$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: v1lK8GCr+LvcYnq3zoSoBjmLC94IWDM0sU0b9PrbkuE= Subject key identifier: 73:2F:B6:18:11:46:29:3C:59:DB:2C:D5:9D:55:10:5F:A1:C3:25:0B Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019A4E86509F9A3EDA6901D9029D4E9C7356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0C9B Signing time: Tue 04 Nov 2025 11:00:16 +0000 Manifest this update: Tue 04 Nov 2025 11:00:16 +0000 Manifest next update: Wed 05 Nov 2025 11:00:16 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 5Xz9E7C6BAcx16iIMjwvM4HlgAw.roa (hash: O79+vzMdI2uDnbGewEwtLl1GFqHouBivbXJnQ4WHjFs=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: HIBKVvtinhweoi9ybbfYokGtkjg.roa (hash: khv1qHXammr1ZO8qVWulyea62D34wTqiuoPZd9ngssM=) 7: JjM1scO0M1VRz2BqKO1r_ZLa970.roa (hash: jE4M6onTNWLyp2LT8jDW1lcK5SlJ5FLJoUcPkAM9kEQ=) 8: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 9: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 10: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 11: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 12: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 13: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 14: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=) 15: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: v0KC0HYkHV4payxNJMZV2ITK6ZSt2BNXsskGidu6clA=) 16: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 17: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 18: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 19: tUIacj6VOPH10m5Y6XUJyWIow6U.roa (hash: 9uc/yuqmiqky5HfjpLsVrt/99q8zfLW5nmttPUpS6nU=) 20: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) 21: yvaGOInzvs_4CAqNb3HGPxfbkeM.roa (hash: 72X78jrEd3P7Wm2iZrDHAJIx0Gy7kHeFqupGxzOk0BE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:50:9f:9a:3e:da:69:01:d9:02:9d:4e:9c:73:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Nov 4 11:00:16 2025 GMT Not After : Nov 5 11:00:16 2025 GMT Subject: CN=732fb6181146293c59db2cd59d55105fa1c3250b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:8e:45:fd:3f:a3:89:a0:35:bf:d0:9b:b6: 05:b7:90:10:d6:72:b5:fe:ff:71:e4:cd:d9:b4:17: 50:ba:7c:0c:a3:ec:f1:e3:b7:e7:06:bf:c5:f1:74: b6:64:61:96:32:50:1f:e0:ef:95:cf:1f:c2:b8:64: 5c:4f:7c:f8:da:c2:20:45:0a:c5:a4:cd:36:24:03: 62:e3:fd:1c:a6:01:42:bd:b8:51:01:d2:25:02:49: 9e:e8:80:e6:a1:4e:e7:e2:70:dd:5a:cc:38:57:d6: 94:16:4c:f1:d1:bc:9e:5a:d4:c1:2b:02:44:09:db: 9d:99:b7:e1:45:76:e0:a5:e2:ec:13:4c:96:0b:d6: 12:77:c3:36:19:7c:73:a2:40:c1:cc:70:bd:f2:50: f7:a3:2f:02:50:f2:c5:7a:8d:7b:56:29:fa:4c:22: 1f:8e:55:a5:7b:2e:89:2e:b2:f5:3a:10:37:6f:3f: e5:2f:85:90:d1:37:a9:41:d5:60:cb:75:a5:46:25: c0:e2:c8:d9:4e:3e:99:d7:5e:43:ec:83:ea:be:4d: 4b:55:9f:16:71:d8:db:31:74:3d:da:7e:e3:df:ef: 94:a2:e0:62:6d:42:83:2c:65:75:42:b3:f7:b6:d2: c7:96:d7:c5:e0:16:3a:67:02:c7:95:d6:f7:2a:c3: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2F:B6:18:11:46:29:3C:59:DB:2C:D5:9D:55:10:5F:A1:C3:25:0B X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:44:db:c9:a6:be:c5:65:d7:cd:5b:9c:45:fe:7c:3d:c9:d9: c2:93:29:b0:70:de:e3:2d:01:6b:71:96:95:65:64:d2:64:ed: 9b:85:67:0f:bc:d0:b3:a1:c9:e2:55:7f:21:56:9d:f6:9e:b7: 1f:14:6e:ca:e2:56:e7:39:aa:76:3d:59:d0:f5:83:0c:c7:c5: a7:43:91:ed:a7:0b:84:0d:2c:59:73:87:51:45:aa:ca:18:c6: d7:6a:57:cf:b1:06:96:98:87:55:c9:c7:16:77:36:26:7b:06: 0a:8f:54:34:fc:1a:dd:2f:63:c9:c2:0b:8c:5f:0c:32:63:cb: a5:8c:ea:7f:19:e1:a7:60:e2:a6:fb:b1:dc:fe:e6:3a:f4:bf: ed:08:90:a5:09:12:b8:25:94:ba:cb:4f:ed:0b:ec:41:f8:f5: 82:c7:90:c6:99:b6:81:7d:8b:7d:cd:74:78:51:af:2d:8c:af: 46:62:8c:54:9a:f6:b9:48:e3:f2:da:9a:63:3c:50:cf:2b:65: 38:7b:81:e7:f3:2d:2d:6f:ac:44:c1:b6:d4:f8:5b:6e:34:4d: 32:55:a6:d5:b5:90:8c:2d:92:3c:c1:5d:6e:56:52:74:b3:b3: 13:08:47:84:80:8f:ba:95:b2:6c:df:1d:24:a7:67:ec:6e:8e: 5d:c6:df:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhlCfmj7aaQHZAp1OnHNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUxMTA0MTEwMDE2WhcNMjUxMTA1MTEwMDE2WjAzMTEwLwYDVQQD Eyg3MzJmYjYxODExNDYyOTNjNTlkYjJjZDU5ZDU1MTA1ZmExYzMyNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07KORf0/o4mgNb/Qm7YFt5AQ1nK1 /v9x5M3ZtBdQunwMo+zx47fnBr/F8XS2ZGGWMlAf4O+Vzx/CuGRcT3z42sIgRQrF pM02JANi4/0cpgFCvbhRAdIlAkme6IDmoU7n4nDdWsw4V9aUFkzx0byeWtTBKwJE CdudmbfhRXbgpeLsE0yWC9YSd8M2GXxzokDBzHC98lD3oy8CUPLFeo17Vin6TCIf jlWley6JLrL1OhA3bz/lL4WQ0TepQdVgy3WlRiXA4sjZTj6Z115D7IPqvk1LVZ8W cdjbMXQ92n7j3++UouBibUKDLGV1QrP3ttLHltfF4BY6ZwLHldb3KsOUTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMvthgRRik8Wdss1Z1VEF+hwyULMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUTbyaa+ xWXXzVucRf58PcnZwpMpsHDe4y0Ba3GWlWVk0mTtm4VnD7zQs6HJ4lV/IVad9p63 HxRuyuJW5zmqdj1Z0PWDDMfFp0OR7acLhA0sWXOHUUWqyhjG12pXz7EGlpiHVcnH Fnc2JnsGCo9UNPwa3S9jycILjF8MMmPLpYzqfxnhp2Dipvux3P7mOvS/7QiQpQkS uCWUustP7QvsQfj1gseQxpm2gX2Lfc10eFGvLYyvRmKMVJr2uUjj8tqaYzxQzytl OHuB5/MtLW+sRMG21PhbbjRNMlWm1bWQjC2SPMFdblZSdLOzEwhHhICPupWybN8d JKdn7G6OXcbf4w== -----END CERTIFICATE-----Generated at Tue Nov 4 14:53:54 2025 by rpki-client