$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: vPA9lA7Iwr5/1M+IIdZaJH8PEd7s96FAyOokgOvsLrI= Subject key identifier: 66:82:DB:D9:71:C0:D0:58:A4:6B:7A:29:A4:98:CE:9E:AB:7B:7E:D5 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019A4FD0135BD83A7D7D3ACDA2BFCE08686A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 1680 Signing time: Tue 04 Nov 2025 17:00:27 +0000 Manifest this update: Tue 04 Nov 2025 17:00:27 +0000 Manifest next update: Wed 05 Nov 2025 17:00:27 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: 0xTvr3dOQULN6fZPDVA57cLnjDVkAOwSOV5GYCusTIM=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:d0:13:5b:d8:3a:7d:7d:3a:cd:a2:bf:ce:08:68:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Nov 4 17:00:27 2025 GMT Not After : Nov 5 17:00:27 2025 GMT Subject: CN=6682dbd971c0d058a46b7a29a498ce9eab7b7ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:d4:22:6e:f3:bb:2d:87:55:34:ea:83:38: 7f:ae:ec:6e:15:12:d0:9a:de:ea:3d:ab:4d:bd:ac: 7d:a9:82:bb:82:9d:48:dd:1f:35:79:bb:f4:68:3f: 84:41:63:c1:91:f8:01:db:99:e1:6c:f8:fd:94:22: 30:a9:34:fc:16:d2:c9:18:cc:c4:3e:e5:8d:0c:82: 26:70:c1:a8:56:58:fe:b6:37:5e:6b:05:cc:4f:9c: 31:02:40:82:1d:20:1b:e8:03:d6:c6:32:b1:c2:a6: a5:30:1b:60:59:47:62:93:96:f6:16:34:27:da:7b: 0c:93:54:71:97:45:90:fa:28:39:01:d7:c5:a7:60: 59:43:f1:c2:8c:ec:e9:90:72:9d:41:6b:a3:05:55: 24:f5:20:cb:1d:2a:d3:6d:f6:23:79:e0:33:a8:c5: b9:95:52:3b:7b:2e:92:fa:d6:ce:31:65:c0:62:33: 1e:09:e2:58:44:92:6d:f7:d0:82:3b:f5:71:e5:0c: 3c:52:47:dd:c9:00:fb:ed:56:b7:54:e1:8a:6e:00: 42:a1:ee:e8:35:cd:62:33:ad:33:2f:34:aa:ac:de: 2c:99:a3:0b:67:fc:42:12:98:8a:c0:58:51:87:ac: 98:e2:0d:fe:0f:9d:aa:b3:a7:b4:9f:fc:bf:10:67: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:82:DB:D9:71:C0:D0:58:A4:6B:7A:29:A4:98:CE:9E:AB:7B:7E:D5 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a1:a9:3c:a3:90:6e:0c:b0:41:d8:1e:8d:da:73:ff:3c:fe: da:a8:97:37:12:5e:8f:69:84:a9:d4:a1:e4:50:67:c1:31:97: d1:d2:ee:1d:03:d1:07:e1:e2:9b:88:7f:43:25:a7:25:1b:98: 3c:ec:79:ef:12:12:37:d0:91:14:b7:22:f7:7c:cd:5a:4c:db: 0b:be:26:e3:8a:25:9b:bd:52:ef:63:c0:51:13:5b:c7:35:a8: 5c:83:a3:06:a4:5f:bd:f3:8b:7b:23:ae:b7:6f:12:f4:9d:e1: 27:5d:a3:10:26:0f:1f:6d:62:33:66:db:d2:a3:47:a5:71:7e: 7d:a4:f6:7f:e1:f8:78:b0:ec:bc:d0:a6:55:fd:bd:68:2f:e2: 84:30:1f:38:f5:0e:de:e2:bd:07:0f:29:53:51:37:91:f4:a4: bf:ad:9b:bf:c9:1f:7c:f6:02:97:b1:a4:15:30:35:4f:26:d7: a6:11:5c:af:21:ab:3f:59:7b:6f:37:f0:f8:22:b9:01:f4:c9: c9:a1:02:12:33:69:c7:8f:d5:f1:2f:56:97:07:8f:20:1d:cd: a4:4e:8b:86:52:93:27:dd:63:2b:af:f1:ac:e6:d7:95:cd:26: 98:b8:02:0d:d7:7f:09:ad:b7:d1:f9:eb:c2:22:8d:33:83:d1: 22:ff:ee:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpP0BNb2Dp9fTrNor/OCGhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUxMTA0MTcwMDI3WhcNMjUxMTA1MTcwMDI3WjAzMTEwLwYDVQQD Eyg2NjgyZGJkOTcxYzBkMDU4YTQ2YjdhMjlhNDk4Y2U5ZWFiN2I3ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQbUIm7zuy2HVTTqgzh/ruxuFRLQ mt7qPatNvax9qYK7gp1I3R81ebv0aD+EQWPBkfgB25nhbPj9lCIwqTT8FtLJGMzE PuWNDIImcMGoVlj+tjdeawXMT5wxAkCCHSAb6APWxjKxwqalMBtgWUdik5b2FjQn 2nsMk1Rxl0WQ+ig5AdfFp2BZQ/HCjOzpkHKdQWujBVUk9SDLHSrTbfYjeeAzqMW5 lVI7ey6S+tbOMWXAYjMeCeJYRJJt99CCO/Vx5Qw8UkfdyQD77Va3VOGKbgBCoe7o Nc1iM60zLzSqrN4smaMLZ/xCEpiKwFhRh6yY4g3+D52qs6e0n/y/EGeMCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaC29lxwNBYpGt6KaSYzp6re37VMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKGpPKOQ bgywQdgejdpz/zz+2qiXNxJej2mEqdSh5FBnwTGX0dLuHQPRB+Him4h/QyWnJRuY POx57xISN9CRFLci93zNWkzbC74m44olm71S72PAURNbxzWoXIOjBqRfvfOLeyOu t28S9J3hJ12jECYPH21iM2bb0qNHpXF+faT2f+H4eLDsvNCmVf29aC/ihDAfOPUO 3uK9Bw8pU1E3kfSkv62bv8kffPYCl7GkFTA1TybXphFcryGrP1l7bzfw+CK5AfTJ yaECEjNpx4/V8S9WlwePIB3NpE6LhlKTJ91jK6/xrObXlc0mmLgCDdd/Ca230fnr wiKNM4PRIv/uww== -----END CERTIFICATE-----Generated at Tue Nov 4 19:56:07 2025 by rpki-client