$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: hQGtp3KDsjlnyYfgQ2MBGmbOEI7BaeOHCVzxA46BqwE= Subject key identifier: AA:01:31:D5:A7:50:54:E3:A4:34:A5:58:DB:AA:01:A5:AF:B5:F5:92 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019A50E29B0511737B404F4B8106689F36C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 1737 Signing time: Tue 04 Nov 2025 22:00:19 +0000 Manifest this update: Tue 04 Nov 2025 22:00:19 +0000 Manifest next update: Wed 05 Nov 2025 22:00:19 +0000 Files and hashes: 1: 1LHZTYTL7zXSNbURJx33AGGJ_jU.roa (hash: ZCVf+uWinCAj5Wsl4w3DRqhhemyGlUb1mHPRd1We1lA=) 2: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: swsj0YGj5u/nvaZ2JRg+yGQkpgbeWEvzwHNTSZnAqG0=) 3: A8PVa9vWSAwziXQoA3-_9FI8Klw.roa (hash: XOf6bTSMS9ukvYg53bvOoLSXUdGWB4/jS9MgEcYi5I0=) 4: BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa (hash: EhHoS/FD/TPZMfKWMnkYMzvxXKRlrokVae/pr8W31Fk=) 5: DTFLEZbU53RUxpbGCJ7xpH1wiT4.roa (hash: ijyiWI9NCfuTWvoi057x4Mhna5X/5xBxTCKG7ZnDJYo=) 6: EhBwV4ETdq9F_mf3TtRo4dLCK7Q.roa (hash: mC580gxvB3KBFmXIOJyzC5FKQdMNmnwwmoA8fTGfjv0=) 7: FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa (hash: /mPez/L0Vr+EoPocb/dhaqkaLues0KokkJJZezW2ow8=) 8: MI904WmPdL5oiRhP7S6FeaCAFak.roa (hash: scgaazBwq6y+Oc9C9eGo0W4xwalauzkyjxbQ4wwwgLU=) 9: PRQLZdsK1DQs1qv6M77wqTY-8gE.roa (hash: kluODCNS9Ohs7cHGK+NxzDBwM4XzNPkjizB01UMfLag=) 10: Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa (hash: 0/Vyhy1R/OkAOBC9blQ+o7238jYUr5Pu0HfZsEBCqFA=) 11: RaS1Do31InjbQCFGnTA-YqKnIe4.roa (hash: 6QaZ0lK6HEZVx8vJm4K3nfnSTx8TNZ47FuFw64/BpII=) 12: beAFyhqFvuFjdXVUNjFjACkebr4.roa (hash: c4PQ30y59KAo6fg6oopq6KruOFK1py7waXQnLyMtf+A=) 13: dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa (hash: EC7IY47xBAWr3k7hTs+1NK5U2ipaAGq2Sy+LIMFTR20=) 14: kl36awhzfsop7GgELsEJo3vTqlM.roa (hash: i1Y1Q4V1qiBLr3d5jT6i7TzoPO+NTihTUU++FBZ5ox8=) 15: lao8bHeqDQtESMGOKFSeFdxwj-s.roa (hash: elImsTbe0o9ywVCBRni5u407KloMMvHe03FwOzsl4Y8=) 16: pZSrV2l3WhVw5oetxkzKTuFut08.roa (hash: OVPrfbWkq15CVQU+AkW9e1dfy6vyOgMcPm5QJ7yajMY=) 17: qRvHhsUzZRo3GIbvVdtrbB33RHM.roa (hash: I0ja9Wkg3NaDCO4/Iu1ewOYHJdhLcuLZy6a2WJD503M=) 18: s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa (hash: TIYNz1LcI70+SJrW3UzaV1tb56c2tS4JWFrmk3Zw1oo=) 19: t18vpttXogOnxguJ7pGpoYLrk2Y.roa (hash: w64HKCyG1jpJ4LOOvXrj2J1OE37lFLFqT6Q1/gy6SUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:e2:9b:05:11:73:7b:40:4f:4b:81:06:68:9f:36:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Nov 4 22:00:19 2025 GMT Not After : Nov 5 22:00:19 2025 GMT Subject: CN=aa0131d5a75054e3a434a558dbaa01a5afb5f592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:7c:ae:1b:e8:4f:7d:7f:b2:cf:4b:eb:ca: 43:2f:85:e6:6b:a5:49:c2:9f:e4:8b:ce:3d:2f:54: a3:96:84:4f:97:4b:3f:a7:7e:3f:43:89:96:c3:b6: f3:6e:2a:00:f9:cb:26:15:97:00:30:37:d1:ac:30: 27:32:db:c1:7e:80:ae:ca:8d:a2:94:0e:de:ea:d9: b4:5d:7d:a6:1c:a5:ed:bc:e2:a1:f6:f5:9d:36:2b: 05:8b:dd:a0:62:34:b7:86:be:56:a9:56:09:87:76: ba:0f:68:db:ee:0a:74:8d:ad:00:dd:6a:12:6a:95: ca:97:87:52:e1:41:29:18:9d:4f:2a:b1:ce:09:b1: 02:f8:d7:6a:c1:36:ef:e1:80:79:db:db:35:0c:48: 16:03:c9:c3:12:15:ae:c1:43:07:4a:03:bd:1c:20: cd:ad:4a:c7:8b:d7:1b:91:48:7a:e9:ec:17:94:03: 0d:c0:e8:3f:54:89:a2:52:79:40:56:9a:66:f7:04: 61:ce:0b:18:32:97:07:7a:d2:6b:cf:1b:13:0d:8c: 19:88:0a:79:c2:00:6f:c0:a5:28:54:e4:ce:b1:8a: 1d:b5:10:9d:f0:87:33:29:13:4f:74:79:45:ba:e1: 5b:07:10:b5:46:53:05:64:76:a5:ba:5f:e1:ec:9f: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:31:D5:A7:50:54:E3:A4:34:A5:58:DB:AA:01:A5:AF:B5:F5:92 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b8:a4:16:b8:27:d7:91:47:bc:c6:b6:9b:44:99:07:ff:45: 85:a7:93:b2:dc:fa:5d:3e:24:08:37:27:fc:c2:c2:fa:85:7f: af:33:d2:99:b9:a1:02:5d:0b:cc:13:9c:aa:34:6d:ac:9c:b8: 3b:d6:75:39:0f:fb:34:e6:0a:7d:b1:1e:92:c5:56:07:7a:3a: bd:22:02:8a:6d:4e:37:3b:6b:74:36:e7:eb:be:db:65:1a:3c: fe:1a:30:c1:97:94:8e:05:84:54:3d:75:ac:89:51:dc:be:3e: b6:36:3b:08:6d:4a:11:9e:de:16:6c:48:8d:69:86:38:29:bf: 88:1a:1a:82:f7:0f:be:c0:51:a1:54:22:01:a6:25:a7:29:c9: 25:5d:43:75:46:45:71:6b:49:e6:6c:b2:63:78:92:64:22:89: 69:35:8f:46:f4:79:61:e4:8d:df:f3:e9:f4:37:fc:d5:43:4c: 4f:50:23:6d:45:9c:d3:9d:42:f6:6d:9e:ee:03:f8:a1:02:ba: b2:ca:2c:57:ef:b0:d1:fe:48:d4:29:61:b5:3c:02:16:4a:a0: 33:e0:3d:bb:71:cd:5c:08:c0:99:1a:59:52:8d:5a:0d:1d:f8: 68:2e:d8:cf:c2:6d:13:e5:c5:25:8e:32:25:e7:38:c6:55:17: 26:d1:43:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQ4psFEXN7QE9LgQZonzbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjUxMTA0MjIwMDE5WhcNMjUxMTA1MjIwMDE5WjAzMTEwLwYDVQQD EyhhYTAxMzFkNWE3NTA1NGUzYTQzNGE1NThkYmFhMDFhNWFmYjVmNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10V8rhvoT31/ss9L68pDL4Xma6VJ wp/ki849L1SjloRPl0s/p34/Q4mWw7bzbioA+csmFZcAMDfRrDAnMtvBfoCuyo2i lA7e6tm0XX2mHKXtvOKh9vWdNisFi92gYjS3hr5WqVYJh3a6D2jb7gp0ja0A3WoS apXKl4dS4UEpGJ1PKrHOCbEC+NdqwTbv4YB529s1DEgWA8nDEhWuwUMHSgO9HCDN rUrHi9cbkUh66ewXlAMNwOg/VImiUnlAVppm9wRhzgsYMpcHetJrzxsTDYwZiAp5 wgBvwKUoVOTOsYodtRCd8IczKRNPdHlFuuFbBxC1RlMFZHalul/h7J8eRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoBMdWnUFTjpDSlWNuqAaWvtfWSMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7ikFrgn 15FHvMa2m0SZB/9FhaeTstz6XT4kCDcn/MLC+oV/rzPSmbmhAl0LzBOcqjRtrJy4 O9Z1OQ/7NOYKfbEeksVWB3o6vSICim1ONztrdDbn677bZRo8/howwZeUjgWEVD11 rIlR3L4+tjY7CG1KEZ7eFmxIjWmGOCm/iBoagvcPvsBRoVQiAaYlpynJJV1DdUZF cWtJ5myyY3iSZCKJaTWPRvR5YeSN3/Pp9Df81UNMT1AjbUWc051C9m2e7gP4oQK6 ssosV++w0f5I1ClhtTwCFkqgM+A9u3HNXAjAmRpZUo1aDR34aC7Yz8JtE+XFJY4y Jec4xlUXJtFDdw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:34 2025 by rpki-client