
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
File: tCU8TyM86YR2ma5o7L9ddRSw-ts.mft (raw, json)
Hash identifier: EZW3qmKpduXKu9E5bKbq6NueG0JEh7mxLO+woZ/SOGo=
Subject key identifier: 09:51:4B:27:52:C4:DE:C4:49:C3:0B:16:C3:B3:77:FE:3D:49:7E:CD
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019A5150644A124D581512D4624ED96F82C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
Manifest number: 175A
Signing time: Wed 05 Nov 2025 00:00:14 +0000
Manifest this update: Wed 05 Nov 2025 00:00:14 +0000
Manifest next update: Thu 06 Nov 2025 00:00:14 +0000
Files and hashes: 1: 0s_8uV4y_4Qh9izsXyjdTvFnvko.roa (hash: eOw9cupvDiGzZK06bLbmO3r71BcAglZ1z0oB7mRXjtY=)
2: 1GKSBXVaZ0ag5v475kUXdEkbQhQ.roa (hash: X9uuaeQ/DFn7eKiljliRJ9ZtnztLoEh6oYyh/D1LlZE=)
3: 1eQYY4zw6BHTedgOY9nUUktL4Wo.roa (hash: 1GSk8VZgzdgKxh/A+wdRhyo5q1wO2hZsCTmMQzU4Ni8=)
4: 5y1fAHStJ-LIl-krEwTwF8xMfXw.roa (hash: CigYoXGgEpJO22j1bYVgQQOkgFTLXjpTUquBl/raWWc=)
5: 8LksUd4Bc07spLD8fADCnhn7LCM.roa (hash: Ltd+LZ1A4k2Ak2CxYsrw7bl+BSFB7+eAiWeQKA1mKH4=)
6: 93pagyqbKSx7ojiwk3pCEHwGNqE.roa (hash: Awi9xJvRaRCnDHEl0mlXSjCv4wxBbmDwhwg9tE5Uqe4=)
7: 9ZzfTs0es7d3dITh42i7PcrGHFI.roa (hash: j+RWh4sGZQYYo7/8IegKYIMXLt75CVdOknO/qydJXO0=)
8: 9aX1C0GBDjpl9KbtzL0_14BT4x4.roa (hash: 2ZwMdtmJ2Vb2cjnuC6vVTCJhkSLVLpECEfkccephonY=)
9: AWzKvVBumPuAv-ix9WEGZW27uLc.roa (hash: DAiyzPE0kSu04Hsgva4YCQLrUYc+yqLAnbyuT7wymo0=)
10: AXSoaMu602i_53-BQksf4H8rVso.roa (hash: Gozi2rQxeKnJmmPgfnbAWudEjv4AS8oCMzPcEaljedc=)
11: B_PNrqaypXS-uuqkeyPbkmY0Qnc.roa (hash: Du7C+6zjWvOoxLpFBJQPqQbDqvsJ2HaEuG+OJzC6pe8=)
12: CGUIbzoJQeR65zTqWRGx45Ja8R4.roa (hash: UN/Fnr6DI0baScUU9VdPUEJZbYixDKuX8x8+IhMnZMs=)
13: CeLnqu3xYBKZUvCPgV7J-PpEdRM.roa (hash: zLuEq1mLrHs0mVf6yNVLD5Zej/7XVgYiGrCvNOWJeVo=)
14: D6p2t8uiBKfqdDi55_En4lYtIro.roa (hash: sj7YoIshSn7ixfErwrPSPMsqEYO9JvgtqizaCyYHm04=)
15: D8WtQTZCIdbzIxZEzqOjYt11R5A.roa (hash: mTjIP060ZUh7omSO0Zdfe1RUcEila1seoPIqhcfag/8=)
16: DEViOCwom1Mo8K90gqcr9zPFbsw.roa (hash: Cihwt2VtpCEg5M+ykbN0G+HzBd3bAEXknNMMljIBeis=)
17: DIjEKrN2QIgte3MOPHBqTqk6zL8.roa (hash: Djlgz0V/uM6rrvj+zsdR0L8f71DLX2CbBSL9RTlTtHY=)
18: DXFa04XkR8ChfH_xwX1BmgeTb_A.roa (hash: 1WqZ6YkVB4BBGv3WyiSyog9ZpZ/+LBnEHtOiijLFH+M=)
19: DhZk6hM6roky0GXyBISLUGoSmRs.roa (hash: pC/JWbY4U9zhPfPv2gepydBr/nV7NwyeUglshweIN8g=)
20: Ea4e2w-TlhuAPELanmi8d1DxoVs.roa (hash: QOPC10tzMsvEvvFKM74uMnOkNuc45EJt2v+p/yfgetA=)
21: FEp4V3P4SvU5bIxBRGf5REVatCI.roa (hash: AmoKP5wM2EI6Wb++arWmV3biIk/Ks/EcGE04F6LHmng=)
22: G1aApFV350lk6OS-Vyc-9RPE4-M.roa (hash: 7mUxZCiSxCgKGHPWHFdAuEdOy5f51Mh+o3uEji/Hz2o=)
23: GLdUx6Mq8lnhxMZlyh36cXuArUc.roa (hash: /6maqJyLJCZsoNtENWrCrEfLSdwCdyxAYSQXRDjR288=)
24: HAAgWHqkdMRqmc19opiIk4QvLvY.roa (hash: oRIuNu55ggWAnnK4TABpGs4LY3bJP2HWLbZZqvpkzPI=)
25: Ij0u4aEqiwJgZ9DwWrX6cCHy7bw.roa (hash: 8JcF/ZNT+C9IrR2OrdtXdAsZ+E+FEnCTr+m2GNnYuOc=)
26: LZq0FUTMcxN4welp3NcIvrEYcYw.roa (hash: HCRFlApUxilSWdrLbvTdJYldpokbEMHPwkoOwXJWdNI=)
27: O5OtqUEvG1YnFmn6UgeNJ1oZP-c.roa (hash: VRxwcyE4UrZz6xLqGqdVz8PVGg0wcs0oMtm/DmMYz1M=)
28: O9aaBKIbsI9Fl14QE_5gXVc466M.roa (hash: puorrULFQyq1rYKB90/Z0cb3hO3gtJLM6Iwr9QOTt/I=)
29: PHKOdowfTDkm4Ym-blDcENcWk9E.roa (hash: gEQ/3c+iOHJyyNR6EpoFDtWxPGDLhPruGOkZ744gOcQ=)
30: QwVFqW1cxvBL2o4-tPQAfG31V6w.roa (hash: IMKtYJw1aI4s13QbDf+l0CPN8GsM6khxtwC8WD7mBhQ=)
31: R5Lb2p61_4ynWAtPIZjdF8nGxA4.roa (hash: hyAlLwkVfFI8YdGeGZuftw3XVjaCBhcC74dQWWlsy5I=)
32: RUzXfADdmFEqEzN6P5KX5DHIcNc.roa (hash: lvZKC/ElUnGRUly3SVoAhCAAMBSnMiGtODQPJGvrDJA=)
33: S6-LsMS8UOxm1X7VabpjmNSwyI0.roa (hash: ISGzMTLOPHL5H8ofcmadroxeV92fZwtR8N0wvnG/8CY=)
34: U8ZUU3GFYbfbsIkHSaEoAuRmRVE.roa (hash: a2cZj3mdQkz6E8lml04tuTT4l7mx+oruDy+eevwshvQ=)
35: X8CA8MplxHYpL5q3b_en-F-UQs4.roa (hash: kpBIXrcPDRA1vln2o7CgUflJFoexKXz4XzOQaKlJk44=)
36: XZs_n9LlWeIjgJyjQL-txO1IyBc.roa (hash: vdWb+SO51i4rlc6cEHTBn341KBPqNXiZLaJnJWGUZiA=)
37: asVMiTxQoOH4zq5J04HFS7t7oew.roa (hash: G//y1AaGY18G7+2P1OPo67QHsRKPZprev6YUEMRwkmo=)
38: bKd9nRlFo1gEXgSfVKMnC9gCXtQ.roa (hash: 6iwUdlESdz7+RkwneMjDQat08j+fPpdTnz5Y4bRYJrE=)
39: bbauAtpZJTnysprdGQB_7SBDCcc.roa (hash: S0jg+4F8XMSAzGWhr9YsJ3z7JLXhiocZw3kPMCq4hZU=)
40: cMPo4YpyyDUN4HXAKavH7BLGaEg.roa (hash: FZFlaBgot9IWdhWeB9A0YvT5yJ4VmfaV20DXW7RaKRw=)
41: dCNtZX3dyVqUESkVok9BWHucqLY.roa (hash: yN6ejh5FYh5uP+l/qguLyjfxVezE4QjvRy/DcEPSryo=)
42: dDJN0I-9g4eaOayV-D2asHocLds.roa (hash: OsVUxzOWHIIvs3G+yIJ8EZTTKtiy3cB0zrqdRNa7zHY=)
43: dc1PWa-oSsg3-_LY3nHy3b0c5ZM.roa (hash: t98pgB3eZJGWM8jwemiBCEit8151/JpilzmzBfDSgCE=)
44: eZULLshpMqJsslaZN07ZbXA7_a8.roa (hash: kHFcH9W+KqvgYoWxZWACVuGolVNMOd8+8Q2SvxFFqho=)
45: h8wPkuW6v520gSIrq-p3rQZnx5s.roa (hash: XPo5aSA4RsAh/kiPpMFtOxfPxaLX5GfrVz7xq+noQho=)
46: hhOJU_QXjlgWfBxgpcLto6mV8Wc.roa (hash: C14O+ch76NMbt5OI5YVUKsB04/tzGGuX2CLu1tn4/yw=)
47: k0QlprzRd36NvHYuNRv4f12GQM0.roa (hash: Hx84zYj3bWhYMPrnnvF3XuIdVOKhCJJnqYNhR0z12o8=)
48: k_q0_KCxGCY23ALr6XgnBWO3WkU.roa (hash: PK5vUI4tiDmBvp3V15H0GXhYuJsllxR7+Hz0FNggobg=)
49: n5TYbZlwqk9Di5T_xGhmV1Fi85Y.roa (hash: 3CX1KAK/iYVVm6O2IseKhoZ3NxYUbgrRYXQl90o2sBk=)
50: nXaGHsEgPZBNKtmn56mRzt-VEzw.roa (hash: Ctb1FysygDYFjJRh3zZRcpuOzbIPJfh5qWmiEPC6f+0=)
51: oZQ0KLPPluLJX2BzR4Siyp1MYwc.roa (hash: CIlSeppEo+vRJ3AidstAx+zMSgZZV9xXWSANjJr4tvk=)
52: pFelJKjmsxI5R3DZJlChQC_3MD0.roa (hash: L8qIKNFDArN/1ptMdrOTwQqtla8X4v+mnYVreTvvMew=)
53: pG0mkjSpFcN6bJqBAZOYLrrCydg.roa (hash: d9LfFgKUYNmqqm0NXXgE2fV69QpfXlExSjmbZYXLteE=)
54: paWci91buJWWLtKLIOEAOw418mU.roa (hash: dlO2sPGf5wlMykSQwYuCaO5/Ofd38ZdhlMkCwlnECjI=)
55: qSF6nwyAcZBKbsVy6zwrTyHF9ws.roa (hash: FzvxNu1aICu/wHepWcUI8Z/WUlyAt8TsVejD9JLPlv8=)
56: t9NSysqYSVOb3-lSWme9hU4zhwE.roa (hash: Zg07uTwvFkymuiuSp6UEoXFGxNdx/y02GfTUe6wCzI0=)
57: tCU8TyM86YR2ma5o7L9ddRSw-ts.crl (hash: QsD4Rpa6+m+VW0Y541FTCygYi+99f5aALnj67BEetw4=)
58: vVJ9mSBx6hNqTzTJrHhncI477is.roa (hash: IBqwcIh1REPuGTD9omt2SEUvQhYlPWiLYp90qo+sIJg=)
59: yAXUepuqy1Jbj9R6XNC4ai7FfGg.roa (hash: Br5sE3EcvHbcirwbPVNtC+403MF64TtCvGh57mDUGD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:64:4a:12:4d:58:15:12:d4:62:4e:d9:6f:82:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Nov 5 00:00:14 2025 GMT
Not After : Nov 6 00:00:14 2025 GMT
Subject: CN=09514b2752c4dec449c30b16c3b377fe3d497ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:f0:5e:2a:8b:39:8b:38:1f:2b:f9:40:82:
c6:a7:59:ff:0b:80:10:00:be:35:91:f1:44:2e:01:
76:77:ba:9d:70:de:9e:0f:4a:2d:32:3b:54:81:d9:
91:7c:29:9e:6a:50:81:dc:da:c1:36:c3:1a:cb:2d:
0b:46:cb:7b:b3:8d:7d:7e:dd:7f:ac:8c:d0:62:bc:
3a:53:dc:1f:ff:e7:5b:8f:f1:b7:8c:2c:6f:00:25:
ee:f8:1e:ad:35:c0:50:a7:e7:72:c6:76:bb:b6:d7:
8b:a2:f1:9a:84:21:95:65:73:06:de:5f:86:86:c5:
24:4a:3b:4b:08:63:a0:db:f3:ef:9e:f7:98:7d:ba:
89:e5:85:66:d6:c5:40:a9:dc:88:0b:62:50:2c:bb:
f7:af:e2:60:62:0c:d2:db:20:27:a3:58:70:df:e1:
b5:66:49:5d:85:4a:ae:db:2e:33:21:bb:d2:1c:53:
6c:dd:e7:ea:11:1e:dd:a7:22:82:1e:b2:d6:b0:a1:
b6:c3:b0:02:05:69:7d:7f:7d:99:ac:2b:33:d8:c7:
8e:e5:c4:14:bf:c1:e9:e8:d1:f4:6b:e2:75:d4:58:
21:af:53:e3:e9:b4:dc:e0:8a:bc:22:19:14:f0:e7:
fb:85:02:e3:d7:19:99:54:97:fe:6e:7f:d9:c0:f1:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:51:4B:27:52:C4:DE:C4:49:C3:0B:16:C3:B3:77:FE:3D:49:7E:CD
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a3:30:5b:c1:4e:f4:18:cb:db:3c:7d:ce:9d:d5:85:9d:21:
be:81:60:a5:b7:c8:c7:19:bf:d1:35:bf:44:dc:8e:af:55:b7:
d8:25:13:e4:99:78:22:32:2b:41:1c:80:1b:75:cf:42:42:d4:
38:2d:f1:e7:33:5b:e0:bc:03:04:d2:74:6e:2d:a8:1f:2b:e2:
00:1b:92:20:25:27:2c:b7:f8:03:09:f3:60:28:18:8d:c2:88:
a3:6b:f6:ff:ac:f2:95:ef:7c:eb:d8:30:d4:28:0d:4d:43:39:
b6:4b:67:f6:86:66:13:01:59:1e:27:99:c8:ea:a5:1f:c2:e5:
d3:ba:ce:4e:b9:7b:5c:f2:f3:e6:67:dd:75:29:09:a8:d3:78:
2f:d1:ee:11:b6:27:54:ca:e8:50:c0:c2:d4:e8:86:9c:8c:cd:
2c:81:1c:ba:69:a7:2e:73:dc:b2:a9:1d:ff:d7:11:a0:4c:7a:
e4:f3:20:fc:08:76:0b:d3:61:a2:cd:3f:9a:9b:a6:ba:80:e0:
71:60:77:d4:24:2d:e8:b6:d5:8b:ed:62:c4:df:ef:71:b4:80:
4e:33:03:c8:67:af:80:c7:f8:b8:d9:b4:f9:46:b6:e3:d1:41:
77:e8:54:42:a3:19:d5:95:d9:62:3c:94:fe:ca:ff:9f:61:26:
72:c3:85:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUGRKEk1YFRLUYk7Zb4LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjUxMTA1MDAwMDE0WhcNMjUxMTA2MDAwMDE0WjAzMTEwLwYDVQQD
EygwOTUxNGIyNzUyYzRkZWM0NDljMzBiMTZjM2IzNzdmZTNkNDk3ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnjwXiqLOYs4Hyv5QILGp1n/C4AQ
AL41kfFELgF2d7qdcN6eD0otMjtUgdmRfCmealCB3NrBNsMayy0LRst7s419ft1/
rIzQYrw6U9wf/+dbj/G3jCxvACXu+B6tNcBQp+dyxna7tteLovGahCGVZXMG3l+G
hsUkSjtLCGOg2/PvnveYfbqJ5YVm1sVAqdyIC2JQLLv3r+JgYgzS2yAno1hw3+G1
ZkldhUqu2y4zIbvSHFNs3efqER7dpyKCHrLWsKG2w7ACBWl9f32ZrCsz2MeO5cQU
v8Hp6NH0a+J11Fghr1Pj6bTc4Iq8IhkU8Of7hQLj1xmZVJf+bn/ZwPFcrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlRSydSxN7EScMLFsOzd/49SX7NMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuaMwW8FO
9BjL2zx9zp3VhZ0hvoFgpbfIxxm/0TW/RNyOr1W32CUT5Jl4IjIrQRyAG3XPQkLU
OC3x5zNb4LwDBNJ0bi2oHyviABuSICUnLLf4AwnzYCgYjcKIo2v2/6zyle9869gw
1CgNTUM5tktn9oZmEwFZHieZyOqlH8Ll07rOTrl7XPLz5mfddSkJqNN4L9HuEbYn
VMroUMDC1OiGnIzNLIEcummnLnPcsqkd/9cRoEx65PMg/Ah2C9Nhos0/mpumuoDg
cWB31CQt6LbVi+1ixN/vcbSATjMDyGevgMf4uNm0+Ua249FBd+hUQqMZ1ZXZYjyU
/sr/n2EmcsOFLQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:46 2025 by rpki-client