$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft File: Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json) Hash identifier: O9CkshV0U1kX//3TMaPCOXnMZvA3VrWOkWBpcnk2XZ8= Subject key identifier: 9D:9F:F7:B0:6F:0B:2B:37:78:88:26:01:53:A0:C9:8C:D2:06:19:28 Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc Certificate serial: 019A4E3CDF74ED0A41CEAC6DF8BB91A74029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft Manifest number: 1740 Signing time: Tue 04 Nov 2025 09:40:03 +0000 Manifest this update: Tue 04 Nov 2025 09:40:03 +0000 Manifest next update: Wed 05 Nov 2025 09:40:03 +0000 Files and hashes: 1: 1-ezSRolehonzd7m4Tnnd0luM6m8.roa (hash: On/fPJ39Z5Xcbn6zLcHyJUdx0s6S7SIPAdEzMQoJ3XQ=) 2: 108BiaBt5OdPpJMqalaqOeNV69I.roa (hash: cjOLOxh24OsIAnTQULMJay2aUelwjlre1sYAhylQyv4=) 3: 7Qe59yEW7U7chp45wrlrOOBrcpk.roa (hash: Md3Sf2aP3zQKSv1JAQBFfYI5IElvnInpSGp9RK9f30s=) 4: 9nLBkii6i9kqzksN6JMZwCrzYV4.roa (hash: qHoR8g3sPS0H1p08Rknlh5VjMVgipRCKDg0svuFgx6s=) 5: BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa (hash: mydo0BfsTsL08Otk+t8zOQ+cbdabxk/K36L8MDg8etE=) 6: FXwS1usM9Gw8btRI8PnsNDkj9_4.roa (hash: FQ76n5rBG3AqlfwNPRTLnoowtLaTPVNfG35bOGyU4Fo=) 7: OzRFfGtYydKtloUFGibUfBCyMDw.roa (hash: cWKDKlEnWPEyIjxNhIulWdfjuX7dn5MJ4+8rywovQak=) 8: PQXaxHl_x5hCLUsVIoHDCNRTgCQ.roa (hash: 92Bl42I20RnqTYIC6hXMCEhevLacaiZKxk7OT2RhVWs=) 9: V9BWXIygnOhJHYu8bdQZRzbbGqg.roa (hash: re8sSZ6coeyXhQek/2jPbAPj3KlkVxVW/0zknsrcySY=) 10: VYwvZ9OHIlRbhHXyXxBLwaXS8K8.roa (hash: dnJzWIPR+2RTl2ECqdSA76Gag1tIQoNuzSSgRCHhVCA=) 11: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: OtRQZVnMxUdHEF7Hlfk1CopkgrGXJRhYIowB6R3YONA=) 12: YfK2aOb88mXpBxncnyZwMMazaP0.roa (hash: hVpx7JF9g3hoT3mWsCzEbNroYXChIrskLkYxhbCkK+c=) 13: gWHF_rALnCC6aWL25OOLXmaYWd4.roa (hash: MNZsV6aY4RN1u/cCPIru0uGzTZOf4K/o0suBsxP2p4c=) 14: k5Aqa-da4KH0XLB24n43hX_ycfY.roa (hash: W7GIeml4QidNLEYcrSPcEhMsiifqshzVO/aRAhmqOJQ=) 15: nyEYNc_PtO4QoUwC3iOyBCPk0wQ.roa (hash: hp68ljnGn6WBzjjiaJx9jN9FM7xYYm0YWSh0AzIw1fY=) 16: o0SifTx2NU1sEhX0Vll10hyck8c.roa (hash: CTAgGKzxE8Fx3onDLMa7P2lInOfEaEKTgjP3A/rkyEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:3c:df:74:ed:0a:41:ce:ac:6d:f8:bb:91:a7:40:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc Validity Not Before: Nov 4 09:40:03 2025 GMT Not After : Nov 5 09:40:03 2025 GMT Subject: CN=9d9ff7b06f0b2b377888260153a0c98cd2061928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:8c:89:b6:3d:4f:3b:c9:2b:b6:45:00:e3: 14:33:47:e2:a4:fc:b1:38:47:a0:00:70:a9:e2:fd: e5:e6:43:d0:a9:45:a0:b1:96:a9:17:02:87:c0:42: 7c:4e:d1:d8:8a:95:1b:ae:2d:a9:63:05:57:f7:ce: b8:41:ce:61:93:0a:bf:39:35:96:a7:fd:cd:ad:5c: 51:c7:78:ab:03:e2:05:4f:a2:b9:96:2c:e0:14:ef: e7:31:3b:2d:f9:0e:3f:da:b1:ef:cb:9b:54:6e:e3: b0:d6:19:58:7c:e7:66:34:70:a4:3a:6f:c7:70:41: 03:19:dd:83:ac:92:85:1b:e9:b5:99:c7:11:c7:4e: 66:b7:38:6c:5a:a2:57:fa:a2:c8:d9:0f:f6:52:e0: 30:64:f5:c8:81:5c:1d:19:12:2c:65:ed:db:ce:3f: 05:de:93:bd:9f:94:81:c9:bc:44:dd:13:a3:c4:b4: 62:86:ad:b5:c1:9c:09:53:df:77:a6:eb:45:d6:48: 73:1b:fc:4e:cb:a8:5d:27:fb:8c:32:0f:9c:e9:1b: 8a:1c:b1:f3:ad:cd:f4:2e:d5:f0:12:73:80:92:ac: 1e:c1:1c:c4:90:10:a9:85:ab:db:24:45:07:58:1b: af:d4:ac:fd:79:81:49:e8:4b:1c:17:93:ff:98:df: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9F:F7:B0:6F:0B:2B:37:78:88:26:01:53:A0:C9:8C:D2:06:19:28 X509v3 Authority Key Identifier: keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:80:86:dc:89:f1:ed:4a:fc:06:e9:b1:74:8a:e0:f6:15:e0: e3:36:0b:cd:35:c6:c7:ca:40:d4:68:58:55:e2:6a:92:38:26: e2:69:17:14:05:e2:03:4a:41:7d:92:e2:f7:35:c8:f0:f8:8b: ae:f0:01:0c:2c:85:b2:49:fe:24:82:b7:6c:5c:d0:48:9e:00: 99:02:f9:91:4a:eb:51:7a:87:76:88:17:95:4c:ee:b6:6d:26: 9f:00:96:b5:15:04:09:94:71:07:d1:64:45:e7:7e:a2:4b:09: 3f:b2:1f:82:d3:87:2c:79:57:07:5a:43:64:35:22:d4:ca:79: 4d:c6:e6:ad:2a:3e:d0:99:f0:e5:a6:21:fa:82:63:d9:aa:63: a3:7b:12:74:03:31:55:48:d5:5d:d9:79:6c:ba:22:31:eb:ad: 4b:d6:a1:73:f9:fd:6f:30:1a:72:37:0c:d3:b9:15:57:0b:78: 02:e0:ae:23:f3:37:d0:28:e9:75:c9:13:46:0d:75:e9:90:b0: 40:fc:2b:56:bf:30:2a:6f:fc:d6:fd:75:f0:4e:84:e0:c7:a0: 5a:9e:f9:39:7b:fd:03:f9:5f:b3:47:3e:f9:5f:53:67:da:9c: ba:72:9e:49:11:d8:7d:6f:84:1e:f5:21:17:7f:70:dc:aa:0b: 98:0f:ae:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOPN907QpBzqxt+LuRp0ApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl OTc3YmMwHhcNMjUxMTA0MDk0MDAzWhcNMjUxMTA1MDk0MDAzWjAzMTEwLwYDVQQD Eyg5ZDlmZjdiMDZmMGIyYjM3Nzg4ODI2MDE1M2EwYzk4Y2QyMDYxOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPaMibY9TzvJK7ZFAOMUM0fipPyx OEegAHCp4v3l5kPQqUWgsZapFwKHwEJ8TtHYipUbri2pYwVX9864Qc5hkwq/OTWW p/3NrVxRx3irA+IFT6K5lizgFO/nMTst+Q4/2rHvy5tUbuOw1hlYfOdmNHCkOm/H cEEDGd2DrJKFG+m1mccRx05mtzhsWqJX+qLI2Q/2UuAwZPXIgVwdGRIsZe3bzj8F 3pO9n5SBybxE3ROjxLRihq21wZwJU993putF1khzG/xOy6hdJ/uMMg+c6RuKHLHz rc30LtXwEnOAkqwewRzEkBCphavbJEUHWBuv1Kz9eYFJ6EscF5P/mN+scQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2f97BvCys3eIgmAVOgyYzSBhkoMB8GA1UdIwQY MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt YTk2YzYyNjZhYmRiLzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4CG3Inx 7Ur8BumxdIrg9hXg4zYLzTXGx8pA1GhYVeJqkjgm4mkXFAXiA0pBfZLi9zXI8PiL rvABDCyFskn+JIK3bFzQSJ4AmQL5kUrrUXqHdogXlUzutm0mnwCWtRUECZRxB9Fk Red+oksJP7IfgtOHLHlXB1pDZDUi1Mp5TcbmrSo+0Jnw5aYh+oJj2apjo3sSdAMx VUjVXdl5bLoiMeutS9ahc/n9bzAacjcM07kVVwt4AuCuI/M30CjpdckTRg116ZCw QPwrVr8wKm/81v118E6E4MegWp75OXv9A/lfs0c++V9TZ9qcunKeSRHYfW+EHvUh F39w3KoLmA+u+w== -----END CERTIFICATE-----Generated at Tue Nov 4 15:01:03 2025 by rpki-client