$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json) Hash identifier: E9sVhX0QNIDscDhBUNJ7jQ540Sw6n8oG98NyKUiGKK0= Subject key identifier: 03:E7:C9:06:DF:86:D5:3A:ED:FF:76:33:36:6E:D8:07:67:D1:9A:C7 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019A4F628011243669B4281D27CC5618001B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft Manifest number: 173A Signing time: Tue 04 Nov 2025 15:00:46 +0000 Manifest this update: Tue 04 Nov 2025 15:00:46 +0000 Manifest next update: Wed 05 Nov 2025 15:00:46 +0000 Files and hashes: 1: 1-fKXBjqiTeM90rh_YcnHRZImMf4.roa (hash: XviyK9gZCSyNGe87uM1BJ71gLbA2w08qEYd7JArw4Hs=) 2: 21b6ntDP_41WHw4JgmJy5QMFjgw.roa (hash: OyGhDdjF1Bm2rSEG2L631phdq3gbyPG0iQYpMEVeFPo=) 3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: x3+o8meWIayEsjmGCwV1933XrekPSnBoxtpOl7bNDrI=) 4: 6bKmElTtCrApAY9rRgCE9VG2_VI.roa (hash: jkL7mJyzNc2SlG01Dl3hctC0mLi0oOg8Cg2cItdFmp8=) 5: 7p384sXqxwddixUy_mYYBxF3awU.roa (hash: shaUQH6DkAjCcH24QCvbbVnJZikn1zAyihmMsgzPJcI=) 6: EswWK13u7UJf1Xm-aJ2Imfit29g.roa (hash: /9v79+ATF8QEQ4eYOKWEhH/1P4aQ0PCUgp7hFThavBs=) 7: Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa (hash: 1XCrVW6+X9DVjbzilln6lF+f4s4n32v5jZAfIBU7Z40=) 8: G-l8_nIjGXR2g3ie6C0b-DsumJM.roa (hash: qSX4dXaWMvoaO0z2I0BRCaHWI2LO9UgLxYp55tHYyDI=) 9: NZS2Ipchg2nhjy9FYCa-tr7edgc.roa (hash: J91+10sEZiq3a/L3jz4R1QTQGfsCXE1VL5KiBPRPpK8=) 10: Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa (hash: F0xmcjBp6hsmjep+VgSkib2PdKQQGRbjWEcgD1QBtbM=) 11: Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa (hash: gYB3OVnzjXyPr9Qm/lycd3gdpJQ/+Cl0X5zNJIEQ9rQ=) 12: Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa (hash: 48l45O6og6BZyLVhyyu0j9BEA4j1BgnxIO+JWZUTc30=) 13: WXqBRwyxEDgQK5OlFrSMIaFpyVU.roa (hash: IpP8TaM5Wwj7+VayyaCIeA2tv6VLqBIorB1uda3TPMs=) 14: XSbgubujJJ9FZpTPfifgq3AkiU8.roa (hash: QttXfkZolFdSxkPkwsYt6vSDl8DXa766XeZMDQS4Mtw=) 15: clZIrkLG6qMnhbwEIW_pAKHru3U.roa (hash: h9NEDzPBspMO8P2mwx1nUeUnaVh8FCZbKTMitP3Kq70=) 16: dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa (hash: onCp8InwxVqnOmHcxw1M4XVSgwg1eg4cDcncJgrt2EU=) 17: dp8pvQa4vbHOUBRQq7A88UhSl18.roa (hash: 3Lmekz/0Q0BYHatiLmy2hW/4qKq+J2XWsl9s9mwNmF0=) 18: kQOaGpW4jD-8xGlNbkC3aZmZ2oA.roa (hash: nAfr6WTUGifpmHx8/uBqTFl3/GkMakZU6HzPC4BRKRc=) 19: nqNpqxiiesheCCeqK53xQj3S098.roa (hash: 2DtLb2ES6JjRgW8bn+Qbl4U1xhy1QrUbg+jAVJ9BH7A=) 20: qg9H3rvWINznh7UPHplQbVY73BM.roa (hash: Nx2IWHCLZcluhgcIHU0CznQVLHn9XdJ3ef9jXTt3p68=) 21: uMSALwCFCjHgfXY8GtxojOClYFk.roa (hash: kBut8kDkT5GFXnvjVfuze1IARhQ7/X9J0rwdlLP0FyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:80:11:24:36:69:b4:28:1d:27:cc:56:18:00:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Nov 4 15:00:46 2025 GMT Not After : Nov 5 15:00:46 2025 GMT Subject: CN=03e7c906df86d53aedff7633366ed80767d19ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:c2:bd:35:8d:1e:00:22:2b:fa:29:06:4b: 11:43:2b:f8:b5:12:af:8e:50:0e:0e:74:cf:4d:01: cf:d7:d5:ab:28:70:a0:d0:71:1d:70:d8:fa:77:26: 83:db:bd:3c:d3:0a:01:82:69:04:04:52:68:48:8b: 80:70:06:53:94:18:9a:f4:40:a5:e5:bf:64:24:fa: 4b:d5:54:16:51:ea:4b:05:d9:64:29:f8:8d:f1:8e: 13:79:ba:e7:ce:df:9b:e1:c9:b2:0c:41:76:24:69: a1:6f:6b:7f:86:d9:23:fc:db:2b:88:ca:43:2f:83: a7:80:64:9e:6f:c6:61:e4:cb:20:8a:9e:fd:21:af: 06:6c:fe:9d:a7:0d:8a:c0:f2:2e:90:f0:17:dd:26: 31:39:bb:d4:3c:10:5c:b3:af:88:66:19:ca:8f:9c: 6e:c2:47:1c:14:71:e5:be:26:84:0c:02:2a:f8:7b: c0:05:9e:99:f0:16:ec:31:7e:8e:5c:89:bf:05:e4: 08:4b:60:eb:33:51:1a:bd:8e:22:02:fc:7f:21:55: fc:fa:5e:42:9a:f4:fc:f0:c7:6d:5a:ed:c6:11:16: 88:eb:54:76:3f:da:76:26:4e:65:68:1a:00:ac:69: 5d:a5:c7:fc:2e:c3:cb:d4:d2:85:8d:80:7f:55:fa: b6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E7:C9:06:DF:86:D5:3A:ED:FF:76:33:36:6E:D8:07:67:D1:9A:C7 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a6:29:48:be:8f:04:f8:e6:04:97:d6:66:b7:0a:c6:86:f9: 3c:4b:fd:61:c4:9f:dc:ff:31:3d:fe:8f:dc:c9:b9:f9:2d:fb: dc:8f:01:bd:4b:b2:a8:1f:95:5c:e7:11:e8:4f:7d:26:36:29: 80:ae:f8:58:15:a4:f4:27:30:1a:96:04:95:08:3f:ce:a2:81: ba:18:f7:96:fd:7f:3a:f6:63:30:df:27:6b:d1:31:dd:e6:0e: 54:b0:9f:83:92:07:d8:b1:17:2a:da:78:a5:20:47:28:f0:80: 6a:b7:18:68:39:fd:cb:38:05:b8:5e:b4:69:9c:ac:21:3b:94: ef:ab:e7:15:af:e4:c6:f2:61:37:0b:d2:93:0d:c4:f2:ab:cf: 58:2e:f9:4b:ad:bc:b7:4c:33:9a:19:e8:50:df:f6:87:d8:0e: 95:2c:a7:95:13:44:ef:ee:36:73:3a:aa:19:24:1a:f3:c5:67: 16:82:5b:ec:57:2c:c7:8f:ca:34:6c:b1:b9:c1:51:2e:9b:ec: e9:ea:eb:5c:e1:a0:6d:67:4f:a0:e5:d1:68:c8:64:e5:20:0d: 2a:17:ef:7e:91:71:cb:6e:7e:b1:51:eb:df:0c:a6:25:8f:94: 50:8a:9a:dc:0b:32:4c:98:25:77:33:59:6e:76:53:7c:71:6a: ff:31:88:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYoARJDZptCgdJ8xWGAAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjUxMTA0MTUwMDQ2WhcNMjUxMTA1MTUwMDQ2WjAzMTEwLwYDVQQD EygwM2U3YzkwNmRmODZkNTNhZWRmZjc2MzMzNjZlZDgwNzY3ZDE5YWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YbCvTWNHgAiK/opBksRQyv4tRKv jlAODnTPTQHP19WrKHCg0HEdcNj6dyaD27080woBgmkEBFJoSIuAcAZTlBia9ECl 5b9kJPpL1VQWUepLBdlkKfiN8Y4Tebrnzt+b4cmyDEF2JGmhb2t/htkj/NsriMpD L4OngGSeb8Zh5Msgip79Ia8GbP6dpw2KwPIukPAX3SYxObvUPBBcs6+IZhnKj5xu wkccFHHlviaEDAIq+HvABZ6Z8BbsMX6OXIm/BeQIS2DrM1EavY4iAvx/IVX8+l5C mvT88MdtWu3GERaI61R2P9p2Jk5laBoArGldpcf8LsPL1NKFjYB/Vfq2rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPnyQbfhtU67f92MzZu2Adn0ZrHMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaYpSL6P BPjmBJfWZrcKxob5PEv9YcSf3P8xPf6P3Mm5+S373I8BvUuyqB+VXOcR6E99JjYp gK74WBWk9CcwGpYElQg/zqKBuhj3lv1/OvZjMN8na9Ex3eYOVLCfg5IH2LEXKtp4 pSBHKPCAarcYaDn9yzgFuF60aZysITuU76vnFa/kxvJhNwvSkw3E8qvPWC75S628 t0wzmhnoUN/2h9gOlSynlRNE7+42czqqGSQa88VnFoJb7Fcsx4/KNGyxucFRLpvs 6errXOGgbWdPoOXRaMhk5SANKhfvfpFxy25+sVHr3wymJY+UUIqa3AsyTJgldzNZ bnZTfHFq/zGIGw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:58:03 2025 by rpki-client