$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: yp2A49LEMZju7i8gcdm1+MLAV8+5vfvFizBNOz4wi8E= Subject key identifier: 0D:AB:4F:FC:E0:2D:C0:1F:8A:21:0B:27:92:65:0F:9C:56:24:E3:F4 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019A5308579F65CB3AEEB8D6B6DC3D889C1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1714 Signing time: Wed 05 Nov 2025 08:00:46 +0000 Manifest this update: Wed 05 Nov 2025 08:00:46 +0000 Manifest next update: Thu 06 Nov 2025 08:00:46 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: 3A+RQeXTU5EncscYqH6kYTvDqRldewHl/NJHq2ntOnM=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:08:57:9f:65:cb:3a:ee:b8:d6:b6:dc:3d:88:9c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Nov 5 08:00:46 2025 GMT Not After : Nov 6 08:00:46 2025 GMT Subject: CN=0dab4ffce02dc01f8a210b2792650f9c5624e3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:d6:6f:ee:8d:67:8d:52:f7:70:95:ad:ea: f7:4c:2f:1b:e3:0b:a4:40:f0:15:1b:63:d2:67:69: 19:78:69:f6:ff:41:6a:a8:fa:05:5f:11:c7:1a:65: a4:2e:fe:a3:fa:33:e2:77:57:50:4c:84:97:88:a4: 45:42:56:4f:a1:16:7f:e0:5f:47:56:fd:07:94:b3: 9f:4c:9c:87:7c:f7:2a:df:ee:48:3a:6b:f9:3d:8b: be:e9:15:30:51:e9:0f:f8:0b:e1:ee:be:a2:3d:3c: 66:a4:51:99:08:ce:ef:f9:28:fc:d8:01:d0:b9:d8: d0:21:e7:dd:b5:71:96:2c:cd:18:cb:8f:fe:ac:0b: 52:3f:9d:e3:9d:f7:07:b9:2d:d6:38:cf:6a:88:8d: c0:fa:44:60:42:8c:41:fd:50:94:f1:cc:6d:b7:f7: 52:00:e9:4f:b4:48:d7:4b:6d:b2:3c:c1:27:ab:57: 8e:d8:8d:14:56:9d:8d:92:4d:ce:60:ae:9d:69:8f: d6:57:e9:63:89:ce:2d:1d:ab:31:16:7f:cb:a9:79: e6:ab:b6:91:61:09:83:80:4c:61:f7:45:00:3b:5b: 2d:a7:45:c6:d5:9e:60:34:e3:b9:32:99:ff:f5:4c: e5:f7:f5:7b:10:c0:23:60:4c:12:29:68:bb:24:f8: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AB:4F:FC:E0:2D:C0:1F:8A:21:0B:27:92:65:0F:9C:56:24:E3:F4 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:23:53:97:00:86:d4:f0:88:4a:59:fc:e7:fc:13:d6:0c:3b: 16:c5:d0:7b:d7:96:d8:d1:02:77:cf:fa:4c:66:03:ee:d7:c9: 07:16:5a:f9:be:fb:a2:0b:45:9f:7f:61:c1:43:12:b1:6d:2a: 9b:b2:df:d1:d3:8a:9e:71:55:d3:c0:4e:22:0b:91:31:bb:fd: e8:21:03:59:4e:f2:9e:fb:40:bf:dd:f9:2b:08:b6:a2:f7:89: 2f:9d:ae:cd:ce:74:09:b4:4b:5e:81:98:87:b3:46:7d:32:56: f3:39:53:00:f2:40:56:6d:c1:e5:54:e7:33:02:19:16:59:01: 7e:26:11:1e:14:73:b5:73:54:13:7b:82:54:dd:c3:32:66:27: a6:8c:31:99:f0:e2:c4:e6:c5:e9:48:61:70:0c:65:fc:57:8b: a7:95:84:0a:8a:cf:99:11:20:21:1e:0a:db:3e:83:c2:8c:70: e2:cb:05:33:da:15:87:33:16:0f:32:98:c1:f4:9e:c9:98:2d: 82:df:94:b4:89:39:1c:cc:b7:ec:96:f1:56:c6:21:44:ca:2f: e1:52:75:9a:48:44:9d:e2:62:95:a1:dc:47:79:47:22:ab:34: 26:d7:0e:74:ae:1a:a6:c2:ee:f8:bd:67:33:2e:2c:fa:38:ed: b0:00:73:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTCFefZcs67rjWttw9iJwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUxMTA1MDgwMDQ2WhcNMjUxMTA2MDgwMDQ2WjAzMTEwLwYDVQQD EygwZGFiNGZmY2UwMmRjMDFmOGEyMTBiMjc5MjY1MGY5YzU2MjRlM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRDWb+6NZ41S93CVrer3TC8b4wuk QPAVG2PSZ2kZeGn2/0FqqPoFXxHHGmWkLv6j+jPid1dQTISXiKRFQlZPoRZ/4F9H Vv0HlLOfTJyHfPcq3+5IOmv5PYu+6RUwUekP+Avh7r6iPTxmpFGZCM7v+Sj82AHQ udjQIefdtXGWLM0Yy4/+rAtSP53jnfcHuS3WOM9qiI3A+kRgQoxB/VCU8cxtt/dS AOlPtEjXS22yPMEnq1eO2I0UVp2Nkk3OYK6daY/WV+ljic4tHasxFn/LqXnmq7aR YQmDgExh90UAO1stp0XG1Z5gNOO5Mpn/9Uzl9/V7EMAjYEwSKWi7JPiGmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2rT/zgLcAfiiELJ5JlD5xWJOP0MB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSNTlwCG 1PCISln85/wT1gw7FsXQe9eW2NECd8/6TGYD7tfJBxZa+b77ogtFn39hwUMSsW0q m7Lf0dOKnnFV08BOIguRMbv96CEDWU7ynvtAv935Kwi2oveJL52uzc50CbRLXoGY h7NGfTJW8zlTAPJAVm3B5VTnMwIZFlkBfiYRHhRztXNUE3uCVN3DMmYnpowxmfDi xObF6UhhcAxl/FeLp5WECorPmREgIR4K2z6Dwoxw4ssFM9oVhzMWDzKYwfSeyZgt gt+UtIk5HMy37JbxVsYhRMov4VJ1mkhEneJilaHcR3lHIqs0JtcOdK4apsLu+L1n My4s+jjtsABzJA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:30:37 2025 by rpki-client