$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: /KKOQTS3UaPTFDrST6GNIqBVt8f2u0kXtQSiID0p6Ac= Subject key identifier: 4B:F7:65:E3:B5:7F:68:4B:2B:19:C1:C5:69:DA:62:4C:01:A4:EA:2C Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019A6F5B3A06B5A87494059C9F1E1EA8FD44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0D8C Signing time: Mon 10 Nov 2025 20:00:40 +0000 Manifest this update: Mon 10 Nov 2025 20:00:40 +0000 Manifest next update: Tue 11 Nov 2025 20:00:40 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 80WC0WqP1t9PzxhBKhAFkcZqf1I.roa (hash: UwkQHVIknQbR2ZUXNL3+lgAOmSDcXEXHci6JqknMhb4=) 5: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 6: DDFDdL4wIG-xoeAynt1YMKtbfho.roa (hash: iGAUYDIlZc13eU1AIjcX3CLjQZ/Wgbfnl/75KPHzqCA=) 7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: iruLABxSkSZthGAGvw477eLWwqLQqTH7qbxz/Ov3VlU=) 8: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 9: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 10: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 11: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 12: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 13: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 14: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 15: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 16: cQbzTwAiOsuLmS8yMnawGgo51Ps.roa (hash: btxyyqBZ8nyik4l7LMQMxSprq0qm/QjygLtxi11EF/E=) 17: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 18: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 19: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 20: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 21: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 22: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 23: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 24: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 25: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 26: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 27: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Nov 2025 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6f:5b:3a:06:b5:a8:74:94:05:9c:9f:1e:1e:a8:fd:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Nov 10 20:00:40 2025 GMT Not After : Nov 11 20:00:40 2025 GMT Subject: CN=4bf765e3b57f684b2b19c1c569da624c01a4ea2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:d5:25:bb:d7:92:84:04:db:71:63:da:f6: 7d:99:b9:7f:b0:a8:14:92:73:0c:f0:e3:38:45:cf: 41:d0:19:e8:7b:94:d4:2b:37:b5:69:a6:fc:a2:f2: af:2e:56:c0:7e:9a:72:c2:af:f1:f1:83:95:84:0a: c1:ff:fe:e8:54:38:38:ff:0f:e5:31:e4:ed:ce:e9: 62:53:10:51:b3:bb:23:f6:01:6e:6f:7e:89:ea:c4: 42:09:fb:82:43:40:b5:e9:9f:ef:de:27:45:a4:32: ff:77:8a:70:3e:54:6c:de:80:63:2e:f9:72:37:0f: 22:97:3a:b7:99:3a:eb:a0:8d:39:a0:fd:1a:f4:08: 00:47:3b:12:74:f8:8d:79:72:6a:0f:53:b9:e1:29: 17:91:2a:1c:18:c2:37:34:02:70:96:61:97:64:f1: b9:d2:4d:88:71:89:83:8b:75:e9:52:08:cc:4c:85: d1:96:9a:68:e1:d4:c2:ef:80:e5:05:29:88:e0:fe: 40:2a:0d:e8:ae:d8:fb:d2:62:f3:94:ee:9a:f7:15: 0c:40:21:02:82:b1:79:50:b0:f0:19:de:bd:0a:1b: 65:28:c4:2a:17:0b:7e:0d:4f:5b:86:00:a8:e0:b9: d5:6e:c2:76:c0:ca:a3:73:02:58:22:65:f0:e4:c5: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F7:65:E3:B5:7F:68:4B:2B:19:C1:C5:69:DA:62:4C:01:A4:EA:2C X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:82:8f:ac:75:00:df:93:f9:0a:88:2e:ef:bd:dd:8d:7f:3b: f7:cb:34:35:2b:13:0c:54:b3:a7:79:af:b3:94:03:7a:2c:67: 86:3c:28:ac:76:54:9d:53:6e:5b:b7:5b:5e:58:d8:56:6c:c5: 2c:f8:fe:7f:22:10:b1:e7:8d:1d:09:33:c9:ee:41:82:7e:57: 2f:81:ca:a0:7a:48:47:be:6d:fb:53:3c:09:64:ac:ca:01:d7: 3d:e0:ae:df:39:63:4e:b1:6f:7a:c4:86:75:59:45:69:80:d2: 0a:d5:b0:e3:38:98:4c:42:03:2c:5d:e8:f6:b3:95:bb:d1:39: 3b:fc:a5:0f:e6:8f:7e:00:91:dc:ea:14:e4:f9:4b:c4:83:c2: cf:89:9d:33:16:11:4b:d9:41:94:f4:20:b3:c6:ac:a2:0f:14: 21:3d:df:94:00:f3:a7:90:90:8d:b9:f3:22:cf:03:ee:fa:e4: 97:14:5e:60:0c:65:1c:3b:44:61:50:3d:cb:c4:fd:7e:17:83: e0:8e:a5:3f:8a:d7:67:9d:38:d7:0c:da:a7:26:24:34:77:78: 8b:9d:d9:4b:13:52:e8:9b:3c:b5:dc:ef:68:37:b5:a3:14:6a: b2:66:ad:b8:fa:35:61:47:4f:eb:8f:63:02:48:89:66:b6:aa: ca:75:1a:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpvWzoGtah0lAWcnx4eqP1EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMTEwMjAwMDQwWhcNMjUxMTExMjAwMDQwWjAzMTEwLwYDVQQD Eyg0YmY3NjVlM2I1N2Y2ODRiMmIxOWMxYzU2OWRhNjI0YzAxYTRlYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJvVJbvXkoQE23Fj2vZ9mbl/sKgU knMM8OM4Rc9B0Bnoe5TUKze1aab8ovKvLlbAfppywq/x8YOVhArB//7oVDg4/w/l MeTtzuliUxBRs7sj9gFub36J6sRCCfuCQ0C16Z/v3idFpDL/d4pwPlRs3oBjLvly Nw8ilzq3mTrroI05oP0a9AgARzsSdPiNeXJqD1O54SkXkSocGMI3NAJwlmGXZPG5 0k2IcYmDi3XpUgjMTIXRlppo4dTC74DlBSmI4P5AKg3ortj70mLzlO6a9xUMQCEC grF5ULDwGd69ChtlKMQqFwt+DU9bhgCo4LnVbsJ2wMqjcwJYImXw5MWDQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv3ZeO1f2hLKxnBxWnaYkwBpOosMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4KPrHUA 35P5Cogu773djX8798s0NSsTDFSzp3mvs5QDeixnhjworHZUnVNuW7dbXljYVmzF LPj+fyIQseeNHQkzye5Bgn5XL4HKoHpIR75t+1M8CWSsygHXPeCu3zljTrFvesSG dVlFaYDSCtWw4ziYTEIDLF3o9rOVu9E5O/ylD+aPfgCR3OoU5PlLxIPCz4mdMxYR S9lBlPQgs8asog8UIT3flADzp5CQjbnzIs8D7vrklxReYAxlHDtEYVA9y8T9fheD 4I6lP4rXZ5041wzapyYkNHd4i53ZSxNS6Js8tdzvaDe1oxRqsmatuPo1YUdP649j AkiJZraqynUanQ== -----END CERTIFICATE-----Generated at Tue Nov 11 04:36:33 2025 by rpki-client