$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: 2Wd+Fy14/4nsTnszXtJrZwTD/CpLZKAx+NeKzBp93VU= Subject key identifier: 40:F3:97:79:AC:F6:A9:C1:90:4B:1C:13:07:D0:96:D2:C0:BC:F9:54 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019A0AEF5CAB264550A1D5C09F3939A15663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0D58 Signing time: Wed 22 Oct 2025 08:00:50 +0000 Manifest this update: Wed 22 Oct 2025 08:00:50 +0000 Manifest next update: Thu 23 Oct 2025 08:00:50 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 80WC0WqP1t9PzxhBKhAFkcZqf1I.roa (hash: UwkQHVIknQbR2ZUXNL3+lgAOmSDcXEXHci6JqknMhb4=) 5: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 6: DDFDdL4wIG-xoeAynt1YMKtbfho.roa (hash: iGAUYDIlZc13eU1AIjcX3CLjQZ/Wgbfnl/75KPHzqCA=) 7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: Og7ZLCv6OzJ9/of4gHXJRObj44duuKe2OzrVbe70dtE=) 8: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 9: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 10: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 11: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 12: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 13: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 14: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 15: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 16: cQbzTwAiOsuLmS8yMnawGgo51Ps.roa (hash: btxyyqBZ8nyik4l7LMQMxSprq0qm/QjygLtxi11EF/E=) 17: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 18: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 19: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 20: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 21: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 22: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 23: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 24: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 25: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 26: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 27: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0a:ef:5c:ab:26:45:50:a1:d5:c0:9f:39:39:a1:56:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Oct 22 08:00:50 2025 GMT Not After : Oct 23 08:00:50 2025 GMT Subject: CN=40f39779acf6a9c1904b1c1307d096d2c0bcf954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:a2:10:a8:18:7b:05:6b:de:d6:9c:c4:05: 64:42:b5:32:9d:cc:0c:da:09:6c:56:f8:01:f2:29: 95:e0:85:b7:c9:a4:0a:b2:67:24:e5:00:0f:06:f8: 72:6e:c8:54:b1:77:7d:62:4e:9f:59:f6:b1:c9:d6: 99:ca:30:8c:8c:47:b3:b7:48:0f:c9:93:e4:20:d7: 05:de:88:2b:e3:f8:5d:fe:d4:9a:e0:1f:8f:1f:67: 83:09:c7:dc:ae:49:f5:bd:1b:4c:ae:5d:05:23:d5: 13:1a:cf:85:56:28:8d:e3:84:6b:4b:eb:53:b7:c1: 90:e3:bd:34:0b:f8:74:ac:ea:56:14:9f:e7:7a:92: f3:8b:d4:19:ce:37:f1:ef:b0:da:02:47:af:6b:d9: 63:36:64:31:47:30:e7:08:7a:8c:f8:c6:71:98:79: 65:ca:02:82:bb:6d:d3:7a:4e:f3:32:ad:ea:e2:16: 0f:b8:b7:b6:ff:ca:78:10:41:13:d8:2d:41:38:18: 6b:2b:fa:ad:d6:d0:cd:69:e9:d6:98:62:ce:1d:da: 6f:89:7b:af:f4:39:c4:b5:a8:4a:4b:37:53:e2:aa: 51:b9:30:45:78:db:1b:9e:e3:81:36:96:d0:e8:67: d5:bc:6c:16:52:64:c4:b4:a6:96:46:e0:06:b4:39: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F3:97:79:AC:F6:A9:C1:90:4B:1C:13:07:D0:96:D2:C0:BC:F9:54 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c4:06:60:f2:54:9d:7f:ff:be:1e:f3:1d:9f:2b:ba:aa:ad: 31:a5:aa:fc:fc:30:ed:ef:c7:da:36:30:9d:bc:0e:00:8f:2a: 96:e5:57:d8:40:34:41:66:02:c5:86:67:99:20:4b:87:44:b3: 02:d4:d8:67:60:a9:e4:b1:2e:c7:ff:34:a1:4a:08:e2:39:01: 1a:f2:68:e4:4f:cc:c2:d0:2f:30:97:09:0b:43:fd:35:ac:9f: ef:bc:25:d4:4b:c4:b2:c6:e3:9c:b9:98:eb:20:4e:0a:75:a7: 3f:f5:10:3c:e7:e5:58:0e:09:b5:a1:6d:6c:3f:22:99:87:4d: a9:e5:c2:08:33:80:4a:12:b0:0e:2b:50:51:51:c7:98:7e:2b: 0f:fa:ae:11:2b:40:d2:7c:e1:bc:1d:6e:2d:fc:18:e2:5b:24: 99:20:43:37:1a:7b:d3:d7:f6:d9:7e:24:4f:b7:28:c3:dd:88: bf:32:78:6f:07:e9:d7:de:bf:9c:54:08:32:2d:72:03:d6:7b: 63:da:f9:0e:b7:29:c2:37:a0:30:53:f5:f3:6b:38:c7:1d:3b: 41:68:84:0a:be:d7:e6:cc:08:de:7b:81:9e:85:18:94:a2:de: be:37:91:33:cb:be:a1:91:8e:b2:99:8f:1a:23:f9:b1:e5:05: 78:e3:6c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoK71yrJkVQodXAnzk5oVZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMDIyMDgwMDUwWhcNMjUxMDIzMDgwMDUwWjAzMTEwLwYDVQQD Eyg0MGYzOTc3OWFjZjZhOWMxOTA0YjFjMTMwN2QwOTZkMmMwYmNmOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kiiEKgYewVr3tacxAVkQrUyncwM 2glsVvgB8imV4IW3yaQKsmck5QAPBvhybshUsXd9Yk6fWfaxydaZyjCMjEezt0gP yZPkINcF3ogr4/hd/tSa4B+PH2eDCcfcrkn1vRtMrl0FI9UTGs+FViiN44RrS+tT t8GQ4700C/h0rOpWFJ/nepLzi9QZzjfx77DaAkeva9ljNmQxRzDnCHqM+MZxmHll ygKCu23Tek7zMq3q4hYPuLe2/8p4EEET2C1BOBhrK/qt1tDNaenWmGLOHdpviXuv 9DnEtahKSzdT4qpRuTBFeNsbnuOBNpbQ6GfVvGwWUmTEtKaWRuAGtDlZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDzl3ms9qnBkEscEwfQltLAvPlUMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMQGYPJU nX//vh7zHZ8ruqqtMaWq/Pww7e/H2jYwnbwOAI8qluVX2EA0QWYCxYZnmSBLh0Sz AtTYZ2Cp5LEux/80oUoI4jkBGvJo5E/MwtAvMJcJC0P9Nayf77wl1EvEssbjnLmY 6yBOCnWnP/UQPOflWA4JtaFtbD8imYdNqeXCCDOAShKwDitQUVHHmH4rD/quEStA 0nzhvB1uLfwY4lskmSBDNxp709f22X4kT7cow92IvzJ4bwfp196/nFQIMi1yA9Z7 Y9r5DrcpwjegMFP182s4xx07QWiECr7X5swI3nuBnoUYlKLevjeRM8u+oZGOspmP GiP5seUFeONsDQ== -----END CERTIFICATE-----Generated at Wed Oct 22 11:30:27 2025 by rpki-client