$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: 32bK05GjtJYVUkTp8lZx7mOZFQsmLAcXj84VL6f/bYQ= Subject key identifier: 28:B2:AA:12:78:03:C3:C0:22:7C:BC:F2:CE:19:81:15:D0:EA:72:7D Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019A50075EBFF82F3DEFC04FD44B22AAD3DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 1280 Signing time: Tue 04 Nov 2025 18:00:51 +0000 Manifest this update: Tue 04 Nov 2025 18:00:51 +0000 Manifest next update: Wed 05 Nov 2025 18:00:51 +0000 Files and hashes: 1: 03RN7OHzIa0Nho7Y7TJcU3K2cEc.roa (hash: VY+KuNJsTvbIIrnt/HRAmSCINeCUfVPDRE1gROhaFB4=) 2: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=) 3: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 4: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 5: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 6: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 7: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=) 8: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=) 9: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=) 10: PDqkVJ40PrFe4suGg4WOJqzMUow.roa (hash: RXbO3f8rMaUmCLGNqlV1Dn/DyLMq2vMWOPh4GbDgazk=) 11: Quc7mdnkYNwrbQhv4ZNnMA-i26Q.roa (hash: qyyVqEo1X6QuUJgPIcFasQ0Ni+mghhtNAyF4nptRM7w=) 12: TPMoZhT7pBe3VYwD0yOkrDwG6DI.roa (hash: OH5WytZuz33ouqi8MQK3P99lvzQJRdnWAM/P6DB5FRw=) 13: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 14: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 15: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 16: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 17: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=) 18: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 19: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 20: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: qn6jSF2YnwSctByHMGywt5/qSEJJ959FMgRKiz3u890=) 21: vyDPsQ1FXw7OXoebjCdEso67fJc.roa (hash: 40KxbJ4OGjtphO16wDERCKtpdBirvp5LYlDflcERj1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:07:5e:bf:f8:2f:3d:ef:c0:4f:d4:4b:22:aa:d3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Nov 4 18:00:51 2025 GMT Not After : Nov 5 18:00:51 2025 GMT Subject: CN=28b2aa127803c3c0227cbcf2ce198115d0ea727d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:eb:02:a4:89:1a:1f:69:33:5d:81:c8:d6: bd:1e:30:ad:ac:24:14:0b:3d:a5:ce:83:05:b3:1e: 59:57:b9:23:e6:90:b1:8b:d9:e8:08:2b:dc:c1:e5: 2e:fa:79:f4:15:b9:34:35:89:0e:9d:f8:88:f0:03: a1:a7:dc:9d:31:48:2c:58:2b:c9:d3:d9:2c:6a:f0: db:dc:43:25:f2:17:64:4b:92:88:74:f1:ea:7d:3b: ee:6a:16:81:b2:dd:7f:c3:4d:28:47:0a:45:d1:a8: ef:60:79:38:74:e7:06:41:a6:18:b5:41:34:52:12: e2:cd:3e:57:40:cc:35:25:ae:a3:67:25:2e:86:b8: 85:f4:cf:e8:9d:eb:c0:77:f6:f4:f2:2c:23:10:54: 7c:a2:e2:ee:b9:3d:98:73:7a:1c:01:0a:59:36:2c: 03:d7:98:e0:59:33:0b:a6:a4:2f:5c:f6:5f:b6:cc: 3f:3e:10:cd:95:3c:9b:1b:d5:98:f7:9e:7c:2f:9b: 3b:5b:7f:1e:8c:7c:a9:2a:8a:2d:ad:1b:7c:fb:53: 64:ab:ad:a4:11:c9:35:08:48:cf:cc:fb:7c:20:e4: be:4e:71:c1:07:de:b6:7f:2d:ca:4a:74:59:5c:34: b2:25:63:32:ca:b8:db:4a:97:d9:fc:fd:5c:bc:35: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B2:AA:12:78:03:C3:C0:22:7C:BC:F2:CE:19:81:15:D0:EA:72:7D X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:56:84:c4:44:d5:23:a2:52:aa:6e:a8:fe:09:62:ae:7c:07: f7:30:f2:8c:b0:5f:f0:46:06:c9:01:d1:e8:ec:a9:94:f2:a1: 6d:5f:81:e5:f8:25:b3:70:68:5a:5e:25:b9:88:48:53:b9:5e: 7f:b3:d9:05:ea:cf:97:82:52:bd:3d:7b:20:c3:7f:ac:0c:92: 15:7c:6b:27:2f:25:9b:07:1c:3f:3e:74:3f:a8:c5:05:56:93: a8:83:3c:8d:66:6e:50:5c:f1:df:da:e4:aa:7a:5e:ce:8c:f6: d8:5c:2c:6a:48:fd:d4:95:9a:d9:79:ab:ad:a6:d5:b9:31:d5: bc:66:83:47:89:0d:7c:5d:13:c4:ed:7e:37:71:eb:67:a7:31: 4d:df:31:67:0d:a5:a6:5c:13:b3:94:53:78:d7:f7:ec:1b:93: 75:41:a6:6c:cb:25:0c:5b:97:87:7e:07:dd:b4:91:4b:e5:62: f7:16:f4:44:7d:0e:6e:eb:ae:bf:c2:1c:c5:8c:17:3f:5c:30: db:2d:87:63:e7:68:de:bc:17:3e:b4:6c:30:05:a7:72:3d:78: 06:12:aa:5e:96:6f:ec:86:ed:29:b2:f1:86:de:d7:91:0f:36: 2e:99:ba:55:15:66:43:0b:40:26:cc:9c:cd:1e:41:45:b5:df: fd:b0:37:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQB16/+C8978BP1EsiqtPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUxMTA0MTgwMDUxWhcNMjUxMTA1MTgwMDUxWjAzMTEwLwYDVQQD EygyOGIyYWExMjc4MDNjM2MwMjI3Y2JjZjJjZTE5ODExNWQwZWE3MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL/rAqSJGh9pM12ByNa9HjCtrCQU Cz2lzoMFsx5ZV7kj5pCxi9noCCvcweUu+nn0Fbk0NYkOnfiI8AOhp9ydMUgsWCvJ 09ksavDb3EMl8hdkS5KIdPHqfTvuahaBst1/w00oRwpF0ajvYHk4dOcGQaYYtUE0 UhLizT5XQMw1Ja6jZyUuhriF9M/onevAd/b08iwjEFR8ouLuuT2Yc3ocAQpZNiwD 15jgWTMLpqQvXPZftsw/PhDNlTybG9WY9558L5s7W38ejHypKootrRt8+1Nkq62k Eck1CEjPzPt8IOS+TnHBB962fy3KSnRZXDSyJWMyyrjbSpfZ/P1cvDVsRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiyqhJ4A8PAIny88s4ZgRXQ6nJ9MB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVaExETV I6JSqm6o/glirnwH9zDyjLBf8EYGyQHR6OyplPKhbV+B5fgls3BoWl4luYhIU7le f7PZBerPl4JSvT17IMN/rAySFXxrJy8lmwccPz50P6jFBVaTqIM8jWZuUFzx39rk qnpezoz22Fwsakj91JWa2XmrrabVuTHVvGaDR4kNfF0TxO1+N3HrZ6cxTd8xZw2l plwTs5RTeNf37BuTdUGmbMslDFuXh34H3bSRS+Vi9xb0RH0Obuuuv8IcxYwXP1ww 2y2HY+do3rwXPrRsMAWncj14BhKqXpZv7IbtKbLxht7XkQ82Lpm6VRVmQwtAJsyc zR5BRbXf/bA39Q== -----END CERTIFICATE-----Generated at Tue Nov 4 20:16:17 2025 by rpki-client