$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json) Hash identifier: X0aBOfn+KwbX58LUSXduKVil4x80jQSFWQI4TQ7/e4I= Subject key identifier: DB:7E:81:D6:89:7E:DE:41:E4:A6:B9:D2:9A:2D:BC:A1:39:5A:6B:2A Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019A5451E1B29C387A52281A0E1199B4623D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft Manifest number: 10B8 Signing time: Wed 05 Nov 2025 14:00:43 +0000 Manifest this update: Wed 05 Nov 2025 14:00:43 +0000 Manifest next update: Thu 06 Nov 2025 14:00:43 +0000 Files and hashes: 1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=) 2: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=) 3: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=) 4: Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa (hash: vhJRnVcBvTImc9Sv3yScvOufw+og96lcsubFcpiYN6Q=) 5: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=) 6: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=) 7: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=) 8: T76XHEYKPxvXgzVhYoIpXxSuwwA.roa (hash: gIybCKbgfywSTgVeKeQdR2l0hkSxZKXJNGi8hE3axtM=) 9: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=) 10: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=) 11: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=) 12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=) 13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=) 14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=) 15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: gOVXXXCNDVAhQV8zh+Zv0w/bCoOl1e9e5KtsM4gaelk=) 16: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (hash: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=) 17: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=) 18: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=) 19: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=) 20: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=) 21: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=) 22: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=) 23: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=) 24: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=) 25: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:51:e1:b2:9c:38:7a:52:28:1a:0e:11:99:b4:62:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Nov 5 14:00:43 2025 GMT Not After : Nov 6 14:00:43 2025 GMT Subject: CN=db7e81d6897ede41e4a6b9d29a2dbca1395a6b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c3:e5:4e:82:be:9a:4d:d3:76:f5:58:17:45: 5a:b4:ee:84:5c:55:7e:ef:9d:3b:f1:d2:84:0f:27: 91:03:a3:ac:ab:6d:e9:86:9a:d6:89:53:a4:8c:fa: 0d:17:2d:0e:3b:2d:54:eb:c3:2b:e8:eb:4b:cb:a6: 5d:e0:dd:b6:64:33:65:20:61:05:db:ad:ee:36:db: 83:45:6b:69:04:39:99:d3:12:ec:cc:a1:c9:fa:a5: b3:b5:f1:b4:8d:eb:cf:58:25:a1:37:33:1d:d2:94: 94:2e:4a:ae:05:e0:20:cd:ea:7e:99:38:77:19:c9: 50:6d:b4:55:44:94:c9:be:8b:4c:76:75:ae:d2:e3: e7:92:9b:ed:b8:58:7c:ea:72:fb:42:f5:72:1a:e5: 59:1b:a9:69:10:f0:b2:41:6b:29:8d:6a:3b:cd:37: 04:5a:71:b9:60:16:ed:72:61:2d:0d:09:a0:4f:9d: 8d:96:cd:4d:a2:a6:cc:ea:f2:c4:5d:d0:7f:3f:f3: 3f:f9:cf:3d:52:45:d9:86:68:99:8f:e6:e5:8b:53: f3:13:0e:e1:ef:40:d5:de:d4:07:16:12:fc:c3:16: ce:fc:8c:1d:fa:03:34:d1:21:a6:86:ce:30:2d:d7: 49:da:a3:50:a3:af:86:1c:99:56:b6:15:a6:63:bf: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7E:81:D6:89:7E:DE:41:E4:A6:B9:D2:9A:2D:BC:A1:39:5A:6B:2A X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:59:e8:3d:4f:86:0d:93:2f:f8:fb:12:4d:7e:3d:2e:fb:39: 66:df:ef:09:e2:db:36:5e:85:ef:5c:a4:b8:10:e4:f7:83:5d: d2:85:c5:68:0b:0c:f8:97:02:63:50:0f:7e:9c:fd:47:65:d3: 2d:2f:2a:76:16:34:ac:4f:90:81:51:c7:e8:4f:69:62:c2:39: 02:13:7f:ca:65:e6:20:54:9a:25:be:5f:75:cb:be:e0:f5:9f: c4:bc:aa:be:29:be:74:0b:53:37:b1:68:bb:76:33:89:3a:46: 10:fc:09:ab:95:31:0b:a3:58:cd:c9:6a:c2:c7:52:26:a0:d7: c0:0e:ca:8b:e5:a9:c0:12:36:62:f8:2a:c1:e4:93:22:aa:ab: a6:47:9b:eb:12:6b:26:5b:6d:7a:24:e7:7f:98:fb:82:91:e8: db:02:c2:70:fd:2b:e2:d9:c7:b3:1e:52:ee:3f:3f:9e:47:1e: 30:ce:3a:05:78:57:bc:17:35:05:ec:a3:60:7f:04:58:71:e8: 13:eb:96:74:45:21:35:ac:20:86:ee:f0:31:76:c6:4c:81:fd: 04:58:48:ac:84:eb:50:ac:56:4d:be:e5:a5:92:68:8a:1b:33: 55:64:4c:0c:25:73:e4:5d:d1:ae:86:d3:66:0d:b0:35:cd:37: 8e:f5:d6:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpUUeGynDh6UigaDhGZtGI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjUxMTA1MTQwMDQzWhcNMjUxMTA2MTQwMDQzWjAzMTEwLwYDVQQD EyhkYjdlODFkNjg5N2VkZTQxZTRhNmI5ZDI5YTJkYmNhMTM5NWE2YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18PlToK+mk3TdvVYF0VatO6EXFV+ 75078dKEDyeRA6Osq23phprWiVOkjPoNFy0OOy1U68Mr6OtLy6Zd4N22ZDNlIGEF 263uNtuDRWtpBDmZ0xLszKHJ+qWztfG0jevPWCWhNzMd0pSULkquBeAgzep+mTh3 GclQbbRVRJTJvotMdnWu0uPnkpvtuFh86nL7QvVyGuVZG6lpEPCyQWspjWo7zTcE WnG5YBbtcmEtDQmgT52Nls1NoqbM6vLEXdB/P/M/+c89UkXZhmiZj+bli1PzEw7h 70DV3tQHFhL8wxbO/Iwd+gM00SGmhs4wLddJ2qNQo6+GHJlWthWmY7+q6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt+gdaJft5B5Ka50potvKE5WmsqMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1noPU+G DZMv+PsSTX49Lvs5Zt/vCeLbNl6F71ykuBDk94Nd0oXFaAsM+JcCY1APfpz9R2XT LS8qdhY0rE+QgVHH6E9pYsI5AhN/ymXmIFSaJb5fdcu+4PWfxLyqvim+dAtTN7Fo u3YziTpGEPwJq5UxC6NYzclqwsdSJqDXwA7Ki+WpwBI2YvgqweSTIqqrpkeb6xJr JltteiTnf5j7gpHo2wLCcP0r4tnHsx5S7j8/nkceMM46BXhXvBc1BeyjYH8EWHHo E+uWdEUhNawghu7wMXbGTIH9BFhIrITrUKxWTb7lpZJoihszVWRMDCVz5F3RrobT Zg2wNc03jvXWFw== -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:33 2025 by rpki-client