$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft File: zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json) Hash identifier: /NAwiRtqk1smQORUP4SQsHxRHQgrbb6cZtUsktxa7VE= Subject key identifier: DF:58:CD:40:76:8D:62:95:E3:80:B2:CC:60:43:51:4B:FF:8B:39:EC Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019A4EF52B750DBAD1F68EC37E7048A3F7C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft Manifest number: 185B Signing time: Tue 04 Nov 2025 13:01:21 +0000 Manifest this update: Tue 04 Nov 2025 13:01:21 +0000 Manifest next update: Wed 05 Nov 2025 13:01:21 +0000 Files and hashes: 1: 2MknCTAqPrL-JBVm-a7dCcSPR7A.roa (hash: QgeWbSBTUKGBsvwbQgC/fRYVcUxNWpLiMOHrMsaO2LA=) 2: 81KZQ-u5F9g0MOVoHU9ewgY-QXg.roa (hash: 8UjV0Jm7R1QguHBx9y2wyolm/VjFBkdN2Pr8OyUJ+mY=) 3: Au9bXszlocyVoMwtR7yHKJSJdd8.roa (hash: nwgXyCp2VJCxj54VlqhKlW+GmuQayPyEYrSPMy4MTwc=) 4: B7gCFjZVeNLW5hK77c-0N4WFxbw.roa (hash: tWsocaUyyxYU90b6yCtG5GWx8yEhokPRBicDQHH/U5s=) 5: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=) 6: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=) 7: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=) 8: I5sUW94nv-LxzV80hMGX3qTQCs4.roa (hash: uL5F8RVKhWM570kSM8rrD/tTcGTu5/K9W9VpY2ciAEQ=) 9: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=) 10: Mfhs8jmocGTaGuB0fg_x0qnHXQY.roa (hash: P75mvG00MMw6xQyOke8+iOXUOpf6sb8l40ULEZSs1Co=) 11: R2ldoXhi8yWQOntF1DnCjSdvZHU.roa (hash: rEkBBSJ/AxqPUULu5r8GdT5K+bRn1TC46uKfQvy074k=) 12: RabFVP9_l7NvhFArTWX9C0fHl8A.roa (hash: i69bKSISEEfsZkRf2LJ6xdjL0YTgWRsBj/o5W7RYyXc=) 13: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=) 14: T7IjBrYrggA-fhq6ldUZ_3bbRAM.roa (hash: uvE5iKVkYEQQo3ln8x8eOoRQL4ODeOvhvfo6hm9IKvw=) 15: fJpkT-437me05--9YcoG-Z-gtp0.roa (hash: S3/+Mf1eiHqBI2upibbtw3ImJd6HoVXmnaOiOtu8vFs=) 16: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=) 17: gbl3K87pq61HBpBF-ynT8FRiuRc.roa (hash: cXfO4y1iR7IIc0IloXuoSNqbZybBreBshUvynFBvAaA=) 18: jaX_pSZTt2QtAFyBzi9jHzupc6I.roa (hash: Q4Lsi4Y8P1kMxlNLWX66TTwTUzaof2icuH2ghly6BCM=) 19: n2vcpbDZB6xrxLYvzTHCKhSNz7E.roa (hash: 5XRyQTD9tl7LBp5vTwaP2Vb/AmIajhXwhSGXa4ngEUA=) 20: pR8X201cE488GDij0jEDtJgNAT4.roa (hash: 55G0ARH5uqyYFb+VPNX9cf5T1AwygrlThtDL14wWHjY=) 21: pcNjPd963pJ-veR3THrsEue-HI8.roa (hash: WY3JRHM86xMcBBANb6NZ6B6Gt06IYrTWP+TpFrDA6VY=) 22: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=) 23: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=) 24: wlCqpCf6WqXLzJVszqz1Q1gTyss.roa (hash: VxRQNGxkKhRbXtEdjFiDmjDt1hmaWIKUoy1RTW4daSE=) 25: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: haRRiNknis+5UlxTKMiGpv1T5TjhHlwYfTQUat7kWVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:2b:75:0d:ba:d1:f6:8e:c3:7e:70:48:a3:f7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Nov 4 13:01:21 2025 GMT Not After : Nov 5 13:01:21 2025 GMT Subject: CN=df58cd40768d6295e380b2cc6043514bff8b39ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:20:da:27:fe:ae:3c:68:62:de:70:02:ca: 67:b4:c6:13:1b:eb:bd:28:4f:78:f3:7e:d4:af:dc: c6:5f:ac:8f:f0:d4:4a:27:1f:1c:fc:ce:f0:cf:68: 59:37:a3:22:f4:24:44:d1:3d:ff:23:c4:e5:47:9b: 91:58:e1:c8:81:32:a6:ef:d8:01:83:bd:1e:59:f4: 2e:95:b4:42:06:f9:8c:7d:c1:08:17:ef:40:dd:e6: c9:e3:dd:00:b4:9a:2e:2b:78:e3:56:e9:ef:9a:50: 9d:63:db:a8:cb:f1:fb:8a:0b:1a:e7:4d:e4:d2:92: cf:11:1b:f2:fe:cc:0b:ac:5b:98:5b:84:34:6f:97: b8:69:b7:e3:65:4b:4c:28:aa:3e:0a:5a:55:ed:54: 85:51:51:64:d5:ee:56:bc:eb:9e:bf:5b:67:b8:11: 3e:a1:7c:ab:84:7b:38:7a:26:e1:f4:0e:0f:9e:02: fe:3a:c1:3a:84:85:7d:d0:97:b2:03:d0:a2:ca:0b: 96:f1:db:0f:bb:0b:85:3d:88:3c:e9:cb:11:a1:62: 3a:4a:22:c8:f0:e8:a2:0a:ed:b1:3d:ed:8e:83:cf: 66:5c:d8:3f:81:28:4a:71:b0:bc:eb:6b:43:60:14: 6d:f4:2c:e3:52:08:62:e0:6d:e7:0a:8c:64:d7:fa: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:58:CD:40:76:8D:62:95:E3:80:B2:CC:60:43:51:4B:FF:8B:39:EC X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2f:ef:67:70:f2:8d:ac:77:5a:ff:6c:71:97:18:5b:7e:7e: 82:bb:5e:11:61:77:a8:a1:fc:24:67:9e:ab:fe:0e:c7:06:48: 86:37:15:17:76:6a:e0:f9:74:a0:85:31:f8:21:bc:f9:23:34: 56:1d:4f:cd:46:09:19:33:28:80:9f:67:6d:bb:4a:bc:c4:0a: 5f:23:9c:28:92:68:19:93:09:cf:b7:aa:be:ed:da:0d:00:e4: b2:b2:28:a3:6c:90:6a:3a:cd:14:ab:1d:de:32:6b:6f:b9:be: a2:e8:20:e5:12:15:c3:1c:16:53:4c:92:39:de:dd:3f:36:31: 6a:d6:18:a8:ff:60:b9:fd:31:7d:55:c6:5f:b0:7d:21:29:ac: 60:8d:d0:8d:a7:17:f5:a5:13:3f:15:ca:38:0e:ec:d7:9c:1f: d0:4b:a5:7b:4c:62:9a:f5:7e:86:31:90:44:f6:b1:56:6a:81: 9e:9e:da:77:06:e2:7c:92:d8:ab:74:38:f2:6b:03:77:2a:b7: 78:97:0b:21:22:54:32:9a:e7:b5:7d:2d:59:20:2d:55:f0:54: 35:13:50:83:74:9c:62:1b:c9:66:c6:b5:7d:45:75:be:34:5d: 07:a5:bb:a0:eb:b5:d3:a5:41:52:8c:d1:cb:6f:12:22:1f:d2: f6:38:69:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9St1DbrR9o7DfnBIo/fGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjUxMTA0MTMwMTIxWhcNMjUxMTA1MTMwMTIxWjAzMTEwLwYDVQQD EyhkZjU4Y2Q0MDc2OGQ2Mjk1ZTM4MGIyY2M2MDQzNTE0YmZmOGIzOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Yg2if+rjxoYt5wAspntMYTG+u9 KE94837Ur9zGX6yP8NRKJx8c/M7wz2hZN6Mi9CRE0T3/I8TlR5uRWOHIgTKm79gB g70eWfQulbRCBvmMfcEIF+9A3ebJ490AtJouK3jjVunvmlCdY9uoy/H7igsa503k 0pLPERvy/swLrFuYW4Q0b5e4abfjZUtMKKo+ClpV7VSFUVFk1e5WvOuev1tnuBE+ oXyrhHs4eibh9A4PngL+OsE6hIV90JeyA9CiyguW8dsPuwuFPYg86csRoWI6SiLI 8OiiCu2xPe2Og89mXNg/gShKcbC862tDYBRt9CzjUghi4G3nCoxk1/qeXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9YzUB2jWKV44CyzGBDUUv/iznsMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS/vZ3Dy jax3Wv9scZcYW35+grteEWF3qKH8JGeeq/4OxwZIhjcVF3Zq4Pl0oIUx+CG8+SM0 Vh1PzUYJGTMogJ9nbbtKvMQKXyOcKJJoGZMJz7eqvu3aDQDksrIoo2yQajrNFKsd 3jJrb7m+ougg5RIVwxwWU0ySOd7dPzYxatYYqP9guf0xfVXGX7B9ISmsYI3QjacX 9aUTPxXKOA7s15wf0Eule0ximvV+hjGQRPaxVmqBnp7adwbifJLYq3Q48msDdyq3 eJcLISJUMprntX0tWSAtVfBUNRNQg3ScYhvJZsa1fUV1vjRdB6W7oOu106VBUozR y28SIh/S9jhpxg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:46:48 2025 by rpki-client