$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft File: V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json) Hash identifier: 5AdCgrOGBUpTENP/ByHyYyRk8PfGgufqTjSIHI+qFzk= Subject key identifier: D8:25:86:0C:90:FA:3D:7D:E8:97:A6:BA:58:6B:0C:31:6F:1C:83:85 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019A4E863113564889F5EF4A2E3CFB5C6940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft Manifest number: 06F8 Signing time: Tue 04 Nov 2025 11:00:08 +0000 Manifest this update: Tue 04 Nov 2025 11:00:08 +0000 Manifest next update: Wed 05 Nov 2025 11:00:08 +0000 Files and hashes: 1: 1-HZF_Uc44gjh1TQR1U1OYZDHjCk.roa (hash: NuB8apKKsTUzor9NX4p/x2mqEfbsbGqLyBZkaxZdT4k=) 2: 1-zYH7xgT9jHLzOiK0op2xedNYxc.roa (hash: EEfHurIFfYdUYQoV+3JgiQRhhQwtKC9h8bHhwZzyQo0=) 3: 1iNqSGLBurdVBRXSj9jkGbrkAYg.roa (hash: I52bbOoIJFwXUk3tZr6SbiTpSM/ybqgeCNsRlccE3vw=) 4: 4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa (hash: uj1CpTYiuNEnoBSr8Niym7afjHD/7ENr6+d1VZIXhys=) 5: 5og4i6PWufr9z5Wjmy447BF0MnI.roa (hash: YCaN/g4v5C1rq4Auj9dFq70XUsiEkdYIlRGIBpOgVaM=) 6: A_elPY7zPzPBy98o20Zvw2Pf34s.roa (hash: 7IEfyja20k0JOW6h30shZ5sYEGCCL8982cOL8o5c1oE=) 7: C27Aa8uKLfnpIaKJoLcn4I2IZ_E.roa (hash: y4tHszT+P0kIpST/z/SHj5Ztu4ohgrU6Uc7zfXVps98=) 8: D96EcvLqQ8mg6gUpgeSUDuWzoII.roa (hash: 47dUj7Yx8C1/dz36m92H2I2YJQ2HstfZCg46ryE4YRE=) 9: DiVaKwGBpTwiJK2wdma2FCUI1dY.roa (hash: AVK0qBECk7mzq61yod8pgLi4kKN20motkma1l/rW18M=) 10: FLn7CAF79mOmugGj8k0FVo_sRII.roa (hash: Lrep2bOXpLxm46oWuoQl42fldxhpT0C+CT9tHP1R1Bw=) 11: GVP6YRET1GMrlKgZYAjt13RVqgw.roa (hash: LUthf2xa7fthu+iWne8EMO8YrNzfF2//h9ZZZBNsubE=) 12: KkcDPt-mqrzjIGcK9CxKo7l2cCw.roa (hash: E08Kwyt2URP4nbJ9ZFQtZH8fcrUoxrxOEFuigCOwmfI=) 13: Lig58Y_6EqUbEZxvSWu8Fu6Z-ME.roa (hash: D/zXopJeVtj3229mIo+xNFq5tGgLVIxUMgm9JcaW09Q=) 14: MMhAInQYtdpemgLxLkVb7UapM2Q.roa (hash: RsvGtg1Oh/rT4G0MJhnLc79JCFUU1eA/yV9wUhFZTFo=) 15: TFSSUVJYPdC_xi0OAIV0JFJQBfo.roa (hash: oX2R11AjocQh2DpCr38wvGugieksGJUlkq+0NL2U9GI=) 16: UBmTMmmTukpF5tN_8lkv5anfsHg.roa (hash: ntC3Hreaigu0u4QGJZJ19XXRF5sIPIgUqhtb699zdZA=) 17: UUvNJu6FFXSLqc4fRNFmfzX6do4.roa (hash: ogf1Pk59UDa6YNqV7rBOlEspQEs/ksi9KO4GlYT9vmA=) 18: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: wCAL3vW+7jfB4J9oEfqhVC1IG4ZQaHh5A5rFD7zw/EE=) 19: Ymqi0xcsUjA1NVqUcqHxwJzAdDI.roa (hash: y57fT+m+RkYde5FDxohXKnixkU+DodRkb0lEQr+x3zE=) 20: ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa (hash: UXYn8r3aaYF24M8BGs9jgK62IwYmPfR4KIUePwkGsBs=) 21: ZlueNo25GUvLqjkuVCFwyElg2rQ.roa (hash: aj/CGKLCRPUdD2tIc7FHrJFT9sJCeOPsSAxO2ThHbg0=) 22: aNB_XJHrIC5i0w1C8J0tAQ5wod4.roa (hash: HmJhzb+MSwBGsvb147oYI8ZGMjU0fqGVz7CWkvHxdOE=) 23: bVTj9GlhWonuaW4I9cjegUl8Y0k.roa (hash: I+YpInZ6hhq3JvCTpsODfdn3dONvUDWi4McBY8idMDA=) 24: dolHUeMcOG3n_XT10nauhYrbidk.roa (hash: LTHdECdWQgInoyQThhGiH/oyDwc4L5pb1fc/+4zfKg4=) 25: gYBVJZmNIdcxDC5WTQDD4mEmor4.roa (hash: NtE7acotOkAcT8a9lvGXKloeD7hCqcrLikIbjjvfM8c=) 26: kUILatL9C3JCAevms2KcvqpaePU.roa (hash: T8iCGZZzAAYZpcp3Y20YYRkjioFry09uVkLdcf4AktE=) 27: mgzZWE8_Hw_PIW0ZbYRuuQsbSX0.roa (hash: MCs3NRxPiODedYYpEdTTan7+/abAfIZlVT+W94Q8InU=) 28: ocuE4fXKrDYrpQocYLXuAkcw4qs.roa (hash: Nydk7rHdYX2vee746eKrRwtJaLs0LWeYf6W299bGydA=) 29: tXkbQt37ep9cFP4X0yP6Jr01nt8.roa (hash: uFrSH0AZn8p8NoixHghgYI6yNRcf7/W9G2Rgl77UhAk=) 30: tbTmb1wIkJcjOTrxUE98Gt6Tr68.roa (hash: 9h+1BxgCsdJlPqcdrM6DVHk3XBGU8ObSrJfDgfcbyEU=) 31: w1iF5CiJeCHkszCW3U2fF3iWHfg.roa (hash: jSF2bgkChfkaiNUq0c9ACAnTtaiP8CKGbBiy1Ib+MAc=) 32: wpn2zuIYSbrrxUu9itX663rnTUY.roa (hash: 2EXZnIBOHj+xi2HeAFRXs8lZBsjWZKGbNXjYDR6LDbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:31:13:56:48:89:f5:ef:4a:2e:3c:fb:5c:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Nov 4 11:00:08 2025 GMT Not After : Nov 5 11:00:08 2025 GMT Subject: CN=d825860c90fa3d7de897a6ba586b0c316f1c8385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:df:da:e8:ff:ff:68:ac:94:a0:7f:fe:8d: c3:85:e9:4a:91:20:5b:c9:fd:ef:b9:55:2c:e9:79: 17:97:a6:53:b2:af:13:ea:8c:0e:ff:8d:7c:bd:9e: 54:c6:9e:c0:fb:d3:bb:ed:ab:52:da:c1:0c:14:9d: 17:cb:28:25:1f:b5:7f:27:e3:a7:2a:36:22:bf:9e: 85:44:0a:41:0b:da:c8:3e:b8:51:93:ed:87:f8:4f: 36:56:fa:35:bd:96:75:a3:c7:b6:57:64:af:1d:17: 2d:69:e8:22:cf:c6:6f:dd:de:dc:52:0b:a8:e2:18: 77:a0:e2:bf:11:e3:bf:2f:fd:b5:61:02:ff:fc:9e: a2:37:98:20:d5:bd:3b:ae:6d:fb:44:ae:35:5f:f4: f9:5f:30:1c:83:73:11:02:3f:04:b0:b6:69:cf:e5: cd:d4:e2:09:ce:2d:86:c0:b9:fb:df:b9:4f:10:28: 28:cf:93:2a:1b:69:23:6a:d1:a5:f3:49:43:8a:be: 0e:4f:20:9f:e8:42:1d:8e:d3:16:61:3f:08:93:eb: 7a:cb:54:5f:a3:14:eb:ca:a3:fa:72:10:8b:16:4a: 92:01:15:63:57:02:26:5f:16:76:0b:65:2b:ee:f0: 10:f4:f5:c1:4c:ca:58:93:9b:72:6f:f9:0d:40:e5: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:25:86:0C:90:FA:3D:7D:E8:97:A6:BA:58:6B:0C:31:6F:1C:83:85 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:50:66:17:3d:38:ca:41:93:db:03:23:9d:f8:9f:11:3a:42: c0:f4:d7:65:33:ed:b4:82:c4:dd:4a:3b:24:2c:9b:1b:d1:23: eb:a0:5f:7a:52:c1:3c:dd:9c:fc:fc:17:ae:e7:7b:08:62:19: de:65:02:d8:40:e6:34:7e:bd:ef:df:12:73:aa:bf:dd:0a:4b: 1b:81:a3:d6:77:b3:7f:ab:8b:9d:0e:47:e5:d3:96:d6:3e:21: 05:79:52:4a:fb:98:49:71:98:32:8d:84:9a:f2:23:e0:7c:bb: ed:25:f2:4e:9f:83:24:4c:14:1d:3a:56:05:4d:8d:ee:e4:10: b4:16:f2:ee:71:42:d1:aa:33:6b:a4:24:72:bd:97:d8:3d:06: 86:9a:ff:33:1e:70:c9:07:e2:99:be:fc:a4:b2:5b:43:8a:13: cb:50:13:13:e2:eb:e4:1c:e9:38:6f:78:4b:33:fb:38:df:e0: 68:cc:47:cd:4b:ef:bd:d4:6e:84:62:3f:42:e4:78:72:57:94: 06:c1:30:6c:80:7f:93:ee:77:c5:28:1d:2e:18:ac:4f:be:34: ec:43:66:53:d7:6f:a1:3e:67:e9:cc:66:ee:e4:47:0c:ae:00: 68:7d:11:29:20:a6:44:4d:ad:3e:92:82:12:3b:06:0d:4b:6a: 52:a9:6f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhjETVkiJ9e9KLjz7XGlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjUxMTA0MTEwMDA4WhcNMjUxMTA1MTEwMDA4WjAzMTEwLwYDVQQD EyhkODI1ODYwYzkwZmEzZDdkZTg5N2E2YmE1ODZiMGMzMTZmMWM4Mzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbnf2uj//2islKB//o3DhelKkSBb yf3vuVUs6XkXl6ZTsq8T6owO/418vZ5Uxp7A+9O77atS2sEMFJ0XyyglH7V/J+On KjYiv56FRApBC9rIPrhRk+2H+E82Vvo1vZZ1o8e2V2SvHRctaegiz8Zv3d7cUguo 4hh3oOK/EeO/L/21YQL//J6iN5gg1b07rm37RK41X/T5XzAcg3MRAj8EsLZpz+XN 1OIJzi2GwLn737lPECgoz5MqG2kjatGl80lDir4OTyCf6EIdjtMWYT8Ik+t6y1Rf oxTryqP6chCLFkqSARVjVwImXxZ2C2Ur7vAQ9PXBTMpYk5tyb/kNQOWIBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNglhgyQ+j196JemulhrDDFvHIOFMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVBmFz04 ykGT2wMjnfifETpCwPTXZTPttILE3Uo7JCybG9Ej66BfelLBPN2c/PwXrud7CGIZ 3mUC2EDmNH69798Sc6q/3QpLG4Gj1nezf6uLnQ5H5dOW1j4hBXlSSvuYSXGYMo2E mvIj4Hy77SXyTp+DJEwUHTpWBU2N7uQQtBby7nFC0aoza6Qkcr2X2D0Ghpr/Mx5w yQfimb78pLJbQ4oTy1ATE+Lr5BzpOG94SzP7ON/gaMxHzUvvvdRuhGI/QuR4cleU BsEwbIB/k+53xSgdLhisT7407ENmU9dvoT5n6cxm7uRHDK4AaH0RKSCmRE2tPpKC EjsGDUtqUqlvlw== -----END CERTIFICATE-----Generated at Tue Nov 4 14:55:27 2025 by rpki-client