$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: 8TdLQNliCOIzHcCZB1xQfgq2Gh0gtEiov5YC2xCxowk= Subject key identifier: 6C:AE:EE:40:70:4D:AE:A0:25:1E:5D:98:65:5E:22:4C:29:5B:F6:2B Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019A06DB38BA61437FEA4C8BD2C612682D4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0ABE Signing time: Tue 21 Oct 2025 13:00:21 +0000 Manifest this update: Tue 21 Oct 2025 13:00:21 +0000 Manifest next update: Wed 22 Oct 2025 13:00:21 +0000 Files and hashes: 1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=) 2: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=) 3: 3_vCPXMxLInxH4KSM9i76JRc3wI.roa (hash: KQnR/Rw1eBymAhNe+aNyzbKPfZJwc7vaoArCKIxxfkQ=) 4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=) 5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=) 6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=) 7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=) 8: CIRls3stTp9BOjHce35suioz25Y.crl (hash: DE9MI6btoS4C+8UzGXlnXFVURdhuDc0e8uFWmJaZZMw=) 9: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=) 10: E41iAo-YhWo417aVu3UFCXW5I0U.roa (hash: FPYq7/mqqnQsvVNvJMzlmLszXu5+IG0MN3SMAMVazpQ=) 11: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=) 12: Gg2fBgym98lzpgGOw525Psta200.roa (hash: ITzizygNHqGF0ltRY0tg7IiIoexFvZtpbGrKT1PyRcQ=) 13: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=) 14: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=) 15: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=) 16: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=) 17: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=) 18: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=) 19: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=) 20: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=) 21: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=) 22: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=) 23: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=) 24: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=) 25: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=) 26: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=) 27: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:db:38:ba:61:43:7f:ea:4c:8b:d2:c6:12:68:2d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Oct 21 13:00:21 2025 GMT Not After : Oct 22 13:00:21 2025 GMT Subject: CN=6caeee40704daea0251e5d98655e224c295bf62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:c4:a4:1c:a7:80:86:96:d1:5e:38:6f:b3: a5:60:6a:de:25:e6:9f:6a:2d:0c:76:94:dc:61:44: 79:21:f5:b2:15:f4:bf:5f:1f:08:93:13:12:34:c5: 35:d8:cc:dd:3a:6a:50:56:5e:da:0f:64:02:eb:54: 95:74:87:c6:a7:60:59:3e:f8:b0:8f:f8:f0:68:40: 0d:4e:c5:f4:a9:dd:3f:04:e6:1e:c7:75:61:c8:41: 1b:a6:87:64:a0:74:fb:02:5e:af:65:ac:6c:a6:34: 99:fa:a8:f2:01:28:c9:dd:18:8c:72:4c:ff:3f:c3: 88:63:98:35:e5:7f:1e:f9:e5:e2:14:b3:8f:3a:00: 58:df:ec:64:cb:4f:cb:5c:14:9e:33:aa:ce:f2:14: 85:71:50:fb:30:1e:35:41:e2:a9:79:28:b5:3a:36: bc:7e:f5:b2:fb:4f:fa:47:8e:84:d7:1e:e2:ca:34: b3:cd:c7:ca:05:88:81:b5:5b:cc:ef:75:b5:db:d1: c9:7e:56:d1:26:2a:28:ae:d6:30:fd:66:78:2a:b0: ec:d0:75:28:e1:2d:69:c0:97:1a:ab:12:a2:4a:e7: 1b:4a:3e:95:d2:50:fd:90:3a:00:28:09:a6:f7:d7: ed:9e:f3:1e:e0:72:db:e6:7a:94:c9:a9:b2:47:4e: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AE:EE:40:70:4D:AE:A0:25:1E:5D:98:65:5E:22:4C:29:5B:F6:2B X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e3:46:e4:dd:0d:fe:0d:c5:e9:a5:93:32:95:2f:9a:d0:4d: dc:ab:94:37:fd:42:a7:93:52:75:3f:c9:0b:6a:23:5b:2e:97: 4f:89:fe:31:be:2f:7b:55:96:c7:d3:e2:b7:95:a3:f2:76:56: 17:d5:05:e7:fb:8d:3d:36:dd:79:00:9e:08:ed:50:04:87:ba: 71:2d:22:fb:d9:20:16:5f:a4:65:d2:f7:22:d3:ff:f1:64:53: 31:6c:90:82:a2:2d:4f:0d:09:d9:04:fa:a3:26:4a:eb:3d:c0: 20:25:0a:13:cf:d4:54:86:8a:51:17:47:90:5e:40:7b:55:34: d2:c4:03:25:08:43:67:75:44:7e:96:e9:57:b1:07:f1:27:30: f5:97:25:f9:be:d5:69:bd:cc:80:a6:80:6d:c5:0c:81:63:a3: 7c:1b:ce:82:2a:72:bf:b5:7f:35:5d:d2:3a:74:ec:1e:93:ac: 01:9f:d6:7a:6c:d6:2d:d7:26:52:84:54:1c:05:03:92:e0:cf: bc:fd:1b:6f:0f:6e:34:e7:05:7d:32:29:a4:b2:3b:90:32:83: 6d:ef:27:44:52:01:b4:5e:50:2d:c8:35:b2:c1:e8:3a:f5:ae: 19:9c:86:d1:ef:ee:b8:d5:14:a2:03:27:4a:f8:36:5d:9a:b8: 7f:7b:0f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoG2zi6YUN/6kyL0sYSaC1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMDIxMTMwMDIxWhcNMjUxMDIyMTMwMDIxWjAzMTEwLwYDVQQD Eyg2Y2FlZWU0MDcwNGRhZWEwMjUxZTVkOTg2NTVlMjI0YzI5NWJmNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHHEpByngIaW0V44b7OlYGreJeaf ai0MdpTcYUR5IfWyFfS/Xx8IkxMSNMU12MzdOmpQVl7aD2QC61SVdIfGp2BZPviw j/jwaEANTsX0qd0/BOYex3VhyEEbpodkoHT7Al6vZaxspjSZ+qjyASjJ3RiMckz/ P8OIY5g15X8e+eXiFLOPOgBY3+xky0/LXBSeM6rO8hSFcVD7MB41QeKpeSi1Oja8 fvWy+0/6R46E1x7iyjSzzcfKBYiBtVvM73W129HJflbRJioortYw/WZ4KrDs0HUo 4S1pwJcaqxKiSucbSj6V0lD9kDoAKAmm99ftnvMe4HLb5nqUyamyR05CGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyu7kBwTa6gJR5dmGVeIkwpW/YrMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuNG5N0N /g3F6aWTMpUvmtBN3KuUN/1Cp5NSdT/JC2ojWy6XT4n+Mb4ve1WWx9Pit5Wj8nZW F9UF5/uNPTbdeQCeCO1QBIe6cS0i+9kgFl+kZdL3ItP/8WRTMWyQgqItTw0J2QT6 oyZK6z3AICUKE8/UVIaKURdHkF5Ae1U00sQDJQhDZ3VEfpbpV7EH8Scw9Zcl+b7V ab3MgKaAbcUMgWOjfBvOgipyv7V/NV3SOnTsHpOsAZ/WemzWLdcmUoRUHAUDkuDP vP0bbw9uNOcFfTIppLI7kDKDbe8nRFIBtF5QLcg1ssHoOvWuGZyG0e/uuNUUogMn Svg2XZq4f3sP4w== -----END CERTIFICATE-----Generated at Tue Oct 21 20:48:28 2025 by rpki-client