$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: FpHmKPz8K53XPngq7SYuN7LBUjnEO6S7OqLsHq5rSSo= Subject key identifier: 29:BB:F2:B9:08:89:28:C5:7F:D1:05:1B:4E:1B:E9:CB:EA:8A:3E:06 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019A7E60FC2FCDDD3E4148F817A575544AB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1047 Signing time: Thu 13 Nov 2025 18:01:16 +0000 Manifest this update: Thu 13 Nov 2025 18:01:16 +0000 Manifest next update: Fri 14 Nov 2025 18:01:16 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: ivgrti9qOyR3dpNncqnTtTfpt12phdvTj1ZEMgwL6eU=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Nov 2025 15:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:60:fc:2f:cd:dd:3e:41:48:f8:17:a5:75:54:4a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 13 18:01:16 2025 GMT Not After : Nov 14 18:01:16 2025 GMT Subject: CN=29bbf2b9088928c57fd1051b4e1be9cbea8a3e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:5d:17:90:78:91:8d:2e:6e:a4:3e:c5:91: ea:ff:12:32:74:23:f1:9a:55:fe:46:a9:04:38:f6: 39:8d:7c:ec:43:71:59:8a:6f:8a:e7:64:0a:a7:b4: 4b:d0:df:4b:14:62:5a:b6:27:b9:4b:5c:b2:02:36: 15:65:e3:90:cc:c9:e2:ba:6e:b4:b9:ff:40:5b:54: 60:6e:70:92:45:59:69:dd:99:a5:c0:c3:f5:1e:82: f5:41:2c:04:9e:c3:be:10:15:87:c2:66:9e:85:29: f7:af:4d:b0:c4:fd:0c:d9:eb:4a:7f:d1:35:b6:03: 59:99:ed:43:76:c9:4b:ce:c6:e0:b8:3f:6f:bc:d3: b7:e8:d0:6d:47:bf:72:c9:6d:c3:1d:9f:22:6f:99: 00:a8:0b:8f:73:b9:65:98:90:76:2b:e5:af:f3:4b: 54:70:98:94:72:67:cc:24:39:fb:49:31:da:e9:69: 17:f7:02:9a:fd:f2:a0:ee:aa:bb:c8:cb:15:81:8b: c3:dd:27:0e:ec:db:bc:0b:1f:44:0b:06:6a:3a:ca: bf:bf:38:46:f0:0c:f9:2d:0d:74:cd:c1:92:93:da: 9b:a8:2b:d7:ee:c2:e7:01:7f:73:f6:17:d9:0c:29: e8:86:e6:c4:b3:26:fc:0d:71:89:32:72:b4:c8:15: 87:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BB:F2:B9:08:89:28:C5:7F:D1:05:1B:4E:1B:E9:CB:EA:8A:3E:06 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e6:41:e1:a2:dd:ea:3a:ff:55:d5:c1:31:9a:e6:46:1a:c8: ba:ed:45:22:b2:15:53:25:9f:32:1a:80:0d:75:0a:4d:a7:05: e9:20:26:2b:d4:49:86:5a:42:88:01:0c:dc:7c:18:c2:21:c7: 35:47:e6:35:5a:5f:b6:b8:eb:94:c0:43:43:ea:ef:a8:1e:bf: 6f:99:6f:3c:65:b5:cb:84:37:64:0e:2a:73:01:0f:6f:83:91: 5d:3e:fb:0c:8b:7f:1b:e0:47:43:e8:e7:15:06:e3:70:90:61: c9:2c:12:f7:9c:9d:a6:3f:a8:27:72:db:97:75:d7:e2:8f:e1: ab:4e:9a:86:fe:e5:88:c5:57:9f:78:8b:14:0e:89:05:21:38: aa:71:37:67:d9:99:1d:d5:ba:c5:70:a4:54:ff:13:61:c5:f3: 21:b4:78:be:62:c0:e4:7f:88:7b:41:99:64:14:97:20:86:10: 0a:d3:a4:fc:e2:74:8d:f3:70:2f:92:41:91:1d:dd:d6:eb:54: 1c:cc:b4:12:ce:5d:45:9c:8b:99:ff:27:61:ec:b9:9f:76:b3: 2d:23:24:2c:18:72:46:9b:c1:06:a0:98:78:34:b0:e4:7a:a7: 13:f0:3c:7e:ee:ad:1d:c9:3e:83:bf:98:17:9e:a9:91:ec:47: 3f:4d:36:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp+YPwvzd0+QUj4F6V1VEqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTEzMTgwMTE2WhcNMjUxMTE0MTgwMTE2WjAzMTEwLwYDVQQD EygyOWJiZjJiOTA4ODkyOGM1N2ZkMTA1MWI0ZTFiZTljYmVhOGEzZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJtdF5B4kY0ubqQ+xZHq/xIydCPx mlX+RqkEOPY5jXzsQ3FZim+K52QKp7RL0N9LFGJatie5S1yyAjYVZeOQzMnium60 uf9AW1RgbnCSRVlp3ZmlwMP1HoL1QSwEnsO+EBWHwmaehSn3r02wxP0M2etKf9E1 tgNZme1DdslLzsbguD9vvNO36NBtR79yyW3DHZ8ib5kAqAuPc7llmJB2K+Wv80tU cJiUcmfMJDn7STHa6WkX9wKa/fKg7qq7yMsVgYvD3ScO7Nu8Cx9ECwZqOsq/vzhG 8Az5LQ10zcGSk9qbqCvX7sLnAX9z9hfZDCnohubEsyb8DXGJMnK0yBWHmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCm78rkIiSjFf9EFG04b6cvqij4GMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOZB4aLd 6jr/VdXBMZrmRhrIuu1FIrIVUyWfMhqADXUKTacF6SAmK9RJhlpCiAEM3HwYwiHH NUfmNVpftrjrlMBDQ+rvqB6/b5lvPGW1y4Q3ZA4qcwEPb4ORXT77DIt/G+BHQ+jn FQbjcJBhySwS95ydpj+oJ3Lbl3XX4o/hq06ahv7liMVXn3iLFA6JBSE4qnE3Z9mZ HdW6xXCkVP8TYcXzIbR4vmLA5H+Ie0GZZBSXIIYQCtOk/OJ0jfNwL5JBkR3d1utU HMy0Es5dRZyLmf8nYey5n3azLSMkLBhyRpvBBqCYeDSw5HqnE/A8fu6tHck+g7+Y F56pkexHP0025w== -----END CERTIFICATE-----Generated at Thu Nov 13 22:15:30 2025 by rpki-client