$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: eBiP4Wn3iYPXC7atx3jBheGTrT5Tlm6uGja2JuHizvE= Subject key identifier: 7B:C2:D2:CE:45:B8:5A:74:FD:0B:D9:AB:DE:6D:78:0D:C0:01:33:1A Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019A4EF518E317990A77771FB533132C5DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 1396 Signing time: Tue 04 Nov 2025 13:01:16 +0000 Manifest this update: Tue 04 Nov 2025 13:01:16 +0000 Manifest next update: Wed 05 Nov 2025 13:01:16 +0000 Files and hashes: 1: 0ZW5KAczE20U5QcyFUsqUpXEED8.roa (hash: Qetbra8MpJDEVBlrjsX+7ywmI/a2YJ5nyn+yLqs6/P4=) 2: 1-KqzRG2ufGqmf5yQ7wQzU4Xpuyc.roa (hash: l2xJNQYVF3CqUltI0y/hIsNBwR8gaP86h2XHPrc9QSw=) 3: 1-UyIE7mqGVmQEQbqx8oewJU8LM.roa (hash: KQFvzUnWZGxgTX/FEU09xFGvTL2c/hN91WsuPQzlMhw=) 4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: sOLH5CjtbPbfH8WXJDrYaAOeVWH7RrHdEyQWmvvZyIE=) 5: 1Thh-ddTZfVIqD8iLx2me0HFkyk.roa (hash: JiNDcNhegE9v4OeDpVXiQordNiQilAq3rgA4Fmqk5iE=) 6: 2NIi98dN4sD0TIk71akteZnx1sw.roa (hash: k2get3lC4qal5WwpLqouWUlNle+TBDTdoCPLPn4qxTI=) 7: 30ltggt23rh7GTkDQejt9lmB4lI.roa (hash: 0Vi+rnQhpwPVxdHvuD/xFHoYMxHHBZAXfOAyM/8y4Rg=) 8: 3KlMZ-8oPCOwu9zbCpY8l5ygzW0.roa (hash: Nge1ZCdkQPHDYH5IbuQgeafxrKKZqheIQyKLqfoWvq8=) 9: 4JaepfCsA_lI-MmKxIYkIhWjTNo.roa (hash: n4hI5BYrL4MC9QXfsIecgobxU5/Ctvsdshk1tOj/4EM=) 10: 5TtTEnOmkanhTyR3jvoic_M4oOw.roa (hash: dYr6gC4EPJ8sQLdRS6y23vT8eJ0Xwsf6Qa1i1BT9vgE=) 11: 6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa (hash: LIMmkOw4HP8z7A8TqIJ9/r7g9X4ISQkmNHzzK5GwkoA=) 12: 7tdpn3LvL4ATw0CK_nHXC0-PM_g.roa (hash: //EiIzMHwuVi0THXNdxsIrv8Y+yxoxo1dBTprYwHSf0=) 13: B24rrIATyI6Y9bSpOIpB3PSj_8Q.roa (hash: ocbaVuTRQvDIOrxTxxg4/a9rgNewaIFpClA6y+NFqrM=) 14: BF9-axl09aLWZxr5YBfgizGRwYQ.roa (hash: +Qu2Xjmm9jSdAOCIdC+nqYHdIw9cP+EHQrcHEv9RXEo=) 15: BKmZbRh0zQ9oa_wPaKfsvtQfYUE.roa (hash: MF5MiDvqIGWrFA0JrjP3/BbBY/oWFnXukDS276OlJ/k=) 16: DJvNc1stqMZ9mc1Wb-6RK-gsbvU.roa (hash: 1J9XRL8uRkAs4JvpW4rgrDzgKuN2J5fuItC/xeherRA=) 17: DlkMGzQHqOPh83nGG23nOj8tXkA.roa (hash: huMdxewxpuA4QGSVi+HwJbNMTf5SAHSJShnMsKq063c=) 18: F6rEC-DZF3Bn189GQxLFZdrW9ss.roa (hash: 0wg9QuGJMND5sNEy85LKkdkXbGMFG3a1ulykBXwSpbk=) 19: GKIBvtXq3THm63QH_8TaUji8HSI.roa (hash: +pvrI4erf1Lcj/8FcUip5ayRE0gXLz82FrGP84f2lSQ=) 20: I9PPHzCZLC3KRf5pPW4mcpNhTV8.roa (hash: 5VGGGh+D7rGqED1Cty/ds9a2QEhu4eIqlF+8kjtmXGs=) 21: KRDtf3OrZoijGFAdBpTPZ_LqhCU.roa (hash: hhT6v19/kwC+l+XsitAuGoa0pCOzj3GbmlwXD/IoK9Q=) 22: P3GVNq779YAGLymTO_H_n0X3-yE.roa (hash: x3IBmTZ8Udcs5ud1G/gWjwtdjlcSKj5FhBMSgrUaB64=) 23: R8VY5MGVdE17A_2z_8Qznz96tZE.roa (hash: Y6Us+zb47DyfsgxnI70nrLZEznsAibIlmNM0YizAwAI=) 24: R_6Boo__taaN3VAx2GBKAmJIKdQ.roa (hash: fuyB9El3FH7/OJZWRGlAxDEIBNos8nEiSk5ALbrazqs=) 25: UYQwhD4luTCUu0PCAY6S9fVvQB8.roa (hash: xwaHQTXwHl9OCxbP17eG8J9sJZEQNFLx/yHQgL2r4Fs=) 26: XPRcOQ12damhWz672VXQCKzctD0.roa (hash: +UjnKkHiRNO5TAw4O2QYp9JmNxVCRQBE+d4ZaSLhA7Y=) 27: Ywm1jYc0iwGuAB63sRGCNirYSf4.roa (hash: r1HsrQz41mTN+65j1uhqS2AuuYL14Zx4+m/FTWRASv4=) 28: aQXWpkeo8CYBrBnYK0PT1cWdHCk.roa (hash: JF3VKXhZgLXaADeU/i5/1vCJwGFlrS9omLotINcIakY=) 29: bujGm6GH7mncfnxw5jTViL-bAwE.roa (hash: p2zIVwjY93QiNgpvPIwoy5vB+KV3M+ELyrgfIsjTSIs=) 30: hBV1lora2TRWVIDjfS5RTXSSC-w.roa (hash: ZFsMk9BOGX+QUOlHkhTwmMr1ntoiOz88gyQ0q6nWnI0=) 31: i9xl1BGjEAWIRyvR7FDaRtUp3sM.roa (hash: jIIVL6j/6oDSxEFQvBU+uhsuGADZLxaxVVKJQbxIUsg=) 32: igGBFD8kNEyp0oLcDRQiMdpWqUg.roa (hash: JBfHKzIq0hybb3YSwoXuYc0ak5WjhrecAhw46dVwLpA=) 33: jimBz39dlHE2MfUY4L25nGwN-0k.roa (hash: ERw9Pg+xxXFworqjhjysZEnVIEowGkRsBZaaEld0xWo=) 34: n0D7QgHWZsopO1EgFVVvK-P6Dwo.roa (hash: 1Tdg8cemFUBIoV4egYbYb5wLjUFGRRBY2gDNWEAljR4=) 35: n74OnOk2cupPxqpmEGxm3X6NJi0.roa (hash: 4IFl5DFKU9Rz9OqnMogOy+LZtMk2c06yHfw/g7OpLv4=) 36: nE4q77HuE9eMvcYlJ0VXC5AQzH4.roa (hash: xhWHmf0Wl/9mSIPxWksh0jgqlzI8er3WRgeIRoZRvn0=) 37: nEOSCuQAAizH0ilRTTzdJdp07z8.roa (hash: NGLT1fxnsJeE2MIO3wdKFSCjjav2t9smqtzM/SWaYKo=) 38: nq598Y-mH7WXt-wp7oTFReqn5JI.roa (hash: Lm1lMb1JelLgN0kxz8OzEijA9ElHx0kaIfvRfFoPkz8=) 39: sIt3F6ds6E5Cw-7IGWGY_E58vEs.roa (hash: Sbu/A4tPhb/YMsWEmB4prBnkedMa/77cZPz9BrDKBSg=) 40: s_sfe0PwpYYFQ6HtLR5YzbGsYe8.roa (hash: Q4EHED4zem9TjQrfPSu31rh8tUnEGOxod/kov3RZEgM=) 41: sc5esKExOPd9MvtDyHiUo5axTto.roa (hash: T21z00EGEhOOCwVKI7S6BwJd+ujtp85ADOaPIJ5A1Tk=) 42: tBCiClZ01i6bRTFcoV9J9olvPiQ.roa (hash: F04EUBkZe5J5GkXs7KwkzKr7Lxa3zzkxl/rd7ozso6E=) 43: uLID9O7nU2pNtz7HGdAH46WS7JM.roa (hash: oYgEaY31SpEl7BoKtZCP9Lzuu9kwt/rbH0ExUKFH0PU=) 44: uxnZYNa8d97ZTb_0yY6HvXc3zYY.roa (hash: Uc2FRxSyDw4WWufpEWvzn7eMEVoT2cdYyXigSL+3Mr8=) 45: v-xNq330WdoiiPlZjkVxav1Azgs.roa (hash: 5Gfb2PYZTagtc6GTH7GCkVgOxZ7Twxzj2kExG39tIfs=) 46: xqWPzURQERwArIFHXEX3EnCl6G0.roa (hash: sdIn7OH8dSfwnW0kTcunJQ/gFY1CcgJ+fH9TWlySv04=) 47: yh9ccliyxEcC6Avn1oCQoSv62L0.roa (hash: +3+0y4CEemTmWkaSTewyd3AcJUzmmij1RdzS9B5WjYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:18:e3:17:99:0a:77:77:1f:b5:33:13:2c:5d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Nov 4 13:01:16 2025 GMT Not After : Nov 5 13:01:16 2025 GMT Subject: CN=7bc2d2ce45b85a74fd0bd9abde6d780dc001331a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:9e:03:62:90:6a:ac:0a:7c:ec:c2:7d:7a: c0:6b:d6:67:cf:39:f3:a2:94:04:dd:25:8a:ba:92: 48:09:48:d1:7d:c8:ca:5b:15:ef:d0:b7:36:7f:60: 1c:99:23:8c:a8:71:57:c5:f2:e0:51:52:2b:4c:b4: 80:8c:20:d7:17:5b:77:1b:f9:12:7a:07:cc:2f:ee: f2:6f:5a:60:0a:c5:2f:4d:01:24:25:df:3a:dd:8c: 28:b7:3e:6d:b8:83:9e:31:50:23:a6:2e:db:05:4d: 20:3a:b0:7f:ca:ce:b8:6d:11:72:4a:0b:8f:91:3d: 34:0a:a6:fc:53:38:55:09:c5:da:e1:bd:97:c3:ec: 63:bc:2f:2f:b7:08:f6:97:35:e9:87:20:e1:fa:f1: 3c:e8:fa:c7:5e:e5:91:9c:fa:d7:2f:3e:50:9f:b7: 09:37:c4:3d:d8:14:60:f4:15:67:8d:64:9c:cb:10: 8f:b6:34:b9:2c:0f:5d:24:f2:6d:d1:62:69:76:f8: 2b:c4:cd:e8:f2:6e:ba:91:e6:af:6f:fd:1c:5d:3a: 87:78:64:d1:60:5c:4b:31:3f:ea:0a:f8:a9:64:ed: 9a:a7:1c:cb:8d:52:a5:8f:5b:8f:0f:90:68:0c:d6: bb:ba:ae:59:d4:a9:51:4f:3a:86:3a:fa:42:f4:93: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C2:D2:CE:45:B8:5A:74:FD:0B:D9:AB:DE:6D:78:0D:C0:01:33:1A X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c9:da:e8:4f:9e:6a:58:c4:a4:d2:51:72:8b:95:45:19:76: c2:3f:c4:bf:ac:2b:76:d4:e0:b0:98:08:75:1b:b9:e6:c6:33: 15:d6:74:a1:20:4c:6d:58:47:3b:2c:ba:09:a6:9c:4a:e1:5b: 3a:ef:a7:54:1e:35:cc:c2:d0:17:78:fd:2b:f3:ca:3f:7d:5d: 01:6d:ab:98:a8:16:b6:b8:78:5e:67:94:31:54:e6:dd:39:69: 28:c0:45:f2:f5:b4:d4:f5:bd:76:50:ee:49:7b:74:fc:4c:04: fe:a5:f5:ee:08:55:ce:aa:7b:13:48:15:36:0f:26:43:39:cb: 5b:56:bb:0c:8b:1f:95:77:2e:25:2c:5e:8b:34:0f:fb:b6:1b: 18:01:53:95:3a:61:51:79:d5:87:fa:de:c9:c4:bd:25:d1:ce: 16:94:62:7f:35:3d:f1:14:a2:8c:db:c0:13:16:c3:3c:7e:5c: a2:77:fa:74:fc:b5:bc:58:41:7e:68:33:c2:ad:d8:d5:e2:4f: a4:86:55:c7:e9:67:32:4a:90:96:62:f0:f5:16:fe:20:25:d0: d7:ac:37:cd:9a:35:16:1d:24:85:fc:1d:96:fe:dc:d4:75:dd: f8:c9:77:54:b4:d7:28:f0:e3:8d:a9:52:0f:bf:5c:9a:fb:4c: a8:fd:91:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9RjjF5kKd3cftTMTLF3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjUxMTA0MTMwMTE2WhcNMjUxMTA1MTMwMTE2WjAzMTEwLwYDVQQD Eyg3YmMyZDJjZTQ1Yjg1YTc0ZmQwYmQ5YWJkZTZkNzgwZGMwMDEzMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4eeA2KQaqwKfOzCfXrAa9Znzznz opQE3SWKupJICUjRfcjKWxXv0Lc2f2AcmSOMqHFXxfLgUVIrTLSAjCDXF1t3G/kS egfML+7yb1pgCsUvTQEkJd863Ywotz5tuIOeMVAjpi7bBU0gOrB/ys64bRFySguP kT00Cqb8UzhVCcXa4b2Xw+xjvC8vtwj2lzXphyDh+vE86PrHXuWRnPrXLz5Qn7cJ N8Q92BRg9BVnjWScyxCPtjS5LA9dJPJt0WJpdvgrxM3o8m66keavb/0cXTqHeGTR YFxLMT/qCvipZO2apxzLjVKlj1uPD5BoDNa7uq5Z1KlRTzqGOvpC9JNKfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvC0s5FuFp0/QvZq95teA3AATMaMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsna6E+e aljEpNJRcouVRRl2wj/Ev6wrdtTgsJgIdRu55sYzFdZ0oSBMbVhHOyy6CaacSuFb Ou+nVB41zMLQF3j9K/PKP31dAW2rmKgWtrh4XmeUMVTm3TlpKMBF8vW01PW9dlDu SXt0/EwE/qX17ghVzqp7E0gVNg8mQznLW1a7DIsflXcuJSxeizQP+7YbGAFTlTph UXnVh/reycS9JdHOFpRifzU98RSijNvAExbDPH5conf6dPy1vFhBfmgzwq3Y1eJP pIZVx+lnMkqQlmLw9Rb+ICXQ16w3zZo1Fh0khfwdlv7c1HXd+Ml3VLTXKPDjjalS D79cmvtMqP2RXw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:54:47 2025 by rpki-client