$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: Wj4v3X8VBYC47cVtZUiJsk4zGUs4qQ9JW+7t2IkeVy4= Subject key identifier: 4E:5B:19:92:23:49:7E:BB:A7:D3:64:16:8D:B2:8D:40:6E:90:6D:86 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019A51875875B80A9D2FB340561C9CFD8012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 176B Signing time: Wed 05 Nov 2025 01:00:15 +0000 Manifest this update: Wed 05 Nov 2025 01:00:15 +0000 Manifest next update: Thu 06 Nov 2025 01:00:15 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 4YpVbO9HFvvq74shOPQXNaG5KS0.roa (hash: bVpCtuoPNa1SZMwszxLRHo7H9I6mu3GeU6NgJiv+OkM=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 7: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 8: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 9: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: ieXQVHU+mLJ0D/K3Prr14x9gw/Cf3UyEnBD89jkGbBY=) 11: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 12: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 13: kJYpVxtVyfv4dwbVg4WNh0NM0_w.roa (hash: wZE3vmAhLe9i25qjRpSrq5TNgZ7FBQQ+/m7aI5d1gmY=) 14: lSE1obQ59T94JWyP17qNbBJ8Mi4.roa (hash: //1SxIcij8D7RTJOSo9c6uRC0w9XN7/ELpwWy3gm8m8=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:87:58:75:b8:0a:9d:2f:b3:40:56:1c:9c:fd:80:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Nov 5 01:00:15 2025 GMT Not After : Nov 6 01:00:15 2025 GMT Subject: CN=4e5b199223497ebba7d364168db28d406e906d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:ac:71:36:da:0a:9d:f0:fc:f8:5c:be:1f: d5:a4:59:b8:f0:6e:c2:24:f6:fe:0a:4b:cd:e8:61: 9b:c8:e6:49:99:d6:d9:cc:ba:5a:71:80:1a:d1:5c: 36:2d:63:46:a6:6e:2d:ef:e6:6f:19:cc:3f:10:77: b2:2e:9d:7e:71:f7:2d:f5:18:a1:f1:88:46:c1:e7: 02:99:e7:87:ce:5c:dc:5f:c2:d9:6d:21:e8:76:e0: c0:5e:0d:ee:76:9c:62:47:9f:fc:b9:c5:8d:0c:e7: 58:21:4f:1a:b2:b0:fa:16:67:af:0f:79:38:89:f4: cf:47:ca:97:13:b5:97:6a:e7:65:2f:49:15:03:25: 63:d6:fe:34:ad:ea:52:8e:db:59:d5:b6:be:80:cc: 05:ca:4b:1f:b7:d7:0d:74:ce:44:4d:34:70:66:af: 3a:80:ba:aa:cd:7d:0a:15:a4:b3:9d:bd:e4:7d:67: 9d:ce:0e:49:dd:f0:90:e5:c6:35:e7:55:24:a7:e6: 12:83:f0:f1:3f:4b:d3:74:dc:64:57:6c:b1:55:19: d9:61:a0:dc:31:98:7d:ee:ab:dc:e1:1d:db:bd:d3: 68:3e:8d:f4:17:82:41:37:22:be:5c:d6:e5:8e:3e: e4:6e:3c:e9:52:2d:a3:2d:58:9f:2f:83:f9:31:fa: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5B:19:92:23:49:7E:BB:A7:D3:64:16:8D:B2:8D:40:6E:90:6D:86 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b5:79:8c:0b:9e:1c:4e:7a:7d:ea:a4:bc:31:de:3c:43:ba: 99:b9:48:16:91:4b:2c:2a:44:18:2e:0f:d9:fe:93:d9:96:a3: c5:02:91:86:37:eb:28:dd:1c:dd:eb:a8:d0:67:6c:1e:0f:49: 64:fc:11:db:ef:af:a0:9d:69:06:bc:83:95:43:b8:6e:4b:79: 49:06:67:ed:6f:cd:e7:98:88:02:cb:40:71:3c:b2:17:57:1b: 23:80:4a:55:c0:96:92:08:cd:05:85:e1:4d:9f:ca:9d:0b:95: 42:fc:94:7d:58:1a:53:92:95:2c:0b:47:12:c1:7e:f0:95:7f: 3c:34:b6:59:97:fd:5e:9c:0f:26:5f:bc:cc:9a:fa:73:cf:b2: 62:e8:33:35:fc:30:3f:14:2a:1c:9a:17:99:9f:03:f0:f3:74: 92:a9:2b:90:a2:90:ba:f4:fd:a3:78:95:43:49:2d:42:06:f2: 5d:07:f5:4b:c0:55:e3:29:ae:94:2d:da:8e:28:7a:2b:24:5f: bd:c4:4c:ff:28:2e:0b:d7:70:e0:40:12:32:20:51:19:de:b6: 35:5f:c2:cc:47:53:f0:c5:da:57:15:bc:24:15:8a:bd:9c:fa: 05:c0:7c:1f:a0:74:e4:af:05:c2:d3:ef:a1:9d:5c:15:96:a9: 9d:25:0f:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRh1h1uAqdL7NAVhyc/YASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUxMTA1MDEwMDE1WhcNMjUxMTA2MDEwMDE1WjAzMTEwLwYDVQQD Eyg0ZTViMTk5MjIzNDk3ZWJiYTdkMzY0MTY4ZGIyOGQ0MDZlOTA2ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d+scTbaCp3w/Phcvh/VpFm48G7C JPb+CkvN6GGbyOZJmdbZzLpacYAa0Vw2LWNGpm4t7+ZvGcw/EHeyLp1+cfct9Rih 8YhGwecCmeeHzlzcX8LZbSHoduDAXg3udpxiR5/8ucWNDOdYIU8asrD6FmevD3k4 ifTPR8qXE7WXaudlL0kVAyVj1v40repSjttZ1ba+gMwFyksft9cNdM5ETTRwZq86 gLqqzX0KFaSznb3kfWedzg5J3fCQ5cY151Ukp+YSg/DxP0vTdNxkV2yxVRnZYaDc MZh97qvc4R3bvdNoPo30F4JBNyK+XNbljj7kbjzpUi2jLVifL4P5MfrzjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5bGZIjSX67p9NkFo2yjUBukG2GMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbV5jAue HE56feqkvDHePEO6mblIFpFLLCpEGC4P2f6T2ZajxQKRhjfrKN0c3euo0GdsHg9J ZPwR2++voJ1pBryDlUO4bkt5SQZn7W/N55iIAstAcTyyF1cbI4BKVcCWkgjNBYXh TZ/KnQuVQvyUfVgaU5KVLAtHEsF+8JV/PDS2WZf9XpwPJl+8zJr6c8+yYugzNfww PxQqHJoXmZ8D8PN0kqkrkKKQuvT9o3iVQ0ktQgbyXQf1S8BV4ymulC3ajih6KyRf vcRM/yguC9dw4EASMiBRGd62NV/CzEdT8MXaVxW8JBWKvZz6BcB8H6B05K8FwtPv oZ1cFZapnSUPhw== -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:15 2025 by rpki-client