$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft File: EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json) Hash identifier: MZJp28a00F9MxidplU15sju9PAMREV3VmMJrE8adtyw= Subject key identifier: AA:E3:DD:C5:9E:D2:C1:81:32:2C:5E:CD:C0:25:88:1E:45:FB:BF:BF Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019A4EBD4FDA644A979D768594B1A7CC979A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft Manifest number: 17AE Signing time: Tue 04 Nov 2025 12:00:20 +0000 Manifest this update: Tue 04 Nov 2025 12:00:20 +0000 Manifest next update: Wed 05 Nov 2025 12:00:20 +0000 Files and hashes: 1: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=) 2: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=) 3: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=) 4: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=) 5: 9ESkLgmI35QN5TpIx_GPZS8Vxio.roa (hash: hdpw919IzbN2ZFHFKuU/1SNfD9sbyLis5zeOuTdE5D4=) 6: D_JL9OsKWnsajKF-cPVLgLD_1wc.roa (hash: REalXdL8VCnc028uNWQcdp2hzuzbMKXOBDjPVpWw3KQ=) 7: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: 5o4EcQmxh8z8VtHE/fB27jlzKccsT5XSdSG43hS0YKs=) 8: FkoVs9alAq-3FoG992pkYSUKr3Y.roa (hash: sx+i4OxChrrhXHBf2JXaRrGO+hup07wWov4ICIEFX+k=) 9: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=) 10: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=) 11: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=) 12: RUuJxYZLJmTxpMuUp70ngA__yIM.roa (hash: MFsbsiZMFacC+0KJFg0Y0/Du2X2dNa19f6lGoOE+sao=) 13: S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa (hash: kXDSSLoM6qJEx5/HbAZQ1hKhZOVmnkuIzLWPNIFvHc8=) 14: Vbqq8C4Vgjoxa8ZqI8ziSEzBO8A.roa (hash: onMxDC4Ic5lagmIJUMlVrD44kP04SiT+2wJzJ6jkgRw=) 15: WGVFdHdOhrZ6oEGNKaADeEDXEkc.roa (hash: upyn2YAU1bBK3yksfLZUYvn/2Yyr6nO1tneR3QTm/D0=) 16: WNxwGRqjvkzEEIFtJUKhx8EpDnA.roa (hash: NuJcsLFQveWA7JrekR32MafYf69Fr1QL8arEGvczy7k=) 17: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=) 18: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=) 19: bG0R8O-R3Gzh0U19uKXnEyungVE.roa (hash: dC3LmhKrxouomOcuKMc4Z6ErO4Vx6yc4Z+n6WdgjiyA=) 20: dJhnxNzwfdHlneQSztyV2rQUNh8.roa (hash: mBXD3iXgLpyd3hmkrgIDXjTXmIhHa5rAOzsMx5futIk=) 21: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=) 22: k4MrRgP2JyDnz4jNtYGvOfJmM90.roa (hash: iVSrxybp0cpHKOO6q2VzRaa9ybTUXxsDiq5lZ4StBxw=) 23: nuWEXz5iouFYw69x7pHB9Q_otls.roa (hash: Umr2jfHGMWfjhuAzoJGL6f5R4bWkeW3ijsBAOIiH6+U=) 24: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=) 25: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=) 26: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=) 27: tkv4eB640kj-LoRn67cojbzMAxA.roa (hash: 1XWkZeOPHz0G+f5HoG2RieKKed9lLcxprXcsbhFEyOk=) 28: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=) 29: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:4f:da:64:4a:97:9d:76:85:94:b1:a7:cc:97:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Nov 4 12:00:20 2025 GMT Not After : Nov 5 12:00:20 2025 GMT Subject: CN=aae3ddc59ed2c181322c5ecdc025881e45fbbfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:24:70:a4:3a:63:6e:b8:a4:4c:0d:a6:69: 9f:0a:ab:b7:d2:95:9f:1e:23:48:74:3f:6b:fe:01: 0a:ab:98:61:11:24:a6:d9:7d:5d:f9:4e:12:bb:2f: ff:60:26:9b:ed:13:0c:83:54:00:fb:4e:6c:e7:7f: 72:a7:4c:00:25:4f:94:9c:6f:fd:4f:c6:d0:0e:8e: ae:e0:82:92:42:c6:69:98:b4:39:53:ad:90:fd:d7: 52:25:e3:02:92:03:14:4d:ca:ed:57:b9:8b:e5:2b: 8f:32:4e:69:65:82:89:c5:20:ad:94:ea:90:26:ce: ff:26:b0:8c:52:da:54:0b:35:38:8c:31:26:dc:4b: d5:0b:87:09:97:49:30:d3:6d:ef:15:59:7e:45:4e: 17:28:b6:26:19:de:77:0e:80:6b:bc:cf:ac:e8:60: 15:39:51:ae:27:9d:c6:0e:53:02:c5:41:93:ce:d6: 9a:3d:d1:c2:81:63:26:25:78:2a:59:3b:80:87:71: 2e:32:01:c8:f8:18:31:ba:2d:d0:65:b4:f7:30:f9: e8:4f:58:b1:2b:89:e4:b7:09:86:e8:96:c3:bb:ca: 5c:2e:9f:d9:0d:6e:4e:4c:0d:45:f3:e0:ce:9a:c7: 38:04:97:4d:29:7b:f5:27:5c:11:f6:18:78:b6:b3: 80:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E3:DD:C5:9E:D2:C1:81:32:2C:5E:CD:C0:25:88:1E:45:FB:BF:BF X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:cb:b3:91:95:07:d7:a5:02:9e:00:8d:1f:48:0f:7e:11:0d: f7:0b:0c:f7:c7:8c:01:cc:3e:f3:4c:90:fa:29:1c:2b:c5:5a: 22:5b:3a:f1:b4:34:34:9b:28:9b:b7:1a:37:66:be:75:1c:d6: ea:90:6a:eb:c0:b5:68:74:4c:22:5e:cd:d8:f2:6e:91:71:60: 9e:fa:dd:f6:3f:eb:4e:f4:2f:9b:e4:f9:c3:13:14:d1:c9:63: 53:00:fd:35:88:33:4d:4f:b0:91:c3:06:18:71:48:c2:a3:7a: c0:28:73:e8:ca:33:11:3e:bf:b6:75:99:b6:d0:06:f1:a8:5b: ea:e8:56:af:ef:fe:31:72:08:d1:d9:b4:3b:5f:85:ca:d5:61: a2:d8:75:44:42:7b:02:9c:69:28:4c:38:2e:41:4a:d1:b7:b5: 8c:18:ab:99:98:8e:8b:18:53:ee:f3:14:f1:84:bd:14:d5:ed: d9:f3:7b:13:61:0a:c7:9b:5a:c1:60:4f:9a:b0:e0:b8:3b:84: 82:e4:16:85:9e:82:9a:a9:25:02:9a:eb:a6:07:10:5d:cf:78: 28:30:b8:23:bc:74:15:1d:28:91:5a:26:75:26:92:48:3d:c1: f5:89:01:94:e2:09:9f:eb:12:3f:2e:2f:dc:c8:88:de:a1:37: bb:f9:84:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvU/aZEqXnXaFlLGnzJeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjUxMTA0MTIwMDIwWhcNMjUxMTA1MTIwMDIwWjAzMTEwLwYDVQQD EyhhYWUzZGRjNTllZDJjMTgxMzIyYzVlY2RjMDI1ODgxZTQ1ZmJiZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfUkcKQ6Y264pEwNpmmfCqu30pWf HiNIdD9r/gEKq5hhESSm2X1d+U4Suy//YCab7RMMg1QA+05s539yp0wAJU+UnG/9 T8bQDo6u4IKSQsZpmLQ5U62Q/ddSJeMCkgMUTcrtV7mL5SuPMk5pZYKJxSCtlOqQ Js7/JrCMUtpUCzU4jDEm3EvVC4cJl0kw023vFVl+RU4XKLYmGd53DoBrvM+s6GAV OVGuJ53GDlMCxUGTztaaPdHCgWMmJXgqWTuAh3EuMgHI+Bgxui3QZbT3MPnoT1ix K4nktwmG6JbDu8pcLp/ZDW5OTA1F8+DOmsc4BJdNKXv1J1wR9hh4trOAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrj3cWe0sGBMixezcAliB5F+7+/MB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA58uzkZUH 16UCngCNH0gPfhEN9wsM98eMAcw+80yQ+ikcK8VaIls68bQ0NJsom7caN2a+dRzW 6pBq68C1aHRMIl7N2PJukXFgnvrd9j/rTvQvm+T5wxMU0cljUwD9NYgzTU+wkcMG GHFIwqN6wChz6MozET6/tnWZttAG8ahb6uhWr+/+MXII0dm0O1+FytVhoth1REJ7 ApxpKEw4LkFK0be1jBirmZiOixhT7vMU8YS9FNXt2fN7E2EKx5tawWBPmrDguDuE guQWhZ6CmqklAprrpgcQXc94KDC4I7x0FR0okVomdSaSSD3B9YkBlOIJn+sSPy4v 3MiI3qE3u/mE3w== -----END CERTIFICATE-----Generated at Tue Nov 4 17:57:59 2025 by rpki-client