$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft File: tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json) Hash identifier: vdBwLO/J1Wg3VHw2muLw5z3rGbunsX7qfxXjfW2BITc= Subject key identifier: C8:DF:15:1E:23:6C:B1:BB:26:C4:F0:06:E9:86:3B:A8:A1:73:5A:22 Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 0199FFC8126EB1EDF2E3E76A02D4237BE395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft Manifest number: DA Signing time: Mon 20 Oct 2025 04:02:05 +0000 Manifest this update: Mon 20 Oct 2025 04:02:05 +0000 Manifest next update: Tue 21 Oct 2025 04:02:05 +0000 Files and hashes: 1: 4Vk4JEUOO7Z8F7RLvQIBiIwUlEI.roa (hash: rcW0o0NPhb5z9zMvMiuZsijCh+e9Jb8o7gbV3WSd0Yo=) 2: 5eOpZ_VbK_AsCtNFBwr6V5q25mA.roa (hash: /d2c751AjrNowXlWGm7ktfdmB8uq9hd//jNoOLsL47A=) 3: 9GbyiyLxtXV_BgJp4WTM5Fv9u7o.roa (hash: Oph3EY1I7qKANoza6w+PZiQdqIJHyMeGx03HDQGfB8E=) 4: J-BM_Ca54Ppe1TH_JAPmfmThPF8.roa (hash: 2hiZg6+oGhdSn69vdZDUaG+7SsG9WkxCcOP68C1coYw=) 5: JQHcV8OOuQy1QSZyp2cuqOKhFPY.roa (hash: aBTrfIT3ktKIIu+swwWMWw3Bg8+yjsrokXyn1wHp47Y=) 6: KS0evwzT0fKZKmO6x2f1TLJa10Q.roa (hash: QH1PZvfD6pJeC9AVUb3+wuoacHUFSdtLTDCGMZ5OfC8=) 7: MBeLFpwB8QjHf_N_IxAcOZ8IyuM.roa (hash: P6+QO6fgMYgkt8NQWFPGEIfzkGs7o3tSOrpCD+C2W5w=) 8: RKoG6yGzYUsbwzkvak0IDVmP8aI.roa (hash: NYzAPW/dpm/sRwQxxpLinnVE8uK7AfRUJKejz4Su0j8=) 9: Xh6fOuIqrHup_0uREFffoWmnBPM.roa (hash: VRFG28rlxAV4XGduEJBQ/BW/nmxOEOmyQM8JZVbblfI=) 10: YahDmohiSAbupO4pyQbF5JsUr_U.roa (hash: 7XssqAlsGbNOMEn1S3yiheROEDNC0UVbD5IP+8hqNdU=) 11: ZKrSVjIyp3c4vmsRta99lxJ1nWk.roa (hash: V86J8geSpEHBLLo/A/uTbJtr9YVbr3Cw49uNukpc0Ds=) 12: _p1bqdZFVV-yCNRgEU5D9s9zduA.roa (hash: ceBcN8Y3K7sjyx/xdHHBUfHwwn6/AgpxvZfQOED4K7s=) 13: fmg5GUDKj3L9SuYf_M-1A94BHqQ.roa (hash: 1LrtxsZqEizRlM+kerihrTQg03P7e3dIyw1N/Vnu3/Y=) 14: jiDJSvi9EqJddMvuoh8wcY-xXLI.roa (hash: Az6PcHeJNE/JDkLE74QtKZcLIoSRO07Ltp+s6SDMm7g=) 15: lIsU5M82Q_Q6z8rDWhFmVz7T4Ec.roa (hash: HB9E/o72V0zVeoUgJVG284a4pw9VdNVj0soXlhohpjM=) 16: nnRaPTdWT0I5mCAIv3uUnoBDHog.roa (hash: WHO0LN3x988yfZy6sulNPi/HXNoZ+/jemZUpVJlOqso=) 17: rkE_Cbmb1SKcOBIf1djdZGl-bYg.roa (hash: v+pd4dmoz8jOnZlQ7TRnQpQrIxQ0T2Ba231XJowrkiA=) 18: srVqEm74KpTVMl3qC8QeYm8ZOA4.roa (hash: eQXf7qYx6EafQLGPgfHgbR98ETU7M7ws9rJT2ka8KBc=) 19: tM10Pkad9yq5Hsv-cfqn34_LFRc.roa (hash: c2YwqEFmRVt/GP93CPEiCCw94qEe+FsD0C6QrcTdxKg=) 20: tuig2McYqtXX_-PGUedAeeH6Gc8.roa (hash: mNb7ugtDqM+5WQB4XF8NRapcLPX1pQXy2Ip8g/Fb0zE=) 21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: zzefrJMBwzTWaAA5IVzjubXZGKkODRv714HC8CPBC18=) 22: wjqbq6cegrBZnivnBbcWQDIwUA8.roa (hash: 7rSsH79YeiFL4Us+BpiHOVr7sYUtCYWM0OTojI6TbUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 04:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:c8:12:6e:b1:ed:f2:e3:e7:6a:02:d4:23:7b:e3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Oct 20 04:02:05 2025 GMT Not After : Oct 21 04:02:05 2025 GMT Subject: CN=c8df151e236cb1bb26c4f006e9863ba8a1735a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:e0:ab:c4:f6:0c:54:2a:5b:d6:31:3c:54: f4:9c:22:f5:ae:7c:7c:fa:ec:fa:f7:ef:85:86:11: 0f:f8:3f:b9:77:4c:d1:ef:db:7d:08:05:1a:f8:72: 4d:fe:5d:9b:47:01:23:5a:87:3b:c7:9d:7c:01:31: 70:8e:9a:b8:02:89:43:b8:aa:8f:f1:a5:a2:e1:ec: 3d:ea:35:22:1d:a9:9b:81:12:84:7d:40:e6:90:7e: 9e:53:ae:65:b0:90:a7:91:d9:4a:e3:69:9b:de:c9: d8:98:15:d9:18:fe:61:bd:00:74:20:cb:53:0d:f8: cf:3c:a4:1d:ed:b9:6a:45:ff:e0:d8:3d:d9:3e:6f: f8:f5:21:43:88:e8:4c:22:c6:6a:c3:8b:73:dd:f1: a4:7f:80:91:6f:d6:dc:c2:f6:09:c2:bb:ec:80:2e: 46:a4:5f:91:8d:b6:48:3d:c4:26:a7:dd:4c:b0:95: e4:1e:46:15:ab:dd:fe:32:16:ac:97:f4:f7:20:5a: a0:6b:a4:a2:35:58:e1:24:bf:4f:7f:e6:b0:8b:ec: b8:c9:ac:f6:1c:48:f4:8f:00:24:72:0d:77:0d:45: af:19:93:8c:ae:99:49:79:e7:c2:cd:00:50:9c:21: ff:dc:b5:2d:5b:fb:d2:99:47:a0:f5:39:de:5b:ad: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DF:15:1E:23:6C:B1:BB:26:C4:F0:06:E9:86:3B:A8:A1:73:5A:22 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:87:36:6d:3f:c1:d2:b2:24:c1:22:a7:b0:56:7b:8f:ec:e4: 6a:de:38:28:0e:bd:e4:eb:76:3c:ad:04:33:b5:53:34:a2:f3: ca:1d:84:96:1a:0e:65:50:76:b2:4a:ee:79:6d:f5:68:d8:e1: d5:21:48:ea:6e:7c:05:6c:5c:c9:60:4b:19:93:d7:da:b2:d0: c9:e2:17:d1:77:11:22:2e:bc:36:46:44:ec:f0:68:82:82:84: 51:ed:44:19:75:3a:45:72:74:51:4e:b9:fc:19:42:8c:3b:d7: 50:c9:e7:4d:b9:4c:98:25:ef:55:9b:99:0b:8b:11:0a:69:30: 1f:c2:d2:0d:b6:bf:8b:30:49:9b:3d:7b:95:96:f8:a3:0d:ad: f0:df:49:62:9c:6a:b5:03:d4:83:a2:1e:c1:cf:fc:dd:6d:b7: 6f:26:39:8c:8e:66:46:5e:ff:77:e6:6a:11:59:88:cb:f5:9e: 05:26:78:04:33:ee:0d:ab:24:c3:62:f1:e6:ea:16:ca:51:33: 7c:2c:bb:8d:ef:0b:7e:42:b2:6a:60:1b:f7:6b:12:e2:c4:db: 19:77:4c:c1:2d:a1:65:1a:22:ae:15:e6:49:d7:03:af:30:ff: 43:01:93:54:c2:9d:8e:84:0e:f6:b7:94:de:1f:9c:b6:5a:5b: ad:5c:28:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/yBJuse3y4+dqAtQje+OVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjUxMDIwMDQwMjA1WhcNMjUxMDIxMDQwMjA1WjAzMTEwLwYDVQQD EyhjOGRmMTUxZTIzNmNiMWJiMjZjNGYwMDZlOTg2M2JhOGExNzM1YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Lgq8T2DFQqW9YxPFT0nCL1rnx8 +uz69++FhhEP+D+5d0zR79t9CAUa+HJN/l2bRwEjWoc7x518ATFwjpq4AolDuKqP 8aWi4ew96jUiHambgRKEfUDmkH6eU65lsJCnkdlK42mb3snYmBXZGP5hvQB0IMtT DfjPPKQd7blqRf/g2D3ZPm/49SFDiOhMIsZqw4tz3fGkf4CRb9bcwvYJwrvsgC5G pF+RjbZIPcQmp91MsJXkHkYVq93+Mhasl/T3IFqga6SiNVjhJL9Pf+awi+y4yaz2 HEj0jwAkcg13DUWvGZOMrplJeefCzQBQnCH/3LUtW/vSmUeg9TneW63znQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjfFR4jbLG7JsTwBumGO6ihc1oiMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIc2bT/B 0rIkwSKnsFZ7j+zkat44KA695Ot2PK0EM7VTNKLzyh2ElhoOZVB2skrueW31aNjh 1SFI6m58BWxcyWBLGZPX2rLQyeIX0XcRIi68NkZE7PBogoKEUe1EGXU6RXJ0UU65 /BlCjDvXUMnnTblMmCXvVZuZC4sRCmkwH8LSDba/izBJmz17lZb4ow2t8N9JYpxq tQPUg6Iewc/83W23byY5jI5mRl7/d+ZqEVmIy/WeBSZ4BDPuDaskw2Lx5uoWylEz fCy7je8LfkKyamAb92sS4sTbGXdMwS2hZRoirhXmSdcDrzD/QwGTVMKdjoQO9reU 3h+ctlpbrVwoAw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:13:23 2025 by rpki-client