$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: YxcgDkcnp2CRPxCWwGaPMSsTciO3wEFRyDwC1AgoKWI= Subject key identifier: BF:3B:B3:9F:68:6C:C6:9F:29:90:51:11:CC:A3:83:7C:2D:43:6B:43 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019A4E4F4E7530079F071E288827C5E082D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 0F8F Signing time: Tue 04 Nov 2025 10:00:11 +0000 Manifest this update: Tue 04 Nov 2025 10:00:11 +0000 Manifest next update: Wed 05 Nov 2025 10:00:11 +0000 Files and hashes: 1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=) 2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=) 3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=) 4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=) 5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=) 6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=) 7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=) 8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=) 9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=) 10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=) 11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=) 12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=) 13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=) 14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=) 15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=) 16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=) 17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=) 18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=) 19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=) 20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=) 21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=) 22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=) 23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=) 24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=) 25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=) 26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=) 27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=) 28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=) 29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: vRZXfB3STfic2GR+p4y0/KUrTiZk/i7hyNDXg+tnEPo=) 30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=) 31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=) 32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=) 33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=) 34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=) 35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=) 36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:4e:75:30:07:9f:07:1e:28:88:27:c5:e0:82:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Nov 4 10:00:11 2025 GMT Not After : Nov 5 10:00:11 2025 GMT Subject: CN=bf3bb39f686cc69f29905111cca3837c2d436b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e2:da:d6:3e:05:a9:dd:57:0b:c5:ec:89:04: 7a:07:a9:36:6f:57:e7:5d:0e:d6:e7:0b:4e:80:78: a8:a1:c9:56:47:36:53:44:91:64:4a:29:03:4c:83: 10:f5:ac:b8:d2:05:19:dd:cf:f7:07:d1:9c:6d:42: 95:87:0b:a1:63:0c:dc:d9:d7:39:51:d8:f0:45:c1: af:4f:22:b3:6e:a9:ba:c0:70:fc:a6:8e:e3:9e:94: c9:69:8c:e7:8c:12:37:6b:63:1a:9c:e3:40:13:65: 86:11:ca:bb:7b:12:f3:5c:bd:5e:fe:20:1a:59:1f: 40:5b:6f:57:0f:40:9f:1c:11:22:b5:67:37:5b:35: 97:2b:ad:16:ac:f1:26:15:97:5d:8c:6b:08:56:ea: 74:8d:6a:a1:17:85:5e:64:53:22:7f:ac:74:1b:e7: 54:08:1a:41:e1:9c:90:68:db:51:aa:e2:85:e9:24: 63:ea:43:4f:05:d3:04:ca:d8:da:c4:c0:ea:81:e9: d6:63:53:cf:15:f5:99:ac:2d:92:00:c8:89:e0:56: 52:e5:bd:62:d5:49:4c:de:13:14:81:1d:6a:3d:6f: bb:40:da:99:3a:7c:b5:82:aa:de:cf:26:b5:4b:e0: 04:87:b1:93:25:ee:50:b4:2c:b6:2e:66:d7:10:f8: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3B:B3:9F:68:6C:C6:9F:29:90:51:11:CC:A3:83:7C:2D:43:6B:43 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3b:c1:06:92:16:70:d0:c4:1c:81:7e:d6:e7:0b:4b:90:d7: 0d:55:9a:70:05:bf:57:dc:38:94:51:78:42:da:18:f6:21:75: 8f:41:b9:fa:33:5e:86:f8:e9:45:80:1e:31:40:b9:c7:c5:e0: 1c:76:25:0e:59:08:ef:b2:f6:b5:d8:3d:cd:93:c7:46:12:5e: 5d:95:90:46:6c:22:74:0f:3c:1e:58:c6:5f:5f:46:5b:5e:64: be:0c:84:98:7e:f8:9c:5a:25:7f:fc:4e:dd:10:07:a0:25:59: c5:a0:b1:eb:d4:02:3f:03:f1:ef:ef:39:cb:3c:a8:7a:2a:24: 47:1b:31:62:02:29:d2:97:70:03:7c:0c:45:aa:a6:00:7b:46: f0:51:07:a0:3b:a3:de:54:97:5c:66:93:7c:89:60:9d:86:5c: c1:c1:4f:ae:29:86:26:47:a4:1f:92:80:25:2e:a0:10:7d:a7: a7:f6:ec:a0:74:8c:a0:a0:f5:9f:fa:ef:00:99:40:37:4c:24: 86:47:47:c8:07:0b:b8:74:2d:a5:fa:b0:82:c2:60:ae:8c:76: 75:b7:6e:58:df:40:50:8a:56:e9:47:a1:08:2f:78:89:80:3b: 65:63:30:4c:1b:ad:bf:ae:d2:78:8e:e7:a3:13:e5:98:4f:f2: 9e:ff:e2:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT051MAefBx4oiCfF4ILRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjUxMTA0MTAwMDExWhcNMjUxMTA1MTAwMDExWjAzMTEwLwYDVQQD EyhiZjNiYjM5ZjY4NmNjNjlmMjk5MDUxMTFjY2EzODM3YzJkNDM2YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOLa1j4Fqd1XC8XsiQR6B6k2b1fn XQ7W5wtOgHiooclWRzZTRJFkSikDTIMQ9ay40gUZ3c/3B9GcbUKVhwuhYwzc2dc5 UdjwRcGvTyKzbqm6wHD8po7jnpTJaYznjBI3a2ManONAE2WGEcq7exLzXL1e/iAa WR9AW29XD0CfHBEitWc3WzWXK60WrPEmFZddjGsIVup0jWqhF4VeZFMif6x0G+dU CBpB4ZyQaNtRquKF6SRj6kNPBdMEytjaxMDqgenWY1PPFfWZrC2SAMiJ4FZS5b1i 1UlM3hMUgR1qPW+7QNqZOny1gqrezya1S+AEh7GTJe5QtCy2LmbXEPgRGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL87s59obMafKZBREcyjg3wtQ2tDMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDvBBpIW cNDEHIF+1ucLS5DXDVWacAW/V9w4lFF4QtoY9iF1j0G5+jNehvjpRYAeMUC5x8Xg HHYlDlkI77L2tdg9zZPHRhJeXZWQRmwidA88HljGX19GW15kvgyEmH74nFolf/xO 3RAHoCVZxaCx69QCPwPx7+85yzyoeiokRxsxYgIp0pdwA3wMRaqmAHtG8FEHoDuj 3lSXXGaTfIlgnYZcwcFPrimGJkekH5KAJS6gEH2np/bsoHSMoKD1n/rvAJlAN0wk hkdHyAcLuHQtpfqwgsJgrox2dbduWN9AUIpW6UehCC94iYA7ZWMwTButv67SeI7n oxPlmE/ynv/i0A== -----END CERTIFICATE-----Generated at Tue Nov 4 18:00:13 2025 by rpki-client