$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: Dmx/ZqCAFbPo7CKD0r2+vYas0Tp3zvKaQ4wI41l1Mm0= Subject key identifier: D2:27:CD:09:38:7C:72:12:32:1E:A4:73:3C:3D:D6:01:B6:A0:1E:FA Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019A4F996CC10CE5A970A9E061F90A17BEB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 0538 Signing time: Tue 04 Nov 2025 16:00:46 +0000 Manifest this update: Tue 04 Nov 2025 16:00:46 +0000 Manifest next update: Wed 05 Nov 2025 16:00:46 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: f16HJcy5gdhWDOKgW+DhAupxkhCKM4uQj9xZUmTJnAI=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:6c:c1:0c:e5:a9:70:a9:e0:61:f9:0a:17:be:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Nov 4 16:00:46 2025 GMT Not After : Nov 5 16:00:46 2025 GMT Subject: CN=d227cd09387c7212321ea4733c3dd601b6a01efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:0c:35:53:5a:9c:cd:8f:e1:02:d9:9a:27: ce:5d:cb:f7:5e:a4:91:7c:8e:65:44:f3:2d:79:84: ae:e2:38:87:67:09:f7:10:26:82:03:70:93:af:88: d4:f4:4d:5f:00:6d:c0:42:4c:ac:9f:6a:94:bf:4d: 99:94:3a:cf:88:66:a2:13:ea:76:67:a3:32:68:fc: 19:39:ba:b7:23:7f:30:df:95:8c:39:f5:98:81:ec: f4:27:ee:a4:c1:fa:a3:8f:53:45:af:c0:a2:ce:9a: a3:79:c3:bd:f8:4d:9e:21:d9:ae:a5:f3:2a:84:13: 35:a3:09:d4:ad:33:6c:fc:04:c0:c5:87:b5:05:2c: 90:44:91:07:87:91:e2:88:58:c5:1d:42:88:4a:1a: 78:5c:23:14:eb:76:c9:a3:81:b3:0b:db:6f:c4:f2: 87:8f:6a:d2:db:db:82:66:82:6d:d2:bb:db:fb:40: 45:f9:a2:a6:05:e9:a0:10:53:19:96:3b:99:d7:a4: b3:30:21:00:8c:a4:90:63:d9:3c:50:75:96:8d:f5: a6:a3:10:22:8b:e2:5a:11:21:62:47:f0:90:07:e6: f8:c8:0c:56:ea:39:6c:51:e9:fa:4c:04:e4:97:f0: 41:b6:c5:9a:f1:b8:3c:e1:34:84:ee:c5:a4:77:e8: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:27:CD:09:38:7C:72:12:32:1E:A4:73:3C:3D:D6:01:B6:A0:1E:FA X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a2:46:b2:ef:89:66:f3:ac:24:cb:32:44:0f:fd:d0:27:b9: b1:65:06:52:11:96:35:47:02:af:08:36:84:4e:a5:73:93:65: 4f:fc:1a:b3:4a:92:0c:77:65:40:a0:6d:e2:9d:90:fa:ac:89: b1:25:5a:c7:1a:34:b4:c5:f4:72:e0:45:fc:b8:3a:c4:74:2f: 6d:e5:95:4d:7b:95:42:b2:d1:a9:cc:bf:33:d0:0e:c2:3d:96: 1d:86:fa:50:af:1e:10:40:50:ce:d9:47:95:e4:2e:f7:a5:b1: b1:2b:cb:a1:c4:0a:6f:2e:c3:df:89:d7:33:c4:55:ce:70:5d: 4d:c9:31:3a:f7:83:97:9c:38:0d:61:13:a2:fe:e4:b1:64:90: d2:b1:ee:61:c7:b2:a8:42:99:54:2a:ec:96:08:31:3a:0b:ec: 0d:f6:ad:c1:a0:c5:c4:f5:5e:5f:ba:37:c2:59:56:0c:b4:cb: e1:0e:d0:5d:a4:fe:bb:77:8d:64:f7:80:42:39:ca:0b:6b:81: 46:30:65:33:d3:83:8c:c6:cd:ba:79:c9:f7:aa:75:dd:e8:da: d2:97:83:ca:e1:4f:34:69:77:f6:94:75:2d:e3:99:17:f1:0e: 59:c1:f2:91:ea:0d:8c:4c:15:f1:30:0e:6b:37:0d:94:c2:4e: 4c:d3:e1:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmWzBDOWpcKngYfkKF76zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUxMTA0MTYwMDQ2WhcNMjUxMTA1MTYwMDQ2WjAzMTEwLwYDVQQD EyhkMjI3Y2QwOTM4N2M3MjEyMzIxZWE0NzMzYzNkZDYwMWI2YTAxZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe0MNVNanM2P4QLZmifOXcv3XqSR fI5lRPMteYSu4jiHZwn3ECaCA3CTr4jU9E1fAG3AQkysn2qUv02ZlDrPiGaiE+p2 Z6MyaPwZObq3I38w35WMOfWYgez0J+6kwfqjj1NFr8CizpqjecO9+E2eIdmupfMq hBM1ownUrTNs/ATAxYe1BSyQRJEHh5HiiFjFHUKIShp4XCMU63bJo4GzC9tvxPKH j2rS29uCZoJt0rvb+0BF+aKmBemgEFMZljuZ16SzMCEAjKSQY9k8UHWWjfWmoxAi i+JaESFiR/CQB+b4yAxW6jlsUen6TATkl/BBtsWa8bg84TSE7sWkd+g2dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNInzQk4fHISMh6kczw91gG2oB76MB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6JGsu+J ZvOsJMsyRA/90Ce5sWUGUhGWNUcCrwg2hE6lc5NlT/was0qSDHdlQKBt4p2Q+qyJ sSVaxxo0tMX0cuBF/Lg6xHQvbeWVTXuVQrLRqcy/M9AOwj2WHYb6UK8eEEBQztlH leQu96WxsSvLocQKby7D34nXM8RVznBdTckxOveDl5w4DWETov7ksWSQ0rHuYcey qEKZVCrslggxOgvsDfatwaDFxPVeX7o3wllWDLTL4Q7QXaT+u3eNZPeAQjnKC2uB RjBlM9ODjMbNunnJ96p13eja0peDyuFPNGl39pR1LeOZF/EOWcHykeoNjEwV8TAO azcNlMJOTNPh0A== -----END CERTIFICATE-----Generated at Tue Nov 4 22:46:06 2025 by rpki-client