$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft File: k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json) Hash identifier: R0s31cvJuo/CYr3RHY2OQSg6Cy7kgmtIhLhR5XoVX+0= Subject key identifier: A7:5B:F9:F4:31:D6:12:99:B5:0E:59:7E:08:9F:DF:AD:CF:83:DB:17 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019A4FD01F19318A5543569CA4CCB1BCA40A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft Manifest number: 17B5 Signing time: Tue 04 Nov 2025 17:00:30 +0000 Manifest this update: Tue 04 Nov 2025 17:00:30 +0000 Manifest next update: Wed 05 Nov 2025 17:00:30 +0000 Files and hashes: 1: 0aa8_BKnq_2uEeu2lZ7-yjbtvuM.roa (hash: Ddp/LlQBMX46rH0IPNaZHNYeFIB8RtssPveBvjz8aL4=) 2: 1-xc1srblKkWVrQxPbJNDAqQ3mpc.roa (hash: ZzynvVG+bTIyDr7NXUASXUZ28E+DC5j8UwHhzSApKyk=) 3: 2a9Z4MiFWUxUqmTNMuUVscHb0hE.roa (hash: gobSMYv3Krt8vXt9XFdC11nQ+nS6jtG46MKfF14gNHU=) 4: 3UrcXAvUPXOxJHin-fpij-Rxeow.roa (hash: u5YOevQq4A8lK81tVn2BR62vGaGNiFwRH3yerg3JNHU=) 5: 43Lev2KmmsX2oQjHWOVqR7pGv_o.roa (hash: X3cJ9btnCgxa0qcBGYYxWGeuURRVSrnur28C/7enAsQ=) 6: 4kc-K4lXqDQWlQ1acwGiIbcvZCM.roa (hash: iwJ60t6RgAb6kap7YpqbSewI5ktaDdebMpnk8DNCEn8=) 7: 891CpnOYIk69iKnDpiqfcEZzfPI.roa (hash: Cl3FQjh7xo9Vv8l6G/85YiDrEYQtz+6HMhEUm9eKhPA=) 8: 9hgStchHD6fvUu7MaI3ReZLaWPo.roa (hash: gNkHPXuUrNhImnSBNKFWxQAcOMo7axTMfis85TltsTA=) 9: 9sivwV2Y2yAFFnmkYJ1Zol3pcUI.roa (hash: iIPWwTsolo+wvKdwR+ZK1g6w3Rsb/HA6Srp6m7oPlKE=) 10: AeRW2IzzHa8sgYjrW7QogaL1WWo.roa (hash: mOgxIrog/AxUhk6U2thPlE/gzaz0gGobQDleoJHGSnw=) 11: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (hash: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=) 12: BT4HTe3oG2Sg-qKbCzfhjsWspIs.roa (hash: tr2IEWG8nbhwgOgVOSWuTH9VHkQ1QiViO3lhhSkyHIE=) 13: EASv7Pwp5s7xHptHeT8bx1BMvh8.roa (hash: 9Bt8ezrIdKBPIOWXNUErgI/itzrTUKWVaVktAfZtf/0=) 14: GBz9y95P8PDIcJhrMMpmV0mZCwI.roa (hash: dSj9Wh/I463emAgTbhC2m6aztY/BXSDsl2rzJ7qsj64=) 15: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (hash: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=) 16: MgJgYL9l6eKJ0Kmwl4y3YpthS-M.roa (hash: igpzPJYbXYIv+C9ih5BbtSw1dZ2mBgNdp+reY422/cw=) 17: N-c5_PPTGr0gqxRfiirVSspbfGY.roa (hash: M5IIKDSRV6WeA4W9FG2QHmC4Kal5tmNKF1rVNFJCpog=) 18: Pwb-T7CDIcPW5g6EIjv7rI1hOY4.roa (hash: +uQK2AEnqPBoHu/xep/tQLvYp/ULstsLl2Xj5X9veFc=) 19: Qvclw3p6GBEwfed15US4eMZDssA.roa (hash: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=) 20: RX8x7NBqKqNqrHjY3RrZOIwmw84.roa (hash: qG1pxlwKH3SmnTU8k1NPrDe+8libzJhE26dpkDKjPb0=) 21: Ts5s6R-h-7a7r-DkQTNs3dqIoqU.roa (hash: 6FBW+7wKlFhVsfYtAAGEeciTYk/P+FI5nTEi81UvzA0=) 22: Vedd31K36BW0FtFdJmgu7RtebZ0.roa (hash: UL6Hnivw/B+oxS5q55F7qNNs7Ynb0wMF1mBZUl4ggtM=) 23: WaX26jWoRpSyNTjXI-QsFRwDKBI.roa (hash: yipaE9380n427VkfyNH9hBV6UP8h3/XAXxFHIhgfpDk=) 24: WnBP3ormFPR7ECQL-Oyv80YjE30.roa (hash: /5od8Dh5Xok7XKiFmY7DdvHrECCA+68JXtVsupW9/sE=) 25: XD5lyN3IK2UsJeObMTBY2xot5DU.roa (hash: p5taUYH4AVBdxVLeGOYvbtP0mpvx/YEGj8SIqMDS618=) 26: X_-XGWHxiyT31XcsVcXztO1CAUo.roa (hash: h9fzXHeF6FN+NnLG9OWfg3VoICXbfHZUao+YO2BeTVI=) 27: Y0Jfvglhk12KRlx1qXrTTWIY1ZQ.roa (hash: OojwxcLLBQyxENv/409Gbc8GdADP7z6P1tN7CK7EnwM=) 28: a3komgsCxLhRcmMKYo5GI6ShhVs.roa (hash: fM/pkR6hc+Rk8Y4Pv5WiOCAvHuO8a4L/ZF4n+86Y4cU=) 29: a5UQ2z1RVywe791ih-JkkJe4oZw.roa (hash: z7MPhCjNypY3ndHfuAxQLWPw6x9rN6BVeFB92z9Vk4Y=) 30: aFRiQRnDB9TXgWRRIMtNARzxVn8.roa (hash: hWE8vTVKPZar03SzLtgbIuwLQ05FffNM309Sx4njq4c=) 31: bHXLulP8CUgt-JCJIqSM8hvlsCA.roa (hash: Mexso3pNidi3XstQ5hR0lM6Sn2w60SPQEvdapeY/VjQ=) 32: cdRkB7AVAsaCQza2C6eaLskeEHY.roa (hash: R3X0t9w4kaySZ1sZzxcJ1+mmA7WHRo/nLaZSV1WFUCk=) 33: ga0VPW1s3XSHpgEohcLNxN7J_oQ.roa (hash: wC0JV8jUHfPLAhBEwBEM+LxR4vaNiTk9CGptUwCWnjs=) 34: k0KEFHW4fL4Ef8MopdylpfXrtX4.roa (hash: b5DhgBm+P5R0/x6SS6V5aLIs9QaubKbpXVVnCYru10M=) 35: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: m5tfpu2/PsPhExquso/Cz8vFwnOWYwwDazTmgkS+zjI=) 36: lNbE1YgxqJCc3cHI2vXpXlyz_nM.roa (hash: BB6MmQH+rCEmTn2b4vV8K++LviBSGKSxEZC17nRtmRE=) 37: n7A9iNcydEM0dF7od9K9kn6dOlw.roa (hash: Q9nTEs63rW/GSV52zGEUvJPOGvhBCV1t2N9qF9Q1Hb0=) 38: nDXZwdByAxuzdwf0ZXt_ehfSJJI.roa (hash: 4eNmWGzY3LU27cy4MOpIuF5JDu6Bi58le7fddIW+ow8=) 39: ujdLXoXrvhVfjksNi3jvUUhxPZQ.roa (hash: M1NGr3Kp/N5WVzCoJ45GNTOp19udI/hDhcVdgHkpFVQ=) 40: xy_J0ROxeO0huKk7onCsjN7UNOQ.roa (hash: R5m+5yIeBjbxBtHtLNr/BLRLpreLmmWcMrdmSiu877E=) 41: yHBye4nlaaxTAtDNDXQDzEX11B8.roa (hash: 0oqnKR/h/3antDNOJoHgCBtABVjV/H49DAa5RcH6OnE=) 42: zEdOf00V8YpbfdbuVh6edhLFxOc.roa (hash: xw2nGcLzNzC2781DBhmqoJCxxw5fW6F+mjQBcvq6T2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:d0:1f:19:31:8a:55:43:56:9c:a4:cc:b1:bc:a4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Nov 4 17:00:30 2025 GMT Not After : Nov 5 17:00:30 2025 GMT Subject: CN=a75bf9f431d61299b50e597e089fdfadcf83db17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:89:29:69:c3:6e:1e:26:52:ce:d4:16:68: 75:0f:62:74:de:67:5a:2c:97:03:bd:a5:30:0d:a4: 88:15:f7:13:2d:17:27:26:3a:53:24:ca:4c:eb:f3: 98:5f:eb:15:ae:d5:cd:5f:f8:bd:45:fb:c4:ac:50: 13:c1:64:b8:20:1c:38:fe:38:ab:76:25:b5:59:a4: 1c:8b:63:0d:61:71:b5:41:d6:e2:07:6f:61:b0:3f: 88:d2:fa:d5:55:b2:5c:12:ce:61:c2:56:a1:53:ff: 5c:a0:a8:fe:d1:aa:98:d5:b1:05:fb:d2:ec:11:22: b3:40:7d:d5:66:b3:9d:d0:04:66:20:36:21:97:11: 41:f6:92:46:4f:f6:e6:2e:ed:22:23:b6:02:86:e3: 00:3b:06:b0:db:ed:79:6c:55:4b:36:81:d9:91:f2: bd:4c:bc:b1:b8:59:f1:50:2a:e6:a9:4d:e0:31:db: 96:1e:49:3b:57:15:b9:b3:f3:5e:c4:7b:89:6f:a4: ed:7b:f6:cb:e9:fd:49:17:dd:18:fd:5d:ae:c4:ce: 47:2e:8d:26:48:75:c0:4e:8b:89:54:fa:a4:c4:02: 10:23:e7:e5:88:5d:9f:45:ec:f5:c2:aa:67:c5:eb: 38:24:4b:7f:ad:47:cd:5c:1a:ea:72:67:b0:b5:5a: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5B:F9:F4:31:D6:12:99:B5:0E:59:7E:08:9F:DF:AD:CF:83:DB:17 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ba:47:45:a7:e3:28:fa:c7:a5:32:ed:9f:1d:d3:a0:fe:99: be:38:b5:a8:03:b5:11:04:e2:d0:e2:63:41:92:fa:3f:9c:67: b4:ae:81:2d:bf:97:8a:e3:15:53:0b:f5:6f:fc:7a:e4:a3:cb: 4a:65:92:c0:da:ce:17:e2:f5:72:c8:32:d8:28:7f:db:49:51: 6f:5c:7d:8b:4a:14:0b:3c:1e:50:a4:7d:c6:ca:30:3a:d1:f1: 83:b9:85:a3:1a:90:9d:7c:5e:b7:38:0a:a0:e6:9f:7f:b7:99: 8e:7e:77:5e:41:5b:34:6a:3c:2c:70:a8:e5:8f:59:5d:8a:16: 08:ef:31:b0:1e:85:52:ea:f2:8e:75:11:e0:91:fa:e2:ff:94: 9f:c0:d5:f2:f5:4d:be:ed:22:65:c5:da:d8:cc:f7:5d:50:ed: 86:76:39:6e:f1:f0:5e:84:10:40:84:22:89:5e:d1:0b:ec:42: fb:de:a9:58:42:b8:76:a8:49:ea:4b:f1:99:c7:02:46:f6:40: b7:d7:ae:9f:61:18:6b:a9:e3:b5:0c:b9:62:5a:2a:ff:a4:ab: 52:66:f8:5f:29:2d:40:41:57:f9:75:52:84:f6:41:95:77:9b: f6:78:c8:19:b7:d5:88:97:30:78:1a:25:58:d6:e3:a1:44:40: 82:61:b1:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpP0B8ZMYpVQ1acpMyxvKQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMTA0MTcwMDMwWhcNMjUxMTA1MTcwMDMwWjAzMTEwLwYDVQQD EyhhNzViZjlmNDMxZDYxMjk5YjUwZTU5N2UwODlmZGZhZGNmODNkYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokuJKWnDbh4mUs7UFmh1D2J03mda LJcDvaUwDaSIFfcTLRcnJjpTJMpM6/OYX+sVrtXNX/i9RfvErFATwWS4IBw4/jir diW1WaQci2MNYXG1QdbiB29hsD+I0vrVVbJcEs5hwlahU/9coKj+0aqY1bEF+9Ls ESKzQH3VZrOd0ARmIDYhlxFB9pJGT/bmLu0iI7YChuMAOwaw2+15bFVLNoHZkfK9 TLyxuFnxUCrmqU3gMduWHkk7VxW5s/NexHuJb6Tte/bL6f1JF90Y/V2uxM5HLo0m SHXATouJVPqkxAIQI+fliF2fRez1wqpnxes4JEt/rUfNXBrqcmewtVqfswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdb+fQx1hKZtQ5Zfgif363Pg9sXMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrpHRafj KPrHpTLtnx3ToP6Zvji1qAO1EQTi0OJjQZL6P5xntK6BLb+XiuMVUwv1b/x65KPL SmWSwNrOF+L1csgy2Ch/20lRb1x9i0oUCzweUKR9xsowOtHxg7mFoxqQnXxetzgK oOaff7eZjn53XkFbNGo8LHCo5Y9ZXYoWCO8xsB6FUuryjnUR4JH64v+Un8DV8vVN vu0iZcXa2Mz3XVDthnY5bvHwXoQQQIQiiV7RC+xC+96pWEK4dqhJ6kvxmccCRvZA t9eun2EYa6njtQy5Yloq/6SrUmb4XyktQEFX+XVShPZBlXeb9njIGbfViJcweBol WNbjoURAgmGxiQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:44:46 2025 by rpki-client