$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json) Hash identifier: P9J9p8J+MNq3c/5nBeKxhIVO6QvVURi2DHvXA45H5wg= Subject key identifier: 96:80:C1:5B:05:9C:D3:53:54:40:B1:4B:D6:AC:A1:11:BC:FC:07:EF Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019A52638B5765B32D8F1E8A5DEF95B46766 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft Manifest number: 145F Signing time: Wed 05 Nov 2025 05:00:46 +0000 Manifest this update: Wed 05 Nov 2025 05:00:46 +0000 Manifest next update: Thu 06 Nov 2025 05:00:46 +0000 Files and hashes: 1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=) 2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: QZ3FhlImPetpk11enVhv6vnewXPxDz3uarip4XBBQtI=) 3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=) 4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=) 5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=) 6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=) 7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=) 8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=) 9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=) 10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=) 11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=) 12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=) 13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=) 14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=) 15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=) 16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=) 17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=) 18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=) 19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=) 20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=) 21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=) 22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=) 23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=) 24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=) 25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:63:8b:57:65:b3:2d:8f:1e:8a:5d:ef:95:b4:67:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Nov 5 05:00:46 2025 GMT Not After : Nov 6 05:00:46 2025 GMT Subject: CN=9680c15b059cd3535440b14bd6aca111bcfc07ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:15:4d:73:41:fb:a9:49:fd:6b:a3:43:e4: a9:66:72:38:3c:3e:44:22:a2:9a:59:3a:08:87:79: df:11:9a:f5:ea:60:e1:f3:0c:5c:b4:ba:33:1b:c8: 18:36:2b:25:12:b0:e8:91:fe:ec:36:f8:fa:f4:ff: f0:43:b0:11:7e:8a:0e:93:9d:4e:5b:0f:0f:97:e1: 1a:27:49:d3:13:29:dd:a1:88:b7:3d:0a:dd:7e:2c: 76:a2:e0:ed:a8:a9:18:1e:95:b5:99:cb:b2:6d:d6: 4a:cd:ad:bd:05:4d:6a:5c:fa:a6:00:9a:f4:cd:89: a4:7b:b8:b6:fa:7d:58:73:c5:1b:7d:bf:63:f0:9a: 59:09:25:fc:ff:44:03:8d:06:fb:79:05:17:af:67: 8c:01:7a:37:07:47:6a:9f:c2:3f:01:9a:14:ab:b6: 41:b9:46:61:1e:d7:1e:3a:f7:71:8a:9b:4c:36:d1: ff:47:9f:0f:6c:07:01:1c:fc:e0:ba:4b:5e:2c:57: 48:9d:01:6c:44:8e:73:a7:74:ce:8d:0a:3d:69:6c: 9f:40:4e:a6:9c:3a:0d:0b:42:46:dd:8f:34:dd:b4: 71:e9:af:58:1a:ee:90:49:3c:67:b3:c0:cd:5b:06: af:a3:ba:0e:c5:0f:a0:6a:f6:29:9a:b3:a0:f8:70: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:80:C1:5B:05:9C:D3:53:54:40:B1:4B:D6:AC:A1:11:BC:FC:07:EF X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f4:c6:18:36:2a:67:f1:b2:97:ee:ed:68:e5:09:b8:ca:ea: e0:19:ab:9f:97:77:d5:23:f4:78:76:4e:7c:ea:a5:c3:1b:0c: ac:9a:2d:3b:50:e1:5c:92:0d:a3:c9:f0:41:b0:0b:cd:46:ad: 94:e7:75:3a:e2:b7:3a:bb:4c:06:8a:32:9d:49:75:fc:0c:a5: 14:50:4f:c9:6a:93:d0:52:66:d9:06:b0:27:5f:3a:d5:4e:6c: 0c:c9:d6:89:91:1d:49:31:85:d3:2d:6c:fd:c2:5d:7c:69:6e: 0a:bb:87:1f:bb:01:f7:66:00:fc:51:5e:8e:3c:d2:ad:5e:8c: 97:18:f7:57:95:19:69:c0:2a:00:ea:d5:12:8f:d2:cd:3a:7d: ed:5a:eb:fa:97:66:50:82:3d:08:df:a5:8d:cf:54:cb:b8:d8: 87:cc:7f:5e:fd:68:b6:c5:de:60:06:41:00:40:5a:96:58:ea: c7:18:f3:70:fd:66:31:29:a4:d5:83:b7:31:d8:f9:5c:5b:c5: b7:a9:e8:24:95:4b:e5:d4:48:a1:93:74:c3:89:9a:6b:1d:91: bb:bf:ed:c4:3a:04:e4:cb:27:69:f7:1c:66:22:3c:b1:aa:c7: f3:47:3e:64:03:4d:ba:e7:f5:48:cd:be:08:92:9c:91:28:9e: 68:59:08:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpSY4tXZbMtjx6KXe+VtGdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjUxMTA1MDUwMDQ2WhcNMjUxMTA2MDUwMDQ2WjAzMTEwLwYDVQQD Eyg5NjgwYzE1YjA1OWNkMzUzNTQ0MGIxNGJkNmFjYTExMWJjZmMwN2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9EVTXNB+6lJ/WujQ+SpZnI4PD5E IqKaWToIh3nfEZr16mDh8wxctLozG8gYNislErDokf7sNvj69P/wQ7ARfooOk51O Ww8Pl+EaJ0nTEyndoYi3PQrdfix2ouDtqKkYHpW1mcuybdZKza29BU1qXPqmAJr0 zYmke7i2+n1Yc8Ubfb9j8JpZCSX8/0QDjQb7eQUXr2eMAXo3B0dqn8I/AZoUq7ZB uUZhHtceOvdxiptMNtH/R58PbAcBHPzgukteLFdInQFsRI5zp3TOjQo9aWyfQE6m nDoNC0JG3Y803bRx6a9YGu6QSTxns8DNWwavo7oOxQ+gavYpmrOg+HAdSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaAwVsFnNNTVECxS9asoRG8/AfvMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvTGGDYq Z/Gyl+7taOUJuMrq4Bmrn5d31SP0eHZOfOqlwxsMrJotO1DhXJINo8nwQbALzUat lOd1OuK3OrtMBooynUl1/AylFFBPyWqT0FJm2QawJ1861U5sDMnWiZEdSTGF0y1s /cJdfGluCruHH7sB92YA/FFejjzSrV6Mlxj3V5UZacAqAOrVEo/SzTp97Vrr+pdm UII9CN+ljc9Uy7jYh8x/Xv1otsXeYAZBAEBalljqxxjzcP1mMSmk1YO3Mdj5XFvF t6noJJVL5dRIoZN0w4maax2Ru7/txDoE5MsnafccZiI8sarH80c+ZANNuuf1SM2+ CJKckSieaFkI6A== -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:32 2025 by rpki-client