$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: qwPd4UTURCkV+Bom9vU4w75LRobbLQsHf2kUQirf/C4= Subject key identifier: A9:8D:76:39:70:2C:CB:02:25:31:F3:FD:AA:D1:51:5F:EF:6C:46:19 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019A4DE232ABD42010885952594C5ABC0800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 10D9 Signing time: Tue 04 Nov 2025 08:01:01 +0000 Manifest this update: Tue 04 Nov 2025 08:01:01 +0000 Manifest next update: Wed 05 Nov 2025 08:01:01 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (hash: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=) 3: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 4: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 82P5EvvCPeZs+XKvhxM970k1iQt6vrm/P/9HXUv3LSI=) 6: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 7: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 8: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 9: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 10: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 11: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 12: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 13: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e2:32:ab:d4:20:10:88:59:52:59:4c:5a:bc:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Nov 4 08:01:01 2025 GMT Not After : Nov 5 08:01:01 2025 GMT Subject: CN=a98d7639702ccb022531f3fdaad1515fef6c4619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:0a:53:65:ef:f8:1a:13:bc:40:8a:4c:e2: ca:a7:a6:02:98:39:e5:db:1e:3a:b0:9c:e0:2e:17: 40:fe:e8:d2:ec:dd:62:56:76:f6:13:27:ce:34:28: 29:1f:2e:62:b2:6c:98:ca:9d:de:43:e6:01:ec:5d: ba:26:9c:d6:be:d3:af:23:1a:dd:cd:7c:0a:d2:02: d9:85:54:11:33:6e:fb:a2:21:8e:6b:b9:92:5e:cb: 73:7d:9d:ca:1e:65:6a:78:69:9e:7f:45:d2:b7:45: 47:65:c6:61:16:b8:e3:16:50:6a:08:9c:15:8a:73: a7:d8:bc:18:21:c0:30:71:2b:1b:85:bd:35:2b:d6: 10:d3:7f:d0:c8:e8:f9:ae:e5:c9:f1:e7:40:92:73: 98:c9:8b:67:16:37:d5:a5:58:ab:4f:1c:56:22:21: d6:6d:80:ad:bf:a5:bb:03:01:f4:06:b7:e2:25:d3: 3d:e8:78:83:0c:34:13:18:5e:e6:93:38:2c:00:12: b7:46:43:4b:f3:8c:c6:dc:46:aa:30:53:04:b0:20: dd:92:75:57:45:27:3d:48:99:aa:6a:8e:a5:97:d8: 71:d0:8d:82:85:2a:43:97:ca:ea:c1:fb:b5:58:06: 22:d5:a8:a1:aa:9a:10:35:a5:03:38:19:36:78:30: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8D:76:39:70:2C:CB:02:25:31:F3:FD:AA:D1:51:5F:EF:6C:46:19 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:34:49:f3:1e:e5:c2:2f:34:1a:e1:a3:26:7b:fc:dd:78:a4: 73:92:78:5d:a9:27:ee:1c:3a:fe:d2:fa:f3:e1:4e:61:97:c8: a3:36:99:6b:8c:16:de:24:f6:84:9e:04:76:b5:8a:fd:a9:19: 24:84:db:7f:7e:24:ba:80:f8:cd:cc:5f:a2:0e:60:5a:38:77: a8:00:d7:35:61:ca:14:21:07:0f:f2:88:16:f8:4a:cf:de:ce: bb:33:a2:df:34:2c:36:c0:2b:f2:a2:04:88:c7:88:60:c6:41: c3:ea:28:1d:f6:7d:2a:dd:5d:6a:b4:f6:dd:dd:4b:2f:33:58: 4d:39:d9:44:45:68:99:b2:88:b6:6c:e9:53:a1:7b:ba:f0:c9: c5:28:e1:f2:94:a1:17:af:f7:5a:20:7c:9a:5a:c8:41:6b:3d: 44:d4:d3:38:c1:dd:9d:88:00:3c:ad:68:a9:c2:fb:78:1f:81: 07:11:4b:b6:c0:74:1c:8f:a5:1e:97:f5:ac:0b:99:6a:5a:a9: e6:94:48:b8:d2:e9:fa:e8:f2:64:58:ee:9f:23:3c:f9:b8:69: 99:e3:14:be:71:55:84:eb:c3:31:7f:57:d8:ad:f8:65:3b:7b: ad:71:0e:99:64:34:5d:47:63:68:5f:0f:77:6e:b5:d0:f8:8e: dd:65:cb:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4jKr1CAQiFlSWUxavAgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUxMTA0MDgwMTAxWhcNMjUxMTA1MDgwMTAxWjAzMTEwLwYDVQQD EyhhOThkNzYzOTcwMmNjYjAyMjUzMWYzZmRhYWQxNTE1ZmVmNmM0NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDUKU2Xv+BoTvECKTOLKp6YCmDnl 2x46sJzgLhdA/ujS7N1iVnb2EyfONCgpHy5ismyYyp3eQ+YB7F26JpzWvtOvIxrd zXwK0gLZhVQRM277oiGOa7mSXstzfZ3KHmVqeGmef0XSt0VHZcZhFrjjFlBqCJwV inOn2LwYIcAwcSsbhb01K9YQ03/QyOj5ruXJ8edAknOYyYtnFjfVpVirTxxWIiHW bYCtv6W7AwH0BrfiJdM96HiDDDQTGF7mkzgsABK3RkNL84zG3EaqMFMEsCDdknVX RSc9SJmqao6ll9hx0I2ChSpDl8rqwfu1WAYi1aihqpoQNaUDOBk2eDCFzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmNdjlwLMsCJTHz/arRUV/vbEYZMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDRJ8x7l wi80GuGjJnv83Xikc5J4Xakn7hw6/tL68+FOYZfIozaZa4wW3iT2hJ4EdrWK/akZ JITbf34kuoD4zcxfog5gWjh3qADXNWHKFCEHD/KIFvhKz97OuzOi3zQsNsAr8qIE iMeIYMZBw+ooHfZ9Kt1darT23d1LLzNYTTnZREVombKItmzpU6F7uvDJxSjh8pSh F6/3WiB8mlrIQWs9RNTTOMHdnYgAPK1oqcL7eB+BBxFLtsB0HI+lHpf1rAuZalqp 5pRIuNLp+ujyZFjunyM8+bhpmeMUvnFVhOvDMX9X2K34ZTt7rXEOmWQ0XUdjaF8P d2610PiO3WXLHg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:58:16 2025 by rpki-client