$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: dNv1TMCGb6ZMkRquLsMZJc+WpLDiYjly6HO//Yx+tRU= Subject key identifier: D6:9C:22:8A:D0:C0:72:44:55:7E:EC:C7:AC:68:6A:CF:1A:F8:23:1D Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019A4E866D8DBA585869586DBDBD619A80A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0AD6 Signing time: Tue 04 Nov 2025 11:00:23 +0000 Manifest this update: Tue 04 Nov 2025 11:00:23 +0000 Manifest next update: Wed 05 Nov 2025 11:00:23 +0000 Files and hashes: 1: 0yfwmVxTJLER4DUt2Vg6_khLCpA.roa (hash: MKcDvWwqHVE9vZSHOg8w0ciXql+cjgazIARUal2yFTQ=) 2: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: NHTviQ2hQ43vR97qQh04ybjCLxhjtrlaGnsKGcGu0/w=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa (hash: /86x8Ad2qWfAQIfFdegFnzg0b1Bm2R4794B+ZpXq6Eo=) 21: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 22: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 23: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:6d:8d:ba:58:58:69:58:6d:bd:bd:61:9a:80:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Nov 4 11:00:23 2025 GMT Not After : Nov 5 11:00:23 2025 GMT Subject: CN=d69c228ad0c07244557eecc7ac686acf1af8231d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:49:78:c5:cc:7b:d3:56:85:60:b2:42:15: 32:fa:01:5b:b0:59:a7:11:4a:e0:0b:2f:1a:47:f3: f6:1d:de:42:65:5e:93:e5:3a:62:f4:d6:07:20:82: d1:bc:43:3c:f8:01:57:c5:0b:5e:86:c3:5b:ac:8d: 52:12:3d:4d:c8:6a:dc:03:6b:5b:61:f1:d0:3d:60: 99:3c:37:0a:1e:e6:8a:f4:af:12:71:ad:bf:0b:d1: 85:bd:dd:7d:a3:29:33:5e:c2:86:7f:57:00:a0:af: 6a:4e:d7:98:65:0f:96:4d:47:fb:5d:4d:94:74:0a: bd:e9:75:ab:5c:ae:7e:5f:e6:2d:a1:47:cf:be:08: fa:81:a8:1a:71:04:26:80:b9:65:92:f0:67:d3:3e: 51:7a:d6:fe:46:fe:d7:22:f4:7c:4a:e4:57:52:a0: 41:a2:27:c3:2f:b5:e9:c4:db:04:01:38:b3:1e:80: cf:35:18:42:47:c2:2b:40:9d:e3:a5:17:d0:44:43: 3a:b2:7c:47:62:63:d1:8a:86:ee:e6:26:d7:c7:95: 51:82:57:2a:e0:2a:57:4d:5c:d7:e2:c5:dc:5c:70: 17:39:1b:97:3f:6f:77:9e:35:11:63:69:8e:88:9b: 60:5d:93:fb:55:cd:30:b0:7b:7a:58:b5:92:c7:7e: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9C:22:8A:D0:C0:72:44:55:7E:EC:C7:AC:68:6A:CF:1A:F8:23:1D X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f3:de:9d:d6:21:82:2a:33:41:de:16:af:69:8e:56:5c:14: 95:2b:ce:e7:ed:56:39:0b:3a:1b:65:f6:3c:2c:55:26:be:8c: fe:e9:8b:d6:92:90:63:32:2e:42:9d:a1:e0:43:6a:6b:46:3f: 8e:e8:1a:57:31:d2:ea:ab:7a:6f:d3:fc:a0:3b:d3:76:f2:89: ad:f9:0a:ae:dc:d0:b7:67:62:2c:60:17:a6:19:c2:86:d8:f0: cf:02:12:ef:f4:cc:f1:94:27:ec:ed:b1:75:b8:b7:e6:8b:8a: d1:f0:d4:78:c7:1d:20:3b:98:da:e8:e7:7a:d8:48:f0:47:9b: 11:cd:5f:b8:8a:38:e5:18:9b:f2:a9:ff:5b:26:12:9f:fe:05: 3b:a6:31:58:0d:c1:1e:87:f5:ce:cf:92:8b:2a:d3:33:13:e3: ef:1f:9e:d4:6e:17:79:0b:5a:e1:a6:47:6d:cd:6b:04:79:40: 49:ce:ee:bf:a7:55:a4:ed:2d:a9:f9:df:86:1c:7d:33:de:66: 9d:90:2b:c7:0d:48:69:26:0b:c5:dd:55:5b:c8:0f:ec:b3:51: 7e:6b:3d:f9:7d:ff:c9:8f:a3:b9:49:df:7c:25:04:93:ba:d5: a5:4d:94:7c:4b:2a:5c:e7:1e:d8:05:72:08:b3:57:22:b9:ad: e4:bb:8f:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhm2NulhYaVhtvb1hmoChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUxMTA0MTEwMDIzWhcNMjUxMTA1MTEwMDIzWjAzMTEwLwYDVQQD EyhkNjljMjI4YWQwYzA3MjQ0NTU3ZWVjYzdhYzY4NmFjZjFhZjgyMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpBJeMXMe9NWhWCyQhUy+gFbsFmn EUrgCy8aR/P2Hd5CZV6T5Tpi9NYHIILRvEM8+AFXxQtehsNbrI1SEj1NyGrcA2tb YfHQPWCZPDcKHuaK9K8Sca2/C9GFvd19oykzXsKGf1cAoK9qTteYZQ+WTUf7XU2U dAq96XWrXK5+X+YtoUfPvgj6gagacQQmgLllkvBn0z5Retb+Rv7XIvR8SuRXUqBB oifDL7XpxNsEATizHoDPNRhCR8IrQJ3jpRfQREM6snxHYmPRiobu5ibXx5VRglcq 4CpXTVzX4sXcXHAXORuXP293njURY2mOiJtgXZP7Vc0wsHt6WLWSx356HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNacIorQwHJEVX7sx6xoas8a+CMdMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvPendYh giozQd4Wr2mOVlwUlSvO5+1WOQs6G2X2PCxVJr6M/umL1pKQYzIuQp2h4ENqa0Y/ jugaVzHS6qt6b9P8oDvTdvKJrfkKrtzQt2diLGAXphnChtjwzwIS7/TM8ZQn7O2x dbi35ouK0fDUeMcdIDuY2ujnethI8EebEc1fuIo45Rib8qn/WyYSn/4FO6YxWA3B Hof1zs+SiyrTMxPj7x+e1G4XeQta4aZHbc1rBHlASc7uv6dVpO0tqfnfhhx9M95m nZArxw1IaSYLxd1VW8gP7LNRfms9+X3/yY+juUnffCUEk7rVpU2UfEsqXOce2AVy CLNXIrmt5LuPZw== -----END CERTIFICATE-----Generated at Tue Nov 4 20:20:41 2025 by rpki-client