$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: ZNV+3UEcZxU29LqorDRafZd6gtyNX4K10TgBoYKAfBk= Subject key identifier: 53:30:CB:65:E7:1B:68:F2:64:EA:4B:A7:AB:85:13:17:64:13:B1:47 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019A4EF497CA2BD33A39EAA51E6BF2AA3F19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 14AE Signing time: Tue 04 Nov 2025 13:00:43 +0000 Manifest this update: Tue 04 Nov 2025 13:00:43 +0000 Manifest next update: Wed 05 Nov 2025 13:00:43 +0000 Files and hashes: 1: 0vnSiPOWnmFU81unx3CiiKoqL9Y.roa (hash: DfmLpO9j7T70YWipxuVu48t55S7NoYp0HKdaTOCmQYU=) 2: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 3: 5hhLPsRpw9KA7o9wasEihzJSXoA.roa (hash: rLTFQz+FRyLZFkOs44WSv8ULNMp8Sfi16jOBN6XhYiE=) 4: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=) 5: GMWgFQwd8nrIkV51lAwKwBtEBhI.roa (hash: +zDKOCeZ+E87qba/A9Qx+V3SrLOM1wpx9qfe7qe53g8=) 6: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 7: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 8: T5vT2PUuOK_oOw9eeL61OG5JodE.roa (hash: Qx9ZluVUWlljB4Ttw7aM+HpAqzmXCG2m7QWMx89ePAE=) 9: TGAbtOOQvJAO29jntkyfdiXsA34.roa (hash: Qa/Pmj8niQ7pWqzQURSMGZYQ5K31JvVZc6izGiwMvgM=) 10: VvWxBpgkQSp13g1sdt8P4SzC2m0.roa (hash: 9FE7dSvN+4LiBj47pFfaG8MIDBafbeRoSmTUhhQ2sfk=) 11: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 12: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: vk9qom58K79/QapiC/6aAs2PrwgtD5PbYNAZJw67Uz0=) 13: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 14: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=) 15: hu6bnuWMSsL69RaMbcsCphVrGVA.roa (hash: chRmAEdCMOw97cxZrDlcnZfGEAgcrPGAUTCYAilpK38=) 16: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 17: q56DpE6SjT4lDV119A67V9CrQMI.roa (hash: sEJe90A/qwDILaO38ksc6uM3fs95yXl9fIcKPIheClI=) 18: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 19: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:97:ca:2b:d3:3a:39:ea:a5:1e:6b:f2:aa:3f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Nov 4 13:00:43 2025 GMT Not After : Nov 5 13:00:43 2025 GMT Subject: CN=5330cb65e71b68f264ea4ba7ab8513176413b147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:f8:52:f2:60:44:2d:99:f9:f5:65:be:4e: 99:c0:93:e1:78:df:cc:57:31:5f:53:b0:85:68:7f: 74:84:88:e0:53:51:e1:e2:71:c3:f0:55:0c:41:4e: 21:76:9a:65:3c:ce:6f:0f:67:82:60:74:e0:ad:a3: 9f:80:bb:f4:1b:86:d1:df:e8:57:97:d1:5c:42:c9: 4a:ea:b3:71:e7:2b:ce:af:51:c1:c3:4c:d0:b3:5f: 1e:65:a5:63:46:91:53:35:ca:8a:07:83:dd:c6:ac: 01:dd:7e:19:46:fd:82:1e:30:0c:c3:ed:7f:f2:f0: ea:b5:3e:eb:26:58:56:58:5f:95:d3:84:21:81:e0: d3:e4:9e:6a:7d:9c:eb:e0:b6:22:9a:4a:4a:1d:11: 21:17:9d:59:df:2b:43:5f:dc:fc:5d:ef:d3:d2:98: f4:aa:a5:05:53:47:c8:ce:51:77:bc:2d:ec:15:e0: e5:ea:15:a0:77:d9:6e:f6:f0:87:d5:0d:46:50:e8: 8d:75:23:c4:83:f2:f2:ee:b6:df:63:5e:9a:58:e6: 30:e4:df:b1:9d:33:29:c7:a8:83:b0:f9:55:b0:ec: 70:e8:59:2d:7c:e4:cc:36:67:be:1e:c0:45:a2:13: 53:2c:20:3d:1a:0d:d1:be:c8:c9:24:24:4c:90:af: 11:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:CB:65:E7:1B:68:F2:64:EA:4B:A7:AB:85:13:17:64:13:B1:47 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c4:9b:8a:19:a4:5f:78:d8:c9:5b:dc:d1:28:d7:35:09:1e: ec:31:bc:3f:3d:cd:f8:6f:4d:5a:30:63:2e:76:0d:85:27:41: 6e:d2:c4:73:d9:46:65:ac:95:13:2d:f3:95:ef:a6:89:b1:a7: 86:08:f3:39:51:9a:47:6d:5b:4e:99:7d:35:7d:2f:5d:08:e9: 1e:19:ec:22:2d:57:f0:8d:15:e2:35:3d:91:a2:05:58:70:14: 75:ea:a9:18:ef:8c:0d:ea:42:02:92:ae:af:6a:e5:b0:50:e1: 8f:d5:96:1f:24:cd:fa:fc:e8:2e:c3:b0:29:50:d1:96:6e:50: d1:e8:96:21:74:f5:dc:bb:b5:9a:3c:57:b8:b6:49:5a:39:e1: ce:f1:51:d6:1f:74:2c:93:bf:cf:55:de:52:0b:7f:8a:bf:24: ac:fb:80:3c:36:46:af:1d:ff:a9:e9:10:c4:6f:8e:83:f9:94: 8f:ae:b7:45:c1:1b:81:e8:d7:75:9f:d1:65:a1:27:eb:de:44: d3:be:c2:33:3f:f1:51:f4:7d:ea:34:92:b7:43:3e:e5:d3:a5: 0f:91:d4:36:74:d8:89:87:a0:bf:33:50:be:22:28:31:00:cf: 06:df:b4:7c:8c:dd:ef:f2:e6:ef:59:d5:45:f3:56:80:5b:d9: 69:30:41:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9JfKK9M6OeqlHmvyqj8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUxMTA0MTMwMDQzWhcNMjUxMTA1MTMwMDQzWjAzMTEwLwYDVQQD Eyg1MzMwY2I2NWU3MWI2OGYyNjRlYTRiYTdhYjg1MTMxNzY0MTNiMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKj4UvJgRC2Z+fVlvk6ZwJPheN/M VzFfU7CFaH90hIjgU1Hh4nHD8FUMQU4hdpplPM5vD2eCYHTgraOfgLv0G4bR3+hX l9FcQslK6rNx5yvOr1HBw0zQs18eZaVjRpFTNcqKB4PdxqwB3X4ZRv2CHjAMw+1/ 8vDqtT7rJlhWWF+V04QhgeDT5J5qfZzr4LYimkpKHREhF51Z3ytDX9z8Xe/T0pj0 qqUFU0fIzlF3vC3sFeDl6hWgd9lu9vCH1Q1GUOiNdSPEg/Ly7rbfY16aWOYw5N+x nTMpx6iDsPlVsOxw6FktfOTMNme+HsBFohNTLCA9Gg3RvsjJJCRMkK8RSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMwy2XnG2jyZOpLp6uFExdkE7FHMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosSbihmk X3jYyVvc0SjXNQke7DG8Pz3N+G9NWjBjLnYNhSdBbtLEc9lGZayVEy3zle+mibGn hgjzOVGaR21bTpl9NX0vXQjpHhnsIi1X8I0V4jU9kaIFWHAUdeqpGO+MDepCApKu r2rlsFDhj9WWHyTN+vzoLsOwKVDRlm5Q0eiWIXT13Lu1mjxXuLZJWjnhzvFR1h90 LJO/z1XeUgt/ir8krPuAPDZGrx3/qekQxG+Og/mUj663RcEbgejXdZ/RZaEn695E 077CMz/xUfR96jSSt0M+5dOlD5HUNnTYiYegvzNQviIoMQDPBt+0fIzd7/Lm71nV RfNWgFvZaTBBhQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:39:06 2025 by rpki-client