$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: r03u1l7U2HgP5s7SRdnKSexBiiXfVCZGPnphiobNnIQ= Subject key identifier: C7:C6:67:79:05:7A:92:22:BE:51:A4:C1:5C:96:22:6A:1E:8F:37:4A Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019A09DCAEEE51701DF565FCC61740962C7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 176C Signing time: Wed 22 Oct 2025 03:00:48 +0000 Manifest this update: Wed 22 Oct 2025 03:00:48 +0000 Manifest next update: Thu 23 Oct 2025 03:00:48 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: 4sX2OGt/avGi7mZFefxnnzygKQTFSi0uozS8pl3U/aw=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 8: DXXiRhf4GnY2ib21jziLkOnvPSM.roa (hash: bTa7YdOt3lnl13BNcTDROxgQi8JawDLMLWBKFJSSfdo=) 9: DckPkWZfljnAbQqV6SalR6Uqe94.roa (hash: ArN8TuTTCoe+jeefNsTkr92B/haNuKK1frU+GAU9yrI=) 10: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 11: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 12: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 13: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (hash: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=) 14: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 15: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 16: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 17: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 18: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 19: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 20: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 21: XqDDBjzRqksOqaLkNJqWqkX_q5g.roa (hash: 1giyN8jwNm42lrK4gv4g6LsRanOMpVhR/vHcE0ewcvw=) 22: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 23: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 24: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 25: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 26: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 27: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 28: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 29: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 30: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 31: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:09:dc:ae:ee:51:70:1d:f5:65:fc:c6:17:40:96:2c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Oct 22 03:00:48 2025 GMT Not After : Oct 23 03:00:48 2025 GMT Subject: CN=c7c66779057a9222be51a4c15c96226a1e8f374a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:6e:2e:4e:db:31:71:9b:41:21:eb:95:0e: 92:d8:b9:6e:a0:6b:5c:1b:4a:cc:c9:a5:38:fd:5f: f7:52:2f:d9:de:bb:2c:ea:e2:ef:cf:29:c0:5c:c4: ab:0e:a0:17:0d:22:6d:4e:07:42:d5:51:51:4f:c5: 4e:06:79:f9:2c:a6:05:51:df:79:b4:08:bf:7d:1d: e8:d3:3d:f7:1d:43:e3:cb:76:fa:3d:ce:db:00:17: 76:aa:ce:70:74:58:87:c3:9b:13:44:d7:03:92:2e: 44:43:6d:15:d4:a1:6f:20:88:d4:7a:b7:33:d4:2c: d7:a2:e5:e4:fe:56:57:4a:99:97:79:36:c9:3e:e9: 8d:80:9c:bf:15:43:9b:f1:7e:92:20:93:73:0f:52: b5:bd:32:4e:b1:af:50:7c:ac:0f:3a:8a:0c:e1:a6: ad:04:65:b3:60:89:32:40:79:2e:65:53:6d:27:06: 22:9c:49:3e:21:de:87:fe:ef:7a:13:cd:ce:72:80: ce:9e:fb:f1:70:2c:bd:26:03:21:34:13:f3:75:c7: 6d:43:14:98:67:75:ab:7b:03:5f:dc:42:21:0b:2d: 7e:0f:10:d2:0c:33:20:c7:19:a2:10:10:13:52:75: a4:96:69:61:ae:9b:fb:4c:10:6b:f5:81:de:3b:41: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C6:67:79:05:7A:92:22:BE:51:A4:C1:5C:96:22:6A:1E:8F:37:4A X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:91:68:9b:c5:d6:c9:9d:c2:0d:90:b0:13:a0:bf:46:ef:56: 3f:3a:bb:a8:8b:7b:86:e3:20:69:dd:a1:f2:3d:76:d1:71:1f: 59:86:32:1f:63:e4:a8:45:2e:b8:d2:c7:bb:cc:c1:9f:58:44: 77:26:fb:be:36:b2:a9:bf:9f:30:69:c2:f7:e8:7a:52:42:e2: 0a:ca:4a:ee:bc:bc:97:df:45:e1:c1:92:98:72:ff:cf:50:ea: 56:fa:e1:ca:92:4f:b5:11:fa:85:ed:1c:e1:02:4c:2e:de:6e: a8:51:00:8f:e7:00:8b:49:fd:0a:e8:4a:40:cc:7c:b7:9c:db: 22:4f:9f:df:93:fd:ae:17:7b:cc:54:94:0e:ca:b3:3b:6a:21: 15:e0:6e:6d:97:fd:f3:08:5d:3b:da:31:89:00:68:0a:e1:bd: ce:3f:d1:64:50:8b:09:7b:3e:69:56:03:89:54:01:48:0c:e2: 80:f7:a3:d2:23:37:51:5b:0b:89:af:9e:02:b5:f9:47:44:a3: 53:d1:62:27:9c:dc:44:72:96:4b:75:6d:83:bf:49:e5:7d:3f: 9a:2f:53:8c:ec:0c:09:bd:26:f5:0f:e2:78:47:bd:f0:33:26: 1d:8b:f8:67:ee:e5:93:f7:0e:58:5d:99:68:28:52:d6:00:52: ee:86:1d:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoJ3K7uUXAd9WX8xhdAlix8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMDIyMDMwMDQ4WhcNMjUxMDIzMDMwMDQ4WjAzMTEwLwYDVQQD EyhjN2M2Njc3OTA1N2E5MjIyYmU1MWE0YzE1Yzk2MjI2YTFlOGYzNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKZuLk7bMXGbQSHrlQ6S2LluoGtc G0rMyaU4/V/3Ui/Z3rss6uLvzynAXMSrDqAXDSJtTgdC1VFRT8VOBnn5LKYFUd95 tAi/fR3o0z33HUPjy3b6Pc7bABd2qs5wdFiHw5sTRNcDki5EQ20V1KFvIIjUercz 1CzXouXk/lZXSpmXeTbJPumNgJy/FUOb8X6SIJNzD1K1vTJOsa9QfKwPOooM4aat BGWzYIkyQHkuZVNtJwYinEk+Id6H/u96E83OcoDOnvvxcCy9JgMhNBPzdcdtQxSY Z3WrewNf3EIhCy1+DxDSDDMgxxmiEBATUnWklmlhrpv7TBBr9YHeO0HDlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfGZ3kFepIivlGkwVyWImoejzdKMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZFom8XW yZ3CDZCwE6C/Ru9WPzq7qIt7huMgad2h8j120XEfWYYyH2PkqEUuuNLHu8zBn1hE dyb7vjayqb+fMGnC9+h6UkLiCspK7ry8l99F4cGSmHL/z1DqVvrhypJPtRH6he0c 4QJMLt5uqFEAj+cAi0n9CuhKQMx8t5zbIk+f35P9rhd7zFSUDsqzO2ohFeBubZf9 8whdO9oxiQBoCuG9zj/RZFCLCXs+aVYDiVQBSAzigPej0iM3UVsLia+eArX5R0Sj U9FiJ5zcRHKWS3Vtg79J5X0/mi9TjOwMCb0m9Q/ieEe98DMmHYv4Z+7lk/cOWF2Z aChS1gBS7oYdyA== -----END CERTIFICATE-----Generated at Wed Oct 22 12:10:42 2025 by rpki-client