$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: ynrfsyt/RUVgCj6yvD+7udqRbf9InlXB0o0v/mSawUw= Subject key identifier: EE:EF:B8:EB:7F:CA:04:63:BC:B5:16:40:37:B4:81:9B:3D:A6:F6:70 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019A4C60D599FCA14809C020FC6B3BAB490E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 1402 Signing time: Tue 04 Nov 2025 01:00:05 +0000 Manifest this update: Tue 04 Nov 2025 01:00:05 +0000 Manifest next update: Wed 05 Nov 2025 01:00:05 +0000 Files and hashes: 1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=) 2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=) 3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=) 4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=) 5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: Sf6kfjJrUUwxgbWRn29cDZ2rP/G+Io+j5PPmAl/jYbs=) 6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=) 7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=) 8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=) 9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=) 10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=) 11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=) 12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=) 13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=) 14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=) 15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=) 16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=) 17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=) 18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=) 19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=) 20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 01:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:60:d5:99:fc:a1:48:09:c0:20:fc:6b:3b:ab:49:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Nov 4 01:00:05 2025 GMT Not After : Nov 5 01:00:05 2025 GMT Subject: CN=eeefb8eb7fca0463bcb5164037b4819b3da6f670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:96:72:38:1a:89:0f:fb:8f:3d:69:6e:7d: 44:00:df:03:c6:2d:65:48:e1:b4:3e:99:36:f2:06: 2f:f6:e8:5b:8d:5a:13:3e:d7:95:29:ba:cb:e7:5d: f4:76:aa:71:ef:fc:49:f1:a6:57:af:e2:44:f2:fa: 65:8a:8c:6a:63:0d:55:7c:ce:42:a4:27:62:17:27: f6:73:fc:08:ea:e2:8d:e0:c9:92:73:48:7b:5b:dd: 02:97:d6:4e:00:7b:7c:39:5d:fc:32:d9:d2:95:46: 63:d0:0e:80:f9:4f:ef:e1:b4:22:3a:6f:9e:25:8c: 58:1b:34:13:f7:0e:62:e7:85:07:0a:8d:45:81:16: 85:80:e5:1d:87:07:64:dc:7d:d9:b8:e8:4e:36:9d: 2b:f7:9d:ff:0e:8e:5d:4e:52:a1:78:d8:cd:ba:0a: ed:01:f5:80:b9:02:5a:81:a9:33:ec:2d:37:fd:b3: 88:6b:b0:29:2f:26:37:42:69:f4:e4:04:96:da:37: 4d:99:73:df:f2:38:bf:48:27:94:f8:44:f4:ee:db: f1:4c:7d:6c:28:ec:25:f1:fd:7d:3b:f3:a4:d1:cc: 60:af:e8:4a:e0:69:d4:fd:04:97:b5:6a:e1:4d:bf: 79:c5:11:29:c0:10:36:62:36:78:c6:dd:1a:af:4e: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EF:B8:EB:7F:CA:04:63:BC:B5:16:40:37:B4:81:9B:3D:A6:F6:70 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:cf:45:d5:97:0e:98:b3:12:a3:5b:82:1c:b3:1f:74:b8:7b: e8:09:d9:98:59:e4:e9:de:a9:15:ab:8c:20:47:68:cd:1b:ce: 33:33:cb:f5:73:01:fb:2d:95:e0:de:b2:79:05:a2:17:c8:03: a0:09:67:d8:a8:25:5c:c7:c9:6e:7d:0e:09:bb:9d:86:0f:13: 15:c8:47:a2:09:30:96:2e:f6:77:96:de:85:41:02:7b:da:15: 01:a2:c5:fa:d4:0e:24:74:55:44:2f:c6:2c:2f:51:f7:f4:46: 4d:9b:d6:8c:c6:31:7a:ff:be:3a:b6:4a:6d:4d:d7:c2:21:80: bb:32:7f:02:f3:cd:75:5f:f1:e3:12:ab:e7:35:f0:e8:5c:61: 3a:91:cf:99:e8:e6:78:ee:ea:f6:02:d1:d8:07:ab:56:e4:cf: 7b:62:a7:9c:73:09:0a:07:17:4e:ed:b0:70:2a:ec:b8:83:ee: 8b:06:fb:37:f4:02:4b:c5:9d:2c:35:1e:70:0f:f0:1c:9e:e7: ce:95:cf:3d:86:b6:2b:c2:f0:f3:c2:29:c6:e2:55:39:8b:81: 49:b1:1f:81:03:cb:b7:20:36:93:d8:39:01:bd:17:35:6c:2c: 6d:65:0c:03:12:c8:3f:6e:ba:5c:3b:f1:15:f9:cb:e9:6a:12: 7b:66:5e:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMYNWZ/KFICcAg/Gs7q0kOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUxMTA0MDEwMDA1WhcNMjUxMTA1MDEwMDA1WjAzMTEwLwYDVQQD EyhlZWVmYjhlYjdmY2EwNDYzYmNiNTE2NDAzN2I0ODE5YjNkYTZmNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHCWcjgaiQ/7jz1pbn1EAN8Dxi1l SOG0Ppk28gYv9uhbjVoTPteVKbrL5130dqpx7/xJ8aZXr+JE8vplioxqYw1VfM5C pCdiFyf2c/wI6uKN4MmSc0h7W90Cl9ZOAHt8OV38MtnSlUZj0A6A+U/v4bQiOm+e JYxYGzQT9w5i54UHCo1FgRaFgOUdhwdk3H3ZuOhONp0r953/Do5dTlKheNjNugrt AfWAuQJagakz7C03/bOIa7ApLyY3Qmn05ASW2jdNmXPf8ji/SCeU+ET07tvxTH1s KOwl8f19O/Ok0cxgr+hK4GnU/QSXtWrhTb95xREpwBA2YjZ4xt0ar05H7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7vuOt/ygRjvLUWQDe0gZs9pvZwMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuc9F1ZcO mLMSo1uCHLMfdLh76AnZmFnk6d6pFauMIEdozRvOMzPL9XMB+y2V4N6yeQWiF8gD oAln2KglXMfJbn0OCbudhg8TFchHogkwli72d5behUECe9oVAaLF+tQOJHRVRC/G LC9R9/RGTZvWjMYxev++OrZKbU3XwiGAuzJ/AvPNdV/x4xKr5zXw6FxhOpHPmejm eO7q9gLR2AerVuTPe2KnnHMJCgcXTu2wcCrsuIPuiwb7N/QCS8WdLDUecA/wHJ7n zpXPPYa2K8Lw88IpxuJVOYuBSbEfgQPLtyA2k9g5Ab0XNWwsbWUMAxLIP266XDvx FfnL6WoSe2ZeFg== -----END CERTIFICATE-----Generated at Tue Nov 4 10:45:53 2025 by rpki-client