$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: TOoLdhIPoyYom57eWBgJWF3AnJAUB9XYSkX5wSu6AKo= Subject key identifier: 5A:CF:FC:DA:8C:AA:F7:F7:5D:16:45:0B:13:24:EA:4A:C7:70:A5:73 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019A1BE2BDDB09B9976B54461A6E97B75134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 09FD Signing time: Sat 25 Oct 2025 15:00:35 +0000 Manifest this update: Sat 25 Oct 2025 15:00:35 +0000 Manifest next update: Sun 26 Oct 2025 15:00:35 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: q84iH86GOnB6zGORM9qeWjNWG8SOhhAeuUkiosu7bTk=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: xSgK9fLOFfBtEQ1GwOtLlJ5fFSc.roa (hash: 21NNCvjDiYlOHMOd6bhzk9x3nNYhc0a1y7zhHVR1Jbg=) 18: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1b:e2:bd:db:09:b9:97:6b:54:46:1a:6e:97:b7:51:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Oct 25 15:00:35 2025 GMT Not After : Oct 26 15:00:35 2025 GMT Subject: CN=5acffcda8caaf7f75d16450b1324ea4ac770a573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:53:03:78:34:a5:5d:55:19:30:39:1b:79: de:83:b1:e6:de:bf:09:02:b5:1e:db:5f:34:86:5b: 47:45:ba:fd:ea:0a:81:03:b8:83:97:1f:c3:ab:7f: 28:32:49:7c:b9:a4:52:18:f8:40:7e:d8:b2:62:af: 37:32:fa:c7:1d:d3:5f:3f:f9:58:f8:65:17:aa:12: 2d:03:6e:45:c2:7f:c8:32:be:97:39:7c:5d:f0:73: ac:d6:2b:12:38:ed:4c:1f:5e:a3:36:e1:7b:fb:3a: ab:fa:bb:8c:91:2c:30:1e:7c:7b:cd:f3:e5:89:d5: bd:e9:91:86:19:6d:02:7d:2e:1e:b7:04:83:e1:bd: 89:ee:48:ab:43:f2:11:9f:3c:b3:71:87:50:da:d8: 12:fb:b9:33:f9:16:28:0c:e9:7c:ab:d7:b8:ad:57: 85:e9:83:7a:b9:ac:a1:d9:a0:b6:81:46:c5:c5:69: 70:e4:8a:1c:a1:62:15:53:f4:08:5e:cb:d4:f1:d5: ae:60:5c:bb:f7:c6:a2:67:98:3f:7e:c7:cb:a7:b0: 11:c4:2b:f6:f3:a3:e8:54:65:e0:64:84:1a:84:a6: f6:4d:16:9e:be:8a:a2:39:ff:c4:4d:a8:fc:ce:45: e5:6a:d9:20:3f:71:c0:12:b7:65:4c:5f:a3:a5:c0: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CF:FC:DA:8C:AA:F7:F7:5D:16:45:0B:13:24:EA:4A:C7:70:A5:73 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4d:6c:6a:a6:2c:30:8f:4a:b7:c6:96:97:03:68:d8:2d:24: 9e:a0:d4:bf:2d:3f:76:ac:71:ba:11:a4:50:b8:85:25:fc:d5: e2:a8:08:a1:87:9d:a2:c5:53:e9:21:41:9e:28:7c:8d:0b:eb: 09:07:25:3f:ce:45:18:45:76:2c:03:f7:16:23:f5:df:6d:65: 44:a6:97:91:83:30:31:33:62:1d:c5:40:15:61:1a:9e:d0:d3: 60:ec:93:86:45:03:cb:e0:6a:81:2d:6f:3d:5c:e1:0c:11:35: c3:ba:d2:1f:5e:50:0a:83:2e:54:88:77:ce:50:7f:22:f3:45: 26:1a:04:40:90:ce:ca:bd:7e:56:04:a9:08:2d:9c:bc:19:a5: de:27:4f:ad:75:41:c5:aa:2d:05:66:43:a7:72:95:a9:8c:89: 99:6e:5e:3a:81:cb:d7:2d:4d:e0:3d:6d:2a:b6:52:fb:3b:1b: 41:ff:ea:db:73:7c:9e:9a:4f:8a:82:97:e5:ec:93:65:ce:37: d9:48:2c:18:f9:d4:b3:d1:1a:e0:30:9c:26:b6:25:67:f4:8f: 69:4e:37:fa:5d:62:cb:29:69:e3:aa:3c:f9:98:09:ef:4e:81: 51:70:41:e9:46:04:43:98:b9:58:27:17:8d:54:ec:b3:9a:80: 9e:a1:b8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZob4r3bCbmXa1RGGm6Xt1E0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUxMDI1MTUwMDM1WhcNMjUxMDI2MTUwMDM1WjAzMTEwLwYDVQQD Eyg1YWNmZmNkYThjYWFmN2Y3NWQxNjQ1MGIxMzI0ZWE0YWM3NzBhNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjflTA3g0pV1VGTA5G3neg7Hm3r8J ArUe2180hltHRbr96gqBA7iDlx/Dq38oMkl8uaRSGPhAftiyYq83MvrHHdNfP/lY +GUXqhItA25Fwn/IMr6XOXxd8HOs1isSOO1MH16jNuF7+zqr+ruMkSwwHnx7zfPl idW96ZGGGW0CfS4etwSD4b2J7kirQ/IRnzyzcYdQ2tgS+7kz+RYoDOl8q9e4rVeF 6YN6uayh2aC2gUbFxWlw5IocoWIVU/QIXsvU8dWuYFy798aiZ5g/fsfLp7ARxCv2 86PoVGXgZIQahKb2TRaevoqiOf/ETaj8zkXlatkgP3HAErdlTF+jpcDldwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrP/NqMqvf3XRZFCxMk6krHcKVzMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjU1saqYs MI9Kt8aWlwNo2C0knqDUvy0/dqxxuhGkULiFJfzV4qgIoYedosVT6SFBnih8jQvr CQclP85FGEV2LAP3FiP1321lRKaXkYMwMTNiHcVAFWEantDTYOyThkUDy+BqgS1v PVzhDBE1w7rSH15QCoMuVIh3zlB/IvNFJhoEQJDOyr1+VgSpCC2cvBml3idPrXVB xaotBWZDp3KVqYyJmW5eOoHL1y1N4D1tKrZS+zsbQf/q23N8nppPioKX5eyTZc43 2UgsGPnUs9Ea4DCcJrYlZ/SPaU43+l1iyylp46o8+ZgJ706BUXBB6UYEQ5i5WCcX jVTss5qAnqG4DA== -----END CERTIFICATE-----Generated at Sat Oct 25 22:22:37 2025 by rpki-client