$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: l+YtYGwkfa6+5QX6RgRQxbVE5cl9wYoa0HRgGdXi+vY= Subject key identifier: 62:71:34:5A:E4:E1:EB:8A:EB:15:EE:69:B2:B1:1A:04:59:0C:90:F4 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019A19F451BCBBA642366B963EDB50908941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1700 Signing time: Sat 25 Oct 2025 06:00:33 +0000 Manifest this update: Sat 25 Oct 2025 06:00:33 +0000 Manifest next update: Sun 26 Oct 2025 06:00:33 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: zLC01zEI/fjXcOO2BLtewf7d0TsqrILXhDW1/ZT6Zxg=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:f4:51:bc:bb:a6:42:36:6b:96:3e:db:50:90:89:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Oct 25 06:00:33 2025 GMT Not After : Oct 26 06:00:33 2025 GMT Subject: CN=6271345ae4e1eb8aeb15ee69b2b11a04590c90f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:17:2b:b2:f7:34:e6:24:6d:20:27:b2:63: e2:dc:e9:a0:5b:8a:b2:60:3a:d7:70:30:2a:07:b0: 4f:42:c7:2e:b9:1f:aa:36:81:23:9c:d5:f1:0b:01: 87:f4:62:ff:f3:e6:95:a2:d2:bb:e6:3e:eb:1a:56: 7a:68:f9:3d:0c:fc:dc:6e:f6:09:49:8c:90:8c:fd: 83:5a:43:4b:62:18:dd:80:51:c7:26:b5:ae:34:80: 88:3e:5b:63:e8:8a:ee:db:29:d8:40:69:7c:4c:37: 53:c9:2d:b3:e8:78:a8:52:ce:a2:1a:97:af:9d:14: d4:6f:05:08:5c:18:aa:e5:0b:cf:74:2e:e3:ac:3a: 51:d8:5d:64:a7:54:0b:eb:e7:cd:7f:2a:69:7c:fe: e3:3b:fc:07:b5:3e:8f:48:b5:8b:db:d3:5e:e4:96: 0c:e7:5d:48:44:45:a1:24:23:52:e0:97:f2:27:99: 6a:27:75:23:91:97:b3:11:a1:77:39:eb:39:c9:c5: 33:de:61:00:18:e1:d6:4d:87:a3:4c:8d:e7:df:74: 91:1c:fd:d8:a5:ee:78:72:e4:e9:a0:89:98:a1:c9: d9:29:bd:30:c5:d0:4d:92:9b:9f:bb:35:c4:6a:6e: c5:6b:fa:5a:c5:c7:a3:d3:56:6a:92:17:7f:f8:f6: aa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:71:34:5A:E4:E1:EB:8A:EB:15:EE:69:B2:B1:1A:04:59:0C:90:F4 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5f:8f:b7:ff:c1:77:c8:18:05:e0:66:e9:87:24:c9:c9:f8: d1:56:bb:5d:b1:67:5a:8d:54:e3:80:71:80:21:61:61:c3:6c: 9c:5f:cc:18:b1:6a:dd:3f:ef:e5:7f:2e:f8:97:92:d1:93:e0: 13:79:bc:a5:d2:e5:94:a4:ad:02:2d:91:3c:0e:8c:82:2f:d6: 6a:c0:e7:dc:88:d6:a3:b3:e5:c4:c9:61:6f:b8:1b:25:98:ed: d9:35:54:3e:11:d2:6f:37:7a:48:ab:d3:ce:77:6c:87:0c:a4: 25:da:43:13:25:57:c5:e1:10:4e:5e:9f:70:db:e7:64:63:bc: c7:be:f6:d9:11:1c:4a:46:7c:ee:79:f0:c7:c3:b5:d3:4b:8f: 2f:1b:de:f5:1b:19:62:22:e2:76:03:d1:51:98:19:67:b4:46: fb:ef:5c:3a:8b:72:ac:90:c7:21:99:a4:ff:96:ff:26:47:e3: fd:90:9d:c7:16:48:9d:b7:52:df:f5:d1:dd:9d:f1:b8:33:cf: 07:55:75:57:2d:39:4e:a1:d1:f3:bd:40:8e:93:38:70:fd:95: 92:a9:0f:a3:45:24:59:a7:e9:96:7f:3f:cc:60:31:6d:dc:5f: 70:8f:b7:ea:9c:6b:a3:6d:36:9b:d2:1c:ca:5a:35:00:74:07: 1e:57:25:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZ9FG8u6ZCNmuWPttQkIlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUxMDI1MDYwMDMzWhcNMjUxMDI2MDYwMDMzWjAzMTEwLwYDVQQD Eyg2MjcxMzQ1YWU0ZTFlYjhhZWIxNWVlNjliMmIxMWEwNDU5MGM5MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD4XK7L3NOYkbSAnsmPi3OmgW4qy YDrXcDAqB7BPQscuuR+qNoEjnNXxCwGH9GL/8+aVotK75j7rGlZ6aPk9DPzcbvYJ SYyQjP2DWkNLYhjdgFHHJrWuNICIPltj6Iru2ynYQGl8TDdTyS2z6HioUs6iGpev nRTUbwUIXBiq5QvPdC7jrDpR2F1kp1QL6+fNfyppfP7jO/wHtT6PSLWL29Ne5JYM 511IREWhJCNS4JfyJ5lqJ3UjkZezEaF3Oes5ycUz3mEAGOHWTYejTI3n33SRHP3Y pe54cuTpoImYocnZKb0wxdBNkpufuzXEam7Fa/paxcej01Zqkhd/+PaqpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJxNFrk4euK6xXuabKxGgRZDJD0MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1+Pt//B d8gYBeBm6Yckycn40Va7XbFnWo1U44BxgCFhYcNsnF/MGLFq3T/v5X8u+JeS0ZPg E3m8pdLllKStAi2RPA6Mgi/WasDn3IjWo7PlxMlhb7gbJZjt2TVUPhHSbzd6SKvT zndshwykJdpDEyVXxeEQTl6fcNvnZGO8x7722REcSkZ87nnwx8O100uPLxve9RsZ YiLidgPRUZgZZ7RG++9cOotyrJDHIZmk/5b/Jkfj/ZCdxxZInbdS3/XR3Z3xuDPP B1V1Vy05TqHR871AjpM4cP2VkqkPo0UkWafpln8/zGAxbdxfcI+36pxro202m9Ic ylo1AHQHHlclAg== -----END CERTIFICATE-----Generated at Sat Oct 25 09:03:05 2025 by rpki-client