$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json) Hash identifier: 2KRZlwt4whBbvYSJNgtaWIz4m3NWBo0qiwqE7ENAJc0= Subject key identifier: 6D:85:E2:C3:0E:92:30:15:74:F2:49:1C:E3:5C:43:99:A0:84:B7:05 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019A4F99043D13B36AE40F470113FFEC4A9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft Manifest number: 0A87 Signing time: Tue 04 Nov 2025 16:00:19 +0000 Manifest this update: Tue 04 Nov 2025 16:00:19 +0000 Manifest next update: Wed 05 Nov 2025 16:00:19 +0000 Files and hashes: 1: 0ZnUbFz494YaFYXrrvpst6o3vps.roa (hash: OVgxGJmRNj8L4Akc46yjqXSfo2J2UzOCk6rafbqc2OA=) 2: 1gMhaWTt9SatCtzXb2x3evmqFAM.roa (hash: 6Y9a57NqqkLkQqCohM5S0/g04HJqvciLd/hsGJkposA=) 3: 2R9OObFNaEDkANSZ-coBJRfRpcg.roa (hash: PuD3VMT0jUQBkYxsd7Ldnl6ZWhsJPerlMMUp2zMDWgw=) 4: 3B48XSzrqRQbODZNf87x_kjUhNo.roa (hash: y14T24Ofee6GJVa1mI4/7qxhdq0jl8KEydSAoin8Qhg=) 5: 4Big0S_3eVdxzCi9Q5-ZazqY78k.roa (hash: MZj2ZauIX6SjNg/AhkH3xRZrKv7KoBeknyWj0YQB2/w=) 6: 5KCmcBzgBtGKXXIdhXDGwgQX-Nc.roa (hash: 3MBj03+qouTWcvDDud6sW23ZkQ0DtRDfsHdVwPfcmzA=) 7: Ge-sdc_RhsJevkQCq5DXSj7W5SM.roa (hash: cppMW1hN3HemsqcEnmgRLycbL6rv3c6Bv6GxyK4Dr7I=) 8: GzbjpWWbs-1PqotRsV09E9K9Lz4.roa (hash: DPdOn5R31znLhVjpEt/89hnY5IoUTo1sHiV7ubrKX6Q=) 9: IR0N93wyt194hpjTT9eshHBGwCY.roa (hash: hm8stnovqLivJRd1Zt72YsNy0Lv8colWOGD8fUtYhVw=) 10: Ipr3KewOoeNwtKcMjwWhhMZ4XGk.roa (hash: 3JCwXXZ0yyhMNw7g8hWZGcEbqAf0RiAf0XwSMEKW1/k=) 11: LiReZTb5eM73wM_EtDaxcTNj4Uc.roa (hash: VxzmF2kcB0hEh+Og8NMqll1d/dM5T/PwiOdBSWMF9+w=) 12: NdAX7Rrn7y-KonnG7TF23wCnJFU.roa (hash: 1r3koUbwGBNgbjNaxMGO8L4AUL4EQ4uI3dkO8TUFqEA=) 13: NxKKuEIzsEe5p3RwQBZ8j63Lsc4.roa (hash: mOT2nWmKWDEZ1VeM86bS3Qx+tjUuZhaB/QcxGF5t7y4=) 14: OxLywK9-WD8ykiaZCQkg8aVcCjY.roa (hash: iXcObwE6BigOurV7fYooDfgc8zyVyQ+nTBGFkUMqd08=) 15: Qjyx-VfeYJzhQ64OO3GeexbDjpo.roa (hash: rj+IOmmZrJFH/pGr6IiDQ9M39qURzS3Ek11UjeILldM=) 16: TvRgaW9-CsNjYomAsfORBTmW3OU.roa (hash: E1pW1tBEDD4gp+efpV/wAMGMYES5LCvHxLW4UcIoHuI=) 17: US4urt8SGYSwI0nrEmSfY23OtMo.roa (hash: WGkLaX+bRS10FeqEfnkw5XXJQ/dEDlUw6wG2fIeU7p0=) 18: UbTczMXH1DXAp6Y4rzAMo0-vjMY.roa (hash: /5fKT3FRRFYWFa0s/Qas8JVmnywA6hIsUQs3iIAfCSc=) 19: V9MunteQeVICf2ICr71lxQH0Fho.roa (hash: eyd5tdJUMOhtnb51XXGrnbSnVth9KptYyQQSksmwF/U=) 20: Xk5tmPIosW8yWOoBE4vC97DKTmI.roa (hash: n+WSuCldCqJF0J/zIrAAsy8W1NaktFT44ojEQwTF8/A=) 21: Y8kVBgTTg77JqceZAx8eeOkuigc.roa (hash: IFdbCND0Hr2WHlrHfsppyOn82/Cdt+j+/f3Y4nRrJM0=) 22: a0il1xPCzL5RX2zRZ16C5yrKQN0.roa (hash: jNHlYD8MG49p1qoIK36TKFr01Lgirahfew8083hVbhQ=) 23: a75rOpjpaPa3RoX99f00xHpyQQk.roa (hash: pBUN5kZ0kemGdrUfIg4JmP66bIvq4vhJcqUtu9xb4uk=) 24: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: HYtp2IKVEq0rjnNLRT5L7MrYmmekrnuGSEUQlNR+RD0=) 25: eSDGXftwPU-DhjYptcEbu97gSEU.roa (hash: 298/MebJAxJVNu0RXxXXDu+aRB+xIjmk2sL/OavJmSI=) 26: gt8flTD_zJibygdA8dyeuF1l6X4.roa (hash: aubI8iptMgWbWF9zUBH11nChoCQulzBZponMqronaCU=) 27: h8jROV5bQoENdkPdOHcG_4qWdVY.roa (hash: glJfimln9Noz47bXSrY5ZJrPDNDjmCoZp6sAhb5XR58=) 28: hd5E-IfEq2TxeShk5Gaec24hUKw.roa (hash: gaGe3UUy/HO5uK3mGo4Jfk2cwdMRK/X0E0rPiNSPI88=) 29: mqFZ_6poK042LnYArfefb64YNZQ.roa (hash: z+bsA4ZcDvX2JPMlTZwVkKpOQPowKJ3wnhxnQ/pVUXU=) 30: qjt96n4RyTnwKt8f25Hzr4YOzU4.roa (hash: c+NeV173DV29fxhrcPqvFfp6/xCLnBsKjYjqezsWpbo=) 31: r72MZC6TP9HFp69hVblH2z8aLDw.roa (hash: 60a58tQ14AuL0odo9HIWNyGRLIp51J3Om0fY3oCEnBg=) 32: uuETfDd2MFEUFL6j7oWk0rsVxng.roa (hash: gq3xyqmM/tiK/h2Lc/3S6cQaZW777XfzMoLElI6p2tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:04:3d:13:b3:6a:e4:0f:47:01:13:ff:ec:4a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Nov 4 16:00:19 2025 GMT Not After : Nov 5 16:00:19 2025 GMT Subject: CN=6d85e2c30e92301574f2491ce35c4399a084b705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:1d:3f:7b:5b:a2:14:42:05:0b:5b:c5:fd: e5:30:19:81:58:a0:ac:b4:43:ef:62:e5:01:53:3f: 91:c0:29:b9:0c:21:7d:06:ed:1c:ff:9a:6a:a8:4c: e1:65:fe:e6:37:59:c1:11:49:f6:96:ae:c4:65:14: 4b:b8:3b:79:bd:81:ae:a9:76:6b:03:02:18:a9:c4: 8f:23:07:c7:0c:bb:97:b0:1e:39:91:1b:88:e4:56: 51:ab:88:1e:b2:1b:67:a1:80:ff:6c:98:6b:b5:eb: 8e:4f:09:46:21:88:94:93:2c:7d:43:84:05:74:17: f3:5b:7c:29:89:51:83:e5:de:4f:73:c9:0a:ed:c0: bd:fa:f3:22:16:ac:fd:df:9b:a1:74:8d:37:12:35: ef:15:84:a2:c2:07:62:f3:30:e9:14:ec:ce:7d:b9: cc:9a:e7:b7:b4:0e:5e:1d:cd:f7:2c:db:c2:2e:b2: e4:3f:c1:c5:f7:92:05:a0:bb:b8:19:fc:0a:30:39: bf:81:86:88:a0:26:bc:95:5c:fd:61:25:c8:a9:7b: ff:4d:ee:3c:51:a5:1b:d4:a1:70:20:a8:cc:e1:9a: 2e:ba:9f:70:d1:1b:cb:8b:bd:f9:85:11:11:da:fe: fe:b6:b4:a9:3c:11:dc:e9:ef:50:89:e6:de:48:c9: c7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:85:E2:C3:0E:92:30:15:74:F2:49:1C:E3:5C:43:99:A0:84:B7:05 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9f:71:6b:4e:65:f2:28:a5:18:b8:ba:72:5f:da:20:39:9f: c3:fa:54:67:73:e8:b9:32:89:f9:9d:e9:ca:5b:f1:70:f8:60: 1b:22:73:7d:92:98:1e:23:c2:fb:09:db:ba:70:f4:b8:7e:16: 2d:45:36:75:f6:b5:80:47:93:0f:ab:b1:4e:54:76:03:74:70: c3:71:3f:77:1c:c4:e7:e3:cd:0e:96:04:ac:ce:eb:89:fc:fc: ac:99:a4:a7:b7:2b:2b:12:4a:9b:02:73:0f:12:bd:35:9f:a6: d1:94:b3:b0:a0:63:dc:87:89:19:5e:52:6f:6f:73:22:26:86: b7:78:e6:9b:aa:c3:e3:bf:01:a9:94:01:54:fb:55:87:fc:96: ff:57:7e:94:00:d8:43:08:0c:f4:36:42:c1:ec:27:9e:ab:db: 2b:cb:35:5d:b6:da:8f:8f:d2:7f:ff:5e:10:dc:56:f5:51:1c: 7d:7e:48:4d:48:b4:eb:30:43:14:b4:9c:7f:e9:6f:92:ac:93: 8c:6c:78:43:bc:24:85:1f:d9:30:80:0e:04:6f:29:73:2e:90: f7:5e:fa:dc:8d:dd:8f:f9:12:40:03:64:a3:a9:6d:f3:d8:f7: 3c:30:1c:e8:ed:4a:2b:af:4b:1e:0d:9c:1d:53:f2:f7:e3:9e: 87:0c:b6:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmQQ9E7Nq5A9HARP/7EqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjUxMTA0MTYwMDE5WhcNMjUxMTA1MTYwMDE5WjAzMTEwLwYDVQQD Eyg2ZDg1ZTJjMzBlOTIzMDE1NzRmMjQ5MWNlMzVjNDM5OWEwODRiNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0EdP3tbohRCBQtbxf3lMBmBWKCs tEPvYuUBUz+RwCm5DCF9Bu0c/5pqqEzhZf7mN1nBEUn2lq7EZRRLuDt5vYGuqXZr AwIYqcSPIwfHDLuXsB45kRuI5FZRq4geshtnoYD/bJhrteuOTwlGIYiUkyx9Q4QF dBfzW3wpiVGD5d5Pc8kK7cC9+vMiFqz935uhdI03EjXvFYSiwgdi8zDpFOzOfbnM mue3tA5eHc33LNvCLrLkP8HF95IFoLu4GfwKMDm/gYaIoCa8lVz9YSXIqXv/Te48 UaUb1KFwIKjM4Zouup9w0RvLi735hRER2v7+trSpPBHc6e9QiebeSMnH9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2F4sMOkjAVdPJJHONcQ5mghLcFMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJ9xa05l 8iilGLi6cl/aIDmfw/pUZ3PouTKJ+Z3pylvxcPhgGyJzfZKYHiPC+wnbunD0uH4W LUU2dfa1gEeTD6uxTlR2A3Rww3E/dxzE5+PNDpYErM7rifz8rJmkp7crKxJKmwJz DxK9NZ+m0ZSzsKBj3IeJGV5Sb29zIiaGt3jmm6rD478BqZQBVPtVh/yW/1d+lADY QwgM9DZCwewnnqvbK8s1Xbbaj4/Sf/9eENxW9VEcfX5ITUi06zBDFLScf+lvkqyT jGx4Q7wkhR/ZMIAOBG8pcy6Q91763I3dj/kSQANko6lt89j3PDAc6O1KK69LHg2c HVPy9+Oehwy2Jg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:37:37 2025 by rpki-client