$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: fB8k2K1SBkk1Zf7V2EBCSt16RgCwophxYrKSTtbz5dg= Subject key identifier: C7:10:19:B3:27:0A:5A:FF:CE:26:EB:A0:26:A2:56:32:02:C8:B6:93 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019A563FC6D2AA4B8122F369BF95B540B430 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0D7F Signing time: Wed 05 Nov 2025 23:00:11 +0000 Manifest this update: Wed 05 Nov 2025 23:00:11 +0000 Manifest next update: Thu 06 Nov 2025 23:00:11 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 80WC0WqP1t9PzxhBKhAFkcZqf1I.roa (hash: UwkQHVIknQbR2ZUXNL3+lgAOmSDcXEXHci6JqknMhb4=) 5: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 6: DDFDdL4wIG-xoeAynt1YMKtbfho.roa (hash: iGAUYDIlZc13eU1AIjcX3CLjQZ/Wgbfnl/75KPHzqCA=) 7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: RQqhkS7jXKlzfbj71qegK4ftLb/68bzANyTKn8u+0Y0=) 8: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 9: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 10: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 11: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 12: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 13: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 14: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 15: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 16: cQbzTwAiOsuLmS8yMnawGgo51Ps.roa (hash: btxyyqBZ8nyik4l7LMQMxSprq0qm/QjygLtxi11EF/E=) 17: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 18: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 19: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 20: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 21: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 22: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 23: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 24: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 25: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 26: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 27: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 21:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:56:3f:c6:d2:aa:4b:81:22:f3:69:bf:95:b5:40:b4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Nov 5 23:00:11 2025 GMT Not After : Nov 6 23:00:11 2025 GMT Subject: CN=c71019b3270a5affce26eba026a2563202c8b693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:3d:5e:db:dc:d9:ee:34:a3:d4:8d:c2:b3: 8e:7f:3a:71:9e:ae:68:75:38:98:88:5e:e7:73:e7: 9f:31:2c:ab:93:9e:c2:d0:43:3f:b8:0f:db:85:43: 85:d9:18:73:21:76:2b:37:ec:cb:27:a8:81:7d:63: 7c:19:54:89:f9:9a:2d:f4:23:07:e4:df:05:51:66: b2:04:f1:18:53:2d:09:08:6c:e2:00:fc:61:cf:3e: d0:c1:d8:82:a0:91:06:22:9a:ce:7e:3f:e4:88:79: 90:68:d6:58:8b:2d:5a:07:1e:cb:bd:fb:e3:9b:97: c0:ae:d6:53:87:0f:ad:e1:96:e0:4e:eb:68:1c:7b: 7f:99:f2:6f:14:ac:0c:c1:9d:5d:b0:e6:ee:bc:10: 9b:1d:ac:a4:08:25:7d:7c:5f:e5:68:b9:43:b5:7d: 1b:e2:ff:70:e8:f5:19:e5:26:a6:4e:ac:ca:3e:38: fa:57:50:5a:d9:54:6e:31:c1:6f:ef:28:1f:7b:c5: fa:8e:87:dc:9e:b5:6c:9e:87:bb:ba:bb:23:a9:88: dc:44:03:0d:25:f1:aa:e8:5f:95:f4:9d:b0:81:42: 42:87:9c:3e:cb:ac:e4:87:6a:71:6d:e4:8f:ab:b8: 15:10:77:ea:9b:56:e3:2c:36:77:d9:8f:35:df:db: 1a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:10:19:B3:27:0A:5A:FF:CE:26:EB:A0:26:A2:56:32:02:C8:B6:93 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c3:f4:51:24:ea:04:95:bc:3d:8e:3a:3e:e2:ee:c6:cd:61: 74:2d:1b:1c:a2:95:a7:79:08:61:e1:db:d5:ba:2b:8e:93:1c: 18:a1:15:e0:1c:28:87:6d:1a:0e:f5:00:8e:ba:fe:5f:51:ef: 8b:e4:b3:95:d7:6c:13:9a:46:86:fc:09:77:07:97:0a:32:ed: a6:72:e8:5b:52:0a:c3:7a:1d:42:10:7f:9e:07:ab:b5:fc:73: a4:1d:d2:aa:6b:d4:43:c1:5b:ed:54:34:7b:20:3a:0e:8b:3b: fc:d5:a2:48:84:78:d9:4f:cb:c4:3d:47:ba:0f:a4:c7:48:fa: d8:97:55:55:3c:eb:10:47:dd:ae:d0:58:79:f7:17:5b:2b:33: 7d:d6:ab:82:a2:cb:47:23:84:95:6c:28:f1:eb:5c:de:40:ab: ed:cd:dc:95:fe:8d:81:12:73:c9:b3:60:5c:cd:9b:6c:4d:7f: ae:72:45:bf:05:00:bf:df:d7:aa:d9:4c:f7:a6:98:bb:f2:78: e6:36:f1:73:ea:bd:65:91:25:74:89:25:5d:21:54:ea:72:e7: 67:f6:8f:eb:81:ab:d6:bf:13:a4:56:d3:c9:0e:e7:da:76:c4: 64:16:d7:55:67:2b:f2:58:da:aa:4a:9a:de:89:03:b5:0e:a8: 22:ed:86:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpWP8bSqkuBIvNpv5W1QLQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMTA1MjMwMDExWhcNMjUxMTA2MjMwMDExWjAzMTEwLwYDVQQD EyhjNzEwMTliMzI3MGE1YWZmY2UyNmViYTAyNmEyNTYzMjAyYzhiNjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNE9Xtvc2e40o9SNwrOOfzpxnq5o dTiYiF7nc+efMSyrk57C0EM/uA/bhUOF2RhzIXYrN+zLJ6iBfWN8GVSJ+Zot9CMH 5N8FUWayBPEYUy0JCGziAPxhzz7QwdiCoJEGIprOfj/kiHmQaNZYiy1aBx7Lvfvj m5fArtZThw+t4ZbgTutoHHt/mfJvFKwMwZ1dsObuvBCbHaykCCV9fF/laLlDtX0b 4v9w6PUZ5SamTqzKPjj6V1Ba2VRuMcFv7ygfe8X6jofcnrVsnoe7ursjqYjcRAMN JfGq6F+V9J2wgUJCh5w+y6zkh2pxbeSPq7gVEHfqm1bjLDZ32Y8139samQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcQGbMnClr/zibroCaiVjICyLaTMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucP0USTq BJW8PY46PuLuxs1hdC0bHKKVp3kIYeHb1borjpMcGKEV4Bwoh20aDvUAjrr+X1Hv i+SzlddsE5pGhvwJdweXCjLtpnLoW1IKw3odQhB/ngertfxzpB3SqmvUQ8Fb7VQ0 eyA6Dos7/NWiSIR42U/LxD1Hug+kx0j62JdVVTzrEEfdrtBYefcXWyszfdargqLL RyOElWwo8etc3kCr7c3clf6NgRJzybNgXM2bbE1/rnJFvwUAv9/XqtlM96aYu/J4 5jbxc+q9ZZEldIklXSFU6nLnZ/aP64Gr1r8TpFbTyQ7n2nbEZBbXVWcr8ljaqkqa 3okDtQ6oIu2GiA== -----END CERTIFICATE-----Generated at Thu Nov 6 00:33:12 2025 by rpki-client