$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: Da5ustfM3nViFIcNtRXIDBtt2P7JwTxasK22ZM2cM3I= Subject key identifier: C0:32:DD:58:54:30:2E:D2:50:27:1C:42:20:13:A6:75:D5:5F:5C:21 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 0199F3553E4AC751EB5AE0E2E41DEF5C1265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0FFF Signing time: Fri 17 Oct 2025 18:01:13 +0000 Manifest this update: Fri 17 Oct 2025 18:01:13 +0000 Manifest next update: Sat 18 Oct 2025 18:01:13 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: QF25qJBgJ95JY+SZumtWageZvc4f6UShF+jUTiR0K+k=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Oct 2025 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:f3:55:3e:4a:c7:51:eb:5a:e0:e2:e4:1d:ef:5c:12:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Oct 17 18:01:13 2025 GMT Not After : Oct 18 18:01:13 2025 GMT Subject: CN=c032dd5854302ed250271c422013a675d55f5c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:51:4b:0c:39:09:15:0d:38:ec:a6:66:13: 28:7a:73:1a:e7:b3:f1:2b:b1:47:10:6e:9e:61:fe: 97:1c:50:a9:a2:f7:22:27:d2:1f:24:33:63:56:21: 74:54:02:5b:9f:33:64:f0:0a:22:e2:de:ba:f6:24: e7:aa:fd:29:33:46:38:f1:73:9b:98:84:00:ea:c6: 19:d6:39:62:bd:3a:c6:e5:5b:c6:78:58:cc:80:47: 08:24:c3:1b:86:9c:b8:9f:f3:b1:9f:0c:ac:ee:4c: 93:47:ef:3e:75:88:55:86:44:a4:2f:36:62:18:e2: 5e:59:bc:95:8e:46:78:59:e2:bb:83:bf:6c:e8:63: 04:5f:ed:58:85:d1:0a:0d:28:1a:32:ef:b5:5e:62: 17:d8:e5:75:4c:9b:f3:44:c2:62:80:65:e7:a6:6c: c6:95:ed:26:e6:38:c1:d7:c8:d0:06:d8:2b:4d:1a: e5:26:8f:78:75:ec:c9:ac:f0:44:4b:87:19:92:26: eb:14:61:e6:38:94:01:ac:72:29:a3:f1:05:73:e3: bd:1f:0b:ae:13:8b:6b:fe:0c:8e:ee:ea:37:c4:5d: 62:41:92:bc:61:bc:63:11:38:71:10:6d:df:95:9e: d0:cb:b9:50:7f:48:bc:2e:c5:8c:26:8c:c4:32:9a: 37:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:32:DD:58:54:30:2E:D2:50:27:1C:42:20:13:A6:75:D5:5F:5C:21 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b7:a5:39:47:fb:63:0e:9f:4c:3a:70:20:d2:18:cf:86:63: c5:28:1a:d8:37:1f:5b:ab:51:4a:50:6e:d0:ab:b5:fc:81:9e: 78:d1:d6:77:a7:8c:00:a1:f1:65:48:da:6b:47:9a:c4:59:03: a9:37:8a:be:a4:e2:a6:28:b5:ad:59:d1:68:8f:16:78:c9:bb: ee:ba:72:f6:5a:9c:b0:5a:6f:33:a3:05:cb:b2:5a:58:4c:74: dc:c7:e8:33:91:4f:67:eb:1a:05:0c:dd:8e:50:ef:ee:d9:8f: 02:70:3e:84:b0:cb:9a:7b:4e:ea:87:c8:b5:9b:5e:49:3e:94: b3:2d:3d:2e:80:6d:63:d1:6c:b0:d4:96:fd:6c:df:08:4a:f9: ed:9b:5a:d5:bb:c8:da:f0:df:db:69:c1:fd:f7:a7:26:9a:c6: 7d:4a:52:a9:5c:f9:81:29:d9:f2:e7:12:2f:1a:d2:a8:44:fa: 1f:e1:b2:0f:1a:41:53:28:e5:60:1a:85:de:22:ba:6a:85:f7: 2e:f4:50:82:11:19:2e:58:84:aa:e5:aa:a7:69:bc:ce:31:fc: 37:9f:d4:95:fb:c2:57:f4:15:3b:1d:ef:2f:ac:17:ca:95:ea: cc:78:e6:5f:41:ac:d3:aa:c7:12:cd:54:29:b0:8c:8e:e8:5d: 8d:36:71:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZnzVT5Kx1HrWuDi5B3vXBJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMDE3MTgwMTEzWhcNMjUxMDE4MTgwMTEzWjAzMTEwLwYDVQQD EyhjMDMyZGQ1ODU0MzAyZWQyNTAyNzFjNDIyMDEzYTY3NWQ1NWY1YzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V5RSww5CRUNOOymZhMoenMa57Px K7FHEG6eYf6XHFCpovciJ9IfJDNjViF0VAJbnzNk8Aoi4t669iTnqv0pM0Y48XOb mIQA6sYZ1jlivTrG5VvGeFjMgEcIJMMbhpy4n/Oxnwys7kyTR+8+dYhVhkSkLzZi GOJeWbyVjkZ4WeK7g79s6GMEX+1YhdEKDSgaMu+1XmIX2OV1TJvzRMJigGXnpmzG le0m5jjB18jQBtgrTRrlJo94dezJrPBES4cZkibrFGHmOJQBrHIpo/EFc+O9Hwuu E4tr/gyO7uo3xF1iQZK8YbxjEThxEG3flZ7Qy7lQf0i8LsWMJozEMpo3HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAy3VhUMC7SUCccQiATpnXVX1whMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbelOUf7 Yw6fTDpwINIYz4ZjxSga2DcfW6tRSlBu0Ku1/IGeeNHWd6eMAKHxZUjaa0eaxFkD qTeKvqTipii1rVnRaI8WeMm77rpy9lqcsFpvM6MFy7JaWEx03MfoM5FPZ+saBQzd jlDv7tmPAnA+hLDLmntO6ofItZteST6Usy09LoBtY9FssNSW/WzfCEr57Zta1bvI 2vDf22nB/fenJprGfUpSqVz5gSnZ8ucSLxrSqET6H+GyDxpBUyjlYBqF3iK6aoX3 LvRQghEZLliEquWqp2m8zjH8N5/UlfvCV/QVOx3vL6wXypXqzHjmX0Gs06rHEs1U KbCMjuhdjTZxYw== -----END CERTIFICATE-----Generated at Sat Oct 18 01:49:35 2025 by rpki-client