$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: /caSaiqr1zPELqlLLstHLULPs0J+rvQLEaeP103i1GA= Subject key identifier: AE:0B:D6:B5:D3:07:E9:3C:E2:0D:52:AB:1C:C1:1B:9F:56:9D:5B:AA Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019A4E5000DDC0EC1EFA2CC08D35887B29A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 17E4 Signing time: Tue 04 Nov 2025 10:00:57 +0000 Manifest this update: Tue 04 Nov 2025 10:00:57 +0000 Manifest next update: Wed 05 Nov 2025 10:00:57 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: 9576YYlhoP7f2pSzcYlCJOH8MSo.roa (hash: 8ylOR07mWV1t96DQR+NXsOjeZN13g3RKILzsyJYBK2E=) 7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=) 8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 12: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=) 13: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 14: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 15: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 16: UhKvXl_m9nZBE-_rxYy3N0dwSmQ.roa (hash: MTKTbfYtfwy4jMu3+6j7vVJcG2UaV+0Ha/vAze0SZ3c=) 17: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 18: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 19: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 20: fi24CSDfzgi2n-8tyhCDy6VJEbk.roa (hash: iy2pQ7aLpFevwnqwFGwKuv5XmpdEYHW9K5mNM+qd43g=) 21: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 22: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: TXveA/lfhFAHWXXe1vePDGc3d31JM2DjfaMEPMuaCX8=) 23: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 24: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 25: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=) 26: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=) 27: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 28: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 29: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 30: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 31: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 32: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 33: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:50:00:dd:c0:ec:1e:fa:2c:c0:8d:35:88:7b:29:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Nov 4 10:00:57 2025 GMT Not After : Nov 5 10:00:57 2025 GMT Subject: CN=ae0bd6b5d307e93ce20d52ab1cc11b9f569d5baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:2a:f8:e8:96:ed:fb:48:52:ea:ea:8c:1d: 29:91:46:7a:61:8f:22:b8:2e:40:54:15:f0:7a:70: 49:38:29:b1:20:29:4a:d0:33:a7:f7:51:0e:d8:d8: d1:36:8a:ec:13:ce:8f:0f:52:98:7a:18:b6:bc:7b: 4c:30:ae:b9:be:f8:f6:d7:78:b2:cc:18:0a:37:1f: 4b:b6:52:3e:80:bb:23:4e:24:46:7d:86:f4:00:e5: 1e:72:8f:14:6d:47:6e:2d:85:3c:e5:bd:2c:9a:8e: 6e:22:ee:23:79:c3:42:f0:c7:8c:1e:b0:29:e6:33: eb:62:34:5f:88:2f:dc:69:01:00:8a:9e:8c:44:3e: 62:45:e9:f9:d3:3e:ca:fb:c1:31:7c:87:20:bf:60: 28:ab:c9:e7:6f:7e:af:c4:99:0b:06:ba:dd:97:76: ae:8a:9d:76:f0:8c:d6:70:26:50:8d:2c:94:93:bc: 5e:31:de:4e:31:22:c4:c9:ce:df:4c:a0:94:7a:57: ce:ac:d4:3d:57:78:46:72:fe:57:a2:f8:3f:c5:7a: 6d:68:fd:39:60:15:c7:b9:6f:bc:44:6c:d4:8c:08: 81:69:b1:76:ba:d2:48:be:2b:f4:9b:cb:ff:30:fc: 8c:68:56:60:b8:af:83:6a:2a:4b:9d:91:5b:6b:30: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0B:D6:B5:D3:07:E9:3C:E2:0D:52:AB:1C:C1:1B:9F:56:9D:5B:AA X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7a:b9:30:24:bb:44:7c:a8:5c:dc:4b:41:a7:52:37:12:4d: 08:0c:87:9f:57:ac:a5:dc:d5:a4:bd:4d:97:a6:b7:10:a9:4a: 35:cb:a2:5f:a8:24:4e:91:98:7e:3b:e5:ab:33:c6:29:f7:ba: 95:e2:1a:a3:f4:a2:99:9b:58:84:a4:b1:96:75:58:8b:74:45: 80:7b:5e:33:34:4c:c0:3c:ea:0e:1a:12:33:e8:ac:42:10:d3: d9:67:c6:68:e9:e9:3c:3c:27:b6:c4:bf:00:71:a7:46:32:a1: be:9f:77:7c:59:6c:a7:a5:76:2a:02:72:b1:cb:8c:b9:10:e4: 84:df:e2:3c:ee:4b:5c:04:0a:83:e7:35:12:5b:c4:73:41:7a: 1f:18:76:a1:3d:c7:ff:1d:6d:40:b8:e1:e5:aa:83:a6:38:7e: 12:45:2a:75:ee:06:46:9a:f2:4c:82:b2:d2:21:aa:90:0c:80: 76:99:d2:87:3e:1d:fd:26:e0:89:10:91:6c:a1:95:b4:9d:4e: 0f:d3:8b:9a:f6:b5:e5:65:fd:01:42:23:33:15:c1:ad:e8:80: 43:85:d8:1a:7c:2d:4e:88:3c:4c:4f:ae:56:6e:37:c8:75:b3: d9:c0:ca:ad:03:84:12:c2:bd:21:ee:fb:b6:03:57:b4:db:0d: 88:7e:f2:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOUADdwOwe+izAjTWIeymiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMTA0MTAwMDU3WhcNMjUxMTA1MTAwMDU3WjAzMTEwLwYDVQQD EyhhZTBiZDZiNWQzMDdlOTNjZTIwZDUyYWIxY2MxMWI5ZjU2OWQ1YmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Yq+OiW7ftIUurqjB0pkUZ6YY8i uC5AVBXwenBJOCmxIClK0DOn91EO2NjRNorsE86PD1KYehi2vHtMMK65vvj213iy zBgKNx9LtlI+gLsjTiRGfYb0AOUeco8UbUduLYU85b0smo5uIu4jecNC8MeMHrAp 5jPrYjRfiC/caQEAip6MRD5iRen50z7K+8ExfIcgv2Aoq8nnb36vxJkLBrrdl3au ip128IzWcCZQjSyUk7xeMd5OMSLEyc7fTKCUelfOrNQ9V3hGcv5Xovg/xXptaP05 YBXHuW+8RGzUjAiBabF2utJIviv0m8v/MPyMaFZguK+DaipLnZFbazCP8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4L1rXTB+k84g1SqxzBG59WnVuqMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnq5MCS7 RHyoXNxLQadSNxJNCAyHn1espdzVpL1Nl6a3EKlKNcuiX6gkTpGYfjvlqzPGKfe6 leIao/SimZtYhKSxlnVYi3RFgHteMzRMwDzqDhoSM+isQhDT2WfGaOnpPDwntsS/ AHGnRjKhvp93fFlsp6V2KgJyscuMuRDkhN/iPO5LXAQKg+c1ElvEc0F6Hxh2oT3H /x1tQLjh5aqDpjh+EkUqde4GRpryTIKy0iGqkAyAdpnShz4d/SbgiRCRbKGVtJ1O D9OLmva15WX9AUIjMxXBreiAQ4XYGnwtTog8TE+uVm43yHWz2cDKrQOEEsK9Ie77 tgNXtNsNiH7ySw== -----END CERTIFICATE-----Generated at Tue Nov 4 16:43:26 2025 by rpki-client