$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: zISD5nL/nW2XFH4De6uc/x3KqGsPTbUO/CU/Sp2xzZI= Subject key identifier: 55:2C:22:A6:94:EA:44:7A:00:CC:41:15:B5:DB:8F:E9:C8:6C:2F:8C Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019A4FD018D1E8F9C747DB15638C60C4F4BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1717 Signing time: Tue 04 Nov 2025 17:00:29 +0000 Manifest this update: Tue 04 Nov 2025 17:00:29 +0000 Manifest next update: Wed 05 Nov 2025 17:00:29 +0000 Files and hashes: 1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=) 2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=) 3: 94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa (hash: T/WAoLxo0PnxVr7nnlx3pomYG3O8lrRy6KTbycXayvo=) 4: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=) 5: JaozY1LC60yKHxdIxOB-E0iX1t0.roa (hash: OPF6jBQCfVWZLlLB/67BOOY2NpB3o7UOxfL3O5afl3M=) 6: L7IG9Ln6m_zfp5UQKVs9myh5Dc0.roa (hash: jvI7jkzEKQADjdVqEl4h9ucF4+e+Qcpdc9H60hR13Xg=) 7: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=) 8: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=) 9: OryNoX3UGMIcnoUd_MsLiDY7bng.roa (hash: o+SjC06El+Rv9wA0fL1qtJp9DJ4Kq5lIbfs8S2VVaKI=) 10: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: xD57wkkH0EQQTpwPEAHSsmfedWKzhb2l4pHJ/EEnXHo=) 11: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=) 12: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=) 13: oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa (hash: ZaFy/IgwDL83LKh9KTxH1aabJGJHABexBAR3ZVnZnVk=) 14: qGk1e2SSj7a867DIFcXEQy9VRwk.roa (hash: FczogQCjHMZiK1Ux2uZ685nsTVBLAXheYXkPGrZoEcc=) 15: qKcCLtEG432D5WJB88yhMQT2crs.roa (hash: DjjEwdV67kxPopToL5gQtYQLfwXVH8iDrqBq6qd58Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:d0:18:d1:e8:f9:c7:47:db:15:63:8c:60:c4:f4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Nov 4 17:00:29 2025 GMT Not After : Nov 5 17:00:29 2025 GMT Subject: CN=552c22a694ea447a00cc4115b5db8fe9c86c2f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:08:90:e7:04:d2:91:69:d0:29:29:31:4f:f9: 99:29:a6:c6:ba:3d:ee:76:e8:55:cf:6e:f8:9e:fa: bd:31:7a:f1:b8:40:8e:59:df:04:89:b2:4e:86:23: 84:ec:77:74:3e:ea:e3:cf:eb:ad:92:8e:c6:ae:8d: 2e:76:63:77:5b:a9:4c:8d:ba:d6:46:91:f5:2c:a5: f0:4e:dc:04:be:1a:d5:ad:c3:4f:24:82:aa:33:9f: ef:68:48:ae:a5:2a:1f:b9:aa:19:61:8a:72:b6:dd: 0a:dd:5b:c6:c2:c4:3b:f0:c4:37:76:a3:6a:d2:fe: 2f:74:7b:fa:53:d3:21:67:a0:37:bd:0e:dc:df:eb: 78:4a:91:e0:b7:a1:ad:5d:52:93:70:d0:3f:2b:7a: 0b:70:7e:50:d8:5f:0b:f8:91:3b:14:a3:2b:6e:87: a0:be:76:a4:fa:f9:06:53:e8:44:1e:e5:63:db:48: 8d:f2:70:41:41:87:8f:34:c1:f1:f9:96:d1:c3:0b: 82:07:0f:cc:d9:15:c0:5a:64:87:f4:b7:26:83:11: 6a:fc:06:0a:fe:ed:b6:8e:a7:a0:ed:a3:22:a5:a6: 65:6e:37:5d:1f:58:59:c3:bd:81:26:d1:17:30:a4: f7:db:85:db:e3:3f:6b:7b:77:5f:74:5e:74:93:aa: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2C:22:A6:94:EA:44:7A:00:CC:41:15:B5:DB:8F:E9:C8:6C:2F:8C X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:68:84:95:b3:f8:66:c3:14:be:9e:9f:8f:2e:cc:76:2c:52: 73:dc:cb:f6:65:82:b9:a2:86:36:fe:2b:6f:ed:00:1f:33:16: d4:9c:d6:dc:33:4d:e7:eb:c1:81:76:e0:47:4e:1f:06:3d:e4: 04:06:e8:2d:9e:df:6c:f5:0d:38:4b:97:61:f8:f8:6f:34:a2: 6e:5c:ac:ec:e9:cf:91:80:af:32:44:23:32:ee:99:d7:47:fe: ef:ee:76:c8:d8:62:dd:fc:c4:1a:c1:74:d5:6c:ff:e2:4d:9d: 85:8e:20:fc:1b:8c:48:8c:f4:79:d6:32:f2:66:2c:76:3f:65: 4f:82:c2:22:22:22:84:3e:c7:ff:88:c1:14:01:b6:4a:69:be: 7f:33:c6:d1:22:bb:f0:40:3f:25:97:e3:c6:bf:28:2b:7f:da: 06:58:28:97:28:fe:f4:3e:01:aa:3c:c5:58:63:81:72:d9:64: 60:be:fa:a9:45:56:43:ef:90:bb:9c:c2:da:82:1b:c8:c5:6d: 97:1e:48:d6:a7:c1:95:3c:74:68:19:34:eb:01:e2:c1:ed:36: 61:97:04:b4:c4:50:70:56:45:35:6f:73:2e:90:62:ce:67:0a: cd:92:b9:d1:34:0c:d8:db:16:6c:85:0f:c9:0c:31:62:aa:e4: 32:75:20:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpP0BjR6PnHR9sVY4xgxPS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjUxMTA0MTcwMDI5WhcNMjUxMTA1MTcwMDI5WjAzMTEwLwYDVQQD Eyg1NTJjMjJhNjk0ZWE0NDdhMDBjYzQxMTViNWRiOGZlOWM4NmMyZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8giQ5wTSkWnQKSkxT/mZKabGuj3u duhVz274nvq9MXrxuECOWd8EibJOhiOE7Hd0Purjz+utko7Gro0udmN3W6lMjbrW RpH1LKXwTtwEvhrVrcNPJIKqM5/vaEiupSofuaoZYYpytt0K3VvGwsQ78MQ3dqNq 0v4vdHv6U9MhZ6A3vQ7c3+t4SpHgt6GtXVKTcNA/K3oLcH5Q2F8L+JE7FKMrboeg vnak+vkGU+hEHuVj20iN8nBBQYePNMHx+ZbRwwuCBw/M2RXAWmSH9LcmgxFq/AYK /u22jqeg7aMipaZlbjddH1hZw72BJtEXMKT324Xb4z9re3dfdF50k6oQlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUsIqaU6kR6AMxBFbXbj+nIbC+MMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimiElbP4 ZsMUvp6fjy7MdixSc9zL9mWCuaKGNv4rb+0AHzMW1JzW3DNN5+vBgXbgR04fBj3k BAboLZ7fbPUNOEuXYfj4bzSiblys7OnPkYCvMkQjMu6Z10f+7+52yNhi3fzEGsF0 1Wz/4k2dhY4g/BuMSIz0edYy8mYsdj9lT4LCIiIihD7H/4jBFAG2Smm+fzPG0SK7 8EA/JZfjxr8oK3/aBlgolyj+9D4BqjzFWGOBctlkYL76qUVWQ++Qu5zC2oIbyMVt lx5I1qfBlTx0aBk06wHiwe02YZcEtMRQcFZFNW9zLpBizmcKzZK50TQM2NsWbIUP yQwxYqrkMnUgMg== -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:30 2025 by rpki-client