$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: /udWlvdZCTn5YGJOO7EX3vswVskUM7bYaTdzRBxRR34= Subject key identifier: 02:64:04:88:2B:78:A1:F8:A6:AF:01:9D:98:50:D5:87:15:60:26:43 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019A4DAB0CF7CDBA570F63B10DC17423CB81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 171E Signing time: Tue 04 Nov 2025 07:00:46 +0000 Manifest this update: Tue 04 Nov 2025 07:00:46 +0000 Manifest next update: Wed 05 Nov 2025 07:00:46 +0000 Files and hashes: 1: 3mlxlqxxKeV1HcJ7bUJquBWrLPM.roa (hash: LdsNRL7zR8y++XszDkFJs9ezvrT1lTI0NjP093U5ljg=) 2: 4SdJi3BPt8-RDec3IP7ET9slx0Q.roa (hash: QGo99RDwnHzRGoxgfvvtNisf3X6cgnQ851GWbQCaLvs=) 3: 7bwXhpAggJ_eID4STuVsUUonWWE.roa (hash: jwAsf9XJ11Ai8DUGeYC8bRJZ9GOha8mucoK1IxHdfkY=) 4: CzaaDeOWHQ6kTwaAx_O9YkLSomg.roa (hash: GUI6ZQYLsnldTDNTDgycT5JJ61OE2lf64zAhH2MlHo0=) 5: F-IifLCSbkSEOgi4sKV1jV1DQV8.roa (hash: 7kKwPi2Jx1AhBc2lAsg83y6Ji6J7QPEIqmUmsdkgOP8=) 6: M9dXL-Oza0PNDTAVGMoUMD1-IlA.roa (hash: jhP7c0ubJpNShQl4AZbo7W8l+sNrqPUvkjw+552fAtk=) 7: N8yg-rsBIkNZqhIg3aIitQuuaUk.roa (hash: Vq9e+6B3g3tkLctdReugpY+B6dczna3y7yxghSqb1lg=) 8: O_1KEMFUqgk53YPdkiJOMWFybCU.roa (hash: 4rGooap/6UNkN/imOgEGeKddbOoLvOCJN4FBsaaC0Sw=) 9: Oac09hx3rqQddn6sXzqSQ66tEsk.roa (hash: 0YnaolK2p37HCU8XIKe9HEtLFbwrR1vF1VCsBkGV6VQ=) 10: QB06ZN3QBBlBCzXQ38Wxu-W0hTY.roa (hash: YOe7BlkRM3bRTDlXC12POtxs/G4SQHLEyUujJ2j8le4=) 11: QeLZg2QtCjiT_FgF9I_8vW-GdW8.roa (hash: SAeRikMKDg+ufTk9edjpL98DiGUmXizgEulF/oacLNQ=) 12: cjQzMFxVd-iqEhVM-o1DNZllV_0.roa (hash: 85nOtiPI0UFXyc2nAprk9yS+5gMOcb9EUZheWPhZTEk=) 13: dnVM1cVOQmo9o53eHsEv3eXfeEM.roa (hash: h/M7g6bSmmEmFXClXRgmZ/cbukURXTiejXMMoqawhio=) 14: o9IncMeHSMz3mrSJeF9aMdkFAcU.roa (hash: KamLMqMs7PVReutKf0aHBQwg2azCb9n4pFhxDQwK6vA=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: iOtZJYS5qWqXxwYnxLvh42MxcrS3y4f3gL+ypEEy/+w=) 16: uFTtcjsPGnkaZVI5W5A8IkTF394.roa (hash: SZYFDFQluX6/of0g5ijROkb7a9Qa6zQP//c286jjxKM=) 17: w3UqKWnMOF5NaXpk2iA4PKS4_bM.roa (hash: u2j3jAMfurHPfPAg9hddmCUv1bl75zA9+z27+zKCwbI=) 18: xZ_023oKHQSUR6TwKwMkGIsy224.roa (hash: ifrv9R6haJqU4fA+SuKlYO2IqiC8qB9Zjz5Ablqp45M=) 19: y_VdrldyiOysCbP_n_SofIR2xM4.roa (hash: 3Y8+s1Vq2DoJJO2anwZwA2qsfUgRB7+A97MBZINmwUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:ab:0c:f7:cd:ba:57:0f:63:b1:0d:c1:74:23:cb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Nov 4 07:00:46 2025 GMT Not After : Nov 5 07:00:46 2025 GMT Subject: CN=026404882b78a1f8a6af019d9850d58715602643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:4e:e3:64:5a:0c:af:7b:5b:c1:d0:60:db: 03:ee:75:d1:27:ca:bc:df:65:8e:70:ab:e5:53:5b: 1f:30:fa:b6:48:27:dd:dc:34:8f:11:e3:91:19:be: 06:13:b7:f3:46:04:93:40:ba:6f:a9:39:3d:d7:c7: af:f7:c4:3b:a2:ad:d2:89:bd:f1:80:44:0e:cd:00: af:ac:40:f4:30:b0:f0:ab:5f:ce:6a:2d:df:7e:7a: 3c:b7:1e:95:fe:d9:e3:2d:12:b3:7a:db:b6:e0:2e: 4e:73:cf:b4:0d:ba:a1:b2:12:d5:04:c1:3c:97:81: 10:11:2a:d9:42:b9:ef:df:85:7d:09:c6:ce:aa:66: cd:21:15:d3:9f:c6:21:cc:45:cb:c6:67:38:31:3b: e7:ca:ec:93:f6:0b:da:d3:41:0e:8f:b9:b3:63:e3: 0c:9c:c6:76:d7:2c:5e:08:30:77:84:d0:a7:07:79: 05:f9:5b:c5:f2:f1:ae:6d:28:e7:b4:86:9f:d9:8d: 5c:e5:59:d9:cb:7b:1b:a6:68:18:58:19:b7:c2:9f: 42:a7:0f:57:bb:47:fc:82:38:84:db:6c:50:f3:88: 63:3d:78:ed:cf:a4:d7:67:98:a2:40:74:1a:e1:af: 4e:d1:68:df:74:83:9d:11:75:a7:6f:e4:c5:12:3d: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:64:04:88:2B:78:A1:F8:A6:AF:01:9D:98:50:D5:87:15:60:26:43 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:08:d4:27:04:52:c4:b2:c0:fd:a6:ea:c3:1d:33:38:a3:88: cd:22:d3:18:ad:ac:5a:37:ad:d7:6c:90:71:ea:78:e4:70:28: 0a:39:20:31:38:fa:b2:26:17:1b:76:01:03:b2:2d:36:fa:ad: 75:d1:56:7f:56:80:07:a6:15:1f:b9:52:95:65:f5:28:b7:8d: 58:0c:c3:5d:50:3e:8b:7a:33:f6:07:c1:bd:06:39:d5:1a:d4: a8:a9:06:d2:1a:f1:6a:3d:d2:62:0c:be:6f:b1:9a:1d:21:d5: 71:1b:1f:e4:1a:a8:10:3e:cd:3d:19:df:36:bd:54:81:4d:f3: ae:2a:c1:58:94:5f:cb:83:a0:94:1b:04:5f:e5:c0:4e:f3:c4: b7:28:53:65:b5:8b:fa:04:60:1f:d9:31:3a:4d:ef:5c:7f:dd: bd:d0:89:a2:96:25:0c:95:1c:e0:59:b5:9e:2a:9a:6d:5a:de: b9:7a:8d:8a:05:e1:91:8c:7e:3b:5b:2c:3b:af:64:ac:20:6f: ea:03:b9:6b:c5:52:1c:e0:e9:69:f3:08:a5:78:48:88:f6:20: 0f:fd:93:fd:d1:56:94:08:4c:7a:76:16:fe:7c:7e:f9:bd:c6: 3d:6c:63:06:05:27:d3:d4:ca:ea:d3:45:7b:e0:80:c9:ca:94: d1:25:11:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNqwz3zbpXD2OxDcF0I8uBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjUxMTA0MDcwMDQ2WhcNMjUxMTA1MDcwMDQ2WjAzMTEwLwYDVQQD EygwMjY0MDQ4ODJiNzhhMWY4YTZhZjAxOWQ5ODUwZDU4NzE1NjAyNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhNO42RaDK97W8HQYNsD7nXRJ8q8 32WOcKvlU1sfMPq2SCfd3DSPEeORGb4GE7fzRgSTQLpvqTk918ev98Q7oq3Sib3x gEQOzQCvrED0MLDwq1/Oai3ffno8tx6V/tnjLRKzetu24C5Oc8+0DbqhshLVBME8 l4EQESrZQrnv34V9CcbOqmbNIRXTn8YhzEXLxmc4MTvnyuyT9gva00EOj7mzY+MM nMZ21yxeCDB3hNCnB3kF+VvF8vGubSjntIaf2Y1c5VnZy3sbpmgYWBm3wp9Cpw9X u0f8gjiE22xQ84hjPXjtz6TXZ5iiQHQa4a9O0WjfdIOdEXWnb+TFEj00RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJkBIgreKH4pq8BnZhQ1YcVYCZDMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAjUJwRS xLLA/abqwx0zOKOIzSLTGK2sWjet12yQcep45HAoCjkgMTj6siYXG3YBA7ItNvqt ddFWf1aAB6YVH7lSlWX1KLeNWAzDXVA+i3oz9gfBvQY51RrUqKkG0hrxaj3SYgy+ b7GaHSHVcRsf5BqoED7NPRnfNr1UgU3zrirBWJRfy4OglBsEX+XATvPEtyhTZbWL +gRgH9kxOk3vXH/dvdCJopYlDJUc4Fm1niqabVreuXqNigXhkYx+O1ssO69krCBv 6gO5a8VSHODpafMIpXhIiPYgD/2T/dFWlAhMenYW/nx++b3GPWxjBgUn09TK6tNF e+CAycqU0SURlg== -----END CERTIFICATE-----Generated at Tue Nov 4 10:51:00 2025 by rpki-client