$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft File: jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json) Hash identifier: JSalVRuZJUCc4ppelJOlVhgjUwMihrCpps2RXp5QmA8= Subject key identifier: 8A:79:E4:A5:0D:9E:CD:E3:D8:63:AD:B7:69:B2:3B:EA:35:A1:18:B9 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019A5263283C6B1A83769C526DF7871E2ADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft Manifest number: 10B7 Signing time: Wed 05 Nov 2025 05:00:21 +0000 Manifest this update: Wed 05 Nov 2025 05:00:21 +0000 Manifest next update: Thu 06 Nov 2025 05:00:21 +0000 Files and hashes: 1: 2k7DoYw_fUEI-IRw1yMkv6L8kgY.roa (hash: CzU19QUyTNNv7cv2M1H3GPMiR5txRGI7L/Dpax8ycto=) 2: 80ZmDBZq5-PU-pOoi4cNZY-hYiM.roa (hash: HUfy0YrzHxyEQF6ktaZjTGRUd7aNFhWvpFLfpeZ7xkc=) 3: 99A4IVtXIE35BjjiP_h5rUS3ws0.roa (hash: SCifrn/pmyL7YkH7a1VgF0+SEiaOrC6qaKgWxIHoy/k=) 4: Ctee5FZut6Jw-yGrjrnTCtTO-HM.roa (hash: vhJRnVcBvTImc9Sv3yScvOufw+og96lcsubFcpiYN6Q=) 5: FXOQ9DZsOJSoLCmx0MtWYLZoLis.roa (hash: Vb1pyOLHyXJ0GmUgGbGVYVs6jxiUud7ztRRHO3n5g/A=) 6: GbfU3sLMppEtdewqDLMaWBubw0E.roa (hash: 7p63Th7UDDf6mzZdRjRGDgkafLbUbj5kgBwLK7PNoZ0=) 7: ORedMLYnb0LVXOgGX5x6fgTqghE.roa (hash: 2UNSCAjN9jMQBA4CHydqKx1nKHdJbnZ1QjDJUllLh5w=) 8: T76XHEYKPxvXgzVhYoIpXxSuwwA.roa (hash: gIybCKbgfywSTgVeKeQdR2l0hkSxZKXJNGi8hE3axtM=) 9: TvWiGITQL6TnbZlCP18LK1XHyq0.roa (hash: ECY0NKVBp1G1uivHtWe1d/7Az9PaMkOqJpUteCitqFE=) 10: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (hash: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=) 11: YmXp0kLagMnJFegcO08eA034lyA.roa (hash: HE2edC4wON3Wujsq1suNKRRMgCVpU6jt5hawUs/NQb0=) 12: gm4tKAhXjneey7S0f4JZDHBQxoQ.roa (hash: Ad3Dm+i+7NeJyTuFmvpaF4c2E01O5Jx7QQ62ewCSDiY=) 13: hI2E3ZjYmgtrm9OV5uV8KVFZFFc.roa (hash: tE6Wa1tgj3Aoh1FeZXyjGFAoSLL+sDQ+OfIFAkY7L40=) 14: hoJCPHI3kMFvNyJJekf8HSd0pa8.roa (hash: N89cvCwlx15A0MnySLkXdi8r2pYx7GPiu1HNTh+VXJI=) 15: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: VLPmYNni16riTepNiqJw5c5/Ebj9rPTH/Cz9EVtvt5I=) 16: l06Jo4wcn9UZNl3jwjiavlx-v4M.roa (hash: +evzu72ciOeStTyT4XPgCsvTMWGGffJYcUeps8zXWZk=) 17: nwzUhf9TgBuwLQrQ1UYv26CrJIA.roa (hash: elr0dQBhD70lY5vUB09Z5pfoDsLtushbNHe4ZzT4VT4=) 18: qW05wAjwRLWGqRlzcNxJTSPBRpE.roa (hash: 642SRGn6Z467IpVUdTC0I7NjDwrjuS9AcAXZkWNP6fQ=) 19: rf7jWc7ttmZWX3mJWpgkLpvcgqs.roa (hash: YZQ7aq3dLHw4G1byXvwZsPXvgsmcNqlGGiJCIat2I7w=) 20: t-rsVL4BJwEwBBoHBVhIML92hRs.roa (hash: ejUp8ew1AaALCNdiAT72D3nSXem/ndlDi+OAao2nEnA=) 21: ti-qGCmysd4PNgZOBUwDUY8Iluk.roa (hash: Fz4esdv4UKiDsnoNXnH6zVCbGFtLlWDlHFrg5xjFGG8=) 22: ucH7IeIWTX6RVcP_anDxrMhkplo.roa (hash: cBNoIGHr8LbNGj9a6kRhTTmCpwzcmwsWD4LP8P5es7w=) 23: vD4d6-Ufm0fFISjlc8rxFlQwwWc.roa (hash: Uumg8s4o+wVYm27hvDEXKDjNoX6wIGo/XZKnaH3fl/4=) 24: yMwlMMuf6AhxELQISsW6Wy_I6Vg.roa (hash: g4eIZppKVsYn9i4uTmCGcx2yG0hOtyeUq+t1P+63Lok=) 25: ylAbJ59-6F4ZAbwoLXiKbYBu2XA.roa (hash: IDkXWTS84Fvv3D5U1LadiDGtpmPn3EbQp1U5eFRNYhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:63:28:3c:6b:1a:83:76:9c:52:6d:f7:87:1e:2a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Nov 5 05:00:21 2025 GMT Not After : Nov 6 05:00:21 2025 GMT Subject: CN=8a79e4a50d9ecde3d863adb769b23bea35a118b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:77:db:ee:4f:17:7f:0f:ae:fd:f5:dc:b8: 66:3f:33:44:6f:09:73:5e:e2:2a:51:4a:eb:47:96: 1e:fd:36:97:97:18:02:24:73:b0:6c:78:52:be:70: 44:4c:e8:ec:6a:e6:39:3f:63:0b:e5:ea:91:fc:33: ec:a0:73:36:06:a7:fd:94:46:0a:10:b4:d1:68:c5: 6b:19:f3:9a:99:56:c5:08:aa:dc:53:47:c8:79:1c: 7a:38:eb:20:b4:d6:7e:a7:6b:97:17:ab:48:c8:66: cf:9a:3f:7b:ef:e3:16:df:45:43:2c:21:6d:36:90: 0c:16:35:aa:be:a5:dd:b8:e4:52:da:e8:ed:36:26: c6:ef:82:b8:b2:b7:f0:d9:50:1e:b9:27:95:06:ba: 85:c2:ee:f6:b9:48:e5:67:58:5e:ad:64:5d:a4:dd: 00:81:67:e5:67:06:9e:c7:c7:d9:c8:2b:96:85:1b: 81:9f:b4:bd:6a:3d:fb:95:18:b9:05:ae:6a:be:b4: ba:0c:64:5c:7e:2e:e8:27:2b:34:62:53:54:d4:5e: a1:4f:79:42:37:40:25:96:8b:88:a9:6a:bf:49:58: c1:26:4f:c9:0d:e6:35:fc:e2:3a:96:56:3c:6f:d4: 93:a9:a2:18:fe:a5:96:a1:c3:02:05:92:fa:13:18: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:79:E4:A5:0D:9E:CD:E3:D8:63:AD:B7:69:B2:3B:EA:35:A1:18:B9 X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4b:97:d8:d3:c0:74:59:cc:e7:15:e6:bd:57:aa:6d:87:02: 98:76:60:cd:b7:76:39:94:43:63:87:30:48:1f:d0:d1:8b:08: fe:a9:52:89:89:1d:ec:70:27:59:2c:73:4d:9f:6b:82:48:25: cc:43:67:cb:f8:d9:d0:d7:25:49:b9:b5:f2:5c:8c:ca:e1:68: 9a:6c:e1:c2:d8:33:00:58:e3:27:b4:b0:64:d8:e0:9f:5a:73: b3:0b:83:80:cc:31:62:88:97:b0:f2:91:49:ac:d8:9e:6d:9e: 2a:7c:e1:2e:60:be:a2:70:df:ac:eb:92:ab:5c:92:fd:12:c2: d7:0a:b2:f0:9e:9a:6e:af:4d:f5:1f:0d:a6:a2:66:65:e9:00: 46:fd:5b:81:59:40:26:8d:15:ac:ca:76:39:ed:73:3a:66:df: e2:9d:2e:4e:3f:2d:5d:f6:8b:06:b2:99:04:d6:d5:eb:32:0d: f7:0f:d4:f7:5c:fc:35:8d:e9:f9:09:d2:2a:89:bd:61:cf:9c: 7f:bf:61:41:74:bc:8b:87:e5:5f:22:ac:fb:1b:9a:7a:ab:19: 1c:50:30:c7:a4:8c:34:de:0f:82:47:e4:1b:c4:3d:f9:d9:7d: 0c:47:f7:98:75:b9:22:f5:01:02:56:7e:08:21:db:58:39:37: db:eb:d9:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpSYyg8axqDdpxSbfeHHireMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjUxMTA1MDUwMDIxWhcNMjUxMTA2MDUwMDIxWjAzMTEwLwYDVQQD Eyg4YTc5ZTRhNTBkOWVjZGUzZDg2M2FkYjc2OWIyM2JlYTM1YTExOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/B32+5PF38Prv313LhmPzNEbwlz XuIqUUrrR5Ye/TaXlxgCJHOwbHhSvnBETOjsauY5P2ML5eqR/DPsoHM2Bqf9lEYK ELTRaMVrGfOamVbFCKrcU0fIeRx6OOsgtNZ+p2uXF6tIyGbPmj977+MW30VDLCFt NpAMFjWqvqXduORS2ujtNibG74K4srfw2VAeuSeVBrqFwu72uUjlZ1herWRdpN0A gWflZwaex8fZyCuWhRuBn7S9aj37lRi5Ba5qvrS6DGRcfi7oJys0YlNU1F6hT3lC N0AllouIqWq/SVjBJk/JDeY1/OI6llY8b9STqaIY/qWWocMCBZL6ExiPcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp55KUNns3j2GOtt2myO+o1oRi5MB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0uX2NPA dFnM5xXmvVeqbYcCmHZgzbd2OZRDY4cwSB/Q0YsI/qlSiYkd7HAnWSxzTZ9rgkgl zENny/jZ0NclSbm18lyMyuFommzhwtgzAFjjJ7SwZNjgn1pzswuDgMwxYoiXsPKR SazYnm2eKnzhLmC+onDfrOuSq1yS/RLC1wqy8J6abq9N9R8NpqJmZekARv1bgVlA Jo0VrMp2Oe1zOmbf4p0uTj8tXfaLBrKZBNbV6zIN9w/U91z8NY3p+QnSKom9Yc+c f79hQXS8i4flXyKs+xuaeqsZHFAwx6SMNN4PgkfkG8Q9+dl9DEf3mHW5IvUBAlZ+ CCHbWDk32+vZcA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:31:25 2025 by rpki-client