$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: ZFyxOqmvpu5iOcIOK/lxsXgRo3XcBN2y3LQ/u6ZSpx8= Subject key identifier: 0B:5C:DC:27:4E:70:1C:7D:B3:08:F2:D1:97:52:83:7B:54:83:E1:5F Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019A4F995EA40F0B6247C0979981C094528C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1723 Signing time: Tue 04 Nov 2025 16:00:42 +0000 Manifest this update: Tue 04 Nov 2025 16:00:42 +0000 Manifest next update: Wed 05 Nov 2025 16:00:42 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 3: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 4: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 5: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 6: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 7: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 8: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 9: AKM5h6Ix-3LMoRtdGUA19KyVLio.roa (hash: P77lNcJ0zrzNLtgfjbd4pt0XLBw/55/N1ocxrR5mz8k=) 10: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 11: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 12: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 13: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 14: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 15: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 16: PfuePBqyE9oSuvuOqPl2yYw0_nM.roa (hash: I912gPvDq9Xcn/nApuI3hIUcz4zJdPzL8TmlGrNFHYI=) 17: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=) 18: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 19: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 20: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 21: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 22: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=) 23: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 24: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 25: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 26: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=) 27: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 28: fOCG8GZHTaRDntl_g9LNFOGmkqw.roa (hash: bR9905Jw5jekH7I9Vxe1eqFMLaQsdQXCVYQbjYCAIBw=) 29: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 30: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=) 31: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 32: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 33: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: St2W1DGBRAGXkDLg2DndFFmsaGvBPj6UKGl+XZIBa44=) 34: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) 35: zeZ61iX-XErVVOagrLymRhqtVs4.roa (hash: /TVn1IqCr3rkgm7hee64o/NjLqoDVeiwVYa0FN7+DSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:5e:a4:0f:0b:62:47:c0:97:99:81:c0:94:52:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Nov 4 16:00:42 2025 GMT Not After : Nov 5 16:00:42 2025 GMT Subject: CN=0b5cdc274e701c7db308f2d19752837b5483e15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:e0:dd:ce:e3:e4:16:01:1c:55:b8:ea:fb: 17:99:f1:2b:79:b0:18:98:4e:6c:71:2e:cb:a9:75: 4f:7b:4d:03:2d:07:cd:4b:6b:a4:bb:eb:62:9d:bc: d4:21:b4:b3:72:60:68:6f:f9:06:52:cc:45:67:2d: 0d:b9:2b:65:f3:19:8b:a6:1e:48:f9:17:6c:11:52: 17:cd:3d:be:60:bf:2a:f5:64:0e:41:1e:b0:0a:60: 89:81:0c:16:11:6b:ac:c9:f6:4d:41:b8:5d:ae:22: fd:76:9c:b1:77:16:f9:22:33:11:ac:46:fc:7d:b7: f1:aa:f5:81:8c:19:a3:d6:ea:9a:5d:81:dd:59:7d: da:b4:00:b9:2c:8d:c0:a1:2f:91:fb:01:9e:37:d5: 97:8a:05:f8:c2:9a:99:5c:5c:0a:48:e2:95:b7:5c: dd:a5:3e:28:a2:79:0c:c4:be:35:a9:99:1c:da:4e: 4b:f2:06:b5:96:43:d1:8b:67:d2:a5:1b:82:23:d5: 56:45:aa:cd:7a:42:24:b6:3d:ae:03:2e:8f:24:eb: e2:45:d3:40:7a:07:19:aa:10:3a:9c:a2:45:ab:bd: 3a:89:97:f8:ff:ea:8a:d3:aa:4f:e0:73:20:1f:3e: 37:6d:b5:2b:d4:16:85:af:1b:f9:22:7f:6a:eb:63: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5C:DC:27:4E:70:1C:7D:B3:08:F2:D1:97:52:83:7B:54:83:E1:5F X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:62:a9:1b:59:75:0f:5f:dc:a2:4f:02:d7:ba:37:eb:4e:99: e9:5c:91:47:b8:bc:b5:33:34:4f:52:e7:76:73:ec:8b:e2:a9: f9:a4:b1:66:09:6f:1a:57:93:38:81:44:a9:5c:ba:09:7c:46: 46:ea:e3:e1:85:90:25:ce:df:e5:2e:d1:ad:14:22:6f:87:51: c8:9d:c8:b1:2e:fe:ac:d3:5e:a4:92:cc:5b:22:e4:a5:66:87: e9:3c:c2:ed:19:78:cf:8f:14:36:cc:a4:8f:ea:37:53:74:a7: 73:af:fc:e3:43:c8:98:b5:57:53:9b:fd:bc:7c:8c:b3:db:8e: a4:51:1a:f6:74:b3:42:b2:40:40:69:af:5e:ea:0e:28:d9:ff: c4:1c:98:76:a3:40:71:5f:90:68:36:d7:95:00:ee:29:29:32: 6d:5c:ce:57:d6:4f:e2:64:6b:29:15:8c:6f:0f:af:f1:ce:b2: 53:cf:97:3b:ea:7e:c7:22:fc:a8:00:cc:0e:60:4d:56:ed:a1: 47:b8:4a:94:a5:d5:43:fe:6a:33:78:b0:60:a4:fe:2c:41:bd: 30:16:80:56:48:4a:38:a1:87:b2:01:46:ad:4f:c8:76:6b:7b: c5:68:9d:d5:cb:ac:b6:c9:f7:38:89:fe:c3:14:f4:2e:f4:a6: bd:5e:e2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmV6kDwtiR8CXmYHAlFKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUxMTA0MTYwMDQyWhcNMjUxMTA1MTYwMDQyWjAzMTEwLwYDVQQD EygwYjVjZGMyNzRlNzAxYzdkYjMwOGYyZDE5NzUyODM3YjU0ODNlMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Njg3c7j5BYBHFW46vsXmfErebAY mE5scS7LqXVPe00DLQfNS2uku+tinbzUIbSzcmBob/kGUsxFZy0NuStl8xmLph5I +RdsEVIXzT2+YL8q9WQOQR6wCmCJgQwWEWusyfZNQbhdriL9dpyxdxb5IjMRrEb8 fbfxqvWBjBmj1uqaXYHdWX3atAC5LI3AoS+R+wGeN9WXigX4wpqZXFwKSOKVt1zd pT4oonkMxL41qZkc2k5L8ga1lkPRi2fSpRuCI9VWRarNekIktj2uAy6PJOviRdNA egcZqhA6nKJFq706iZf4/+qK06pP4HMgHz43bbUr1BaFrxv5In9q62NqnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtc3CdOcBx9swjy0ZdSg3tUg+FfMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWKpG1l1 D1/cok8C17o3606Z6VyRR7i8tTM0T1LndnPsi+Kp+aSxZglvGleTOIFEqVy6CXxG Rurj4YWQJc7f5S7RrRQib4dRyJ3IsS7+rNNepJLMWyLkpWaH6TzC7Rl4z48UNsyk j+o3U3Snc6/840PImLVXU5v9vHyMs9uOpFEa9nSzQrJAQGmvXuoOKNn/xByYdqNA cV+QaDbXlQDuKSkybVzOV9ZP4mRrKRWMbw+v8c6yU8+XO+p+xyL8qADMDmBNVu2h R7hKlKXVQ/5qM3iwYKT+LEG9MBaAVkhKOKGHsgFGrU/Idmt7xWid1custsn3OIn+ wxT0LvSmvV7iKQ== -----END CERTIFICATE-----Generated at Tue Nov 4 17:37:17 2025 by rpki-client