f:b2:06:71:3d:94:5e:52:82:59:9b:b5:34: 42:51:5a:d9:4b:41:33:67:7b:7f:32:1d:5d:83:12: 85:b8:01:7a:4e:b6:39:6a:ce:fc:a3:74:87:c5:9e: fa:40:e3:45:76:ec:75:9c:83:0d:7e:cc:60:b9:8e: 0d:db:94:92:5b:98:f2:4d:13:e2:a1:96:d6:a5:4e: 3e:88:1b:71:52:9e:51:da:b8:31:22:5a:a0:4b:37: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:67:D2:B1:F6:2D:9E:BD:BA:38:B2:02:C7:C3:80:C1:25:F4:99:0C X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ce:84:a0:f5:72:ca:69:b1:3b:b4:b4:09:76:10:08:2d:a6: 8e:a3:eb:e6:ba:63:a2:4e:bf:df:77:e7:7a:8f:aa:a2:6d:d1: 37:8a:45:11:fe:3d:d4:a2:a4:06:6e:94:6b:be:26:1e:49:eb: 67:dc:0b:c1:16:3c:59:10:89:79:01:00:25:d7:c1:23:89:d6: 8b:31:67:20:07:7e:30:72:a9:60:0c:dd:d6:08:43:5f:0f:37: 5a:4f:4a:d4:64:01:b7:a3:25:22:40:12:8f:5f:1d:ac:17:18: 72:26:56:b8:b3:d0:2d:b6:f2:4b:42:5d:29:30:e2:57:fe:09: ab:96:57:34:fa:33:27:b4:d4:f3:77:29:f4:56:09:d6:f4:af: 4a:58:99:da:d6:4e:a4:c9:7d:d7:d7:f6:84:3b:cc:b8:e0:f7: c1:c5:a6:71:e9:1c:e2:32:46:56:f0:dd:df:bd:c4:64:5a:06: c2:04:e6:b5:9b:cd:23:ee:3e:8a:91:e9:61:e1:0f:52:9b:ee: 9d:55:41:e2:19:44:78:8b:54:e5:ce:22:0d:ff:09:da:9b:10: bc:dc:2c:a7:ce:65:55:21:da:97:f6:2b:43:5d:8e:b3:0f:d0: 9b:a7:58:12:e0:9a:cb:b4:72:3e:93:48:43:87:5c:98:37:50: 62:38:91:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT88r+E4eljQ98rYjWfFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUxMTA0MTAwMDQ0WhcNMjUxMTA1MTAwMDQ0WjAzMTEwLwYDVQQD EyhjYzY3ZDJiMWY2MmQ5ZWJkYmEzOGIyMDJjN2MzODBjMTI1ZjQ5OTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2itEgA8sYL1+FQ0yqksV13FkdDf Ngj9V3yf5A06wS3tc9E5MDeJ+Sh/KQj0IJVDX8EpFhED9VZPsiUg/WxgUzibxOg5 LlqsebjSnmNaeRwPEbecqJaaoQL2Vrm26+0u3U2Nrp5DwQX5IOtGSbO/Z1i/+dvh PUGGrfwtcnlM6xWtTnhChSD9jssbmNjM2nTEjdZYFrufszAE3LgQs0auCfax7k2s 2Y+yBnE9lF5SglmbtTRCUVrZS0EzZ3t/Mh1dgxKFuAF6TrY5as78o3SHxZ76QONF dux1nIMNfsxguY4N25SSW5jyTRPioZbWpU4+iBtxUp5R2rgxIlqgSzftHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxn0rH2LZ69ujiyAsfDgMEl9JkMMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFM6EoPVy ymmxO7S0CXYQCC2mjqPr5rpjok6/33fneo+qom3RN4pFEf491KKkBm6Ua74mHknr Z9wLwRY8WRCJeQEAJdfBI4nWizFnIAd+MHKpYAzd1ghDXw83Wk9K1GQBt6MlIkAS j18drBcYciZWuLPQLbbyS0JdKTDiV/4Jq5ZXNPozJ7TU83cp9FYJ1vSvSliZ2tZO pMl919f2hDvMuOD3wcWmcekc4jJGVvDd373EZFoGwgTmtZvNI+4+ipHpYeEPUpvu nVVB4hlEeItU5c4iDf8J2psQvNwsp85lVSHal/YrQ12Osw/Qm6dYEuCay7RyPpNI Q4dcmDdQYjiRZQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:20:11 2025 by rpki-client