$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: oWqnjnSBdGgpLUOvB2nkK+Y9vGY9pURltOUbNWXpOxk= Subject key identifier: 5B:42:39:B9:39:74:C8:D5:8D:9C:2D:66:B5:96:3E:E8:5A:0D:8F:77 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019A79032A818E524E2C09327BF2BDBB6350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0D91 Signing time: Wed 12 Nov 2025 17:00:41 +0000 Manifest this update: Wed 12 Nov 2025 17:00:41 +0000 Manifest next update: Thu 13 Nov 2025 17:00:41 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 80WC0WqP1t9PzxhBKhAFkcZqf1I.roa (hash: UwkQHVIknQbR2ZUXNL3+lgAOmSDcXEXHci6JqknMhb4=) 5: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 6: DDFDdL4wIG-xoeAynt1YMKtbfho.roa (hash: iGAUYDIlZc13eU1AIjcX3CLjQZ/Wgbfnl/75KPHzqCA=) 7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: FvDQ4cMzpRKKdm9s7e6t5HJgTl7M7SsePyCbLmg7FTk=) 8: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 9: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 10: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 11: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 12: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 13: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 14: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 15: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 16: cQbzTwAiOsuLmS8yMnawGgo51Ps.roa (hash: btxyyqBZ8nyik4l7LMQMxSprq0qm/QjygLtxi11EF/E=) 17: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 18: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 19: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 20: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 21: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 22: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 23: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 24: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 25: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 26: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 27: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Nov 2025 16:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:03:2a:81:8e:52:4e:2c:09:32:7b:f2:bd:bb:63:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Nov 12 17:00:41 2025 GMT Not After : Nov 13 17:00:41 2025 GMT Subject: CN=5b4239b93974c8d58d9c2d66b5963ee85a0d8f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:84:cc:3b:35:81:50:64:aa:3b:85:30:64: 67:19:a3:1b:d9:22:7f:49:dd:fc:6b:98:56:f7:0b: c4:7a:78:6a:69:40:7c:64:0e:4b:ce:b6:ca:d7:6a: a0:f2:e3:db:e3:09:cc:27:be:1e:dc:08:fb:a7:74: 4c:47:13:01:5b:0a:3e:e2:24:7a:d1:8c:4c:8d:5b: a8:1b:87:86:3a:62:90:0c:8a:b2:ac:8d:91:62:9e: c8:f3:dc:82:8f:4f:a0:64:ff:38:08:d0:9b:2f:3a: 19:eb:59:2a:0a:e7:ca:85:be:df:6d:49:87:cd:97: 87:0a:17:bf:b8:26:89:d0:ba:12:fd:c3:07:25:79: de:2c:d3:65:9d:ff:4e:86:ca:4b:6f:a5:7d:f5:b8: b3:2e:e3:ad:bc:1d:18:20:f8:3f:e2:6f:78:21:05: 73:3f:5d:95:73:25:5b:4f:77:f8:66:78:4f:a5:b6: d8:5b:fd:5a:ca:29:c3:87:52:73:0e:5c:54:de:4b: a5:0c:07:09:34:9d:0b:ae:18:7b:bf:e3:c0:f5:70: e2:17:88:8f:f8:53:9a:58:e5:43:8f:b3:80:bf:62: cf:94:ce:24:2b:e1:d4:40:b0:f6:88:9c:ab:27:35: 78:69:ac:53:00:b0:a0:c5:cb:72:19:50:c3:a2:9e: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:39:B9:39:74:C8:D5:8D:9C:2D:66:B5:96:3E:E8:5A:0D:8F:77 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0f:67:73:dd:68:3c:5f:ac:33:c8:e9:fc:22:44:b5:85:68: 91:7c:0d:21:b0:af:bf:6e:af:9d:e4:bb:34:cc:2d:98:6c:c7: e8:f4:8c:f2:10:55:10:2a:79:64:b1:17:8a:eb:97:da:9c:db: 27:45:d3:4e:d9:10:e6:e2:50:50:c0:9f:85:3f:ea:93:a9:7f: 41:08:49:27:5f:0d:4f:49:36:75:83:21:c7:86:a6:96:4d:f1: 36:ed:dd:43:90:36:cc:a1:6f:61:49:41:eb:d5:52:06:c0:8e: f5:1a:b7:ef:0d:2b:03:d1:05:8b:29:84:1e:ea:b4:bf:16:b3: d4:8d:87:b9:02:59:58:7d:d0:e5:77:15:4e:0a:89:ff:66:50: d5:3f:ef:e6:2a:d1:a2:95:2f:8f:e3:9a:df:27:e1:63:a0:78: 5c:9a:5e:a2:54:d0:3e:9b:33:22:c1:40:e7:c7:07:e3:71:dc: 1c:f0:af:31:c5:2d:45:52:51:4d:f5:55:56:71:b4:03:0b:22: d9:15:59:0b:71:8b:97:83:5f:f2:01:b1:57:2f:92:90:fc:7e: bc:3d:cd:85:82:17:29:d0:4c:c2:9e:cd:62:16:49:b9:ca:f9: cf:4f:4d:14:3e:49:ad:c9:87:5e:9d:c2:fd:c9:29:d4:4e:ce: 3a:12:37:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp5AyqBjlJOLAkye/K9u2NQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMTEyMTcwMDQxWhcNMjUxMTEzMTcwMDQxWjAzMTEwLwYDVQQD Eyg1YjQyMzliOTM5NzRjOGQ1OGQ5YzJkNjZiNTk2M2VlODVhMGQ4Zjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG+EzDs1gVBkqjuFMGRnGaMb2SJ/ Sd38a5hW9wvEenhqaUB8ZA5LzrbK12qg8uPb4wnMJ74e3Aj7p3RMRxMBWwo+4iR6 0YxMjVuoG4eGOmKQDIqyrI2RYp7I89yCj0+gZP84CNCbLzoZ61kqCufKhb7fbUmH zZeHChe/uCaJ0LoS/cMHJXneLNNlnf9OhspLb6V99bizLuOtvB0YIPg/4m94IQVz P12VcyVbT3f4ZnhPpbbYW/1ayinDh1JzDlxU3kulDAcJNJ0Lrhh7v+PA9XDiF4iP +FOaWOVDj7OAv2LPlM4kK+HUQLD2iJyrJzV4aaxTALCgxctyGVDDop5KOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtCObk5dMjVjZwtZrWWPuhaDY93MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkw9nc91o PF+sM8jp/CJEtYVokXwNIbCvv26vneS7NMwtmGzH6PSM8hBVECp5ZLEXiuuX2pzb J0XTTtkQ5uJQUMCfhT/qk6l/QQhJJ18NT0k2dYMhx4amlk3xNu3dQ5A2zKFvYUlB 69VSBsCO9Rq37w0rA9EFiymEHuq0vxaz1I2HuQJZWH3Q5XcVTgqJ/2ZQ1T/v5irR opUvj+Oa3yfhY6B4XJpeolTQPpszIsFA58cH43HcHPCvMcUtRVJRTfVVVnG0Awsi 2RVZC3GLl4Nf8gGxVy+SkPx+vD3NhYIXKdBMwp7NYhZJucr5z09NFD5JrcmHXp3C /ckp1E7OOhI3tg== -----END CERTIFICATE-----Generated at Wed Nov 12 22:16:06 2025 by rpki-client