$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json) Hash identifier: rIjkFwPjN01G0XOYux+roRpBkc5GoIuTUYTBrEfZQnk= Subject key identifier: 2E:81:A6:CC:6E:64:C6:BB:63:57:E2:EB:92:30:6E:67:4C:9B:17:4B Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019A4F98C5F64D8A44D80E6E7F3CD18E15CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft Manifest number: 1759 Signing time: Tue 04 Nov 2025 16:00:03 +0000 Manifest this update: Tue 04 Nov 2025 16:00:03 +0000 Manifest next update: Wed 05 Nov 2025 16:00:03 +0000 Files and hashes: 1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=) 2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=) 3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=) 4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=) 5: AlQ9s5QZK2NSuAym9BFFOrJaC0g.roa (hash: QAchfxqcPxu44vFEqxRKf6wyg72hfH4/rebn2BcHbus=) 6: Ex20uzHz9WPZtpUKFgVSg-1o3Ec.roa (hash: 7iWCmcnFvT4+5sP0JfdgVyw5+zR67znI9LkPlc7vFoo=) 7: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (hash: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=) 8: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=) 9: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=) 10: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=) 11: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=) 12: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=) 13: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=) 14: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=) 15: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=) 16: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=) 17: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=) 18: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=) 19: ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa (hash: A8osarOaXuQWeZx8KQYjMoJwdcPiXJPczE87ARsfRqI=) 20: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: gdjOTAWgQB5pSGlXNUznSrsTI/oN6krLTYYM8LpxeqQ=) 21: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=) 22: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=) 23: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=) 24: k1RkiO-oYIsdIxPMb4yp4wi06vw.roa (hash: MCgag/nnrriwvetJZ3hm9uP9KJjRl+UaPWHYQ89ULn8=) 25: oBKt6fMr87e-rFOhXitc_DWZtdg.roa (hash: qJjvrPZfU1anKZ4X1zOc4+1vwatadPrAJ6kaez7yYks=) 26: pKg9Eulzznq_Xmusn2tCljsUFm0.roa (hash: ZV91D/vMdBvdabbs6xfKbOYCwCqfj4mEA5NzU3QNIzA=) 27: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=) 28: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=) 29: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=) 30: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=) 31: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:98:c5:f6:4d:8a:44:d8:0e:6e:7f:3c:d1:8e:15:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Nov 4 16:00:03 2025 GMT Not After : Nov 5 16:00:03 2025 GMT Subject: CN=2e81a6cc6e64c6bb6357e2eb92306e674c9b174b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:1a:c4:be:a7:3b:95:ee:9f:57:47:ee:74: 6d:3f:27:45:45:93:96:d1:e8:cb:b5:96:e6:f1:c1: 0a:7d:00:e3:3a:e7:1c:72:68:a3:b0:e2:2f:8e:ea: e9:63:eb:39:4d:60:00:e6:4f:a9:90:f0:a2:46:df: 85:61:2c:10:65:46:17:7b:6e:26:71:07:4e:1a:8b: 9e:72:48:de:fd:84:25:45:d6:01:3e:32:1f:ea:08: 7e:df:15:00:4e:95:21:d2:0f:fe:82:53:f6:d5:5c: a9:32:72:1a:18:ba:3d:44:f9:11:ae:a7:09:73:9d: 66:79:d8:4b:1f:0b:90:da:77:a3:42:3d:57:f6:70: b1:bf:30:b0:e3:07:11:08:ab:8b:62:ed:05:7b:b3: 8f:10:96:43:66:34:52:bb:0d:f2:42:de:7c:c7:07: 3d:49:cc:96:14:a4:7b:82:96:27:93:5a:ad:26:df: 53:62:78:fb:1c:6f:fc:20:ad:cb:a4:13:26:c2:8e: af:d2:41:c1:53:d6:84:bc:d4:87:01:24:a8:f7:93: f0:24:b6:46:83:e6:7b:b7:cb:79:e8:4a:ec:34:27: 4a:f5:2b:04:7c:92:9c:5f:57:e1:60:1f:f5:29:1f: de:0f:a5:96:bb:03:af:7d:d2:a2:c5:57:34:58:79: fc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:81:A6:CC:6E:64:C6:BB:63:57:E2:EB:92:30:6E:67:4C:9B:17:4B X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e9:e3:97:cd:86:02:4d:2c:b4:4f:7f:4b:56:38:86:8d:e9: 96:6c:6a:2a:63:77:ce:28:ef:84:e2:82:54:0a:df:9a:55:20: f7:9b:5e:1e:d2:1e:0f:47:b9:91:9e:04:cd:40:f3:bf:42:f9: a6:2f:0e:b4:ef:e4:2d:75:33:2e:77:e3:40:63:c1:c5:2f:03: b8:85:c7:7b:1a:f2:3e:74:11:77:bc:b1:06:a1:fd:91:03:6b: 3f:d5:4e:62:d3:d0:9d:fd:47:17:86:9c:88:fe:f7:0e:25:8a: 59:c6:cb:7e:4d:fb:17:91:5a:69:82:d8:3b:d8:3a:69:84:65: 5f:ae:2d:99:fc:0b:06:25:09:b8:7f:f0:e6:0c:55:00:4b:dc: 3d:9a:4c:2b:2c:19:cf:19:ff:ad:df:6f:3d:8b:24:5f:10:b5: 22:cc:03:b3:7c:38:72:8a:5c:2a:64:37:c5:5b:7c:95:93:97: 11:42:f3:bf:09:ee:f8:41:3b:60:00:ee:fb:b8:bc:7d:99:78: 6f:ad:f8:d0:f9:58:b9:9a:fb:6b:da:9d:23:06:99:a8:b6:64: 56:3f:e2:63:4a:c5:f1:58:46:f4:aa:f0:d4:09:88:97:e6:61: a7:77:ff:df:76:02:0a:1e:96:c7:67:02:8f:b7:c1:16:e5:b1: fa:be:dd:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmMX2TYpE2A5ufzzRjhXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUxMTA0MTYwMDAzWhcNMjUxMTA1MTYwMDAzWjAzMTEwLwYDVQQD EygyZTgxYTZjYzZlNjRjNmJiNjM1N2UyZWI5MjMwNmU2NzRjOWIxNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso4axL6nO5Xun1dH7nRtPydFRZOW 0ejLtZbm8cEKfQDjOucccmijsOIvjurpY+s5TWAA5k+pkPCiRt+FYSwQZUYXe24m cQdOGoueckje/YQlRdYBPjIf6gh+3xUATpUh0g/+glP21VypMnIaGLo9RPkRrqcJ c51medhLHwuQ2nejQj1X9nCxvzCw4wcRCKuLYu0Fe7OPEJZDZjRSuw3yQt58xwc9 ScyWFKR7gpYnk1qtJt9TYnj7HG/8IK3LpBMmwo6v0kHBU9aEvNSHASSo95PwJLZG g+Z7t8t56ErsNCdK9SsEfJKcX1fhYB/1KR/eD6WWuwOvfdKixVc0WHn8kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6BpsxuZMa7Y1fi65IwbmdMmxdLMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPunjl82G Ak0stE9/S1Y4ho3plmxqKmN3zijvhOKCVArfmlUg95teHtIeD0e5kZ4EzUDzv0L5 pi8OtO/kLXUzLnfjQGPBxS8DuIXHexryPnQRd7yxBqH9kQNrP9VOYtPQnf1HF4ac iP73DiWKWcbLfk37F5FaaYLYO9g6aYRlX64tmfwLBiUJuH/w5gxVAEvcPZpMKywZ zxn/rd9vPYskXxC1IswDs3w4copcKmQ3xVt8lZOXEULzvwnu+EE7YADu+7i8fZl4 b6340PlYuZr7a9qdIwaZqLZkVj/iY0rF8VhG9Krw1AmIl+Zhp3f/33YCCh6Wx2cC j7fBFuWx+r7dAw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:46 2025 by rpki-client