$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json) Hash identifier: 6Rq5vkWtm3smWXAbBLkjPfFwGMYLKPueFYmYsyEqdRM= Subject key identifier: 83:55:32:0E:D6:A9:E2:07:24:83:6F:07:64:84:A8:06:51:31:74:D9 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019A5375F0E2031DB9D0FACEF99E4337F468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft Manifest number: 0A89 Signing time: Wed 05 Nov 2025 10:00:29 +0000 Manifest this update: Wed 05 Nov 2025 10:00:29 +0000 Manifest next update: Thu 06 Nov 2025 10:00:29 +0000 Files and hashes: 1: 0ZnUbFz494YaFYXrrvpst6o3vps.roa (hash: OVgxGJmRNj8L4Akc46yjqXSfo2J2UzOCk6rafbqc2OA=) 2: 1gMhaWTt9SatCtzXb2x3evmqFAM.roa (hash: 6Y9a57NqqkLkQqCohM5S0/g04HJqvciLd/hsGJkposA=) 3: 2R9OObFNaEDkANSZ-coBJRfRpcg.roa (hash: PuD3VMT0jUQBkYxsd7Ldnl6ZWhsJPerlMMUp2zMDWgw=) 4: 3B48XSzrqRQbODZNf87x_kjUhNo.roa (hash: y14T24Ofee6GJVa1mI4/7qxhdq0jl8KEydSAoin8Qhg=) 5: 4Big0S_3eVdxzCi9Q5-ZazqY78k.roa (hash: MZj2ZauIX6SjNg/AhkH3xRZrKv7KoBeknyWj0YQB2/w=) 6: 5KCmcBzgBtGKXXIdhXDGwgQX-Nc.roa (hash: 3MBj03+qouTWcvDDud6sW23ZkQ0DtRDfsHdVwPfcmzA=) 7: Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa (hash: cppMW1hN3HemsqcEnmgRLycbL6rv3c6Bv6GxyK4Dr7I=) 8: GzbjpWWbs-1PqotRsV09E9K9Lz4.roa (hash: DPdOn5R31znLhVjpEt/89hnY5IoUTo1sHiV7ubrKX6Q=) 9: IR0N93wyt194hpjTT9eshHBGwCY.roa (hash: hm8stnovqLivJRd1Zt72YsNy0Lv8colWOGD8fUtYhVw=) 10: Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa (hash: 3JCwXXZ0yyhMNw7g8hWZGcEbqAf0RiAf0XwSMEKW1/k=) 11: LiReZTb5eM73wM_EtDaxcTNj4Uc.roa (hash: VxzmF2kcB0hEh+Og8NMqll1d/dM5T/PwiOdBSWMF9+w=) 12: NdAX7Rrn7y-KonnG7TF23wCnJFU.roa (hash: 1r3koUbwGBNgbjNaxMGO8L4AUL4EQ4uI3dkO8TUFqEA=) 13: NxKKuEIzsEe5p3RwQBZ8j63Lsc4.roa (hash: mOT2nWmKWDEZ1VeM86bS3Qx+tjUuZhaB/QcxGF5t7y4=) 14: OxLywK9-WD8ykiaZCQkg8aVcCjY.roa (hash: iXcObwE6BigOurV7fYooDfgc8zyVyQ+nTBGFkUMqd08=) 15: Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa (hash: rj+IOmmZrJFH/pGr6IiDQ9M39qURzS3Ek11UjeILldM=) 16: TvRgaW9-CsNjYomAsfORBTmW3OU.roa (hash: E1pW1tBEDD4gp+efpV/wAMGMYES5LCvHxLW4UcIoHuI=) 17: US4urt8SGYSwI0nrEmSfY23OtMo.roa (hash: WGkLaX+bRS10FeqEfnkw5XXJQ/dEDlUw6wG2fIeU7p0=) 18: UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa (hash: /5fKT3FRRFYWFa0s/Qas8JVmnywA6hIsUQs3iIAfCSc=) 19: V9MunteQeVICf2ICr71lxQH0Fho.roa (hash: eyd5tdJUMOhtnb51XXGrnbSnVth9KptYyQQSksmwF/U=) 20: Xk5tmPIosW8yWOoBE4vC97DKTmI.roa (hash: n+WSuCldCqJF0J/zIrAAsy8W1NaktFT44ojEQwTF8/A=) 21: Y8kVBgTTg77JqceZAx8eeOkuigc.roa (hash: IFdbCND0Hr2WHlrHfsppyOn82/Cdt+j+/f3Y4nRrJM0=) 22: a0il1xPCzL5RX2zRZ16C5yrKQN0.roa (hash: jNHlYD8MG49p1qoIK36TKFr01Lgirahfew8083hVbhQ=) 23: a75rOpjpaPa3RoX99f00xHpyQQk.roa (hash: pBUN5kZ0kemGdrUfIg4JmP66bIvq4vhJcqUtu9xb4uk=) 24: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: IYO3hBHg3fRPBUET50tmm7AF9m3JV3O+WOZ6cl1bO6E=) 25: eSDGXftwPU-DhjYptcEbu97gSEU.roa (hash: 298/MebJAxJVNu0RXxXXDu+aRB+xIjmk2sL/OavJmSI=) 26: gt8flTD_zJibygdA8dyeuF1l6X4.roa (hash: aubI8iptMgWbWF9zUBH11nChoCQulzBZponMqronaCU=) 27: h8jROV5bQoENdkPdOHcG_4qWdVY.roa (hash: glJfimln9Noz47bXSrY5ZJrPDNDjmCoZp6sAhb5XR58=) 28: hd5E-IfEq2TxeShk5Gaec24hUKw.roa (hash: gaGe3UUy/HO5uK3mGo4Jfk2cwdMRK/X0E0rPiNSPI88=) 29: mqFZ_6poK042LnYArfefb64YNZQ.roa (hash: z+bsA4ZcDvX2JPMlTZwVkKpOQPowKJ3wnhxnQ/pVUXU=) 30: qjt96n4RyTnwKt8f25Hzr4YOzU4.roa (hash: c+NeV173DV29fxhrcPqvFfp6/xCLnBsKjYjqezsWpbo=) 31: r72MZC6TP9HFp69hVblH2z8aLDw.roa (hash: 60a58tQ14AuL0odo9HIWNyGRLIp51J3Om0fY3oCEnBg=) 32: uuETfDd2MFEUFL6j7oWk0rsVxng.roa (hash: gq3xyqmM/tiK/h2Lc/3S6cQaZW777XfzMoLElI6p2tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:75:f0:e2:03:1d:b9:d0:fa:ce:f9:9e:43:37:f4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Nov 5 10:00:29 2025 GMT Not After : Nov 6 10:00:29 2025 GMT Subject: CN=8355320ed6a9e20724836f076484a806513174d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:7c:5a:a2:9c:e9:18:c7:22:76:37:1b:0a: 86:76:67:ca:51:10:ac:e5:1a:d8:8c:25:4d:77:2a: 42:72:b4:e2:d2:c1:c9:fd:30:ca:af:38:ad:f7:16: 24:51:c5:39:46:6a:6c:27:59:04:cc:bf:d7:07:04: 62:81:3d:6e:6a:9c:bf:4c:c6:c7:fc:6f:89:61:f9: 2f:9e:01:4b:22:d1:bd:df:2a:a1:f5:cf:91:91:94: e3:49:78:af:9a:22:20:fb:2c:1d:a3:dc:28:5f:cb: 24:3c:10:56:bd:40:4c:31:f0:ce:1e:20:df:2c:73: 43:ef:6b:0f:6b:ae:bf:a5:5c:ad:a3:f3:a1:fb:04: d0:45:f3:ab:41:21:1d:0d:a6:9b:d9:d1:5f:38:10: 9b:8d:a5:17:0b:00:56:22:19:0d:1e:17:90:c4:17: a5:ba:67:87:0c:db:94:cb:79:08:be:2f:36:1b:58: 36:73:15:c1:1d:18:45:7c:c8:37:e4:e5:9b:f6:52: b4:85:b2:d8:c2:fc:9c:d0:d2:32:60:81:14:69:4f: e2:e8:ed:cd:38:0e:e7:dc:68:b1:8d:9e:31:b1:e2: fa:3a:02:11:93:3c:64:d3:24:b9:86:61:27:27:21: 16:b9:2c:c0:13:1c:4f:57:be:c4:d9:b2:27:c8:ef: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:55:32:0E:D6:A9:E2:07:24:83:6F:07:64:84:A8:06:51:31:74:D9 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:5d:5c:5c:29:3f:03:b8:31:67:47:be:67:03:83:3d:b7:7e: ba:92:19:00:c1:7c:dd:9f:29:03:86:1a:d0:16:28:cd:16:70: 52:31:c0:aa:4f:f1:48:f0:d6:c5:ea:6e:f2:0d:04:32:30:ac: a5:fe:71:f4:68:8c:1c:97:4a:14:a6:a9:9a:2a:52:64:1e:7a: b1:1b:b0:33:30:da:7f:4d:42:c1:4a:54:86:f3:ca:57:c3:fd: ec:27:11:12:3a:0a:a7:5e:6a:41:c3:27:23:0c:1a:91:60:3b: f6:33:ac:91:9e:ee:c3:39:7a:1f:48:c2:78:4f:21:7e:7a:0a: ce:57:da:ba:f2:88:35:69:18:cb:bc:09:29:48:f7:1a:52:8d: 2c:da:e8:8d:ec:98:9e:eb:7c:85:6c:e3:2b:23:f4:5a:b3:f3: 75:97:bf:ad:14:73:06:8d:9a:4a:13:b0:09:56:47:f4:d5:0b: 20:cf:e7:bf:fe:cc:fc:49:2b:92:01:71:44:f7:a5:d5:82:b9: 0f:4c:cb:8c:8f:b9:31:21:c4:ab:87:7c:d3:c5:f5:de:5d:cc: 36:71:db:94:c5:78:2a:99:3b:47:8f:a7:23:ab:00:c2:48:56: 34:c6:93:e5:9b:10:76:ae:31:15:65:a3:90:da:2c:02:10:18: 0a:96:ef:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTdfDiAx250PrO+Z5DN/RoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjUxMTA1MTAwMDI5WhcNMjUxMTA2MTAwMDI5WjAzMTEwLwYDVQQD Eyg4MzU1MzIwZWQ2YTllMjA3MjQ4MzZmMDc2NDg0YTgwNjUxMzE3NGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HF8WqKc6RjHInY3GwqGdmfKURCs 5RrYjCVNdypCcrTi0sHJ/TDKrzit9xYkUcU5RmpsJ1kEzL/XBwRigT1uapy/TMbH /G+JYfkvngFLItG93yqh9c+RkZTjSXivmiIg+ywdo9woX8skPBBWvUBMMfDOHiDf LHND72sPa66/pVyto/Oh+wTQRfOrQSEdDaab2dFfOBCbjaUXCwBWIhkNHheQxBel umeHDNuUy3kIvi82G1g2cxXBHRhFfMg35OWb9lK0hbLYwvyc0NIyYIEUaU/i6O3N OA7n3GixjZ4xseL6OgIRkzxk0yS5hmEnJyEWuSzAExxPV77E2bInyO9J+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINVMg7WqeIHJINvB2SEqAZRMXTZMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl1cXCk/ A7gxZ0e+ZwODPbd+upIZAMF83Z8pA4Ya0BYozRZwUjHAqk/xSPDWxepu8g0EMjCs pf5x9GiMHJdKFKapmipSZB56sRuwMzDaf01CwUpUhvPKV8P97CcREjoKp15qQcMn IwwakWA79jOskZ7uwzl6H0jCeE8hfnoKzlfauvKINWkYy7wJKUj3GlKNLNrojeyY nut8hWzjKyP0WrPzdZe/rRRzBo2aShOwCVZH9NULIM/nv/7M/EkrkgFxRPel1YK5 D0zLjI+5MSHEq4d808X13l3MNnHblMV4Kpk7R4+nI6sAwkhWNMaT5ZsQdq4xFWWj kNosAhAYCpbvJA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:08 2025 by rpki-client