$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: YEdYnJiR0ZjavIqI89Wnh0pDjNjN4InZnxtmgoDatoo= Subject key identifier: E8:03:2B:96:A5:1F:54:64:3D:E0:F5:3D:FB:F1:67:D2:36:20:97:26 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019A503DF73CB45B72FABFD89E8C6738EF5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 170E Signing time: Tue 04 Nov 2025 19:00:29 +0000 Manifest this update: Tue 04 Nov 2025 19:00:29 +0000 Manifest next update: Wed 05 Nov 2025 19:00:29 +0000 Files and hashes: 1: 1-yS3aYPqpaClbUu2NxEJjasn11w.roa (hash: 5XgaEX1gVaWrfAm4eZoLyJtYysjnny395i7jpZsSAQY=) 2: 1_CHZT9QfuR7tsU-euaK767cklU.roa (hash: 63+eLT9Dw8Qs2m1cc8lHoIY3XMdIir76QzW85Og4v9M=) 3: 2_oHdZTLwl8Ni8dVchp52bQoBP8.roa (hash: 1IGeiz1Jq/CL3kqilbFu1/fy+mEjiI24ecXvvRj4kX4=) 4: 36PcBEuS0YaFeejxK9Rr2Qkonyg.roa (hash: crvn7STBSQ8hyIYObc7IEiRjwRLGGVAHLgb6Zwn91c8=) 5: 4CLeeil6rnYYbSXDioOdMRk-fu0.roa (hash: nA2tspg1OX/8GxIGauCnmSzDzS8p+XC3M6EwX+K2Zuc=) 6: 7Lq5thg4GVm1ghsW2nTmTfntl7Q.roa (hash: Cug0ydNU1zlYNhdljKnKemuyYIF9W9jlVIkuddLMlTQ=) 7: 7usS4n2wTmwQKN_FfLFrT2gzTes.roa (hash: rmvLzeLSfvnfViQvQG0evozZFVJcIY19+X8a4fI9x4Q=) 8: 8YSnvyCLvUiHNjAw1eWuFCNdk2c.roa (hash: PTMxJnzevVSgZNxZ+M3p3kXGLUbEbhxizVHAA+Gkp9w=) 9: DbP7K2VtNw3kapyPyuFvQE7JBSM.roa (hash: 2fzeTpuJWnP6/gv4fT9R5JKUn/1ALgN/OCuPkiMy+VY=) 10: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: pcM47sqpn2eG0yfgZkAtcMQPCiPQptfQymGyO68yPxQ=) 11: PtdarDr91PAic9ExXEPtp5rDR90.roa (hash: pCWRE4xl0SCTzuH+d2oTniDVCc4UbcqvXbr0am8wd2E=) 12: XHw85hniBF8TOIktC8VH-K5Sz7M.roa (hash: Ea6SLJBNB8kXoImOZvy4ZtmOcm4IPMCnAht2m4dCzfQ=) 13: _Cb6FUCoQ03XQzWaAGVZCL11bhk.roa (hash: 7DHJ0ftYg5chCGMOY75jI68kzxP7FSC041EsKG1o0UA=) 14: hmKd6LubvseWFnch4vVN9v-GR6U.roa (hash: eqD+J0wg0iQNL4Cg+PT3/sHzu0dI9aBjTjQ//aaCFJQ=) 15: ixgQ7SiQi_wWeVAAXtTKU7XdZIk.roa (hash: 96bA0cNzp2CN/kCqbjKPaK+FRxIBqzNEUGIfvg5EFb4=) 16: qmxFyvD5jjibZjJM1ZLLs4anyDg.roa (hash: y/C7QUn/kfSJX+tk2XBXNZQ/E3dp0hw1Ap5O7ikQtfw=) 17: v9Lrt2SfuAlXzVot4u7KvPVgY2M.roa (hash: Y7iaJQnKOEgRwNsqfZadHFtG6v/ZxO1cSgSJLizeQ/g=) 18: vmLDD1TBTYG-hEjE6Ab3SFuTYs0.roa (hash: NyOwpcin3g/lVGCyaCZG0ziR33wb6JD1mwKtweMIjl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3d:f7:3c:b4:5b:72:fa:bf:d8:9e:8c:67:38:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Nov 4 19:00:29 2025 GMT Not After : Nov 5 19:00:29 2025 GMT Subject: CN=e8032b96a51f54643de0f53dfbf167d236209726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:a4:49:38:ed:8d:ea:6e:ad:c4:b3:69:78: 78:ba:c0:2a:1b:6e:ff:55:d0:c2:cf:bc:44:43:43: 2c:93:29:e8:16:2e:7e:a0:8e:ca:e6:38:9c:a7:f9: 2f:12:77:96:ef:14:30:67:3c:47:87:4d:d5:1b:7b: 84:09:81:67:63:4c:31:e6:df:65:b9:8c:d3:36:1e: 55:84:3d:24:27:0e:be:8c:77:53:f6:0b:0e:1b:12: 40:6b:11:f1:ef:76:05:16:e5:ff:7c:a5:d0:f3:df: 38:91:27:c4:94:29:5e:ed:24:ef:2f:a9:85:58:64: 64:1d:85:7f:0a:d2:72:c9:a9:a2:db:0e:0d:03:87: 44:61:6e:dd:d6:1e:23:1f:e8:7f:7f:66:62:eb:6b: c7:f3:64:a1:30:16:a8:a1:e3:0d:76:92:bc:8a:e3: 7e:e9:54:37:ab:6a:53:51:f9:6a:ae:5f:ee:a9:8e: b4:f6:2b:b0:a3:8f:24:20:5f:c6:df:6e:fe:e5:97: 89:b6:e4:9e:5c:85:a3:60:d1:3b:32:c5:47:83:65: 40:37:63:05:d3:75:da:71:21:e3:aa:5b:3e:bc:ee: e6:4c:7e:2a:1d:47:14:36:1e:cf:50:87:40:72:cb: 44:89:14:3a:39:ea:97:b7:5a:9e:5f:4a:43:91:c4: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:03:2B:96:A5:1F:54:64:3D:E0:F5:3D:FB:F1:67:D2:36:20:97:26 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e3:0e:0e:45:77:94:6d:93:44:49:f4:35:69:41:35:99:1d: 8f:a0:85:4f:15:0e:3d:f8:e4:34:3d:65:9a:6a:49:63:5b:01: fa:08:91:de:9d:e9:53:0b:ab:2c:9f:f9:fa:a6:02:4a:d9:5c: 38:44:69:58:3d:1e:2f:a0:2e:d0:12:6c:cc:e1:87:17:9e:15: 76:47:0d:c0:4d:40:2e:07:37:80:ce:6d:f4:b9:7a:68:8c:c9: bd:55:13:1a:d1:f3:da:9d:17:ac:c4:4e:e3:05:80:3d:e1:e2: 8a:33:4e:24:ee:37:2a:a9:8e:dc:7d:a4:fb:8c:87:b0:e8:cb: 10:75:27:ff:5d:62:b3:e0:c7:a5:dc:69:c5:86:6c:c1:f9:06: 0c:cd:b2:68:7c:7c:82:99:da:75:16:74:d1:0c:b5:b4:03:c3: 70:e2:3e:92:09:42:32:19:b8:1f:1d:7c:d9:d2:81:8b:c6:06: a8:db:9e:17:11:42:c6:98:86:9d:86:0c:f9:d7:0b:4e:ab:cb: b2:dd:15:e3:f9:b3:da:14:75:0f:11:cb:30:97:a0:b5:d1:18: da:d2:4e:51:02:14:81:32:ee:fd:d8:34:41:63:f1:42:f6:bc: 63:df:bb:e4:a8:8b:a0:13:a1:ad:30:f8:a7:cd:88:09:6b:2d: 4b:d9:35:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPfc8tFty+r/YnoxnOO9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjUxMTA0MTkwMDI5WhcNMjUxMTA1MTkwMDI5WjAzMTEwLwYDVQQD EyhlODAzMmI5NmE1MWY1NDY0M2RlMGY1M2RmYmYxNjdkMjM2MjA5NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzKkSTjtjepurcSzaXh4usAqG27/ VdDCz7xEQ0MskynoFi5+oI7K5jicp/kvEneW7xQwZzxHh03VG3uECYFnY0wx5t9l uYzTNh5VhD0kJw6+jHdT9gsOGxJAaxHx73YFFuX/fKXQ8984kSfElCle7STvL6mF WGRkHYV/CtJyyami2w4NA4dEYW7d1h4jH+h/f2Zi62vH82ShMBaooeMNdpK8iuN+ 6VQ3q2pTUflqrl/uqY609iuwo48kIF/G327+5ZeJtuSeXIWjYNE7MsVHg2VAN2MF 03XacSHjqls+vO7mTH4qHUcUNh7PUIdAcstEiRQ6OeqXt1qeX0pDkcR5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgDK5alH1RkPeD1PfvxZ9I2IJcmMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+MODkV3 lG2TREn0NWlBNZkdj6CFTxUOPfjkND1lmmpJY1sB+giR3p3pUwurLJ/5+qYCStlc OERpWD0eL6Au0BJszOGHF54VdkcNwE1ALgc3gM5t9Ll6aIzJvVUTGtHz2p0XrMRO 4wWAPeHiijNOJO43KqmO3H2k+4yHsOjLEHUn/11is+DHpdxpxYZswfkGDM2yaHx8 gpnadRZ00Qy1tAPDcOI+kglCMhm4Hx182dKBi8YGqNueFxFCxpiGnYYM+dcLTqvL st0V4/mz2hR1DxHLMJegtdEY2tJOUQIUgTLu/dg0QWPxQva8Y9+75KiLoBOhrTD4 p82ICWstS9k1IA== -----END CERTIFICATE-----Generated at Tue Nov 4 22:47:43 2025 by rpki-client