$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: yZYqbLugYogDyFlhH6nUyNQqC/EFIkxFYXxxsiG0D30= Subject key identifier: A3:98:92:7A:E2:9A:E8:8F:07:7D:D8:C6:11:40:B5:7F:FF:9C:FB:8A Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019A51875CB237EFA5D2FA578B93EB09A9BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 141C Signing time: Wed 05 Nov 2025 01:00:16 +0000 Manifest this update: Wed 05 Nov 2025 01:00:16 +0000 Manifest next update: Thu 06 Nov 2025 01:00:16 +0000 Files and hashes: 1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=) 2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=) 3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=) 4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=) 5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=) 6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=) 7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=) 8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=) 9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=) 10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=) 11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=) 12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=) 13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=) 14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=) 15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=) 16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=) 17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: m4gVgPHSG0c+ErggeZyIC1nTfOdFVqnWxWkntrZjNHU=) 18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:87:5c:b2:37:ef:a5:d2:fa:57:8b:93:eb:09:a9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Nov 5 01:00:16 2025 GMT Not After : Nov 6 01:00:16 2025 GMT Subject: CN=a398927ae29ae88f077dd8c61140b57fff9cfb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:2e:8b:94:4e:e6:f3:01:fa:f6:69:78:6b: 7c:c7:38:6e:17:a4:26:25:24:6a:5a:86:3a:7a:3a: 9e:71:87:6a:bc:09:d0:a0:4c:f1:69:95:67:71:ad: bb:44:11:45:ea:56:c0:a3:86:cb:7f:a1:8f:52:64: 4f:4b:f7:9b:09:48:ac:11:37:a9:9d:ba:9d:a7:b2: ab:5d:e0:02:8f:36:85:88:0d:4d:75:d8:43:c4:a7: 79:c3:0f:c7:1d:33:18:0f:31:c0:1f:85:f9:3c:bf: ad:5e:bd:f1:de:cd:9a:3f:ad:a1:1a:27:00:a8:6a: b2:15:e4:97:8d:bb:7f:04:17:d0:1c:e2:86:72:72: b3:83:83:3e:15:4c:c6:1a:97:e1:41:c7:d3:19:b0: 8d:4f:d1:0a:f7:ad:e1:04:e0:fb:3d:a1:52:b9:71: 86:b2:d8:5a:d0:27:f2:f0:c0:a0:05:e6:65:c9:09: 7b:18:ab:a0:0f:ad:0b:b3:2b:fc:fb:fe:13:84:f6: 09:f8:b4:8a:84:50:3a:c8:b5:a3:84:15:b5:2a:28: aa:8d:f4:4f:a4:de:5f:12:bc:ea:d2:c4:79:a6:8f: de:70:9d:3f:c9:0a:04:11:55:99:98:3e:d3:6f:05: 63:9b:bb:7d:eb:55:7c:67:4b:08:4c:e4:23:ba:05: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:98:92:7A:E2:9A:E8:8F:07:7D:D8:C6:11:40:B5:7F:FF:9C:FB:8A X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:37:ae:7f:43:55:dd:76:96:e8:f1:55:9e:18:fa:9f:4a:ea: 6f:8b:75:31:04:21:2d:2b:ba:0c:03:e5:8d:36:ca:65:b7:87: b9:e7:e7:1d:b4:87:df:8f:92:03:bf:1f:b7:81:a2:47:e2:f5: 4d:ee:95:50:ab:72:9b:fb:f5:e5:d2:e7:84:92:48:c4:79:e0: a5:01:0a:49:eb:21:2e:26:48:12:ba:56:57:fe:08:b6:3e:14: 54:78:0d:2c:5e:39:20:09:6c:45:f0:66:e9:48:dd:12:99:24: 40:b8:e0:ef:48:5b:b5:b2:d3:34:55:cc:35:9d:a5:bb:91:79: ed:a9:45:4e:91:b3:4a:d3:7c:42:a2:90:99:6e:ed:c2:24:26: c9:81:98:71:28:7c:cb:c4:f2:10:e5:b2:52:2f:e6:2a:46:b2: 67:52:37:77:4b:0a:ae:01:4d:90:87:69:d7:19:2e:27:e7:d3: fd:4e:54:16:81:46:d0:6b:c5:73:2c:6d:fd:32:8e:e1:e7:71: 67:c4:50:87:43:ec:f8:22:93:eb:90:66:3d:b0:59:18:59:d8: d6:9b:5f:b4:ac:4e:6f:dc:96:b5:1b:88:5c:9b:a7:f4:99:61: c2:24:3a:70:a7:75:dd:56:06:1f:e9:0c:67:6e:38:8f:fe:66: 71:19:40:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRh1yyN++l0vpXi5PrCam/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjUxMTA1MDEwMDE2WhcNMjUxMTA2MDEwMDE2WjAzMTEwLwYDVQQD EyhhMzk4OTI3YWUyOWFlODhmMDc3ZGQ4YzYxMTQwYjU3ZmZmOWNmYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqwui5RO5vMB+vZpeGt8xzhuF6Qm JSRqWoY6ejqecYdqvAnQoEzxaZVnca27RBFF6lbAo4bLf6GPUmRPS/ebCUisETep nbqdp7KrXeACjzaFiA1NddhDxKd5ww/HHTMYDzHAH4X5PL+tXr3x3s2aP62hGicA qGqyFeSXjbt/BBfQHOKGcnKzg4M+FUzGGpfhQcfTGbCNT9EK963hBOD7PaFSuXGG stha0Cfy8MCgBeZlyQl7GKugD60Lsyv8+/4ThPYJ+LSKhFA6yLWjhBW1KiiqjfRP pN5fErzq0sR5po/ecJ0/yQoEEVWZmD7TbwVjm7t961V8Z0sITOQjugUxYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOYknrimuiPB33YxhFAtX//nPuKMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTeuf0NV 3XaW6PFVnhj6n0rqb4t1MQQhLSu6DAPljTbKZbeHuefnHbSH34+SA78ft4GiR+L1 Te6VUKtym/v15dLnhJJIxHngpQEKSeshLiZIErpWV/4Itj4UVHgNLF45IAlsRfBm 6UjdEpkkQLjg70hbtbLTNFXMNZ2lu5F57alFTpGzStN8QqKQmW7twiQmyYGYcSh8 y8TyEOWyUi/mKkayZ1I3d0sKrgFNkIdp1xkuJ+fT/U5UFoFG0GvFcyxt/TKO4edx Z8RQh0Ps+CKT65BmPbBZGFnY1ptftKxOb9yWtRuIXJun9JlhwiQ6cKd13VYGH+kM Z244j/5mcRlAgQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:14:50 2025 by rpki-client