$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft File: dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json) Hash identifier: JT++TSnZdEULa4HEG71VHHJ8IxCCALneAR/c3z1LEWE= Subject key identifier: 36:91:74:19:FA:3D:03:01:F8:EF:71:EB:68:1F:4A:29:77:56:F7:9D Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019A4EF51781CF0CE08850060B1A8EEAFB18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft Manifest number: 1722 Signing time: Tue 04 Nov 2025 13:01:16 +0000 Manifest this update: Tue 04 Nov 2025 13:01:16 +0000 Manifest next update: Wed 05 Nov 2025 13:01:16 +0000 Files and hashes: 1: 0GRCDt4fJ388QfTkHCpESDtsT30.roa (hash: k9OOgOfGm6/D5FgP/oCwjZmCMN3rSoxJmPb/amgvunU=) 2: 0NgIFKzE9U8mH1i_SzHm7txoLcU.roa (hash: hWQWohZ9IroKasDxxI/Z9V0O1L7U0SMQLl5Y82yIR3M=) 3: 1-yKYajfg5LY4mvNwPfafD3WCloA.roa (hash: WHC+36zJ+PfduDAkHrQdjdBbj6qnsfp62GV4AEEhmh8=) 4: 16QrQeCpwuqAfGGNMUzWS0WBV8Y.roa (hash: bmMldajlx/sTBR7HO2a2fTU2N475J5MRbFTSSzzaMIE=) 5: 4EfNGR4wiWbi_y1y433ICACWCZ0.roa (hash: W3KUBln3jDDd0cmmpR54v75Ll2wQ3RHqXSQ0s5O+eAU=) 6: 6yOls-b1_zSEPoNekFa6o4CZVU8.roa (hash: 4upnvyLgri06Nt5KSgO8Uwq/0K4QFNyV2w+ngXB4/18=) 7: DYMRxMEMoWV3Z5tMWRgW1jHqK9s.roa (hash: 6wMdwoy8UyJzHKKarNEHW2Cdeen4yoziiPrTe9YFHSg=) 8: Dpy95jXaeVWXPozFztldShHCRU4.roa (hash: /YGR1d8dV4jSlropxf6JRB0rYbUE70tJU0k00P3NxfE=) 9: FguRz0zA5etvzxWwMxGIJgd6k9Q.roa (hash: bUHFCLBTCucLtw2+JrZ57cEqNMKllYDmKc3mR95hRPw=) 10: L2UCeVHHcg9euQRtLcEzhApV2UE.roa (hash: awT5trUmAy4FPSzNkgCSgldj93M9lPrOlgd5pOswERE=) 11: M66I0UzjQBS9vnsa6hJXUcQSBYc.roa (hash: V+buEBexkfH/z8IfHQHVN3d+jviM7gfofPkFusouHl4=) 12: Orn9mMECvNnMxcocGzjxOdoRHk0.roa (hash: aAMLejN67KDw/WEq6MTlllANPts4owmBi6ah/2ILaOs=) 13: WEP8t9A44--cEjL5pRqrcK4NrA0.roa (hash: elcme8pyEkMhDdeVhgtzdCn+oqpKZYwu+OBHtYqbN08=) 14: WH2mqCoP_fWwSJcPuGUkRGobwNc.roa (hash: 7ARLGzAANjQVfOe30KclN1L6S5EbZnzPNgQQS4I4lwo=) 15: X8C31I22e7AIAIjXdr_l8xIku6c.roa (hash: 7Qhdi1NeFgvJPaxWBB0us3PX5KoyYrtl9JfPmMsmHRs=) 16: aKC4Ve_rwXPA5F4UwLOqVSzUoxQ.roa (hash: C2m1c3bcRtr4/LzoB1kvIKIl5IupGv3jDqJQPFpHE+Y=) 17: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: kwdHykdJoevEBjrsbHWRkDjUnVb+Vmp7YCTY02PTPjk=) 18: itJrIiDbZUHX0hMzNvHagOk0kkQ.roa (hash: 93vrSgc7l73uP0vt9qb0d56TAGfuxzEHnQxV4M3Vt/w=) 19: nA8ldX9v5Ip91riXYh1Is3JlGWU.roa (hash: LGoPjUjc03K0F3TRSud6cQW/fDxbqmiVQ8elBoGls6M=) 20: nheDIdc7Ex5DQQ3yUWyXEO40Wag.roa (hash: QW76PsmZ19rGr3AHGvysCP+0ICfRHV3icfaUxRkR4IA=) 21: tjgASAOzma6f2Z7RoOryTeTZY9s.roa (hash: DpWY737dSZuYYOG9ZIqDhXCNF5lWUkY9/w4EmAF3fpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:17:81:cf:0c:e0:88:50:06:0b:1a:8e:ea:fb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Nov 4 13:01:16 2025 GMT Not After : Nov 5 13:01:16 2025 GMT Subject: CN=36917419fa3d0301f8ef71eb681f4a297756f79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:77:3e:05:43:71:fd:b9:58:b1:d3:d2:ac: 57:3e:76:d8:47:33:27:55:05:5e:bc:2e:50:ed:25: b3:0f:59:6d:be:15:8c:41:ed:bc:4f:97:85:16:b5: a5:23:50:14:dc:a4:23:3f:5f:47:04:f8:6b:75:d7: a0:5a:9b:b6:b2:ce:4e:4f:8e:00:d6:90:4d:2b:62: 5d:7e:b0:59:ea:35:fe:3f:13:f6:3e:3b:33:f6:58: 0e:41:34:ba:24:e1:2e:7a:4f:63:d9:ff:66:a4:b3: e3:2c:fd:96:82:49:1e:b6:3f:f8:a6:66:69:27:d8: ea:38:fe:79:9e:1c:90:3c:24:ca:19:22:a0:6c:7e: bf:e1:02:e2:72:a4:64:f1:30:f0:3e:54:2d:eb:37: 61:af:1a:73:a2:de:e5:43:18:8e:86:15:39:fd:7d: e7:9e:21:bf:d7:72:db:51:1f:5f:81:c4:3e:ad:4a: ac:ce:ab:f4:3c:37:58:84:ca:be:c4:b0:1b:b1:4e: fb:4f:99:27:8a:c4:c1:e9:e8:f6:b2:a4:87:4c:d3: c8:1d:08:87:54:25:40:ff:e7:4b:05:89:d2:cb:a5: 0a:fa:72:ac:25:d0:64:45:81:38:b4:c2:eb:43:ed: 86:87:a8:57:5c:73:1e:4f:bf:71:50:00:86:dc:c3: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:91:74:19:FA:3D:03:01:F8:EF:71:EB:68:1F:4A:29:77:56:F7:9D X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b5:5c:c9:c3:5a:e5:86:bb:00:3e:0f:4b:f3:be:d8:03:a9: cb:ed:87:f9:d6:4e:9e:0d:f9:ec:ab:7b:c3:de:e3:03:24:aa: 7d:76:67:02:2c:60:58:cf:a1:04:64:e8:aa:40:5e:5a:29:ef: 6e:cf:f3:eb:c7:5a:42:01:db:f5:3b:e4:23:af:91:f3:47:da: 1e:36:31:e4:2b:ad:25:a9:bb:f6:48:53:98:9e:3a:30:48:ed: 58:22:e9:66:39:88:22:ab:79:50:07:a1:2d:4a:6f:3c:3a:6b: 6c:ed:55:3a:b7:06:8f:95:ed:54:1a:ca:1d:b4:f5:90:a3:d5: 07:c6:04:ea:4b:d2:13:67:30:58:22:49:f3:d4:95:8a:fe:ec: 41:81:04:c1:60:86:2b:ad:b7:3e:66:b8:5b:e7:32:24:c7:66: a9:13:95:53:fe:38:7d:2c:1a:bb:6c:93:49:12:d6:ed:64:14: 92:e6:5e:c4:18:43:c1:5e:d4:37:39:a5:5e:85:a8:71:69:38: 8c:fd:3a:8e:73:9a:3d:1b:12:78:d9:6f:81:8e:ed:b6:cb:1b: d5:f7:60:e2:ce:8a:0c:a7:8f:66:b1:a9:1c:e3:b0:d0:8a:da: ff:09:cb:b8:c5:4b:d9:df:b9:de:e9:67:16:6e:9a:b8:ec:81: e0:12:a9:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9ReBzwzgiFAGCxqO6vsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjUxMTA0MTMwMTE2WhcNMjUxMTA1MTMwMTE2WjAzMTEwLwYDVQQD EygzNjkxNzQxOWZhM2QwMzAxZjhlZjcxZWI2ODFmNGEyOTc3NTZmNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ch3PgVDcf25WLHT0qxXPnbYRzMn VQVevC5Q7SWzD1ltvhWMQe28T5eFFrWlI1AU3KQjP19HBPhrddegWpu2ss5OT44A 1pBNK2JdfrBZ6jX+PxP2Pjsz9lgOQTS6JOEuek9j2f9mpLPjLP2Wgkketj/4pmZp J9jqOP55nhyQPCTKGSKgbH6/4QLicqRk8TDwPlQt6zdhrxpzot7lQxiOhhU5/X3n niG/13LbUR9fgcQ+rUqszqv0PDdYhMq+xLAbsU77T5knisTB6ej2sqSHTNPIHQiH VCVA/+dLBYnSy6UK+nKsJdBkRYE4tMLrQ+2Gh6hXXHMeT79xUACG3MNZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaRdBn6PQMB+O9x62gfSil3VvedMB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbVcycNa 5Ya7AD4PS/O+2AOpy+2H+dZOng357Kt7w97jAySqfXZnAixgWM+hBGToqkBeWinv bs/z68daQgHb9TvkI6+R80faHjYx5CutJam79khTmJ46MEjtWCLpZjmIIqt5UAeh LUpvPDprbO1VOrcGj5XtVBrKHbT1kKPVB8YE6kvSE2cwWCJJ89SViv7sQYEEwWCG K623Pma4W+cyJMdmqROVU/44fSwau2yTSRLW7WQUkuZexBhDwV7UNzmlXoWocWk4 jP06jnOaPRsSeNlvgY7ttssb1fdg4s6KDKePZrGpHOOw0Ira/wnLuMVL2d+53uln Fm6auOyB4BKpfQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:19 2025 by rpki-client