$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft File: 5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json) Hash identifier: Jfki0pBReMVAgBDlMbyvu0QvTN0rA1Ps2vXO2kMRQhk= Subject key identifier: 2C:3F:A5:13:78:4D:07:85:DF:0E:64:F9:0F:15:5E:ED:4D:D0:D6:B8 Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019A2B8CB3AB48C3B6A791C2F2DED542688F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft Manifest number: 1714 Signing time: Tue 28 Oct 2025 16:00:32 +0000 Manifest this update: Tue 28 Oct 2025 16:00:32 +0000 Manifest next update: Wed 29 Oct 2025 16:00:32 +0000 Files and hashes: 1: 01g5y437H2m0RBS60K8v_5CH25Y.roa (hash: 6whrCWSU/OFo5FWbCgWTtdfsQVzcFfU3y10vUs1oFTE=) 2: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (hash: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=) 3: 1-U546Wnv3X2dlqBwiPgmgD5rG0Q.roa (hash: UYLMoDLmtnbaqveYEw4e1FYtKG5Xz2eS50cYOB7habA=) 4: 1BsLjyLGR7fVTKId14K_LDmFaOE.roa (hash: psSOJBHeT4i88iWFESSWMgqzZaf6jPzMO0pv5q33yJ4=) 5: 4wlDChlgzrgFapvpBy46MAFlefc.roa (hash: EYqlVV6MH4EbjLdFRd/br9sG35MzdZTRrWmN3sTJ6/Y=) 6: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: 0BE5BRH8SAnZLlFQk+2obOipgiPdQGnKMVoe6Qno97E=) 7: A-Fkuj2Ry_3wy9lszQO5iFmpTsM.roa (hash: MqXfL/IjblbyaoanvxCZ0s6/syF5tUBaoXoKEYvO5Ck=) 8: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (hash: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=) 9: GEAO-RpDOblA62IXyDgWLKyaZE4.roa (hash: B/mmE5K4Y0+TtLR8pgvUmngTm+hQZlJcszavfMaBB+I=) 10: NFK0Hjvsp_Sq78uC-zn-OtIs2io.roa (hash: RkRZ6SorlL5rZdfTuNFGZoclIhB5xyBOn5s6WMdE+L4=) 11: QmD1NuxNLYfmzuhbCU_99CJ-o-k.roa (hash: ugpwTRCdEyAoIefE/m+oUbM/pJjpH0ikF/U5tO+O/jM=) 12: Sn5j9mrsDzCn0e9SdfxRYinpue4.roa (hash: Pmm/ivnYdFW6uuCjzZHPDQpUkRs+mtt6nnTRFq0BYj0=) 13: TtR0csYqYQUGmaJtYJ6I1Sb4jtA.roa (hash: /RrNIRwEKfIWdjBmKgKNDu3bdN5NswYfyOudqPj07dM=) 14: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (hash: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=) 15: cKTcZs-U_VD8X5oF6KYi9vL_XPY.roa (hash: Ojplqzn5+rFkagKqgJjGg7MR261z7vGOzqJ6p2GYag4=) 16: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (hash: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=) 17: lM1B4eqvI9WRB2F5MltXjXFSUNw.roa (hash: AbZgfqJhiLBwdICwkR/kGfMSad6ug4enx96U2XP1Fgk=) 18: mza84PKMv0aUDroEfzQZip-9Um8.roa (hash: xfLnRg1sIPVix0oNDyz6FdqLtVqmjxCCvOykxKOTB0s=) 19: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (hash: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=) 20: ujwUfZi-j2E7tiXxuxPwDEMg9Do.roa (hash: ZVTJzzTXgsjt6o/MwKVQt8mq4QnG+HkM2MYUgIyYqIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2b:8c:b3:ab:48:c3:b6:a7:91:c2:f2:de:d5:42:68:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Oct 28 16:00:32 2025 GMT Not After : Oct 29 16:00:32 2025 GMT Subject: CN=2c3fa513784d0785df0e64f90f155eed4dd0d6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:40:e6:f0:50:50:a9:32:54:fd:a7:7f:b0: f7:09:fd:ce:d7:2a:01:b6:0f:56:16:c3:f5:05:89: 7d:23:42:db:28:62:71:e9:ab:2a:fe:b2:f0:f5:69: 8c:7f:b8:bf:54:f2:04:bd:58:3f:56:c4:1c:2a:a8: 72:7a:27:74:ba:7f:19:ca:94:f5:9a:41:6c:71:a4: 51:76:ca:5c:76:f2:0d:97:ae:e9:75:b7:3f:1a:e5: 6b:1e:2e:31:d5:24:ab:81:68:a1:c2:4f:92:f5:62: f4:8d:54:e1:f4:3e:27:42:e7:c4:ba:0a:cd:f4:36: 1a:5d:c6:3d:12:38:4b:b5:55:cc:18:8e:c2:8c:e7: 04:bb:1d:8e:55:dd:28:2f:2d:bf:cc:56:13:c5:a0: a9:f0:f0:cc:b1:b8:15:10:5b:3e:b0:33:dd:33:d0: fc:21:f3:91:4e:d6:7d:a8:47:38:be:76:9b:2e:99: 53:44:85:76:77:f7:56:f2:21:78:b7:fc:89:e4:6b: 32:db:70:57:ed:12:ee:9b:c3:48:cd:cb:06:77:f0: 0e:95:1d:46:92:18:ca:57:26:b3:f2:11:4a:9d:c0: 33:13:ec:3d:53:e7:9b:dc:03:91:29:7a:30:66:f1: e4:0c:81:41:2c:a6:eb:cd:1e:82:08:67:63:3c:6a: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3F:A5:13:78:4D:07:85:DF:0E:64:F9:0F:15:5E:ED:4D:D0:D6:B8 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9a:c4:81:49:5f:2e:e7:df:29:ca:bd:bf:01:fa:3f:44:3c: 7c:df:9b:e4:e0:84:1e:d9:b6:02:ad:38:6c:c2:b1:e9:7f:73: 5f:f0:37:a2:c9:80:70:91:3f:3d:0d:90:ac:03:0f:21:36:92: 98:6e:7b:f1:35:36:c2:f3:94:ec:1f:99:86:eb:22:e9:2e:df: 8b:ac:22:77:ed:0c:9d:fa:05:0e:3f:7a:43:e1:37:6b:62:98: 08:5c:7d:3b:ff:13:12:1b:2e:8e:ff:3a:b7:06:df:8d:8d:6c: ae:cb:2b:1d:94:8c:4e:6f:af:30:3c:9c:82:0e:77:a0:72:b5: 6e:fa:1f:81:bf:18:2e:dd:d0:f1:09:4b:67:15:0c:e1:7d:a6: 6c:16:b2:40:b8:c0:f4:e4:62:63:43:1b:5a:9d:53:9a:6d:85: e9:48:f4:35:78:18:4f:78:51:46:e0:94:2b:cb:a0:85:d2:63: 9a:67:97:b6:ca:22:17:7d:21:82:86:04:02:40:95:06:cc:21: 36:dc:d7:77:11:3a:bf:9a:dd:a5:e9:ff:ea:b7:66:01:c2:d8: d8:d8:67:d2:97:e6:22:3b:29:44:84:7e:9c:b5:7d:e8:23:77: c6:4a:78:40:b5:34:be:c9:c1:b3:6e:f6:9a:da:3b:71:15:43: 6c:5c:5a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZorjLOrSMO2p5HC8t7VQmiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjUxMDI4MTYwMDMyWhcNMjUxMDI5MTYwMDMyWjAzMTEwLwYDVQQD EygyYzNmYTUxMzc4NGQwNzg1ZGYwZTY0ZjkwZjE1NWVlZDRkZDBkNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZFA5vBQUKkyVP2nf7D3Cf3O1yoB tg9WFsP1BYl9I0LbKGJx6asq/rLw9WmMf7i/VPIEvVg/VsQcKqhyeid0un8ZypT1 mkFscaRRdspcdvINl67pdbc/GuVrHi4x1SSrgWihwk+S9WL0jVTh9D4nQufEugrN 9DYaXcY9EjhLtVXMGI7CjOcEux2OVd0oLy2/zFYTxaCp8PDMsbgVEFs+sDPdM9D8 IfORTtZ9qEc4vnabLplTRIV2d/dW8iF4t/yJ5Gsy23BX7RLum8NIzcsGd/AOlR1G khjKVyaz8hFKncAzE+w9U+eb3AORKXowZvHkDIFBLKbrzR6CCGdjPGqiewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw/pRN4TQeF3w5k+Q8VXu1N0Na4MB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaprEgUlf LuffKcq9vwH6P0Q8fN+b5OCEHtm2Aq04bMKx6X9zX/A3osmAcJE/PQ2QrAMPITaS mG578TU2wvOU7B+Zhusi6S7fi6wid+0MnfoFDj96Q+E3a2KYCFx9O/8TEhsujv86 twbfjY1srssrHZSMTm+vMDycgg53oHK1bvofgb8YLt3Q8QlLZxUM4X2mbBayQLjA 9ORiY0MbWp1Tmm2F6Uj0NXgYT3hRRuCUK8ughdJjmmeXtsoiF30hgoYEAkCVBswh NtzXdxE6v5rdpen/6rdmAcLY2Nhn0pfmIjspRIR+nLV96CN3xkp4QLU0vsnBs272 mto7cRVDbFxaxQ== -----END CERTIFICATE-----Generated at Tue Oct 28 21:50:26 2025 by rpki-client