$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: CM9I2lCP5DxajOphypgXbYPowmHJaUUGmLTassto9LU= Subject key identifier: 5F:43:DE:1A:FB:99:0D:C7:59:66:AD:6B:F7:E8:32:D9:E8:18:01:58 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019A8DD42B62AB4EACB7313D8C0E88CC9DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 104F Signing time: Sun 16 Nov 2025 18:01:23 +0000 Manifest this update: Sun 16 Nov 2025 18:01:23 +0000 Manifest next update: Mon 17 Nov 2025 18:01:23 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 5jZ6Eilf08urKj9rxUByz4FsKOT1eUhnR3H8JsFsJ9w=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Nov 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8d:d4:2b:62:ab:4e:ac:b7:31:3d:8c:0e:88:cc:9d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Nov 16 18:01:23 2025 GMT Not After : Nov 17 18:01:23 2025 GMT Subject: CN=5f43de1afb990dc75966ad6bf7e832d9e8180158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:4b:66:b4:20:72:a0:f9:2c:92:08:21:79: 9e:56:91:24:fb:71:22:bc:73:34:11:2f:73:87:88: 74:8d:ba:46:32:51:d9:c7:97:29:c1:7d:de:a0:d5: b5:34:b8:e3:cc:b2:24:5c:4b:55:e6:7a:39:88:e6: 63:26:ed:42:16:3c:1c:fe:c8:32:e1:5b:8f:ed:d8: ea:df:23:27:4e:ca:be:e5:6e:ae:0d:4e:9d:df:3a: 52:ee:6c:fe:18:3f:72:12:ab:20:18:3b:ff:9a:7f: bc:46:ef:e4:f5:60:68:ae:c3:24:41:7d:3e:a9:35: 28:45:73:c2:3c:8a:af:d9:0e:cd:52:54:34:45:7d: ed:11:38:f8:14:33:be:8c:6d:b3:e0:d7:4e:ae:9e: ae:10:c1:bc:6e:b1:66:49:5e:d3:3e:c0:9d:ae:d2: bb:44:c2:a0:0e:f6:8e:90:b1:0d:fb:69:98:e8:43: 1f:db:e3:0c:0a:76:59:32:4f:e6:cc:25:86:c2:28: d6:cd:60:76:7e:04:b8:7a:2e:4d:88:dc:ab:05:13: 7a:c7:c1:23:9d:fe:77:aa:6c:1e:6b:61:44:91:a9: 79:d0:4b:ab:22:53:de:df:78:f2:c0:01:2f:ac:48: 7e:e6:f1:de:8f:ee:37:13:46:19:7c:15:61:5b:c0: 55:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:43:DE:1A:FB:99:0D:C7:59:66:AD:6B:F7:E8:32:D9:E8:18:01:58 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d5:6f:96:b1:88:fb:2d:f1:eb:ef:74:19:64:cd:31:b2:9d: 74:4c:73:29:63:ef:d7:08:7e:8a:04:e1:3b:de:d0:89:62:44: d6:0e:24:4f:21:cc:77:d8:ad:6d:38:33:bd:9b:2b:36:50:ef: 2e:c2:83:09:9e:d1:79:f6:c9:ab:03:3f:9c:c1:b6:2d:89:82: 10:79:2a:b5:a7:cf:c6:fd:cf:f8:da:2a:e3:d2:83:82:85:73: 12:5b:83:7a:e2:00:d3:31:f4:55:ad:e1:df:93:c1:90:a6:7a: c0:f8:cc:2f:07:d9:bd:6f:9d:74:bc:15:b1:a1:7d:d8:a7:e2: 76:0a:11:39:4e:8d:26:20:0e:56:be:0e:4a:c8:e8:d1:67:34: e0:7b:f0:0c:92:4a:bd:2c:f7:51:7f:98:61:23:74:88:6f:4f: ba:b9:7e:be:1c:c1:da:e9:d5:c4:ec:87:a2:a1:05:b6:d9:ff: 20:ff:28:b1:21:97:f2:7b:60:c6:74:69:8e:be:5a:79:c5:84: 39:5a:f5:aa:11:f5:3a:b5:b6:f2:ca:70:13:ed:15:fc:74:59: 64:05:ec:d6:3a:ff:a8:10:4f:76:e4:df:f8:68:40:eb:8a:fa: 43:05:a0:31:e6:d0:a0:ac:1f:25:e4:23:13:29:f7:75:35:dc: e0:79:86:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqN1Ctiq06stzE9jA6IzJ37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMTE2MTgwMTIzWhcNMjUxMTE3MTgwMTIzWjAzMTEwLwYDVQQD Eyg1ZjQzZGUxYWZiOTkwZGM3NTk2NmFkNmJmN2U4MzJkOWU4MTgwMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklRLZrQgcqD5LJIIIXmeVpEk+3Ei vHM0ES9zh4h0jbpGMlHZx5cpwX3eoNW1NLjjzLIkXEtV5no5iOZjJu1CFjwc/sgy 4VuP7djq3yMnTsq+5W6uDU6d3zpS7mz+GD9yEqsgGDv/mn+8Ru/k9WBorsMkQX0+ qTUoRXPCPIqv2Q7NUlQ0RX3tETj4FDO+jG2z4NdOrp6uEMG8brFmSV7TPsCdrtK7 RMKgDvaOkLEN+2mY6EMf2+MMCnZZMk/mzCWGwijWzWB2fgS4ei5NiNyrBRN6x8Ej nf53qmwea2FEkal50EurIlPe33jywAEvrEh+5vHej+43E0YZfBVhW8BVhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9D3hr7mQ3HWWata/foMtnoGAFYMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtVvlrGI +y3x6+90GWTNMbKddExzKWPv1wh+igThO97QiWJE1g4kTyHMd9itbTgzvZsrNlDv LsKDCZ7RefbJqwM/nMG2LYmCEHkqtafPxv3P+Noq49KDgoVzEluDeuIA0zH0Va3h 35PBkKZ6wPjMLwfZvW+ddLwVsaF92KfidgoROU6NJiAOVr4OSsjo0Wc04HvwDJJK vSz3UX+YYSN0iG9Purl+vhzB2unVxOyHoqEFttn/IP8osSGX8ntgxnRpjr5aecWE OVr1qhH1OrW28spwE+0V/HRZZAXs1jr/qBBPduTf+GhA64r6QwWgMebQoKwfJeQj Eyn3dTXc4HmGpw== -----END CERTIFICATE-----Generated at Sun Nov 16 22:48:40 2025 by rpki-client