$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: I4JXt0NfhCGPViMzr0AhX1oh3pLjRi5cPGDWkEXcJ8o= Subject key identifier: 22:3C:1C:AE:06:BC:D9:F4:DC:99:C7:BC:78:65:CE:16:39:EE:29:EE Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019A07811513B9E394F62FD0A6A85CC5290C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 18F5 Signing time: Tue 21 Oct 2025 16:01:31 +0000 Manifest this update: Tue 21 Oct 2025 16:01:31 +0000 Manifest next update: Wed 22 Oct 2025 16:01:31 +0000 Files and hashes: 1: 1-4n255q-GmhvWguY8knOSWxwWOE.roa (hash: SpMPf2vIKuvnbl4s5E51poi38FquEwM10w09zg2yecI=) 2: 1Z8g0XZDgC2h6ZZiZGzR-pmBQXE.roa (hash: 7whK1SRZtYZ93wf2pg24GN/SH22buAO3qk0+HbEyWJg=) 3: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=) 4: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=) 5: 7nQ2lmMByBc9BzSe5MpXR-7PWQ4.roa (hash: WXh7yFtrWpyCzYsrsNrvVMrVdkxW0TyL4bbT6QwTD/Q=) 6: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=) 7: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=) 8: DiojNNQH08E8VT8z31hy5NWp8N0.roa (hash: hxWfnXr3HMo5cijkMcL7NHIRvQIwClyV18FZj70iFnY=) 9: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=) 10: FmAKBKd-PdNqMEGk2uZifaqmnrE.roa (hash: BK0SX5WkOOtWNPjitJ2TK5CAHUK5xcu0+wg05UjWy1g=) 11: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=) 12: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=) 13: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=) 14: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: Dq9MMVUbX8WXazsyoCHAAMOOEyFB1ZspWkJGTIMWUW8=) 15: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=) 16: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=) 17: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=) 18: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=) 19: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=) 20: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=) 21: YWHz3fxaOfoMOH5_cTNPFCF5TMk.roa (hash: dI7KHHPfreh/FH6NLvFMGzIK4XeoytI7/bZBWshxj+s=) 22: ZxbKXjnBPf3AnoMKuLNv8CQvpmQ.roa (hash: CzlDvM5gWYjkEKjDgesTwVDa95qQ0Cm38PaYGtwMPRg=) 23: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=) 24: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=) 25: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=) 26: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=) 27: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=) 28: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=) 29: sCZs3Vv_mkmH1488b_8AOyu6O_A.roa (hash: IVmACBgQskh7opLtCDMMeiRu9ORobcLnBCvYU0Xoy8M=) 30: sIaFicGSLfWywofV-flOlj4BbEs.roa (hash: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=) 31: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (hash: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=) 32: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:81:15:13:b9:e3:94:f6:2f:d0:a6:a8:5c:c5:29:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Oct 21 16:01:31 2025 GMT Not After : Oct 22 16:01:31 2025 GMT Subject: CN=223c1cae06bcd9f4dc99c7bc7865ce1639ee29ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:79:c5:2f:a3:16:0b:5e:01:d5:9f:37:71: 20:ce:57:c7:f9:96:23:74:20:2d:33:9e:af:45:fa: 99:71:a6:b9:3e:28:de:34:0a:8e:1e:2e:86:d9:cf: 47:72:f1:d3:ea:a5:19:ee:0e:f8:44:dd:98:d5:4b: d9:16:c4:a9:90:b4:0f:5a:93:ea:d5:b9:4b:66:98: 68:5f:33:25:2d:5b:a1:c1:8c:8b:17:f8:ee:2e:87: 6e:7b:f3:90:85:0a:1f:7d:1e:1d:2a:56:c9:18:02: e2:d4:eb:d7:58:cb:f7:ca:53:9d:22:e8:96:73:ae: 5e:db:77:cc:01:a2:7a:98:78:6c:05:33:93:ec:c0: 17:58:05:fc:70:dd:10:be:92:6b:83:76:4b:70:a3: 68:03:82:7f:7d:e1:e5:d9:d2:af:6b:9e:96:06:ce: 35:b0:65:ae:c6:3c:47:db:6f:dc:90:fa:f3:7c:a8: 63:a4:e2:63:36:90:05:e4:52:b0:88:9f:7c:f8:19: 79:b4:ae:55:ff:20:06:e1:7d:98:f2:fe:9e:ce:ca: 58:53:60:f0:26:0b:f3:a0:6c:4c:87:28:f9:7a:7a: f1:0f:c5:54:cf:8d:9b:dc:12:ea:81:f1:05:16:cc: 8f:e3:50:02:b0:45:0e:f5:5d:6a:85:b8:54:e8:f4: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3C:1C:AE:06:BC:D9:F4:DC:99:C7:BC:78:65:CE:16:39:EE:29:EE X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:96:1e:10:21:33:5a:3e:f4:b1:86:21:f0:35:ad:a2:89:95: 5d:1d:7b:46:80:3f:28:eb:e9:05:a1:21:8b:a1:b8:aa:c4:14: d7:6f:09:96:28:a6:df:6f:8e:f5:b4:80:fc:ef:9a:36:21:6b: e0:43:78:3a:8b:63:d4:87:03:11:aa:1c:d3:53:a3:47:8f:fe: 6f:95:45:8f:71:46:c7:31:3d:f7:c9:1d:4f:2a:e3:f2:14:d0: c2:ce:29:97:cb:74:5c:60:9b:0a:14:c7:78:fc:9a:d6:ee:19: 04:2c:01:52:84:4c:5b:2e:69:b6:e9:fa:cc:f8:bc:8b:7c:d8: b7:62:51:b9:09:05:02:73:50:a7:2d:6a:1d:5d:a8:69:a1:ce: e0:74:9a:25:05:ca:59:ba:0f:72:3f:30:53:ed:a6:5a:f5:5c: c0:4a:70:26:1c:10:cc:67:17:c1:43:54:24:8d:2f:7d:0b:3e: 26:b4:fd:01:6f:d1:0e:56:f5:25:04:b6:21:c0:69:0b:bc:02: f0:bc:51:f3:7e:46:fc:c2:d7:63:c8:7a:ea:13:67:ae:ff:f9: 27:e8:c3:41:65:7d:2b:22:85:85:7e:67:83:57:4e:1b:85:5e: e0:85:08:f0:c7:96:c1:e7:89:42:0f:95:3a:e3:aa:fe:3b:59: a6:db:fb:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHgRUTueOU9i/QpqhcxSkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUxMDIxMTYwMTMxWhcNMjUxMDIyMTYwMTMxWjAzMTEwLwYDVQQD EygyMjNjMWNhZTA2YmNkOWY0ZGM5OWM3YmM3ODY1Y2UxNjM5ZWUyOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvit5xS+jFgteAdWfN3EgzlfH+ZYj dCAtM56vRfqZcaa5PijeNAqOHi6G2c9HcvHT6qUZ7g74RN2Y1UvZFsSpkLQPWpPq 1blLZphoXzMlLVuhwYyLF/juLodue/OQhQoffR4dKlbJGALi1OvXWMv3ylOdIuiW c65e23fMAaJ6mHhsBTOT7MAXWAX8cN0QvpJrg3ZLcKNoA4J/feHl2dKva56WBs41 sGWuxjxH22/ckPrzfKhjpOJjNpAF5FKwiJ98+Bl5tK5V/yAG4X2Y8v6ezspYU2Dw JgvzoGxMhyj5enrxD8VUz42b3BLqgfEFFsyP41ACsEUO9V1qhbhU6PRo1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI8HK4GvNn03JnHvHhlzhY57inuMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJYeECEz Wj70sYYh8DWtoomVXR17RoA/KOvpBaEhi6G4qsQU128Jliim32+O9bSA/O+aNiFr 4EN4Ootj1IcDEaoc01OjR4/+b5VFj3FGxzE998kdTyrj8hTQws4pl8t0XGCbChTH ePya1u4ZBCwBUoRMWy5ptun6zPi8i3zYt2JRuQkFAnNQpy1qHV2oaaHO4HSaJQXK WboPcj8wU+2mWvVcwEpwJhwQzGcXwUNUJI0vfQs+JrT9AW/RDlb1JQS2IcBpC7wC 8LxR835G/MLXY8h66hNnrv/5J+jDQWV9KyKFhX5ng1dOG4Ve4IUI8MeWweeJQg+V OuOq/jtZptv7tw== -----END CERTIFICATE-----Generated at Tue Oct 21 18:08:41 2025 by rpki-client