$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft File: T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json) Hash identifier: sBUHsGmHslJCzK3KECReRyfs1lw/eux6mEFUjyXKOQc= Subject key identifier: C4:32:1B:EC:7E:86:73:23:BA:80:5B:EA:EF:BF:C9:10:CC:2C:C7:1A Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019A4F62236FE076223E283CDEA0E281F4A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft Manifest number: 17A8 Signing time: Tue 04 Nov 2025 15:00:22 +0000 Manifest this update: Tue 04 Nov 2025 15:00:22 +0000 Manifest next update: Wed 05 Nov 2025 15:00:22 +0000 Files and hashes: 1: 1-L9qSgE09LkQG7Ea8EBDdDw4ino.roa (hash: L03XGEs9qhc6ohMjsbyVjgW+T6aNu0Or4uMNslNgGaI=) 2: 4iHcBGfl4oJ0jUkqbJpTpkjJRRA.roa (hash: 9gUiJ2PpTaXRBDYpcks5/ZTXgi/FI7Hpa6+iF/UooaM=) 3: 5GpN33ElR1lUI3r69WNur5XVlhs.roa (hash: Ag+FWXz8zur3U3WfkactLdqUhbzus2FhO2lgG9Wdyos=) 4: ApvhjKPqS54Ym0klIaNKAJ8kwfA.roa (hash: G7CMBZzYEWEowN0oeXl4yB4eRy4GZVwzz9Vsjln2SbY=) 5: Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa (hash: 1LM6MDYaE6Y/jo/PARMtexnN79ZdrRCB7ndwYT67l/g=) 6: D4fjlMdzoE531488p0OTA-8Nk-o.roa (hash: ZYvjH+ox9QqmVT8DocHf0I+vPA4vlzbkktR49hxKf8Q=) 7: KM_F04W97L4fGV6eB1EFGADXYBA.roa (hash: dZWwjg2hZJwYzS80M1Flty/faDlYaBPiOJ5OQ7mS6kc=) 8: LRsE8HjdoDuIOCHhNJWGn8Yh3Z4.roa (hash: x5/q1IzKRQsjqMHjgJuVRy8oArjf6h7TAw1i1N5j5cs=) 9: MsFmWJOoSFY3BCE49erYLm5IeF8.roa (hash: +ULhpY8+EhNOI9KNs3g5QfGlO9AZRphDDwBCNw26nt4=) 10: Mz8Xzjb4Em-bp16qe94uV9f2KSc.roa (hash: IgI2K3rzQ3JJ+QIwmVbORi3IMlNvAYMKIlRufn/wj8k=) 11: QOd_WFMEgwOyxqu-Xk2hZvgMcH8.roa (hash: uXkg5eescOxXc9nW3DCPgg8rcsXy8Kvy8S+sNh4PoXk=) 12: QsDL7x5oAgXjMeRoqEotR0YXQIw.roa (hash: z8q4Yda7b/Bhl+Mb3DcVE7Ved5TmFaoFf3dZxwrq/z8=) 13: RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa (hash: fyJVWs7abgQPirZqK6oCiRYQDMcFiF3X6qhzJ7XsPjw=) 14: T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa (hash: p7kOptu0n/Z95hIwZVAQ4UU0Tcx07mXU3vGZb5npLhU=) 15: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: IbxRs5lIYMFHk4lM7UbG9tsHwGdFP1arsRk2TYdCVj4=) 16: TLLe4Fv1ZWKn7cU4s2eOqRGhW2A.roa (hash: LIvDYJiCNzHfZb5Qat96s04TPvC5BTwrmEMarvzgqYw=) 17: W1_LeC4T7DrvujyTn3J3YI7-QXI.roa (hash: 0I3vgRjhX0kcMTxTGH5KTcOsn8j2HgujVu/6VCKIjmM=) 18: XDf-VYAuh-nDO2CMYXVIF4SuPC8.roa (hash: cl+9twv2D+eBNV8KlvTFCcF9tVblyskg3wu09JdTgSQ=) 19: YvEsta7UkUfJxn1JV9JHj6QzL1k.roa (hash: cVuuCBZsVwaCNI4FHR4twQLuwRlOFeF2gBPEHlJV5sI=) 20: ZTeJrV44cuelAuZVlfb9KznDqF8.roa (hash: fF8x7hlp4yott2TezNaaq/nLq2M2TgyvOaX91+gXVXU=) 21: cDexNbgz65SAnilI4jNQbU6GDQA.roa (hash: fm8UnKsXFZ8Kv7++bvjbjI+U2EMIi8pzLEAUXfPizog=) 22: cbLUFQPWDFBGgeTsBo59RiL6NGo.roa (hash: 3TCJxN5y669eIRDifXi9lQDad+lKQ5Y4Rq48mm7g5Zk=) 23: clX0YNiQqxrLh5KRIQ1WDmi_sYg.roa (hash: lHdAtOJZ05TKI2DoNumHZCY0VkGmTIkvqW26oGZ3P+8=) 24: dF6uuCIifQfhUD0TyBdOV3LZGPk.roa (hash: NBNM4QLzFqDChjC2tNuyVCLY8O/IcP3tokOM4fsmiRs=) 25: dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa (hash: QsY9itLfjJ5WmB+KPuW0ZbZL+FhYgpcBDGOifX3R4vk=) 26: l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa (hash: Kdrvt9fByjaGxTJ7co7gZehnEAPmEhpF7v2Q4ea8KVE=) 27: lPrZs3D91Gt-m6B9Dr3LWvP3o94.roa (hash: fhopXrhhREaGMI2tIGmpG5P4JKsz7B7bhwx1BvlGmtQ=) 28: rtmJ15QCyMu37KZSjTEhWQ0zmek.roa (hash: Lz0OEHkJQ5eiVEeDAp2VWfKoDiv6W8z6xoQRzfJhjuk=) 29: xmPrjXwgzAc4bi6Op-k92DP0zYQ.roa (hash: Yg07yPbPmPxhkY2QOReSXpIrXS2cz6DJVyYuiKyL6xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:23:6f:e0:76:22:3e:28:3c:de:a0:e2:81:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Nov 4 15:00:22 2025 GMT Not After : Nov 5 15:00:22 2025 GMT Subject: CN=c4321bec7e867323ba805beaefbfc910cc2cc71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:44:f7:c9:9c:1a:7f:59:ae:34:3b:98:8d: 9a:d0:ac:7a:9a:09:01:db:87:92:7d:2e:55:45:c6: 53:85:8b:ba:74:0a:47:7d:31:7a:c9:eb:19:21:ee: 5b:45:70:cd:34:19:d8:b8:c1:eb:30:a0:da:2d:a9: b8:da:35:51:39:dd:e9:a3:b1:42:26:c0:5a:94:69: cc:64:4c:2d:fe:b4:31:1c:96:60:7d:8a:04:5e:8a: 9a:be:52:b1:55:83:eb:5a:13:82:9c:e9:ee:f6:5b: e9:45:63:db:ef:e8:99:35:96:a0:5e:3d:71:d3:74: f5:3c:f4:14:a1:53:b8:98:ba:bd:54:4e:d8:bb:b4: b7:2e:35:4c:56:2f:c5:fa:16:14:fe:b1:b1:55:8f: a8:3c:48:b7:cb:f7:4b:cb:03:8f:ef:5f:05:25:17: ea:11:ae:ef:e5:e5:2e:f4:82:d4:1b:01:d3:1a:62: fd:79:02:5d:b3:26:ed:55:40:62:78:00:97:61:3d: 07:7f:9b:70:3d:59:d0:d7:52:bd:64:de:00:7b:9e: fb:23:a3:27:2f:04:b2:2e:9c:d4:0a:88:12:2d:5f: ad:c2:31:03:f7:5d:b9:99:b3:1e:e3:60:0d:d8:6b: 10:b5:b7:c8:4f:d5:f1:ad:d5:f4:f8:44:8d:9d:05: 51:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:1B:EC:7E:86:73:23:BA:80:5B:EA:EF:BF:C9:10:CC:2C:C7:1A X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8e:f8:c9:e2:67:08:ff:45:28:20:25:5c:38:1b:24:a4:2e: 0a:c8:10:0c:15:fe:8c:3b:06:3c:d1:35:1b:7a:63:7a:fb:f3: e3:51:ca:72:97:9f:f3:20:fd:28:d7:c1:2e:03:5c:d6:30:5d: 6e:12:8d:34:c0:8f:20:8e:b1:ce:c1:4b:6c:c3:ed:77:95:69: 63:f7:21:57:68:29:ea:e7:79:72:d9:db:d3:53:55:f4:26:4e: 6e:0b:46:cf:1c:3d:16:e3:7f:d3:ac:98:52:24:d2:41:49:0a: 2c:70:98:81:0b:c7:53:57:ea:50:ed:49:45:12:c1:f3:05:32: 5b:57:2d:f0:c4:c0:78:d4:83:f9:1e:91:8a:f5:78:ea:44:86: 0c:b5:b5:e3:45:16:d8:8c:77:46:d0:93:50:fd:b9:2f:03:91: c4:a6:33:d4:50:07:2b:ca:e3:0f:33:9d:1c:c4:c9:0d:df:82: 78:44:0a:e4:b9:ac:76:5c:42:d8:dc:7f:57:ed:45:7d:3d:72: 2b:91:c2:4d:41:9b:d3:76:73:db:e2:2c:25:8a:63:40:a5:a1: 71:99:7a:bc:66:78:e8:7a:61:04:fc:a6:ed:ef:07:61:52:9e: 49:c1:d6:a7:13:a2:7d:27:e1:10:1c:1c:a8:f6:bc:90:12:97: 7f:3a:6a:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYiNv4HYiPig83qDigfSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjUxMTA0MTUwMDIyWhcNMjUxMTA1MTUwMDIyWjAzMTEwLwYDVQQD EyhjNDMyMWJlYzdlODY3MzIzYmE4MDViZWFlZmJmYzkxMGNjMmNjNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGhE98mcGn9ZrjQ7mI2a0Kx6mgkB 24eSfS5VRcZThYu6dApHfTF6yesZIe5bRXDNNBnYuMHrMKDaLam42jVROd3po7FC JsBalGnMZEwt/rQxHJZgfYoEXoqavlKxVYPrWhOCnOnu9lvpRWPb7+iZNZagXj1x 03T1PPQUoVO4mLq9VE7Yu7S3LjVMVi/F+hYU/rGxVY+oPEi3y/dLywOP718FJRfq Ea7v5eUu9ILUGwHTGmL9eQJdsybtVUBieACXYT0Hf5twPVnQ11K9ZN4Ae577I6Mn LwSyLpzUCogSLV+twjED9125mbMe42AN2GsQtbfIT9XxrdX0+ESNnQVR9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQyG+x+hnMjuoBb6u+/yRDMLMcaMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM474yeJn CP9FKCAlXDgbJKQuCsgQDBX+jDsGPNE1G3pjevvz41HKcpef8yD9KNfBLgNc1jBd bhKNNMCPII6xzsFLbMPtd5VpY/chV2gp6ud5ctnb01NV9CZObgtGzxw9FuN/06yY UiTSQUkKLHCYgQvHU1fqUO1JRRLB8wUyW1ct8MTAeNSD+R6RivV46kSGDLW140UW 2Ix3RtCTUP25LwORxKYz1FAHK8rjDzOdHMTJDd+CeEQK5LmsdlxC2Nx/V+1FfT1y K5HCTUGb03Zz2+IsJYpjQKWhcZl6vGZ46HphBPym7e8HYVKeScHWpxOifSfhEBwc qPa8kBKXfzpq+A== -----END CERTIFICATE-----Generated at Tue Nov 4 18:00:13 2025 by rpki-client