$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: oWycTaG6dyGRcQfLm8biZu3Mo1hSMGYwk1YravgmfPE= Subject key identifier: AA:9C:A4:56:27:70:CD:EA:9F:6A:73:6A:66:43:4D:6E:1F:C9:25:2D Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 019A1C19C30791814AFE3E45DBF8CCF61CB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1718 Signing time: Sat 25 Oct 2025 16:00:41 +0000 Manifest this update: Sat 25 Oct 2025 16:00:41 +0000 Manifest next update: Sun 26 Oct 2025 16:00:41 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 6: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: g7duf7MABsQAMRhzElVhAlWp2SIeumeIZWZEexKCoYo=) 7: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 8: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 9: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 10: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 11: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 12: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 13: jt3cdzogC_GhOHVIdQu1LfkbDrM.roa (hash: 4TbqHgl6LIIhOvKU0Ma8NpMAoh5pYOvW9g1cZnc89eY=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 11:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:19:c3:07:91:81:4a:fe:3e:45:db:f8:cc:f6:1c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Oct 25 16:00:41 2025 GMT Not After : Oct 26 16:00:41 2025 GMT Subject: CN=aa9ca4562770cdea9f6a736a66434d6e1fc9252d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4a:3c:84:e8:3a:46:57:eb:0e:ce:6d:63:ce: 00:ee:79:cd:72:af:e8:4f:c9:7c:79:c5:2e:ee:63: 7c:41:8d:9a:80:0a:ee:17:ee:fa:c9:fc:2f:8b:c0: 6a:db:b6:ec:05:f2:dc:d0:22:c4:a4:c7:de:04:42: af:a7:e1:5b:56:16:4b:7e:2b:f5:73:32:89:42:3a: 54:22:5f:c0:44:c9:06:89:6b:1f:7a:b7:c7:ea:74: ba:94:d3:39:aa:8a:ac:d4:8e:bc:f1:e4:b7:be:f6: 72:82:a3:8b:8a:55:bd:bf:95:c8:09:d4:a5:76:87: 44:2e:de:cb:6b:55:2a:16:c0:65:9d:9c:b3:23:e0: 21:7d:28:4c:5c:a6:b7:bf:d4:4d:b4:5f:2e:70:93: cd:6d:a9:7e:fd:87:dc:25:2f:0a:01:05:f8:1f:d7: cb:1d:5b:75:bd:db:a7:12:44:96:f7:53:5f:5f:18: da:d6:e6:e2:93:43:41:3e:74:41:1c:c7:96:81:95: 44:81:14:e9:25:32:fe:4f:0c:40:ae:8d:6c:26:6e: a0:26:e2:10:12:41:75:46:b2:c5:98:f8:d6:da:29: 2a:96:3f:60:5a:2a:48:41:35:66:c0:0e:4e:ee:b0: 88:5a:9c:54:c0:ec:e6:d1:c5:26:f6:e8:29:29:04: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9C:A4:56:27:70:CD:EA:9F:6A:73:6A:66:43:4D:6E:1F:C9:25:2D X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e2:1a:c0:78:52:9c:11:23:a5:05:59:82:cd:68:dd:bf:cc: d3:65:24:dc:a6:b1:1a:45:d5:28:88:f9:4c:fb:3b:c4:d5:7f: fe:a3:cd:4e:b2:e9:29:49:6e:9e:22:51:2f:68:4e:9b:ea:4a: 61:72:08:a5:25:c7:96:08:a3:84:d0:af:d8:63:70:e4:f8:92: 1d:e6:b1:76:10:ef:83:39:62:fc:f0:1e:e0:7c:a3:ff:2f:e9: 19:80:30:78:e5:44:d9:7b:1c:1f:ab:52:96:ea:2c:24:27:0d: b6:70:45:03:7d:02:c5:d2:09:71:64:36:47:66:57:22:af:28: 77:dd:f8:93:ee:aa:1b:cf:6a:38:89:10:90:73:b0:cd:2c:9d: d1:2d:e9:0c:55:b9:9e:60:6e:6c:b9:c6:eb:50:6f:fb:6a:2d: ba:4d:a0:37:2a:42:ed:01:3e:64:eb:91:fa:fc:16:ae:e8:51: 0d:09:9f:c0:c3:20:3c:eb:04:e5:68:53:03:2a:fd:06:88:7f: 7e:90:46:f7:b0:40:10:87:74:bc:37:ad:20:23:4b:2a:f4:60: 8c:e1:d2:24:a5:5a:37:3f:e4:88:68:a9:9f:8b:5a:be:a8:9e: 9f:af:96:0e:26:89:3a:11:94:6d:e3:88:8c:92:3d:7e:51:14: ff:ba:79:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZocGcMHkYFK/j5F2/jM9hy4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUxMDI1MTYwMDQxWhcNMjUxMDI2MTYwMDQxWjAzMTEwLwYDVQQD EyhhYTljYTQ1NjI3NzBjZGVhOWY2YTczNmE2NjQzNGQ2ZTFmYzkyNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ko8hOg6RlfrDs5tY84A7nnNcq/o T8l8ecUu7mN8QY2agAruF+76yfwvi8Bq27bsBfLc0CLEpMfeBEKvp+FbVhZLfiv1 czKJQjpUIl/ARMkGiWsferfH6nS6lNM5qoqs1I688eS3vvZygqOLilW9v5XICdSl dodELt7La1UqFsBlnZyzI+AhfShMXKa3v9RNtF8ucJPNbal+/YfcJS8KAQX4H9fL HVt1vdunEkSW91NfXxja1ubik0NBPnRBHMeWgZVEgRTpJTL+TwxAro1sJm6gJuIQ EkF1RrLFmPjW2ikqlj9gWipIQTVmwA5O7rCIWpxUwOzm0cUm9ugpKQRK5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqcpFYncM3qn2pzamZDTW4fySUtMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuIawHhS nBEjpQVZgs1o3b/M02Uk3KaxGkXVKIj5TPs7xNV//qPNTrLpKUluniJRL2hOm+pK YXIIpSXHlgijhNCv2GNw5PiSHeaxdhDvgzli/PAe4Hyj/y/pGYAweOVE2XscH6tS luosJCcNtnBFA30CxdIJcWQ2R2ZXIq8od934k+6qG89qOIkQkHOwzSyd0S3pDFW5 nmBubLnG61Bv+2otuk2gNypC7QE+ZOuR+vwWruhRDQmfwMMgPOsE5WhTAyr9Boh/ fpBG97BAEId0vDetICNLKvRgjOHSJKVaNz/kiGipn4tavqien6+WDiaJOhGUbeOI jJI9flEU/7p5NA== -----END CERTIFICATE-----Generated at Sat Oct 25 20:01:17 2025 by rpki-client