$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: QesYsUp/gPFqSFvxIuxq7LzYYbth/bIRw8SOCjb4Hus= Subject key identifier: 7F:A8:DB:26:91:0E:60:6F:B9:C5:DD:B1:F5:3F:EC:09:A0:46:ED:53 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019A09A53FDDB62AFDE546BB5EBB34D75378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 1399 Signing time: Wed 22 Oct 2025 02:00:15 +0000 Manifest this update: Wed 22 Oct 2025 02:00:15 +0000 Manifest next update: Thu 23 Oct 2025 02:00:15 +0000 Files and hashes: 1: 1-DCahpulJuiQi8zdfIBNVSBP_a0.roa (hash: nTSeDU5/i/b0oztZzrG2CtOkwm9ZNipV4GkBR8TKl3w=) 2: 1-S5qpnBw1ylZG1spddvT9f57eco.roa (hash: maWJwVVWyYP373g2CIlTAWvamrZD0BLeDX8OlPQnHj0=) 3: 2e62pyAhQt2DxyPFxqODWQtQycw.roa (hash: 6QUHL09wvOyNqPTs2cgB2RoIpq+Ebpdxb1aI/fz0Ah0=) 4: 4HUEzjvO1URr-UPygZ4Bs6_KT9Q.roa (hash: 8gqeOkmM8zl20dUfCC3W3gzkl4K07sQTxtiB6AnAR2Q=) 5: 6QviIP7RKjJfXyJHP71i3FDYWL4.roa (hash: QwitosOHcwHPVpSg5VFkyXo/VZmtnyWUke/Nxvg71U0=) 6: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=) 7: 8rwWZi4spjQVqa4jtS9v8fqNE5I.roa (hash: mh6barGghhF0GUA74ZJ5iP4OJOtYcuU25+Ys7lgbD7E=) 8: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (hash: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=) 9: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=) 10: CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa (hash: 9jgYa3vRUAb8QbrmXxskhHH0R6D/iCZRnkTtWpWyrOU=) 11: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=) 12: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=) 13: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=) 14: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=) 15: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=) 16: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=) 17: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=) 18: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=) 19: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=) 20: W5sU-ZO6WBhRXGkiRRiQQs5_9rk.roa (hash: buoQ3JOzvBjf3H+zLixOxcXYRqSn97Vev1LEOeeiEno=) 21: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (hash: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=) 22: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=) 23: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=) 24: gdi_J_c0GtCc5x443kexg-b8wPs.roa (hash: Aw5kYwxs8AG4Z/q8iT+6fyl5oYGYb5LB9ortXvdtI9I=) 25: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=) 26: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=) 27: i7VszA84SZS6OuHdokjMypdaGJc.roa (hash: m3y569SYJ1HX7ytRuzexHPJwkziPyzH7M0vjR2GZNvA=) 28: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=) 29: m7lMiWju66nWi4ie7Vt74icILpg.roa (hash: x3s/oVaZakSkOMeloqbQaRy3FaKUq2eo4wHClY5zjYc=) 30: pWKwCP_lM1lV6k1_8iA6jNpjHqg.roa (hash: RStEnKPVfL8STTUgjI+bGS1TABSbUFHPohIVOs18xGk=) 31: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=) 32: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: YChn5zv2LV3loN5h8XbRI0wFH7BidUphrU9W5BLAikQ=) 33: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=) 34: wr8foz5Mir5CdXg4AJzu9v_vxAA.roa (hash: ixM1cMPLJGFu51fGqV4fl5yayoYnJRWGn/rjQ5uu5VM=) 35: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:09:a5:3f:dd:b6:2a:fd:e5:46:bb:5e:bb:34:d7:53:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Oct 22 02:00:15 2025 GMT Not After : Oct 23 02:00:15 2025 GMT Subject: CN=7fa8db26910e606fb9c5ddb1f53fec09a046ed53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:b0:11:2c:39:19:47:c8:f7:30:90:a7:de: bd:15:2e:f9:a5:4c:3c:c7:5b:51:1a:cf:e4:b5:88: 26:6b:40:65:56:7d:89:26:e5:a0:82:7c:d8:c0:8d: 33:90:65:09:e4:0b:51:8a:8f:5c:0a:25:a5:c2:9c: 94:3b:70:30:b3:72:4a:d2:2a:f5:7c:33:4d:24:67: 8e:e2:2d:ad:5b:0a:7a:44:86:05:5c:b3:1f:d7:d2: 97:e8:fc:09:48:c6:6f:b6:7f:8c:a9:ca:00:a6:99: c6:c6:72:d7:0e:ba:04:8c:c2:fa:f0:7a:e0:08:47: 43:bf:68:68:f2:c2:86:68:9a:73:fa:63:49:c2:44: c0:a7:6c:80:eb:95:38:9c:b6:33:87:a8:11:23:14: 89:73:d5:85:50:14:24:6e:74:03:03:37:bf:a1:56: 70:10:40:7a:72:6e:77:92:5d:85:10:3d:6a:a3:0c: d8:21:dc:7f:32:e9:8f:eb:cc:ba:d1:b5:1a:bc:07: 64:8c:16:35:2c:e5:b9:51:b9:d0:c6:b6:e6:5e:59: fa:a8:ac:34:51:c0:81:fb:73:98:00:cf:ff:18:43: 69:e8:76:a4:07:a2:68:d1:40:7b:85:b2:3e:1c:0b: b3:64:3a:0e:f0:d3:60:da:27:8d:4b:95:24:3d:7a: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A8:DB:26:91:0E:60:6F:B9:C5:DD:B1:F5:3F:EC:09:A0:46:ED:53 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2a:9e:93:cb:b0:f6:24:0b:ac:e0:9f:d9:84:1c:ed:47:fb: 7c:c6:8e:83:49:01:1e:53:14:c9:f8:d5:6e:b9:88:86:e9:d7: d6:9b:02:aa:f4:53:a3:79:48:b1:8c:9c:8a:f9:73:c9:ae:79: dd:42:96:2a:d5:65:22:c9:00:25:54:e4:4d:28:bd:a2:bc:2e: 73:7b:75:39:ce:e7:b2:f7:93:b6:73:1f:17:cd:b0:d9:90:03: 6b:c9:6f:1e:40:a5:4c:ba:e4:bc:72:5d:bf:b9:1a:1e:e8:f0: 2d:0f:0b:cf:1e:ec:21:25:4f:a7:26:03:95:dc:9f:f0:45:d8: 24:71:5d:cd:dc:4b:c7:dd:24:49:12:61:c8:77:10:ce:71:51: 69:59:e0:20:44:63:7f:52:17:07:17:7a:3a:17:08:78:8e:1b: 6b:32:6b:98:03:76:77:e4:29:9c:00:08:af:22:c6:e6:5b:93: 08:90:76:75:e1:35:76:78:68:1e:4f:f9:33:d8:02:85:61:e2: da:14:d6:57:2b:f8:69:d8:03:6a:0c:b5:30:fe:1e:68:40:b5: 95:2c:8c:12:d9:60:c3:08:b9:00:e5:90:f2:1f:17:9b:01:3e: f9:61:5e:d5:06:9d:a8:0f:ea:6d:b1:4a:e0:bb:ec:e5:fe:ca: 04:73:ff:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoJpT/dtir95Ua7Xrs011N4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMDIyMDIwMDE1WhcNMjUxMDIzMDIwMDE1WjAzMTEwLwYDVQQD Eyg3ZmE4ZGIyNjkxMGU2MDZmYjljNWRkYjFmNTNmZWMwOWEwNDZlZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWmwESw5GUfI9zCQp969FS75pUw8 x1tRGs/ktYgma0BlVn2JJuWggnzYwI0zkGUJ5AtRio9cCiWlwpyUO3Aws3JK0ir1 fDNNJGeO4i2tWwp6RIYFXLMf19KX6PwJSMZvtn+MqcoAppnGxnLXDroEjML68Hrg CEdDv2ho8sKGaJpz+mNJwkTAp2yA65U4nLYzh6gRIxSJc9WFUBQkbnQDAze/oVZw EEB6cm53kl2FED1qowzYIdx/MumP68y60bUavAdkjBY1LOW5UbnQxrbmXln6qKw0 UcCB+3OYAM//GENp6HakB6Jo0UB7hbI+HAuzZDoO8NNg2ieNS5UkPXrBEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+o2yaRDmBvucXdsfU/7AmgRu1TMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSqek8uw 9iQLrOCf2YQc7Uf7fMaOg0kBHlMUyfjVbrmIhunX1psCqvRTo3lIsYycivlzya55 3UKWKtVlIskAJVTkTSi9orwuc3t1Oc7nsveTtnMfF82w2ZADa8lvHkClTLrkvHJd v7kaHujwLQ8Lzx7sISVPpyYDldyf8EXYJHFdzdxLx90kSRJhyHcQznFRaVngIERj f1IXBxd6OhcIeI4bazJrmAN2d+QpnAAIryLG5luTCJB2deE1dnhoHk/5M9gChWHi 2hTWVyv4adgDagy1MP4eaEC1lSyMEtlgwwi5AOWQ8h8XmwE++WFe1QadqA/qbbFK 4Lvs5f7KBHP/JA== -----END CERTIFICATE-----Generated at Wed Oct 22 07:13:56 2025 by rpki-client