$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: zia83dGRsZzbJry+ZbggvvnffUKxUer5EDJbIRAm5DU= Subject key identifier: 3E:BC:52:A3:47:E2:B9:9F:6D:B0:BD:86:E0:F1:AD:33:93:B5:64:C8 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019A59AF2F89828029391BC3221ACF124713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1034 Signing time: Thu 06 Nov 2025 15:00:44 +0000 Manifest this update: Thu 06 Nov 2025 15:00:44 +0000 Manifest next update: Fri 07 Nov 2025 15:00:44 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: nSWrBPhyP92LgvAnonbCXJc/3bbDV3QqB05I94PrDa8=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Nov 2025 14:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:af:2f:89:82:80:29:39:1b:c3:22:1a:cf:12:47:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 6 15:00:44 2025 GMT Not After : Nov 7 15:00:44 2025 GMT Subject: CN=3ebc52a347e2b99f6db0bd86e0f1ad3393b564c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:71:eb:48:31:da:54:22:19:f4:64:62:a3: 22:ee:cc:be:35:5b:18:0b:90:9c:fd:6b:04:51:ab: 7d:be:82:aa:5a:11:90:ce:d8:5c:19:53:f2:7f:fb: 7b:97:a4:4b:a2:4c:2f:0c:4a:cc:01:83:bb:1f:22: d0:bc:f4:d4:3a:39:c4:48:75:6b:ea:4d:f2:20:91: cf:fb:9a:51:64:95:b4:90:94:6b:e1:ec:8c:ff:96: 1e:9a:63:a9:d6:23:f7:ec:38:81:5e:e3:b1:9d:a7: 24:1c:8f:97:1d:67:3c:bd:f4:cd:97:52:1f:06:1f: 58:03:52:b4:34:50:90:60:c5:9f:b4:79:6e:43:67: 32:c7:d3:52:9a:8f:eb:71:a9:07:c6:4d:ce:bc:0c: 62:66:45:dd:2b:e2:70:e0:96:21:b3:dd:34:a4:e6: b6:9f:99:2a:13:17:72:b8:91:ff:83:8b:57:83:19: bb:e5:72:c4:a7:39:64:10:e2:cc:b4:76:f4:cf:e7: f5:e8:cf:26:5a:27:ea:01:e3:46:d9:4c:22:b0:50: f2:c2:a2:7f:db:de:3b:51:14:00:99:ab:aa:57:e1: 91:cc:90:cc:97:c4:b7:f8:67:81:0c:0a:76:15:3b: f6:0b:f0:ad:3c:3b:f2:7f:5f:0c:91:93:a8:3d:c2: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BC:52:A3:47:E2:B9:9F:6D:B0:BD:86:E0:F1:AD:33:93:B5:64:C8 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b0:71:c8:25:7d:4d:f2:01:c5:4a:0c:eb:78:03:04:ce:f9: 61:48:5a:a3:d7:88:f7:e4:8d:18:95:36:9c:57:d7:a7:f2:82: fc:00:06:61:5e:fc:2a:c0:1f:05:38:92:91:96:5a:e9:0f:cb: 08:06:6b:bf:3b:18:4b:26:58:be:48:df:6d:81:eb:29:99:aa: 5f:26:cd:5a:dc:5d:3f:d9:db:48:b7:c5:04:c9:06:2f:df:fb: 8f:4b:80:0c:0b:a2:63:44:cf:32:ae:a9:d4:f2:fa:18:05:9f: 3d:33:55:de:7f:c0:8a:59:cf:dc:7e:20:f1:ce:0d:48:fd:3b: 46:93:97:b2:d2:46:c5:0f:24:58:40:59:56:eb:c5:df:25:84: 6d:ea:6d:c2:14:b7:f2:ca:d4:95:b6:ef:5a:5d:c3:a6:12:2a: 59:3a:68:24:3b:f6:e2:8c:d4:02:91:89:80:49:1b:0d:58:84: 73:ef:2c:a0:ff:45:e6:b7:12:8c:b4:86:a7:b6:4b:8a:95:32: 55:33:31:12:2b:68:19:76:15:1b:be:99:30:84:53:93:8d:ef: 6a:b9:8f:fd:06:5c:01:7b:83:7e:3c:5c:19:38:cb:53:7f:e1: 10:13:13:dd:9f:6a:e1:af:0e:49:21:d4:48:04:e3:27:be:31: f6:e1:eb:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpZry+JgoApORvDIhrPEkcTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTA2MTUwMDQ0WhcNMjUxMTA3MTUwMDQ0WjAzMTEwLwYDVQQD EygzZWJjNTJhMzQ3ZTJiOTlmNmRiMGJkODZlMGYxYWQzMzkzYjU2NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPJx60gx2lQiGfRkYqMi7sy+NVsY C5Cc/WsEUat9voKqWhGQzthcGVPyf/t7l6RLokwvDErMAYO7HyLQvPTUOjnESHVr 6k3yIJHP+5pRZJW0kJRr4eyM/5YemmOp1iP37DiBXuOxnackHI+XHWc8vfTNl1If Bh9YA1K0NFCQYMWftHluQ2cyx9NSmo/rcakHxk3OvAxiZkXdK+Jw4JYhs900pOa2 n5kqExdyuJH/g4tXgxm75XLEpzlkEOLMtHb0z+f16M8mWifqAeNG2UwisFDywqJ/ 2947URQAmauqV+GRzJDMl8S3+GeBDAp2FTv2C/CtPDvyf18MkZOoPcLNwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD68UqNH4rmfbbC9huDxrTOTtWTIMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLBxyCV9 TfIBxUoM63gDBM75YUhao9eI9+SNGJU2nFfXp/KC/AAGYV78KsAfBTiSkZZa6Q/L CAZrvzsYSyZYvkjfbYHrKZmqXybNWtxdP9nbSLfFBMkGL9/7j0uADAuiY0TPMq6p 1PL6GAWfPTNV3n/AilnP3H4g8c4NSP07RpOXstJGxQ8kWEBZVuvF3yWEbeptwhS3 8srUlbbvWl3DphIqWTpoJDv24ozUApGJgEkbDViEc+8soP9F5rcSjLSGp7ZLipUy VTMxEitoGXYVG76ZMIRTk43varmP/QZcAXuDfjxcGTjLU3/hEBMT3Z9q4a8OSSHU SATjJ74x9uHrCg== -----END CERTIFICATE-----Generated at Thu Nov 6 21:23:06 2025 by rpki-client