$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: I8c6nyoT3iInsiq6H/YewVihHammxzjNgR9fKz59dBk= Subject key identifier: 1E:DA:3E:55:EB:52:AA:1B:9B:17:0A:90:DB:88:81:96:9D:47:AC:B3 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019A4C610ACE436A8401DF3D05527A682C3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 1755 Signing time: Tue 04 Nov 2025 01:00:19 +0000 Manifest this update: Tue 04 Nov 2025 01:00:19 +0000 Manifest next update: Wed 05 Nov 2025 01:00:19 +0000 Files and hashes: 1: 1G4hJtK-Q6kU7icYScQRC5-Be-s.roa (hash: dMz2je+c/O1VWWnftEtGiGhh3+EYMNwffk18Dr9qsq8=) 2: 3NfU7mC4iQvU5R9bXdfX2sEvs8c.roa (hash: TG1MP6wYt9t2MftQG66JPCVdEsPTci5w7P6XLoTCJqw=) 3: 48lDGC9bYCTuSM8HwQhmLCbmZus.roa (hash: NHmuOU8Cy9kJ9mGcVBS8Mv1uoHjoSm8ONFcGWnM3sBI=) 4: 4duEOMbFmxLAatp657l6KVNH0sc.roa (hash: KpntCphFZRam9AAKmk1MT/8FkV1brKKEi6JtZQR76bI=) 5: 5XmJB8L9LQKzWCvnzU0no13nSW0.roa (hash: T9GOvhBZ+sI1Yn9j42OnP6O/5jv10olowsyPXKbQ3qs=) 6: 7hWCsPelXMQmpESwr4GWvxzkq98.roa (hash: oD7zlhvzmlTWXnuOdQmMdbtoa//UwgMcOCLQqr4S1S8=) 7: 8wmzxLkSyC63kJ8KsfaDTFp3590.roa (hash: yPTonCp/pr9ZtUUWsN3hsTJ0gebdbrNTrrkzT5j7S00=) 8: Bm5srVh_81xtwsDQZjL_phr1EiE.roa (hash: 7fmqR7TnR8pgOLrtjSSrB/cFA86aEz/WfgUxvDNNZKU=) 9: ByUGzYo4YLrF5Rz8eRiToPmCdbU.roa (hash: vuFf2AeMCINwyB5MCwYtpk3Ck4WtjYZ02UYEz3CR8UY=) 10: GyYIBRSp5zszM0sn8Cw7PizSGMQ.roa (hash: 3igY0zQ0WL7LlL5J0bdfiTr3fish/KcTeQyIyR5FJDc=) 11: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=) 12: IqmCKhj0YirWDztKQKxV-Tkp8wA.roa (hash: PBdp+ZbHGedan6tJHhjQF/VqDVDnpQuJLH8duAyClhY=) 13: JtVbJy-n_2OQZJuEy5VQCIWtby4.roa (hash: rVpXZc9/KRQbm2XlrpF3kGM6DdDlKLkvf9o/VDjT0Kg=) 14: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=) 15: LxDX7O3eQGaJYExU85kcexK4__Q.roa (hash: rErxx7Om3Ta/mvJcqv+K5/2MJQzhGaZ1sKgBE7WSm3c=) 16: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=) 17: SQq8_rpvdfY7BXFUyrphnnlL84o.roa (hash: vSJi9Ykpxa0TPPtAkLzqMYrT9acxNfMsWIZzD/ELaTo=) 18: UXot0y7NcTulPHd9qDfq0dGMJfU.roa (hash: CdK4PRmgbO2cxg5azIBFyAa1AtokT3d6hqZhIbAAoX0=) 19: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=) 20: _8zCTGBJxw-u7lVEsPTjCM3nWwA.roa (hash: LjXxLmtwWhA2Mlf9B9WEsLpzMalKSd7C+ucRfQqnP4k=) 21: _U2iLKvuzlqwilJSzER831z98M8.roa (hash: okZmcDXPqmxDEhwwoZbqsUwyHhANmRv1gbDLhJFifeM=) 22: _YRU7gsUw7AnTGw-h2hVshCcJZw.roa (hash: UcrlnWWaVRHvoC0MHPAo0D7Go62USxqpkzcfjfXtLfc=) 23: aKO4BpTrtRUx8GhxEFQBwNQPc1w.roa (hash: uu6qKqW/g/+cB5AgVNcV7hyQgNb+54o7Kqk1jh5TR0Y=) 24: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=) 25: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=) 26: nUc3_wTTpdnLbKR8Uy1jJ4gBZwQ.roa (hash: VOaC2DOv6Yz3INtNAQr2e/Adq/ukqiu+QVFQZmotO8w=) 27: qCsYweWkxuS1CwD2zyFdFhQWWJI.roa (hash: zk6ER/z9n6g2vt5vWV2cOhGUTBILSOCBZoubvC6AkoU=) 28: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=) 29: tVkzOGYvm9Ue0p1DtZsOv0Qo5ww.roa (hash: 1l4DY4og67nsoecheqcUHwFJJl1I+VZAOse9iPXrkJI=) 30: uFUEGSfPHjgulVJP0gmjr5Io5BE.roa (hash: N+zSHr/8E6EDAHMdhe9NDa8SXOzYh6T68xumfpCPwis=) 31: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: E/Ix7bX9p9P0k62gIxu/cgi11pGBVcdTkmaqCbY6qSk=) 32: zKC6n_t_VgG-LjOI7EZyAWxbwfA.roa (hash: xTXsk3AHK3+UMeTc89XGRCu0j4laHeIShFJJ2s+vJRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 01:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:61:0a:ce:43:6a:84:01:df:3d:05:52:7a:68:2c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Nov 4 01:00:19 2025 GMT Not After : Nov 5 01:00:19 2025 GMT Subject: CN=1eda3e55eb52aa1b9b170a90db8881969d47acb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:9f:ea:39:6f:cd:e1:76:6c:aa:df:e0:54: 9e:67:82:b0:2d:27:0a:9d:43:69:a1:72:af:f3:7a: b4:4b:de:03:fc:fa:e0:18:18:54:fa:e4:a9:58:19: 3d:28:f3:2e:57:bd:db:93:38:ff:93:98:72:81:b9: 53:68:85:0b:f3:f6:bc:0b:9b:a8:6f:1a:c3:a4:e9: 6f:d7:0b:36:14:54:6b:37:e2:03:ca:cb:4f:9c:27: a6:2d:27:79:98:a4:f5:ad:d6:17:44:45:94:1b:1b: a8:6f:48:d4:aa:a7:2c:69:92:4c:72:fb:4a:e6:8c: a7:02:b4:0d:f5:df:ee:fe:73:39:7a:5b:fd:89:5a: 18:32:b9:a6:85:5d:a3:cc:0b:40:23:11:da:3e:d4: 32:fe:1d:27:6a:0e:00:cf:f0:27:ca:2b:2e:ca:68: fe:63:73:4f:f9:1a:d2:94:f8:3d:74:c9:8d:29:ef: 51:e4:75:8a:05:24:98:58:66:64:0c:7c:41:71:76: bb:07:79:70:83:43:e8:6f:2d:f2:0b:a7:1d:7b:b2: 8c:75:7e:39:78:97:f4:9d:66:5a:92:33:4e:fc:bd: 70:cc:f7:3e:83:09:ae:8c:4e:26:0b:ea:69:26:c0: 93:15:95:30:3d:22:41:01:26:89:23:3f:6e:2b:be: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DA:3E:55:EB:52:AA:1B:9B:17:0A:90:DB:88:81:96:9D:47:AC:B3 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0e:65:02:57:2f:5d:3f:48:cd:81:fa:c6:ab:51:e9:64:79: bf:61:7e:a8:50:85:01:c5:12:c5:6e:ca:57:6c:76:31:5e:ac: c9:f5:6b:63:ab:3c:a5:fc:9e:e0:3e:64:c6:25:a6:c6:f1:63: 0b:7b:9e:5d:e4:65:04:b4:a1:fd:06:5d:dd:56:e7:ff:8f:30: 72:56:99:bc:f5:49:52:fa:dd:ba:62:3f:0e:ac:74:51:4f:52: 58:c0:dc:86:1a:90:47:eb:39:83:d1:5a:d8:4c:d7:48:ac:8b: 1e:52:68:41:e8:cc:e6:fa:8f:4f:39:2b:74:93:39:24:8e:d5: 76:48:30:11:20:ef:68:91:d7:e7:29:ca:1e:1d:7f:4a:69:30: df:7e:9d:c1:92:59:7d:a4:0a:11:ef:01:0a:c1:b5:ba:04:12: 7e:bc:97:fb:63:91:d8:60:1c:63:41:5b:c1:c4:bd:75:e3:60: 02:6d:42:f1:62:ab:48:ca:1c:2a:70:e7:5d:9e:73:18:f2:2e: 37:0d:51:41:0d:1a:dc:60:2d:c8:f7:12:10:db:3e:da:d6:bc: 64:19:86:05:76:a2:6c:6b:0a:68:40:b8:c5:8f:21:8a:a1:71: d6:c3:b5:06:31:c4:98:46:95:04:92:47:0c:82:c5:ae:a9:91: 44:74:31:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMYQrOQ2qEAd89BVJ6aCw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMTA0MDEwMDE5WhcNMjUxMTA1MDEwMDE5WjAzMTEwLwYDVQQD EygxZWRhM2U1NWViNTJhYTFiOWIxNzBhOTBkYjg4ODE5NjlkNDdhY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowWf6jlvzeF2bKrf4FSeZ4KwLScK nUNpoXKv83q0S94D/PrgGBhU+uSpWBk9KPMuV73bkzj/k5hygblTaIUL8/a8C5uo bxrDpOlv1ws2FFRrN+IDystPnCemLSd5mKT1rdYXREWUGxuob0jUqqcsaZJMcvtK 5oynArQN9d/u/nM5elv9iVoYMrmmhV2jzAtAIxHaPtQy/h0nag4Az/Anyisuymj+ Y3NP+RrSlPg9dMmNKe9R5HWKBSSYWGZkDHxBcXa7B3lwg0Poby3yC6cde7KMdX45 eJf0nWZakjNO/L1wzPc+gwmujE4mC+ppJsCTFZUwPSJBASaJIz9uK75t7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7aPlXrUqobmxcKkNuIgZadR6yzMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQA5lAlcv XT9IzYH6xqtR6WR5v2F+qFCFAcUSxW7KV2x2MV6syfVrY6s8pfye4D5kxiWmxvFj C3ueXeRlBLSh/QZd3Vbn/48wclaZvPVJUvrdumI/Dqx0UU9SWMDchhqQR+s5g9Fa 2EzXSKyLHlJoQejM5vqPTzkrdJM5JI7VdkgwESDvaJHX5ynKHh1/Smkw336dwZJZ faQKEe8BCsG1ugQSfryX+2OR2GAcY0FbwcS9deNgAm1C8WKrSMocKnDnXZ5zGPIu Nw1RQQ0a3GAtyPcSENs+2ta8ZBmGBXaibGsKaEC4xY8hiqFx1sO1BjHEmEaVBJJH DILFrqmRRHQxjg== -----END CERTIFICATE-----Generated at Tue Nov 4 11:20:51 2025 by rpki-client