$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: 0ktUv6eahnAARJr3POFdkf/oY2Bb7AvZkGQTIf8xjII= Subject key identifier: CB:92:1C:47:16:B3:66:88:2A:C8:7A:29:C4:4B:57:5C:91:59:C6:0C Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019A4E1900D597E235B972C26B026A5F1F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1769 Signing time: Tue 04 Nov 2025 09:00:52 +0000 Manifest this update: Tue 04 Nov 2025 09:00:52 +0000 Manifest next update: Wed 05 Nov 2025 09:00:52 +0000 Files and hashes: 1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=) 2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=) 3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=) 4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=) 5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=) 6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=) 7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=) 8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=) 9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=) 10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=) 11: J2u-WNebQOND5pQrDIUacy8j8l8.roa (hash: Vvd0TjXjR9FhkBvtO2YJqbWdHXAU/GB3ZQoXK3zVnls=) 12: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=) 13: V-iBWNvDzOjE3oj3ZsxRXOFIkLI.roa (hash: bJv9u1JtLOAJLodQfH0YKSj356adakaFHXlAlJZDi/w=) 14: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=) 15: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=) 16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=) 17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=) 18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=) 19: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: dap5AIkGXHVTIdFSfX+WCoMHIH8c9JWq45jDNaqIgAU=) 20: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=) 21: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=) 22: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=) 23: qlRuFgW9QpSZ-B-QqBWtqwtHSbQ.roa (hash: NvSiolrhWigq47yPhLr31U+7NECb9us+yowLt16g6Mw=) 24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=) 25: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=) 26: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=) 27: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=) 28: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=) 29: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:19:00:d5:97:e2:35:b9:72:c2:6b:02:6a:5f:1f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Nov 4 09:00:52 2025 GMT Not After : Nov 5 09:00:52 2025 GMT Subject: CN=cb921c4716b366882ac87a29c44b575c9159c60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:86:cc:d3:65:6d:b4:1c:20:8b:c1:a7:2b: fc:08:9a:9e:66:65:45:f3:d9:93:92:98:f2:ac:12: 51:ad:0b:92:4b:a2:21:ff:1d:be:e2:11:45:51:ce: 70:0b:15:4f:c8:6f:da:0e:84:a0:1a:79:1f:9e:75: 29:1e:bf:ce:1a:0b:bb:f0:0a:1a:30:5a:c4:64:38: f5:1a:cc:5f:d2:f6:a2:9e:b8:d0:09:a1:f6:eb:2c: f2:56:3a:9e:05:5c:53:26:8b:40:43:b9:71:b4:b6: 88:8a:f6:0c:b8:67:6d:95:a7:4b:22:3a:6e:33:66: b3:1c:d3:f9:9d:a7:02:0d:cb:eb:46:ea:5f:fb:8f: ac:34:0d:87:2c:33:32:66:cf:de:d8:da:35:45:76: b0:81:70:44:33:ba:3a:ed:fb:98:22:14:93:b6:19: 72:8a:4f:73:8e:13:5a:84:d2:fa:69:ac:f5:1d:3b: 17:fb:c2:7d:fd:2f:e6:ce:a5:7f:08:14:ec:ac:25: f3:de:3b:07:c1:6c:6f:2b:25:35:7c:8a:25:09:14: 9a:b0:5f:11:d1:eb:bb:3e:67:28:26:e6:e4:3b:6d: 25:f5:ce:ec:7e:05:35:05:f4:21:c2:74:f9:17:12: a8:19:6c:cb:9a:f5:3f:8f:a8:c1:15:d9:51:bd:78: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:92:1C:47:16:B3:66:88:2A:C8:7A:29:C4:4B:57:5C:91:59:C6:0C X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2b:0b:d5:eb:90:47:41:f0:73:80:29:d4:87:7d:25:ae:ca: ac:ff:30:7f:bf:4c:ca:f1:3f:11:2b:90:1c:5c:0c:bb:76:5e: c3:c0:fe:da:35:cf:30:45:1b:ed:9f:b8:e4:13:cd:9e:56:82: 82:99:dd:97:aa:af:45:96:34:23:51:3c:e8:02:2d:d0:23:da: e1:db:ec:05:6a:6b:f0:f0:0c:d1:16:15:ec:85:fa:60:ee:b1: ec:63:59:8a:29:15:7b:cd:5b:3b:38:65:dd:36:f9:40:cd:94: 2e:03:ff:93:6c:9b:e2:c6:50:e3:c3:53:d8:05:e6:80:66:d9: 34:c0:2b:cc:23:67:a5:89:01:14:92:b0:1c:cc:b6:78:77:11: 25:77:5a:12:09:95:ae:2c:c4:45:f5:86:07:3e:8f:d6:27:68: ce:e8:de:94:ad:f8:c2:f7:18:c5:81:1e:c9:bf:9e:94:31:c8: f8:4e:e6:89:3a:9d:98:64:32:98:61:b0:ce:ea:ee:29:ec:ec: 21:b8:3a:2b:85:0a:8c:94:ac:d9:d9:85:3c:ac:49:53:e0:ad: e2:6b:b2:50:92:b0:b5:a9:7d:6a:95:6b:25:b7:4d:83:e4:b6: 82:8f:18:f9:22:59:1a:19:ab:dc:ec:ef:0e:21:60:50:b8:a3: 67:b9:9c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGQDVl+I1uXLCawJqXx8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjUxMTA0MDkwMDUyWhcNMjUxMTA1MDkwMDUyWjAzMTEwLwYDVQQD EyhjYjkyMWM0NzE2YjM2Njg4MmFjODdhMjljNDRiNTc1YzkxNTljNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMaGzNNlbbQcIIvBpyv8CJqeZmVF 89mTkpjyrBJRrQuSS6Ih/x2+4hFFUc5wCxVPyG/aDoSgGnkfnnUpHr/OGgu78Aoa MFrEZDj1Gsxf0vainrjQCaH26yzyVjqeBVxTJotAQ7lxtLaIivYMuGdtladLIjpu M2azHNP5nacCDcvrRupf+4+sNA2HLDMyZs/e2No1RXawgXBEM7o67fuYIhSTthly ik9zjhNahNL6aaz1HTsX+8J9/S/mzqV/CBTsrCXz3jsHwWxvKyU1fIolCRSasF8R 0eu7PmcoJubkO20l9c7sfgU1BfQhwnT5FxKoGWzLmvU/j6jBFdlRvXituQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuSHEcWs2aIKsh6KcRLV1yRWcYMMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOysL1euQ R0Hwc4Ap1Id9Ja7KrP8wf79MyvE/ESuQHFwMu3Zew8D+2jXPMEUb7Z+45BPNnlaC gpndl6qvRZY0I1E86AIt0CPa4dvsBWpr8PAM0RYV7IX6YO6x7GNZiikVe81bOzhl 3Tb5QM2ULgP/k2yb4sZQ48NT2AXmgGbZNMArzCNnpYkBFJKwHMy2eHcRJXdaEgmV rizERfWGBz6P1idozujelK34wvcYxYEeyb+elDHI+E7miTqdmGQymGGwzuruKezs Ibg6K4UKjJSs2dmFPKxJU+Ct4muyUJKwtal9apVrJbdNg+S2go8Y+SJZGhmr3Ozv DiFgULijZ7mcyw== -----END CERTIFICATE-----Generated at Tue Nov 4 14:41:50 2025 by rpki-client