$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft File: F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft (raw, json) Hash identifier: pQ9Es5hHBafov5dv3FM5V6j3o1ut+MJfVne3xEYii5Y= Subject key identifier: 82:9E:3F:59:20:65:A5:A7:8B:53:79:32:0A:38:6B:45:8F:23:CB:BD Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019A06DB840CAC1CE430C461C0AD01091081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft Manifest number: 17D7 Signing time: Tue 21 Oct 2025 13:00:40 +0000 Manifest this update: Tue 21 Oct 2025 13:00:40 +0000 Manifest next update: Wed 22 Oct 2025 13:00:40 +0000 Files and hashes: 1: 0ejIbgv5wPYww_ADnZ8Y_hAt-Rg.roa (hash: kji0fDrg1UCCF1e89e3x4DtqXEf9lBqkRhHoCvYmuiw=) 2: 1-1lRKLu371HDTHk8c8EivyJBtuU.roa (hash: JU9c2IXBDe8sTydlUA5qMPVW4/hxpmRR4ICEo97INqw=) 3: 1-WfEdPyWVUocCR9UTR4Zbj7P7Oc.roa (hash: CH2FU6z+GEc8HtvIaf7B+I0OFI1CGjk8f53ju01Zw1U=) 4: 3eACAQy46sHpLdk_clPryggqLqA.roa (hash: EofnSqwwa7Mab+n1I2t3VR5ifr+qtLtBnN0yP00uuQ4=) 5: 4oyZa4gdDUkTyvig9B5MyEBxtgY.roa (hash: 65mItYo2Zy5ZDdSzQQF5aR64hGTdR3bqRDrtgJvvNZI=) 6: 502f50d1NmQlr_QgXEe6FmpQuXs.roa (hash: /FaifmzpLcs3/LqoeHJo9JuiLbqNAC7mFVWjJRhMRO0=) 7: 8V1ryzk7LfNRSiFKp_7toQJ8huM.roa (hash: joPe9uWB9UCnoIbEth1HHghcYtVJJ07pHsyNYeVnqPw=) 8: 8drSNO4c28JBTvdRZ2V_eb-ECc8.roa (hash: gR2B7vbwxu/2iESNk/phikf31ZfQzoZkgpf8LTcbqJc=) 9: AqkuMwOWpcjFIQUNACx397i9qMI.roa (hash: ha/OMr66LwgOd9K7o9DEGPQxt1hmy9/aNOLXxw8wx6w=) 10: BgvMLxSeSe60azRb1NkUA0ot22s.roa (hash: C7aDDYI0X+QRoHMtx0ezoJw1C8mWVSKIdotzc0BXCH4=) 11: DR6SICtYwwm1HogED7BDIhfpeoI.roa (hash: GHQceK37rrfaAB/D7Oaacj1eUTWMgMM/nsbZCEXmHkg=) 12: Dv5vrPmyYu_MnRIdRbvjPtAmTCQ.roa (hash: rW8mc8/vAfi5HR0gCnT0PC1Da6a+T1zVjRQOt1IWh/0=) 13: F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl (hash: F1ItWtBmE/VPdivekmkhJhv+FpGkPPdPbzU4TSD5Mzs=) 14: GcchgiajCXxa9KVue-wbvF3k3Rs.roa (hash: m7M+iG8ePoyQdRj+JQNsjxYIZN0DVm5ibaTqXMTle0Q=) 15: H4OiQGL1DbG4MibNSVMRd8RQc_Q.roa (hash: rv//nIfVZsrdzhdfXCHCp7/ysXvAYIb8HuuMGaQi3tw=) 16: HdJxPdso7JVrZYx9UQ0nvOnNryo.roa (hash: zqP1nETzTGVCqbMo3I/K5MwH+sEDXTpAb5N+eSbyenQ=) 17: Hgor3XOJG_33qkL94qd2eia1vzY.roa (hash: yQpTujKyRlMiL/Y1O2gPBdFC/8SSAUfzxqd1Meo2vUg=) 18: IEy4FG5w7vw5fwWLJmUDSYwDaHM.roa (hash: yyew7EQmZw1cR5FC5jaEonANxJjuYsh1ytGgvuE1p98=) 19: IG5mSmtKzkJj8RTljMdMBjniTjs.roa (hash: gvOzCSa8vDbFgYDTYfRkyPudCfEKxmfVO6kLEZWirf4=) 20: KmC6wS-Bry5klAycE2tBc7Q2hVk.roa (hash: ZcqNpLLMacfOeosAYfPte8ziOUeM115N30agsD9prWg=) 21: LzvNqjZjSXd-VoA3XyxYbK3-ROk.roa (hash: IXlBtSHgll3EWlIRCHI/7XXmqvwCKUDds5SRDvZb09g=) 22: NmWTLDpy2yZqa32LE2bz27-5gz8.roa (hash: qmzFDt328zkb8dn9LXMEg8+Thy3R0TfIILvJm7WduiE=) 23: O59qU3GlbCPOunuU26RSWdQm6Ys.roa (hash: cUEfityQpCrIrR/hweLcH6F77z41nX/RM/hfo/Kr52s=) 24: Plhp8kozsjJjr5xutG_5OmCKOzc.roa (hash: jHhve6x91eRg7+8bDu5j5Ify1fEYSDj5qu2zoKgYUY0=) 25: PvnYj70vWIEtSZ4-TLAUROqH-mQ.roa (hash: C32arwbPmPblT8QjzIktSbeBph+9mftQGk8FxNUGy80=) 26: QikrQfPZcEuLXxNM9QRFuZqmwX8.roa (hash: GTgZFx+2E4BxRZ/cmNVpT3kb9A3tv7hfyB2pD3LWoag=) 27: SiQZbt7Y66GtmJ_f96kwaY-G998.roa (hash: dgNLChdS6cQ5M1MIq+zgZcYxmgFmlTXUHjgAF6gyPTw=) 28: SvD0YrflKZtrg8ajsXRYlZShlIQ.roa (hash: BCIwz2vY2jLgYS7z7fY4QU/HwErNwcVpkosUz//VdPM=) 29: TuKKlp-YU9hH3BDdx-_-iqpSkuQ.roa (hash: T0MoII0bHUQVy4/EIU0McUWW03OrtpRdQcw2oGJ90xw=) 30: UEYPaIJk57iANe2fXLEYrDHuBW8.roa (hash: vVCdcBaBVIiJ2UFubFblYlCEyga/mYmujS2FPpjWlf8=) 31: YFWVotFPF4rkids3QA341Z9fyK4.roa (hash: YvO+2nszTC3s3sqVEtLJ1xWwZVIVv6VgaQF2qtreTRU=) 32: Zc0fVpIzsz1W6a-QmZHBJJqJJnQ.roa (hash: Q3pSXhF3hBwJGb/V5w/lVnpT0wURqnu+NuHtZ4Q12Jo=) 33: _1gr71TtxKrGYfishpOTTlC-Yf0.roa (hash: LXqUscGa5O5l0ANuPWlp7ZJ5IGrnqrBbr0WR9gp+Xlg=) 34: _4lvYeV-ayqEuNBULPPOUTjxshM.roa (hash: NdQ48sOIXtMVgyfAT4cDSjJrP8NrGiMF8pPwF4Fl/SU=) 35: _NP7KLLqMrN1MnGQmRzYwY7srro.roa (hash: yxeClpkT7+DTzIpMnMbwVDLNUo4DerckRO6AAThHbTE=) 36: evYLEFvdvSvmkbuLm6rh3tZsvKw.roa (hash: 52BX1RaGCebJiVa5KK5DyLHFtzsT7REGB3uiL5jegrk=) 37: fNzqJvsbqb0H74heu_eSek8VtgI.roa (hash: o4Nod9JSdaU0RMBqsV3JfhPtjNeHWMXe4pMD3qdsnU8=) 38: fiZS1QoC13O9LGwSQ4heL3EDJHg.roa (hash: cQaKdfdjwvkVki02Gk6rg/cphkwoTFB2MpHuxaFIw5A=) 39: gRpxZ9tPgRBVp8qdYzJqgIxd2nc.roa (hash: 83UGnHR1vvpOBiG28c0LTC7t5cOOarvTlEqPeJagnUo=) 40: itLqudVm_LWWCSb2ZaHE7Y8xg9k.roa (hash: bTfyy1SxJCeaK5coWhOr/Q8NlmQaYiJZYALhNcfWwOg=) 41: jDRBJTXqU-l0mlBW0i631wxPZt0.roa (hash: iDEkyKeMVMFwrMXDKR4bsKp+geBFSFoieBkCq1waIkE=) 42: n0JluA_q73XjEpq04uEzn-RmsXg.roa (hash: T7rTE9/E8va60SJXGuKikAJZCiAgEmhE8Vpka/OYUOA=) 43: nlWr11m2o9h4NC-tzohScSJdOxg.roa (hash: A3Wa8TFObznb1XsDpDHOQf+qyyepDtcekiYNrboghKo=) 44: nyh3L1_fO9-0gtPACanLqE-8L6A.roa (hash: 3ZfslFeCGwiSaXAFPs++rXWZnjwclEp0fgAs/mguHtQ=) 45: o3jnOci1LEZmio5eVK_R1X59Bc8.roa (hash: ksK9oLd/45fgUjzdDyp1g1OluUQE8WOO6qYAiQZLnSM=) 46: qZFf8xBKOBqZq28f1CYsPIryFfY.roa (hash: c2azlwgqsewfRUN5oiHErUO6fO6RA6AsE7ib1fWtYcI=) 47: r7mPdu3mcXlmiFWy88dMv4tMIwE.roa (hash: Tev3vha+XFV/k1WflgN7brJaSUjSziylhI0zOJ7XJU0=) 48: rxVm1BUHBkaau-7W_r_kxy-XrHo.roa (hash: rLOdOXbVl3h3am2CiNQtp6HBEUOsXCq9yn33g8ZOc4Y=) 49: xdzMl2dBjCTNBQybuXYBgSxzduo.roa (hash: JEkwDfKXDwIr/2rXwBPBdk3uqDoMAYK5dQs47lFmsqg=) 50: yWlbkrEj2-GR1WBLh_nb3kwtTP4.roa (hash: M9mG3BDKpakDn8xVlL2w2ltK4fDQEQSGSLniQRr2b/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:db:84:0c:ac:1c:e4:30:c4:61:c0:ad:01:09:10:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Oct 21 13:00:40 2025 GMT Not After : Oct 22 13:00:40 2025 GMT Subject: CN=829e3f592065a5a78b5379320a386b458f23cbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:4a:4c:4d:80:59:63:56:58:d1:36:b8:7d: 85:f4:41:43:3e:69:13:05:00:e5:42:a7:be:8d:fe: ff:d2:a5:5d:8c:e2:6b:34:38:6b:21:29:2d:44:79: 39:e8:cc:94:32:7c:69:13:a5:61:00:4d:42:3b:59: a9:30:5c:fc:cf:9b:33:5a:7d:51:8c:69:0b:25:22: c2:b8:d2:43:47:b5:b8:8f:69:ca:d7:99:92:c9:37: 62:12:ea:94:4c:3e:4c:ac:88:88:dc:6d:52:8c:b9: eb:7b:0f:a6:d7:b7:2e:72:41:18:26:d5:99:0a:d8: 2d:14:3d:85:3a:da:a0:d4:b0:8c:59:d5:57:c1:31: 96:f4:40:6a:86:83:48:3d:3c:1b:51:1a:2d:95:5d: 45:d4:8c:a6:76:11:22:46:a9:7b:96:ef:66:e7:a2: d2:66:45:3a:2d:30:c7:c1:8c:77:8a:0c:04:65:22: d0:ba:7c:7f:64:4a:83:8a:18:9b:8d:55:35:cf:6f: b0:ca:02:5a:54:2d:e2:b1:00:56:0a:5e:21:e0:e3: 5a:e0:da:40:68:9d:0b:12:52:d7:80:e9:d9:19:c9: da:ab:b3:d6:bc:8c:1c:a3:07:d4:a2:28:b5:36:e4: 7a:df:24:7e:a5:af:4a:9a:7f:01:d0:ee:70:0c:a4: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9E:3F:59:20:65:A5:A7:8B:53:79:32:0A:38:6B:45:8F:23:CB:BD X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:30:54:7f:5a:a7:7f:15:4a:7e:65:86:fa:2c:88:4e:9d:e1: b0:7b:d0:ce:74:37:47:01:75:40:d6:c2:70:79:ee:7b:8f:f7: 68:83:a5:df:fd:49:58:0a:07:58:a0:54:26:51:e9:b3:14:a7: b7:b9:17:fc:e1:50:48:b0:d8:98:97:30:b5:68:20:4e:19:30: 71:4a:9c:29:6a:4d:29:b7:a8:20:df:79:ca:99:26:fe:0e:32: 72:dd:42:22:54:8d:e7:77:06:0f:78:6e:60:57:c7:f4:56:e0: e0:bb:17:d5:65:dd:89:35:1e:89:8f:b1:d7:85:44:92:53:c9: 6c:19:77:81:71:9f:98:77:12:8a:38:ff:7d:53:44:ea:c4:e6: 1b:5f:08:83:18:5b:56:5f:7a:8a:8a:ae:4e:5f:55:f6:15:bc: 96:29:11:06:e4:3e:96:c0:73:bb:df:ca:83:6f:3f:dd:b5:ca: 5f:e8:50:01:e4:2e:26:d2:50:03:52:43:85:8d:6a:c0:7b:4f: 67:f9:55:df:b4:ab:cc:c2:d9:ec:9d:75:9b:0e:26:fe:82:56: 0f:f8:de:25:7f:87:7c:07:a9:de:69:70:61:2f:80:46:13:77: 1d:1f:c6:54:e5:f0:33:e8:3a:4d:b5:7e:fd:96:c0:9b:43:47: 05:9c:22:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoG24QMrBzkMMRhwK0BCRCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjUxMDIxMTMwMDQwWhcNMjUxMDIyMTMwMDQwWjAzMTEwLwYDVQQD Eyg4MjllM2Y1OTIwNjVhNWE3OGI1Mzc5MzIwYTM4NmI0NThmMjNjYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ZKTE2AWWNWWNE2uH2F9EFDPmkT BQDlQqe+jf7/0qVdjOJrNDhrISktRHk56MyUMnxpE6VhAE1CO1mpMFz8z5szWn1R jGkLJSLCuNJDR7W4j2nK15mSyTdiEuqUTD5MrIiI3G1SjLnrew+m17cuckEYJtWZ CtgtFD2FOtqg1LCMWdVXwTGW9EBqhoNIPTwbURotlV1F1IymdhEiRql7lu9m56LS ZkU6LTDHwYx3igwEZSLQunx/ZEqDihibjVU1z2+wygJaVC3isQBWCl4h4ONa4NpA aJ0LElLXgOnZGcnaq7PWvIwcowfUoii1NuR63yR+pa9Kmn8B0O5wDKRffwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKeP1kgZaWni1N5Mgo4a0WPI8u9MB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzBUf1qn fxVKfmWG+iyITp3hsHvQznQ3RwF1QNbCcHnue4/3aIOl3/1JWAoHWKBUJlHpsxSn t7kX/OFQSLDYmJcwtWggThkwcUqcKWpNKbeoIN95ypkm/g4yct1CIlSN53cGD3hu YFfH9Fbg4LsX1WXdiTUeiY+x14VEklPJbBl3gXGfmHcSijj/fVNE6sTmG18Igxhb Vl96ioquTl9V9hW8likRBuQ+lsBzu9/Kg28/3bXKX+hQAeQuJtJQA1JDhY1qwHtP Z/lV37SrzMLZ7J11mw4m/oJWD/jeJX+HfAep3mlwYS+ARhN3HR/GVOXwM+g6TbV+ /ZbAm0NHBZwigw== -----END CERTIFICATE-----Generated at Tue Oct 21 17:12:00 2025 by rpki-client