$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: oDOzPfDKMRCLh5PN5hXWr68f29jbLijgIqr75P8pJYs= Subject key identifier: F4:1E:FB:27:10:1E:EC:0D:B1:E6:94:0A:5B:B9:A2:E5:03:8E:C0:11 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019A27AFA07B6370BDF6EB4D78F8A6A895A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1702 Signing time: Mon 27 Oct 2025 22:00:12 +0000 Manifest this update: Mon 27 Oct 2025 22:00:12 +0000 Manifest next update: Tue 28 Oct 2025 22:00:12 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: M+TDEtoEdf0A9uSp/+ch36dxgP1jtTZjZVYla5CvuPk=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 21:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:27:af:a0:7b:63:70:bd:f6:eb:4d:78:f8:a6:a8:95:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Oct 27 22:00:12 2025 GMT Not After : Oct 28 22:00:12 2025 GMT Subject: CN=f41efb27101eec0db1e6940a5bb9a2e5038ec011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:0f:19:c4:2a:34:3d:c1:1b:b2:84:ac:6a: 63:6d:a4:0b:9b:83:df:a2:9f:bc:6c:8a:89:16:b9: 2a:1c:68:1c:0d:d5:71:76:eb:10:cf:dc:7b:5d:1c: 06:e8:8b:fd:d7:06:73:0f:5d:83:46:56:7e:f6:fa: 1d:c1:60:ef:2e:ab:06:cc:71:59:a0:36:f0:01:56: 96:bd:f8:0a:72:07:37:b2:e2:fe:27:85:ad:b7:25: db:3a:c1:74:83:47:37:bb:3c:84:43:7e:f2:cb:e0: 99:dc:e0:38:09:7b:4b:14:1a:ee:ad:8e:4b:c2:25: 7e:9e:98:01:7e:c0:1e:a2:32:0d:f4:14:4a:19:2f: 45:ab:c7:35:84:0c:58:9b:69:bc:af:47:3b:a2:f5: 6b:c6:3f:21:0c:32:cb:e4:d0:d8:79:4c:68:2e:07: e6:cc:77:69:83:ad:79:84:90:92:08:d6:6c:93:30: 20:b3:8b:1b:83:4e:26:4b:b4:32:09:c7:11:6d:3c: bf:a6:4e:59:aa:4c:ea:cd:cc:df:36:6e:8b:1a:25: 51:fb:93:ff:77:d6:e4:c3:17:22:b2:22:ba:9c:64: 0a:d8:4a:29:74:42:34:65:5d:4d:65:b4:f7:46:7c: d9:be:5f:46:83:66:17:5c:b6:a6:33:8c:14:97:13: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1E:FB:27:10:1E:EC:0D:B1:E6:94:0A:5B:B9:A2:E5:03:8E:C0:11 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:dd:cc:e6:da:98:f1:14:f8:58:04:99:64:ec:f7:7d:49:6e: 26:f8:21:bb:16:e5:07:18:2b:af:40:00:cc:4f:1f:c1:bc:03: 92:32:31:fc:19:b1:36:5f:14:fc:fb:4f:f2:8a:86:f1:b4:e7: 14:89:84:ac:63:fe:23:62:46:db:ab:85:2f:a8:fc:eb:83:e0: 28:39:4d:ae:2e:dd:d8:7d:f1:e1:fb:a1:a3:5a:64:4b:5d:e0: 4f:81:83:8b:2d:55:59:36:58:a7:b6:4b:94:2d:0f:8d:08:49: 7c:92:7b:bb:6d:43:aa:74:e4:2a:01:fa:aa:03:62:2f:bd:4b: b2:11:13:59:60:07:b1:b9:f6:99:23:48:db:be:f6:44:58:21: c5:74:f8:70:33:8e:97:d2:e7:a0:26:43:a3:76:ec:67:5e:82: e7:0e:92:23:1a:92:c9:17:53:2d:27:cd:25:ac:c8:fb:1d:4c: 3d:9d:60:6d:26:16:a2:ef:45:f0:e5:46:55:c1:b3:f9:c1:b4: 07:7e:c9:37:48:b6:ae:98:1e:b4:bc:b2:4d:f3:0a:8a:61:d0: 21:47:d9:fa:c6:2c:ac:58:d5:b6:a7:e9:f1:32:ec:22:a4:ed: 71:d2:3c:59:89:d8:e1:a1:9a:03:a2:a0:84:22:f1:ee:95:9f: ad:df:40:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZonr6B7Y3C99utNePimqJWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUxMDI3MjIwMDEyWhcNMjUxMDI4MjIwMDEyWjAzMTEwLwYDVQQD EyhmNDFlZmIyNzEwMWVlYzBkYjFlNjk0MGE1YmI5YTJlNTAzOGVjMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaAPGcQqND3BG7KErGpjbaQLm4Pf op+8bIqJFrkqHGgcDdVxdusQz9x7XRwG6Iv91wZzD12DRlZ+9vodwWDvLqsGzHFZ oDbwAVaWvfgKcgc3suL+J4WttyXbOsF0g0c3uzyEQ37yy+CZ3OA4CXtLFBrurY5L wiV+npgBfsAeojIN9BRKGS9Fq8c1hAxYm2m8r0c7ovVrxj8hDDLL5NDYeUxoLgfm zHdpg615hJCSCNZskzAgs4sbg04mS7QyCccRbTy/pk5ZqkzqzczfNm6LGiVR+5P/ d9bkwxcisiK6nGQK2EopdEI0ZV1NZbT3RnzZvl9Gg2YXXLamM4wUlxNqYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQe+ycQHuwNseaUClu5ouUDjsARMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ93M5tqY 8RT4WASZZOz3fUluJvghuxblBxgrr0AAzE8fwbwDkjIx/BmxNl8U/PtP8oqG8bTn FImErGP+I2JG26uFL6j864PgKDlNri7d2H3x4fuho1pkS13gT4GDiy1VWTZYp7ZL lC0PjQhJfJJ7u21DqnTkKgH6qgNiL71LshETWWAHsbn2mSNI2772RFghxXT4cDOO l9LnoCZDo3bsZ16C5w6SIxqSyRdTLSfNJazI+x1MPZ1gbSYWou9F8OVGVcGz+cG0 B37JN0i2rpgetLyyTfMKimHQIUfZ+sYsrFjVtqfp8TLsIqTtcdI8WYnY4aGaA6Kg hCLx7pWfrd9Abg== -----END CERTIFICATE-----Generated at Tue Oct 28 04:44:10 2025 by rpki-client