$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: gPYeTWtIumINYuHlzYilvQ65doDpCcAjOkYcGKERuAI= Subject key identifier: 3C:ED:3F:40:9F:0A:96:06:F5:A9:CC:6C:D6:F7:3F:BC:BB:A9:F0:27 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019A4FD06B30E2D8F037FA2541B1019AA706 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0B28 Signing time: Tue 04 Nov 2025 17:00:50 +0000 Manifest this update: Tue 04 Nov 2025 17:00:50 +0000 Manifest next update: Wed 05 Nov 2025 17:00:50 +0000 Files and hashes: 1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=) 2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=) 3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=) 4: 64__ti8-v70UmOgEukqaYVnNiPA.roa (hash: VerqmgWX+ipN/DN9t0GnBufDYhut1qzOjx4DnJxcXoE=) 5: 8VGto6-m3ZhEtMlMk4okhMSijsU.roa (hash: SKlBiSxKydLy7D3Ilb/NXQqcAfFABqE3nA6lfv3eM7w=) 6: ABJisPvnQcjHBVgXGi4ydoloSZE.roa (hash: RVwFroWgpI+Qhh+kSCs8kXZIQCp91O1HkIX07p2fRcU=) 7: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=) 8: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: ok9QOjG0SpJHLQx9eRPrtZmTe+B1pr3AdEoy80xopW4=) 9: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=) 10: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=) 11: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=) 12: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=) 13: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=) 14: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=) 15: wQmIukKER1i2VgSfKkNt8Tv2TII.roa (hash: DpzLTx/qXAbnfH+ej2Fwp80KfukeDoQIFE/iVUll7ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:d0:6b:30:e2:d8:f0:37:fa:25:41:b1:01:9a:a7:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Nov 4 17:00:50 2025 GMT Not After : Nov 5 17:00:50 2025 GMT Subject: CN=3ced3f409f0a9606f5a9cc6cd6f73fbcbba9f027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:0b:00:3b:2e:8a:6d:39:12:b3:59:a1:b9: ce:b9:d0:87:a3:a5:8d:10:3b:33:88:5e:af:db:87: df:cd:c8:8c:ef:60:06:37:b0:f4:b5:7c:89:dc:e2: 29:d7:47:74:de:55:5a:3f:c1:19:2e:61:15:80:b8: de:8b:02:60:7e:ec:fd:44:d2:ef:e2:28:05:5f:66: 2d:40:a7:82:5f:39:3f:7c:a5:34:33:1e:59:45:a8: fc:d5:ca:9d:c1:89:15:20:4a:c7:60:05:9a:bc:c1: 9a:3a:75:24:f8:bd:17:53:3d:ed:80:71:e3:c0:fe: 22:3f:fb:18:10:d8:dc:44:95:9d:24:85:ab:74:a4: 12:63:77:a4:f2:c6:3a:35:fe:e2:82:22:2f:8c:d8: 60:23:5e:c4:fa:a7:b2:11:29:1f:6b:a3:d2:31:66: 8c:bf:a0:f8:86:68:3a:46:e6:c4:93:5c:29:af:2f: 1a:b6:f7:57:e9:0d:3e:3e:d2:10:39:d0:8f:bf:78: f0:fa:f3:17:19:79:3e:db:af:9c:e8:5d:97:b3:ef: c5:4c:8d:d7:79:35:fe:f0:a2:2a:1e:ed:dc:38:aa: da:68:73:26:e5:fb:63:92:7e:b0:9b:80:e1:09:87: 1a:3b:b9:41:ff:7b:00:34:70:14:9b:5a:0e:46:ee: 85:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:ED:3F:40:9F:0A:96:06:F5:A9:CC:6C:D6:F7:3F:BC:BB:A9:F0:27 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a4:81:37:b8:3b:01:07:8d:af:c8:30:9c:7a:b7:6c:53:45: 6f:4b:44:72:85:8b:86:bf:5d:11:37:5b:31:ab:48:62:71:d0: 05:c7:fa:fa:15:b5:66:a3:c4:cb:6f:ac:83:33:9b:a1:91:ef: 59:f1:62:43:a7:bd:99:33:a5:41:39:df:e1:ac:ed:1f:81:c7: 47:97:91:f6:dd:0a:3f:8e:93:bf:4e:6d:74:6e:53:be:85:e2: 98:62:53:3c:ea:b0:08:1d:04:b9:30:76:9e:70:96:d0:d5:d6: 8e:87:e0:9a:eb:04:23:ac:b9:8a:6f:fc:ec:19:63:f6:f6:a3: d6:eb:84:e4:fc:9f:4c:27:cb:c2:ab:cd:31:66:90:15:cc:77: 43:3f:e2:45:3a:8c:ea:8f:c8:e0:39:c0:ce:1d:13:7d:0d:91: 2b:f7:cc:6c:9c:b6:49:75:31:00:47:87:03:82:37:78:22:46: 14:80:ba:34:0d:b8:3d:b3:e6:dc:62:d3:c6:5a:51:e2:7c:3f: 2c:da:e4:ca:03:8f:e5:8e:2a:a5:76:a8:64:29:72:25:2c:12: 31:bb:20:b5:97:02:f0:83:80:3b:78:f8:c8:78:f2:19:d4:5a: cb:40:41:5c:ec:1d:52:82:db:42:fd:f2:a8:6d:bf:e1:56:7f: d8:ce:56:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpP0Gsw4tjwN/olQbEBmqcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjUxMTA0MTcwMDUwWhcNMjUxMTA1MTcwMDUwWjAzMTEwLwYDVQQD EygzY2VkM2Y0MDlmMGE5NjA2ZjVhOWNjNmNkNmY3M2ZiY2JiYTlmMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG0LADsuim05ErNZobnOudCHo6WN EDsziF6v24ffzciM72AGN7D0tXyJ3OIp10d03lVaP8EZLmEVgLjeiwJgfuz9RNLv 4igFX2YtQKeCXzk/fKU0Mx5ZRaj81cqdwYkVIErHYAWavMGaOnUk+L0XUz3tgHHj wP4iP/sYENjcRJWdJIWrdKQSY3ek8sY6Nf7igiIvjNhgI17E+qeyESkfa6PSMWaM v6D4hmg6RubEk1wpry8atvdX6Q0+PtIQOdCPv3jw+vMXGXk+26+c6F2Xs+/FTI3X eTX+8KIqHu3cOKraaHMm5ftjkn6wm4DhCYcaO7lB/3sANHAUm1oORu6FWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDztP0CfCpYG9anMbNb3P7y7qfAnMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqSBN7g7 AQeNr8gwnHq3bFNFb0tEcoWLhr9dETdbMatIYnHQBcf6+hW1ZqPEy2+sgzOboZHv WfFiQ6e9mTOlQTnf4aztH4HHR5eR9t0KP46Tv05tdG5TvoXimGJTPOqwCB0EuTB2 nnCW0NXWjofgmusEI6y5im/87Blj9vaj1uuE5PyfTCfLwqvNMWaQFcx3Qz/iRTqM 6o/I4DnAzh0TfQ2RK/fMbJy2SXUxAEeHA4I3eCJGFIC6NA24PbPm3GLTxlpR4nw/ LNrkygOP5Y4qpXaoZClyJSwSMbsgtZcC8IOAO3j4yHjyGdRay0BBXOwdUoLbQv3y qG2/4VZ/2M5W+A== -----END CERTIFICATE-----Generated at Tue Nov 4 23:53:47 2025 by rpki-client