$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: PtbvIXCWOjCUYLBv4L4+9Vro10QiJoeVurDU0YbuH+4= Subject key identifier: FA:62:F6:41:04:D9:75:36:EF:0E:0A:F9:4C:40:29:8E:BC:2C:B2:F2 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019A04483DD5AC86244E46D41246BB691878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 128F Signing time: Tue 21 Oct 2025 01:00:34 +0000 Manifest this update: Tue 21 Oct 2025 01:00:34 +0000 Manifest next update: Wed 22 Oct 2025 01:00:34 +0000 Files and hashes: 1: 2SQkaDFiykw7S_htqTdZsioPTwk.roa (hash: 0/kTMk+D78c5iSsKz/EIBR+DNPDmk0IqhFjX+lwI6LU=) 2: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=) 3: 45MvjfGKCC1KtPdc7nQX95sIMOQ.roa (hash: OJaP8IeT3Uy1A2hRxBoDBgRDgpbDvNEt1ZVBIoH1VAY=) 4: 7jwxCTrpuBYCzl_mE2RCtp0REXI.roa (hash: +ypxyRmQFEVXeIrygXjJlGbbYxoSAkj90Kr5Ppz5cVM=) 5: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=) 6: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: MOVXjuKojaw4vDDjYWSJ2FSY1O9lt/q9POZNxvwryxw=) 7: JS4HdBrbtnwjf3ioeu2kVfrsKWk.roa (hash: af+hY4hrX5r9rr7bdbLVSaWMR8FkV862x0g+pEnOaKA=) 8: NSYavHGFkjW9fPOW1IOQ-kAXpiw.roa (hash: bIlwmcqM0xR+NaQTXsekU/G4W1PV6OipwVLIIvkpte8=) 9: Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa (hash: M6uYkLbVdZzoxMrzslJAyf+dKNKxxdwwoY8rXjymTu4=) 10: Q2qnyLydoV_350r3ktyvCayeB4A.roa (hash: VKvgtQJ7GEIFvBeuyv+3v21yRGy73uTpFRdHzIJJWeo=) 11: UzvoNIBCTayYuI6U30KDrmerNuU.roa (hash: ER4WPs+jwzqBTn7Puvn1t7r63jTe9VQjgZr+2QHU1CA=) 12: bZqocWZwcU5ZaTTgVW1c4s9fiMo.roa (hash: V7YCD7e4GhCq4YTEJi9oA8hOwYBama0jJDytOGcYv1s=) 13: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=) 14: cdQEhr1O999um7MubPp-AySW3SU.roa (hash: kCWL/fzpDob5h7QESa50Y8FlUEupbCUO8I1kcI0W7jU=) 15: cyBS3fAo042cEWYq-ULKBfWmEYM.roa (hash: lGLWllBey91le8GZeS3K6F+EddIaYMAhM6BNqVcxruc=) 16: d2saFw16q2pF84_wTXbcc05opu8.roa (hash: 6T9K5GUb3CGy353ct1WBRUSg3/QBMCyAGbgccVGZCpE=) 17: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=) 18: fwVrtZ5ukpHJADRQ973fQLlwSq8.roa (hash: +fmmqMgZKKsqId3qofqToV4Cyb2Bc8ldGVtgwbDXlj8=) 19: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=) 20: zjSnJ16XlThMIiYCj6tPC8TJXio.roa (hash: 9Ul7kI7iMdV1TfeZfTiKReJpCqvEcbTxXI+TPRkPGyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:48:3d:d5:ac:86:24:4e:46:d4:12:46:bb:69:18:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Oct 21 01:00:34 2025 GMT Not After : Oct 22 01:00:34 2025 GMT Subject: CN=fa62f64104d97536ef0e0af94c40298ebc2cb2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:3a:a9:7d:d9:a4:89:f9:6b:47:0d:5c:c4: c0:26:bf:3f:95:96:1d:93:39:82:83:c9:f0:a8:d3: b5:78:02:59:6a:91:20:3b:72:e3:7a:4b:10:48:2a: 1f:5c:ba:ca:75:53:26:10:60:e0:10:3b:09:87:97: cc:a6:79:30:ba:9a:e6:01:78:38:39:b6:20:3f:91: af:68:6d:d0:36:e9:20:79:2b:08:81:c3:0e:73:35: 9a:69:1a:f7:4d:da:31:0b:8a:6f:56:c1:43:23:1b: a9:08:bd:e5:5b:01:1d:75:10:ac:62:df:fa:48:c7: 1f:fb:e7:f7:5e:6f:97:42:2d:98:65:96:99:69:bc: 87:4e:3a:23:e7:16:47:60:18:3d:7d:10:c9:e1:a2: 25:b3:cb:9c:9a:00:87:bf:63:8a:fd:e8:8d:8a:db: 8e:54:e4:4c:fb:76:c9:1f:1a:12:3c:18:2c:bb:2b: fa:55:e9:ec:49:c5:79:51:f1:36:c7:e4:c2:bd:92: c9:71:70:09:93:3e:5a:96:4a:8e:eb:50:03:fa:2c: 31:19:ff:f3:b5:bb:aa:64:b2:35:87:3d:99:64:71: 99:86:36:d8:d8:cc:74:b3:64:ee:93:25:a0:83:7f: c4:f0:8d:35:ac:ad:f2:a2:b7:ab:0c:c8:8a:81:78: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:62:F6:41:04:D9:75:36:EF:0E:0A:F9:4C:40:29:8E:BC:2C:B2:F2 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a0:09:ae:b1:f0:6b:6e:fc:2f:a2:03:9e:59:b5:c4:b0:bd: b5:49:e9:fa:bb:f7:11:b8:b5:e8:87:57:16:03:b6:6f:17:cb: ce:66:47:37:8a:d4:b9:ed:ec:61:87:80:2c:a7:5c:98:9d:88: b5:13:4a:ca:0a:01:4b:dc:c4:af:90:c9:c0:ae:03:b5:bb:fb: 82:b8:e3:46:e3:fc:19:61:cf:3e:5f:e4:c2:b4:b4:4e:5e:e7: 7a:ff:85:68:90:51:d3:33:4e:a9:27:ed:07:7a:b9:25:6f:8d: d7:74:18:b5:f0:16:75:4e:91:3a:ea:fb:bc:ff:21:aa:df:07: ba:ec:81:04:26:5d:83:84:22:f8:f7:ce:43:93:ec:a1:13:33: ad:16:ee:8b:53:d6:3a:1e:43:ac:d7:20:35:c8:48:53:78:db: 91:fe:cb:7b:15:41:5c:4b:13:6e:1f:8e:66:51:1f:3d:c3:7e: 7d:7b:f6:c5:7d:0d:56:24:4b:c9:6f:e1:78:1d:4b:f8:a4:19: 4c:ae:a6:c0:aa:c6:f3:bc:9f:49:05:8e:68:63:66:63:3d:4c: 9c:28:23:66:28:1c:00:5d:83:60:c6:fd:bc:78:a1:aa:83:e6: cf:c6:f5:14:b1:75:6d:45:71:83:38:3e:8c:60:fd:3c:4f:1d: 60:19:54:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoESD3VrIYkTkbUEka7aRh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMDIxMDEwMDM0WhcNMjUxMDIyMDEwMDM0WjAzMTEwLwYDVQQD EyhmYTYyZjY0MTA0ZDk3NTM2ZWYwZTBhZjk0YzQwMjk4ZWJjMmNiMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yo6qX3ZpIn5a0cNXMTAJr8/lZYd kzmCg8nwqNO1eAJZapEgO3LjeksQSCofXLrKdVMmEGDgEDsJh5fMpnkwuprmAXg4 ObYgP5GvaG3QNukgeSsIgcMOczWaaRr3TdoxC4pvVsFDIxupCL3lWwEddRCsYt/6 SMcf++f3Xm+XQi2YZZaZabyHTjoj5xZHYBg9fRDJ4aIls8ucmgCHv2OK/eiNituO VORM+3bJHxoSPBgsuyv6VensScV5UfE2x+TCvZLJcXAJkz5alkqO61AD+iwxGf/z tbuqZLI1hz2ZZHGZhjbY2Mx0s2TukyWgg3/E8I01rK3yorerDMiKgXjHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpi9kEE2XU27w4K+UxAKY68LLLyMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6AJrrHw a278L6IDnlm1xLC9tUnp+rv3Ebi16IdXFgO2bxfLzmZHN4rUue3sYYeALKdcmJ2I tRNKygoBS9zEr5DJwK4Dtbv7grjjRuP8GWHPPl/kwrS0Tl7nev+FaJBR0zNOqSft B3q5JW+N13QYtfAWdU6ROur7vP8hqt8HuuyBBCZdg4Qi+PfOQ5PsoRMzrRbui1PW Oh5DrNcgNchIU3jbkf7LexVBXEsTbh+OZlEfPcN+fXv2xX0NViRLyW/heB1L+KQZ TK6mwKrG87yfSQWOaGNmYz1MnCgjZigcAF2DYMb9vHihqoPmz8b1FLF1bUVxgzg+ jGD9PE8dYBlUGQ== -----END CERTIFICATE-----Generated at Tue Oct 21 07:52:16 2025 by rpki-client