
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
File: tCU8TyM86YR2ma5o7L9ddRSw-ts.mft (raw, json)
Hash identifier: ze+Is8zC0/DDroygR8s+riYxEXEl0/ZSUy90P+ELOFg=
Subject key identifier: 2C:9D:A8:72:19:8F:23:71:90:46:09:CB:DA:4B:52:91:2E:AB:CF:96
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019A4F61F6ABE9F2A772438B3E566CB1A77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
Manifest number: 1759
Signing time: Tue 04 Nov 2025 15:00:11 +0000
Manifest this update: Tue 04 Nov 2025 15:00:11 +0000
Manifest next update: Wed 05 Nov 2025 15:00:11 +0000
Files and hashes: 1: 0s_8uV4y_4Qh9izsXyjdTvFnvko.roa (hash: eOw9cupvDiGzZK06bLbmO3r71BcAglZ1z0oB7mRXjtY=)
2: 1GKSBXVaZ0ag5v475kUXdEkbQhQ.roa (hash: X9uuaeQ/DFn7eKiljliRJ9ZtnztLoEh6oYyh/D1LlZE=)
3: 1eQYY4zw6BHTedgOY9nUUktL4Wo.roa (hash: 1GSk8VZgzdgKxh/A+wdRhyo5q1wO2hZsCTmMQzU4Ni8=)
4: 5y1fAHStJ-LIl-krEwTwF8xMfXw.roa (hash: CigYoXGgEpJO22j1bYVgQQOkgFTLXjpTUquBl/raWWc=)
5: 8LksUd4Bc07spLD8fADCnhn7LCM.roa (hash: Ltd+LZ1A4k2Ak2CxYsrw7bl+BSFB7+eAiWeQKA1mKH4=)
6: 93pagyqbKSx7ojiwk3pCEHwGNqE.roa (hash: Awi9xJvRaRCnDHEl0mlXSjCv4wxBbmDwhwg9tE5Uqe4=)
7: 9ZzfTs0es7d3dITh42i7PcrGHFI.roa (hash: j+RWh4sGZQYYo7/8IegKYIMXLt75CVdOknO/qydJXO0=)
8: 9aX1C0GBDjpl9KbtzL0_14BT4x4.roa (hash: 2ZwMdtmJ2Vb2cjnuC6vVTCJhkSLVLpECEfkccephonY=)
9: AWzKvVBumPuAv-ix9WEGZW27uLc.roa (hash: DAiyzPE0kSu04Hsgva4YCQLrUYc+yqLAnbyuT7wymo0=)
10: AXSoaMu602i_53-BQksf4H8rVso.roa (hash: Gozi2rQxeKnJmmPgfnbAWudEjv4AS8oCMzPcEaljedc=)
11: B_PNrqaypXS-uuqkeyPbkmY0Qnc.roa (hash: Du7C+6zjWvOoxLpFBJQPqQbDqvsJ2HaEuG+OJzC6pe8=)
12: CGUIbzoJQeR65zTqWRGx45Ja8R4.roa (hash: UN/Fnr6DI0baScUU9VdPUEJZbYixDKuX8x8+IhMnZMs=)
13: CeLnqu3xYBKZUvCPgV7J-PpEdRM.roa (hash: zLuEq1mLrHs0mVf6yNVLD5Zej/7XVgYiGrCvNOWJeVo=)
14: D6p2t8uiBKfqdDi55_En4lYtIro.roa (hash: sj7YoIshSn7ixfErwrPSPMsqEYO9JvgtqizaCyYHm04=)
15: D8WtQTZCIdbzIxZEzqOjYt11R5A.roa (hash: mTjIP060ZUh7omSO0Zdfe1RUcEila1seoPIqhcfag/8=)
16: DEViOCwom1Mo8K90gqcr9zPFbsw.roa (hash: Cihwt2VtpCEg5M+ykbN0G+HzBd3bAEXknNMMljIBeis=)
17: DIjEKrN2QIgte3MOPHBqTqk6zL8.roa (hash: Djlgz0V/uM6rrvj+zsdR0L8f71DLX2CbBSL9RTlTtHY=)
18: DXFa04XkR8ChfH_xwX1BmgeTb_A.roa (hash: 1WqZ6YkVB4BBGv3WyiSyog9ZpZ/+LBnEHtOiijLFH+M=)
19: DhZk6hM6roky0GXyBISLUGoSmRs.roa (hash: pC/JWbY4U9zhPfPv2gepydBr/nV7NwyeUglshweIN8g=)
20: Ea4e2w-TlhuAPELanmi8d1DxoVs.roa (hash: QOPC10tzMsvEvvFKM74uMnOkNuc45EJt2v+p/yfgetA=)
21: FEp4V3P4SvU5bIxBRGf5REVatCI.roa (hash: AmoKP5wM2EI6Wb++arWmV3biIk/Ks/EcGE04F6LHmng=)
22: G1aApFV350lk6OS-Vyc-9RPE4-M.roa (hash: 7mUxZCiSxCgKGHPWHFdAuEdOy5f51Mh+o3uEji/Hz2o=)
23: GLdUx6Mq8lnhxMZlyh36cXuArUc.roa (hash: /6maqJyLJCZsoNtENWrCrEfLSdwCdyxAYSQXRDjR288=)
24: HAAgWHqkdMRqmc19opiIk4QvLvY.roa (hash: oRIuNu55ggWAnnK4TABpGs4LY3bJP2HWLbZZqvpkzPI=)
25: Ij0u4aEqiwJgZ9DwWrX6cCHy7bw.roa (hash: 8JcF/ZNT+C9IrR2OrdtXdAsZ+E+FEnCTr+m2GNnYuOc=)
26: LZq0FUTMcxN4welp3NcIvrEYcYw.roa (hash: HCRFlApUxilSWdrLbvTdJYldpokbEMHPwkoOwXJWdNI=)
27: O5OtqUEvG1YnFmn6UgeNJ1oZP-c.roa (hash: VRxwcyE4UrZz6xLqGqdVz8PVGg0wcs0oMtm/DmMYz1M=)
28: O9aaBKIbsI9Fl14QE_5gXVc466M.roa (hash: puorrULFQyq1rYKB90/Z0cb3hO3gtJLM6Iwr9QOTt/I=)
29: PHKOdowfTDkm4Ym-blDcENcWk9E.roa (hash: gEQ/3c+iOHJyyNR6EpoFDtWxPGDLhPruGOkZ744gOcQ=)
30: QwVFqW1cxvBL2o4-tPQAfG31V6w.roa (hash: IMKtYJw1aI4s13QbDf+l0CPN8GsM6khxtwC8WD7mBhQ=)
31: R5Lb2p61_4ynWAtPIZjdF8nGxA4.roa (hash: hyAlLwkVfFI8YdGeGZuftw3XVjaCBhcC74dQWWlsy5I=)
32: RUzXfADdmFEqEzN6P5KX5DHIcNc.roa (hash: lvZKC/ElUnGRUly3SVoAhCAAMBSnMiGtODQPJGvrDJA=)
33: S6-LsMS8UOxm1X7VabpjmNSwyI0.roa (hash: ISGzMTLOPHL5H8ofcmadroxeV92fZwtR8N0wvnG/8CY=)
34: U8ZUU3GFYbfbsIkHSaEoAuRmRVE.roa (hash: a2cZj3mdQkz6E8lml04tuTT4l7mx+oruDy+eevwshvQ=)
35: X8CA8MplxHYpL5q3b_en-F-UQs4.roa (hash: kpBIXrcPDRA1vln2o7CgUflJFoexKXz4XzOQaKlJk44=)
36: XZs_n9LlWeIjgJyjQL-txO1IyBc.roa (hash: vdWb+SO51i4rlc6cEHTBn341KBPqNXiZLaJnJWGUZiA=)
37: asVMiTxQoOH4zq5J04HFS7t7oew.roa (hash: G//y1AaGY18G7+2P1OPo67QHsRKPZprev6YUEMRwkmo=)
38: bKd9nRlFo1gEXgSfVKMnC9gCXtQ.roa (hash: 6iwUdlESdz7+RkwneMjDQat08j+fPpdTnz5Y4bRYJrE=)
39: bbauAtpZJTnysprdGQB_7SBDCcc.roa (hash: S0jg+4F8XMSAzGWhr9YsJ3z7JLXhiocZw3kPMCq4hZU=)
40: cMPo4YpyyDUN4HXAKavH7BLGaEg.roa (hash: FZFlaBgot9IWdhWeB9A0YvT5yJ4VmfaV20DXW7RaKRw=)
41: dCNtZX3dyVqUESkVok9BWHucqLY.roa (hash: yN6ejh5FYh5uP+l/qguLyjfxVezE4QjvRy/DcEPSryo=)
42: dDJN0I-9g4eaOayV-D2asHocLds.roa (hash: OsVUxzOWHIIvs3G+yIJ8EZTTKtiy3cB0zrqdRNa7zHY=)
43: dc1PWa-oSsg3-_LY3nHy3b0c5ZM.roa (hash: t98pgB3eZJGWM8jwemiBCEit8151/JpilzmzBfDSgCE=)
44: eZULLshpMqJsslaZN07ZbXA7_a8.roa (hash: kHFcH9W+KqvgYoWxZWACVuGolVNMOd8+8Q2SvxFFqho=)
45: h8wPkuW6v520gSIrq-p3rQZnx5s.roa (hash: XPo5aSA4RsAh/kiPpMFtOxfPxaLX5GfrVz7xq+noQho=)
46: hhOJU_QXjlgWfBxgpcLto6mV8Wc.roa (hash: C14O+ch76NMbt5OI5YVUKsB04/tzGGuX2CLu1tn4/yw=)
47: k0QlprzRd36NvHYuNRv4f12GQM0.roa (hash: Hx84zYj3bWhYMPrnnvF3XuIdVOKhCJJnqYNhR0z12o8=)
48: k_q0_KCxGCY23ALr6XgnBWO3WkU.roa (hash: PK5vUI4tiDmBvp3V15H0GXhYuJsllxR7+Hz0FNggobg=)
49: n5TYbZlwqk9Di5T_xGhmV1Fi85Y.roa (hash: 3CX1KAK/iYVVm6O2IseKhoZ3NxYUbgrRYXQl90o2sBk=)
50: nXaGHsEgPZBNKtmn56mRzt-VEzw.roa (hash: Ctb1FysygDYFjJRh3zZRcpuOzbIPJfh5qWmiEPC6f+0=)
51: oZQ0KLPPluLJX2BzR4Siyp1MYwc.roa (hash: CIlSeppEo+vRJ3AidstAx+zMSgZZV9xXWSANjJr4tvk=)
52: pFelJKjmsxI5R3DZJlChQC_3MD0.roa (hash: L8qIKNFDArN/1ptMdrOTwQqtla8X4v+mnYVreTvvMew=)
53: pG0mkjSpFcN6bJqBAZOYLrrCydg.roa (hash: d9LfFgKUYNmqqm0NXXgE2fV69QpfXlExSjmbZYXLteE=)
54: paWci91buJWWLtKLIOEAOw418mU.roa (hash: dlO2sPGf5wlMykSQwYuCaO5/Ofd38ZdhlMkCwlnECjI=)
55: qSF6nwyAcZBKbsVy6zwrTyHF9ws.roa (hash: FzvxNu1aICu/wHepWcUI8Z/WUlyAt8TsVejD9JLPlv8=)
56: t9NSysqYSVOb3-lSWme9hU4zhwE.roa (hash: Zg07uTwvFkymuiuSp6UEoXFGxNdx/y02GfTUe6wCzI0=)
57: tCU8TyM86YR2ma5o7L9ddRSw-ts.crl (hash: KHmxNe+CRfxSXOLdTSAljGNnMjy/m0IEyxFoRnHiAxQ=)
58: vVJ9mSBx6hNqTzTJrHhncI477is.roa (hash: IBqwcIh1REPuGTD9omt2SEUvQhYlPWiLYp90qo+sIJg=)
59: yAXUepuqy1Jbj9R6XNC4ai7FfGg.roa (hash: Br5sE3EcvHbcirwbPVNtC+403MF64TtCvGh57mDUGD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f6:ab:e9:f2:a7:72:43:8b:3e:56:6c:b1:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Nov 4 15:00:11 2025 GMT
Not After : Nov 5 15:00:11 2025 GMT
Subject: CN=2c9da872198f2371904609cbda4b52912eabcf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:df:72:e5:15:80:97:ef:41:96:40:df:08:
5c:fb:91:60:70:2a:f9:22:29:40:48:95:8c:ba:59:
97:93:9c:dd:3c:fb:06:82:f2:ef:b2:de:7a:81:60:
5a:5b:c3:fc:36:0f:e7:bf:f1:24:e7:7d:3d:70:0d:
13:3e:04:ea:53:f3:3f:4d:fe:f7:e2:b8:66:00:64:
59:d8:2f:48:99:a5:03:73:fa:9e:ff:ca:5b:b5:01:
18:57:fa:31:1c:18:3e:6d:c0:59:90:74:c9:72:24:
5b:f8:ae:eb:94:be:70:88:d2:2c:eb:cf:e4:16:f1:
fa:30:cc:01:ce:b8:05:73:71:ac:43:66:d1:0b:30:
02:2a:02:6c:52:8a:26:df:25:4a:ae:7a:4d:bb:d2:
b2:ef:7d:99:a4:13:c3:d4:ea:ec:4d:94:4c:9e:fb:
b4:2e:63:9f:04:49:18:c0:6b:9a:bf:52:e5:92:41:
83:3a:2c:10:cc:fb:8e:46:39:71:76:77:ef:d7:75:
dc:ff:1e:9b:98:0b:c7:b0:29:24:66:e2:02:da:ee:
3e:9f:06:c7:df:cf:2d:4e:1e:e8:34:0c:44:aa:53:
df:df:fd:c3:cd:20:a6:81:8c:46:86:db:39:33:95:
f6:4e:c9:c3:20:85:17:a6:58:30:bf:32:f6:c7:96:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:A8:72:19:8F:23:71:90:46:09:CB:DA:4B:52:91:2E:AB:CF:96
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:cb:0b:94:ce:0e:e6:18:b8:1e:1c:2b:32:b9:40:d8:ef:
c2:ed:2d:ac:d6:c3:40:52:5c:44:94:d6:d6:80:c6:d5:d4:7f:
1e:fd:09:20:45:ff:fe:ba:cf:8c:01:a1:01:88:b1:5e:4b:5e:
5b:94:cf:df:06:04:95:74:1e:de:63:f0:6e:a4:7b:ec:2e:0e:
2d:c2:5a:c7:bc:8a:0b:e5:19:af:47:b3:63:c2:00:78:a4:e7:
66:44:18:b4:c5:d0:4e:b1:0c:67:73:e7:56:e3:51:1f:65:10:
8e:7b:3c:32:b9:cf:0a:ec:59:ee:14:d2:17:0b:a0:a8:29:29:
81:22:74:bc:dc:de:2d:62:e1:4c:2e:fe:47:19:3e:06:7a:e4:
f2:98:a4:bb:e4:cc:64:8e:77:e0:0f:77:2c:98:db:e4:b4:14:
85:59:6b:bd:26:01:aa:39:94:b3:11:f1:cc:8f:33:7f:8b:53:
88:2c:36:8b:31:a3:6c:8c:0f:e2:3a:4d:89:25:b0:a6:40:ca:
8f:2a:f1:f7:e2:af:fe:fd:d8:2e:fa:4a:c3:5a:23:9a:11:6f:
81:2d:b9:98:06:2c:31:1c:dd:bb:e6:7b:15:1a:11:7e:55:97:
82:48:99:b0:c7:08:5b:1e:9e:81:12:50:1e:43:f5:d2:c2:a8:
fa:d6:14:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYfar6fKnckOLPlZssad+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjUxMTA0MTUwMDExWhcNMjUxMTA1MTUwMDExWjAzMTEwLwYDVQQD
EygyYzlkYTg3MjE5OGYyMzcxOTA0NjA5Y2JkYTRiNTI5MTJlYWJjZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZzfcuUVgJfvQZZA3whc+5FgcCr5
IilASJWMulmXk5zdPPsGgvLvst56gWBaW8P8Ng/nv/Ek5309cA0TPgTqU/M/Tf73
4rhmAGRZ2C9ImaUDc/qe/8pbtQEYV/oxHBg+bcBZkHTJciRb+K7rlL5wiNIs68/k
FvH6MMwBzrgFc3GsQ2bRCzACKgJsUoom3yVKrnpNu9Ky732ZpBPD1OrsTZRMnvu0
LmOfBEkYwGuav1LlkkGDOiwQzPuORjlxdnfv13Xc/x6bmAvHsCkkZuIC2u4+nwbH
388tTh7oNAxEqlPf3/3DzSCmgYxGhts5M5X2TsnDIIUXplgwvzL2x5bp1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCydqHIZjyNxkEYJy9pLUpEuq8+WMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+jLC5TO
DuYYuB4cKzK5QNjvwu0trNbDQFJcRJTW1oDG1dR/Hv0JIEX//rrPjAGhAYixXkte
W5TP3wYElXQe3mPwbqR77C4OLcJax7yKC+UZr0ezY8IAeKTnZkQYtMXQTrEMZ3Pn
VuNRH2UQjns8MrnPCuxZ7hTSFwugqCkpgSJ0vNzeLWLhTC7+Rxk+Bnrk8piku+TM
ZI534A93LJjb5LQUhVlrvSYBqjmUsxHxzI8zf4tTiCw2izGjbIwP4jpNiSWwpkDK
jyrx9+Kv/v3YLvpKw1ojmhFvgS25mAYsMRzdu+Z7FRoRflWXgkiZsMcIWx6egRJQ
HkP10sKo+tYUYw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:50 2025 by rpki-client