$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: kzifyt3AG7E8+vRveCG74ptekaP4WZGlsTOwsBjN4ro= Subject key identifier: 7D:66:10:24:B1:A3:A2:26:12:4A:B1:0C:44:DF:D6:FC:DE:27:2C:68 Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019A4F2B6D68736DF94D450A8C814C876837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 0B64 Signing time: Tue 04 Nov 2025 14:00:37 +0000 Manifest this update: Tue 04 Nov 2025 14:00:37 +0000 Manifest next update: Wed 05 Nov 2025 14:00:37 +0000 Files and hashes: 1: 21k07trihuOq_p0d1xoi4bxuPZA.roa (hash: 7OFU6XWsgxZjBgc5/9Z26TjwR0mC8/oQG4kPqRbf13g=) 2: 4iaJi_OBKAE3o8h175iBu_IZyfI.roa (hash: lDCEAMXE0clsOMjNyholsrUDxhoIrjK4k3xcCfxPkUY=) 3: 5BopT6zWN2-PdGYdxH2aUB0jmhg.roa (hash: /mHqZKMlZJCdgH7Kawl3aGGRgWwqt/sVMAcpLcw5mXU=) 4: Geel9OdOaQ9FlrEzFHKlpiWE30U.roa (hash: mEBGWZVn+mmpTlkiNI5Af3AFG/t42zkx+akYj/Nw/0M=) 5: JWpMTh79Cpipv8z2TiqFetsx4Z0.roa (hash: EeuLpYtgLdl6hvIb6vNrTtAuFpAgpCnIwfpYkuwZmkQ=) 6: ORkWSvHyz7xVlACj3J643SMA1t4.roa (hash: 9HyAWLxiFAOsSF7hRfVc73gtPaqofO7sI7vq8SdYSfA=) 7: Tg1n5Fp1pJd7zBO6W_NcYtcUcjs.roa (hash: 2JSaIkit5yVDVUZV0/gM1VkpGy+fdm5Z9IWeQFjGnCA=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: c/X1IXxYghuWeSGawSf37j8M01vcrXytd2teOf9t24o=) 9: eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (hash: ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=) 10: gk0o9JIYrdgKiCEVnFxYDFCmm6g.roa (hash: U5lgDtUaYRY5Jq/t8D2zh/ImkX7ABdChH50k3iWkRSA=) 11: isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (hash: KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=) 12: plBE2K-1jhmKq6eM8fW4KaXWZeQ.roa (hash: Fhmhnyiel4/Ua1E2ksX/40TvHfAVYkZD+dMm3wF8AAw=) 13: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (hash: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=) 14: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (hash: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=) 15: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (hash: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=) 16: rCp1o_nOqwsF2hOj4c5kBCN-sNQ.roa (hash: hkXBdU7Mx+s+1UvYnZlcv2/hPwhLGz/FrQNM7+jLYxI=) 17: uNvKhwe5KEaAzLU0ACWU9sZ7Bm4.roa (hash: jacfmgDqnbUtNbN3r/NGjMzBlVkGGEbKEgbjHG7ah6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:6d:68:73:6d:f9:4d:45:0a:8c:81:4c:87:68:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Nov 4 14:00:37 2025 GMT Not After : Nov 5 14:00:37 2025 GMT Subject: CN=7d661024b1a3a226124ab10c44dfd6fcde272c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:4d:18:f7:ae:d8:ec:e1:73:45:3a:a0:65: 80:d7:df:5d:fb:be:2b:4b:09:e4:87:c8:31:34:ad: d5:68:4b:73:51:05:c2:3d:73:36:31:a7:94:32:df: bc:75:18:7e:ce:74:54:c0:4e:dc:f9:9d:e4:98:01: ee:41:f3:28:10:b3:00:9f:7f:59:08:6b:b0:da:57: ef:6e:57:ad:5a:bd:20:1a:f7:4b:0a:13:36:6e:e4: 30:89:3b:46:90:0e:01:b7:65:b8:f7:f2:29:4d:c4: ca:56:b7:08:6c:4e:41:7e:d4:d1:74:cd:b9:3b:ec: 2c:77:34:27:6a:de:fc:06:a7:f7:31:c5:1f:56:c4: 58:42:54:ab:25:60:f4:bb:bc:b8:d6:07:7f:a3:d8: 59:8e:74:b4:ad:a8:d5:f4:b1:bd:72:dd:80:a3:39: 69:0b:d1:ac:54:4d:26:39:c1:79:36:41:51:e6:71: 36:ad:d2:19:70:2a:7e:bf:16:a6:f9:18:7e:a9:eb: 75:30:87:dc:ec:e0:59:c5:ad:df:cc:1b:83:67:a0: 18:a8:5d:b5:96:27:7f:33:2b:a5:d9:e8:9c:f2:7e: ec:f1:93:09:fa:84:f5:3c:4a:a7:64:6e:45:7c:b5: a6:95:6d:da:1a:9b:bc:2c:78:13:10:dd:45:87:ff: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:66:10:24:B1:A3:A2:26:12:4A:B1:0C:44:DF:D6:FC:DE:27:2C:68 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2c:ac:bd:3d:df:34:cf:df:46:7d:6a:de:c1:2e:ed:96:fe: 7e:b6:48:ca:f2:02:c1:e0:4a:40:ce:16:f4:8a:c5:a0:6d:0c: bf:16:65:ba:2f:f2:53:36:c4:c9:c4:47:4d:cc:aa:ff:90:12: 56:78:7c:e0:57:b6:ca:a2:a2:cb:f5:72:6b:4e:f6:85:b0:58: 67:2b:f3:05:84:5d:e2:70:dc:aa:24:ee:99:5b:df:7e:5e:9b: 26:b2:5c:22:4d:42:3f:c4:64:31:31:5c:a5:e6:05:cf:27:53: b9:cf:99:04:92:e4:63:ae:57:7e:72:a6:9c:cd:53:04:05:e8: 41:0f:9b:51:d2:a1:db:48:ae:e9:e2:8f:ca:b3:9a:ac:f6:75: 53:c0:35:a1:02:17:d7:44:d3:9b:f3:5b:39:e9:0f:59:05:3f: 18:8a:2c:d9:08:25:1c:7a:16:e2:c5:46:93:3f:6c:9b:77:50: a3:4d:e6:0d:e7:5f:08:fc:b4:2f:2b:4f:3a:f8:42:67:49:ca: 09:e3:6d:d5:42:7e:6d:74:3c:99:45:d3:f5:b2:33:a0:f8:d3: 71:fc:3b:eb:5a:22:75:1c:25:5f:1e:4c:00:71:76:5e:50:16: f0:09:ad:a0:71:bd:ca:e6:75:60:47:c0:b8:01:88:42:6d:ee: bb:89:4f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK21oc235TUUKjIFMh2g3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjUxMTA0MTQwMDM3WhcNMjUxMTA1MTQwMDM3WjAzMTEwLwYDVQQD Eyg3ZDY2MTAyNGIxYTNhMjI2MTI0YWIxMGM0NGRmZDZmY2RlMjcyYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTBNGPeu2Ozhc0U6oGWA199d+74r Swnkh8gxNK3VaEtzUQXCPXM2MaeUMt+8dRh+znRUwE7c+Z3kmAHuQfMoELMAn39Z CGuw2lfvbletWr0gGvdLChM2buQwiTtGkA4Bt2W49/IpTcTKVrcIbE5BftTRdM25 O+wsdzQnat78Bqf3McUfVsRYQlSrJWD0u7y41gd/o9hZjnS0rajV9LG9ct2Aozlp C9GsVE0mOcF5NkFR5nE2rdIZcCp+vxam+Rh+qet1MIfc7OBZxa3fzBuDZ6AYqF21 lid/Myul2eic8n7s8ZMJ+oT1PEqnZG5FfLWmlW3aGpu8LHgTEN1Fh/8Z/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1mECSxo6ImEkqxDETf1vzeJyxoMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyysvT3f NM/fRn1q3sEu7Zb+frZIyvICweBKQM4W9IrFoG0MvxZlui/yUzbEycRHTcyq/5AS Vnh84Fe2yqKiy/Vya072hbBYZyvzBYRd4nDcqiTumVvffl6bJrJcIk1CP8RkMTFc peYFzydTuc+ZBJLkY65XfnKmnM1TBAXoQQ+bUdKh20iu6eKPyrOarPZ1U8A1oQIX 10TTm/NbOekPWQU/GIos2QglHHoW4sVGkz9sm3dQo03mDedfCPy0LytPOvhCZ0nK CeNt1UJ+bXQ8mUXT9bIzoPjTcfw761oidRwlXx5MAHF2XlAW8AmtoHG9yuZ1YEfA uAGIQm3uu4lPUw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:59:25 2025 by rpki-client