$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: 6CR8QUT9NlS4oI5nyiTBaAMgpWzgMyWDMTZ1JyTw0r4= Subject key identifier: 53:85:EF:2D:E9:6C:03:3F:9E:53:C5:61:5F:16:22:45:05:D7:E1:84 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019A4E86638CD61973401BC18F256236DA93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 1651 Signing time: Tue 04 Nov 2025 11:00:21 +0000 Manifest this update: Tue 04 Nov 2025 11:00:21 +0000 Manifest next update: Wed 05 Nov 2025 11:00:21 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: GqC3ZO1y9oc4vznv7EbpMYcfENc.roa (hash: Q4sGgT5nLBJ6T1APzes4amjNpmeLdQJEi2Te5mDw21c=) 5: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 6: JCqujfTGMs0CXH7Tcl7wXUJG7rk.roa (hash: EOjAhyUB1/yJybUbQZT8krxAn/rD2CzV6whjFRdiiOs=) 7: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: aQiCEbcmjqcL76OWULByTsLonRIY+tpKiL6a0qrIiXA=) 9: WScD7uexqWsVTcbkJjit77c6EOI.roa (hash: f2zrSoKeWZhUxfn8r26SKqbqog0gDJQR8fLpQvUe4SA=) 10: aTbpQVeF3qhdjwAef1H9xAeFlDY.roa (hash: xS42P2/TkS38R4InDxszyPR683sYKaN1Asg6o2Jnimc=) 11: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 12: euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa (hash: +ITOQ37NY3K8KZwFVE/U+tAJpUP5s6XRPDFSdyZ1pcc=) 13: hh7Gdh6zfaFogwbFBRa2NVcPr_I.roa (hash: ssBuLOF5j4levhxPJMBnrdwY3/mZUCOBNj16h6KB1U0=) 14: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 15: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 16: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:63:8c:d6:19:73:40:1b:c1:8f:25:62:36:da:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Nov 4 11:00:21 2025 GMT Not After : Nov 5 11:00:21 2025 GMT Subject: CN=5385ef2de96c033f9e53c5615f16224505d7e184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:57:af:1f:0f:47:15:88:c6:e3:07:cc:cb: a7:45:ae:81:32:f6:0f:77:a2:68:83:42:00:41:2f: 1f:e8:87:62:6c:98:4a:34:ad:4d:2f:4a:2a:aa:01: f3:d3:65:68:45:30:88:a0:a4:85:3d:24:f8:ab:eb: 6d:a3:f2:4f:f7:db:6d:70:21:cd:c4:dc:08:ee:3f: c7:29:a3:b6:77:3a:dd:cf:01:e3:6a:3f:b0:88:87: ba:82:84:f4:e1:69:7c:d8:9d:40:67:89:a9:c6:ce: eb:0e:98:1c:93:14:08:da:7c:3b:42:5c:e0:ce:cf: 7a:d4:85:c6:d0:fc:05:7d:5c:45:a6:e9:d4:9b:8e: 74:96:04:90:d9:57:6b:4f:5b:ca:84:6d:b2:51:74: f7:9f:80:a5:c8:c7:85:1a:51:68:81:62:97:b8:cf: b7:f8:61:ce:d4:32:de:e0:f8:9a:e1:0e:f2:f8:7b: c7:a5:0c:d0:1a:c1:a0:67:97:e8:b8:aa:ca:74:c9: e4:72:d8:60:fc:32:d0:d8:3a:c7:95:c2:68:91:3e: c6:d3:1e:5d:7c:57:ec:a2:a6:b0:0e:12:fe:b5:d5: e6:7a:ca:39:b9:a3:90:e5:ab:62:6e:36:cb:30:72: 72:2c:58:68:5c:4c:e5:b8:62:23:58:c3:c5:db:05: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:85:EF:2D:E9:6C:03:3F:9E:53:C5:61:5F:16:22:45:05:D7:E1:84 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f6:a8:fc:d2:d5:05:f6:9b:71:d8:00:e7:8a:68:76:1f:cb: 62:5c:00:3a:2c:7a:11:06:8a:82:01:4b:e2:4d:24:4c:69:10: 71:15:f0:94:0d:76:0a:78:94:dc:4b:57:84:ae:1e:8a:34:ef: de:96:c6:5d:3b:cc:af:40:fe:8b:59:7a:b7:d1:9b:6e:ad:49: 8a:87:1c:41:9d:23:ff:fc:ab:12:b1:df:2a:a5:55:0e:0f:a0: 26:58:3b:57:da:75:ef:4a:5e:96:ac:e5:86:f0:7f:fd:8e:8a: 61:4b:2e:e2:83:b6:00:3f:63:52:6b:cb:9a:76:2c:19:a1:21: f0:6e:26:0b:e7:90:f0:c7:e8:b6:2c:5c:da:1a:1c:bd:dc:5b: 2b:fb:4a:f6:51:4a:5c:e1:52:77:3a:d0:1a:2e:0f:f3:fa:43: 06:96:9e:07:91:80:55:51:c8:a7:32:d1:d8:67:5e:d7:97:40: 9c:e8:3a:3f:a3:e0:8b:ae:4d:1d:a8:c1:d4:b5:03:1f:5d:74: 59:dd:7d:21:8a:ba:91:71:6e:65:62:8b:29:18:90:5e:8f:db: e3:19:bb:0d:d1:ba:d4:d0:9c:67:ab:20:be:28:b5:00:64:57: 4f:09:a8:d2:5f:ec:34:6f:8f:36:6f:fd:0c:96:5c:2c:6f:8d: 84:4d:67:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhmOM1hlzQBvBjyViNtqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUxMTA0MTEwMDIxWhcNMjUxMTA1MTEwMDIxWjAzMTEwLwYDVQQD Eyg1Mzg1ZWYyZGU5NmMwMzNmOWU1M2M1NjE1ZjE2MjI0NTA1ZDdlMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbBXrx8PRxWIxuMHzMunRa6BMvYP d6Jog0IAQS8f6IdibJhKNK1NL0oqqgHz02VoRTCIoKSFPST4q+tto/JP99ttcCHN xNwI7j/HKaO2dzrdzwHjaj+wiIe6goT04Wl82J1AZ4mpxs7rDpgckxQI2nw7Qlzg zs961IXG0PwFfVxFpunUm450lgSQ2VdrT1vKhG2yUXT3n4ClyMeFGlFogWKXuM+3 +GHO1DLe4Pia4Q7y+HvHpQzQGsGgZ5fouKrKdMnkcthg/DLQ2DrHlcJokT7G0x5d fFfsoqawDhL+tdXmeso5uaOQ5atibjbLMHJyLFhoXEzluGIjWMPF2wUcgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOF7y3pbAM/nlPFYV8WIkUF1+GEMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfao/NLV BfabcdgA54podh/LYlwAOix6EQaKggFL4k0kTGkQcRXwlA12CniU3EtXhK4eijTv 3pbGXTvMr0D+i1l6t9Gbbq1JioccQZ0j//yrErHfKqVVDg+gJlg7V9p170pelqzl hvB//Y6KYUsu4oO2AD9jUmvLmnYsGaEh8G4mC+eQ8Mfotixc2hocvdxbK/tK9lFK XOFSdzrQGi4P8/pDBpaeB5GAVVHIpzLR2Gde15dAnOg6P6Pgi65NHajB1LUDH110 Wd19IYq6kXFuZWKLKRiQXo/b4xm7DdG61NCcZ6sgvii1AGRXTwmo0l/sNG+PNm/9 DJZcLG+NhE1n0g== -----END CERTIFICATE-----Generated at Tue Nov 4 15:04:36 2025 by rpki-client