$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: e1uz7wF5KMZiInK/gkbmnncjAN3jkQJeKvzK/x/EvZE= Subject key identifier: 4E:D6:DA:CF:C7:60:4D:28:B4:D4:AA:C8:21:C9:38:95:FA:80:BE:8E Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019A17CF3A9278ACDD490D6F5B051301A741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 16FD Signing time: Fri 24 Oct 2025 20:00:48 +0000 Manifest this update: Fri 24 Oct 2025 20:00:48 +0000 Manifest next update: Sat 25 Oct 2025 20:00:48 +0000 Files and hashes: 1: 0GQGYjFgeoe90j-QzubD6mrcJkk.roa (hash: cASoDwOCqQQo3HckgWr9Fm6RrFpE5g5vgsJJsPTF9PI=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: WurSuSKly5IAHHzLhllt6ccMTQgciv9UCTAb1oPh/9c=) 3: 5YsWNoJ_eVXnLQUmvRfRv35-ITo.roa (hash: +Wt4CaG2KBebUdy7DTYqNM4+qA+qSGjkIL8Uj7jYbKY=) 4: LkZMbp2aUa0yXxOxLWaqN5AS52o.roa (hash: o8vH7FtM5V/qTZoiT6aAxSseM4Yg902eHtLadTVcAzY=) 5: N5NvCVL9qwjYZWiGAgoiE3kpDsM.roa (hash: /XNE593x81Nv5d88KdthJ5cf11PusTGT9f+nPTiwsmQ=) 6: O2VeVpIY0NqqJs4saKQoTuFoA6I.roa (hash: eCU07QC/oP0X/AS+uAyqKGOShTlcgaS/MZcj5EXt1FQ=) 7: PmeI5MIhQ4wxSrPUPOIOQ9Ubvnk.roa (hash: W6jZRl9BSEjjkm486LLqed9ed+xxHLYMlqc3sRgCALQ=) 8: QJVbOLfuQimwnt2csTkB91gXkec.roa (hash: GkGvp1WsMKLXrnxKgO0ikQrOP7Rki9hxYkm+S7LbAS8=) 9: RTN7ctApkTYd2Og2JaBeJOrSDKw.roa (hash: PECp9vVhGIOoiVTK3bRnzPU+NWZIUXb57SnIExeKGko=) 10: ZFUmkI5Si20CHGaDBK-ZoNXIfEk.roa (hash: 4y56G8cf16t1jWavTqKOCy9B29Mw+jTHj1dGwOZOhA0=) 11: _28X1lMsvBxqScVY5HiVqqNdE4o.roa (hash: 1zLcZ1CwGAvvzQsYCPPfZSZE3xWE9xsMdQ0aDUZbc8g=) 12: cdmQ2_ODlCp8h7SlTaorYnidAuk.roa (hash: +IC730dtvUCM5X3ceJwMJA3N6qWFyePDz8c3aKLMcqE=) 13: gWN0YMhA97UPOTqYvOMM9zaPWRs.roa (hash: Hm5lPWw7bUXDdTOs1pfp1fHbk/bNa8PnxIySi1lfXPs=) 14: iY_9p9rfYCrq76s6mH8iLmqZ8G4.roa (hash: WZh8CFIJ4XBLsbT8NvOnixg7Xgopb12vdZ21KTVanqQ=) 15: jTMPeohgGOxcMFZVU8z0ehshce0.roa (hash: SyL8iMLhykQz8ANtvdKfK1EugykUZcu24olhfWQesXo=) 16: n7V7OXaDS-XvJc4UQc5MPqTFYmY.roa (hash: 0QBDYhcEfGTqjEJgSs+TOY3XMDZsBCVa117v4v2Y4iI=) 17: uEsfVd8NIzUxBoG774jECjWdTsY.roa (hash: lAehouSKcnB2amZVq4TUPtcrTxH5jfwC6dVK0vZrRgI=) 18: vlDfC43FHcefunPJngYR1WAZ7rA.roa (hash: az+OZ3tRKu13gj7aBFAWboRwowS41+dYdps7euT4uWg=) 19: w_D8ebnb3eRC6CWTSI4QXg7yIcA.roa (hash: cKSU2IKqf8A5+vV8g8UVVjc9ie4gyRlLREV+QT0zjV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 17:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:17:cf:3a:92:78:ac:dd:49:0d:6f:5b:05:13:01:a7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Oct 24 20:00:48 2025 GMT Not After : Oct 25 20:00:48 2025 GMT Subject: CN=4ed6dacfc7604d28b4d4aac821c93895fa80be8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:f4:8b:05:48:1e:ba:72:ce:7b:32:f4:38: 5f:19:b9:41:f8:89:90:42:cd:19:9b:45:94:6b:ff: bc:38:68:25:6e:41:1f:a8:3e:d5:e3:87:0f:8e:49: 6f:52:78:18:c9:80:d4:87:ea:0a:11:46:04:4e:ed: cc:b6:da:f0:6e:8b:2e:e3:81:00:e6:68:a6:98:74: 29:f5:0a:e7:34:07:4c:45:78:ac:09:29:55:0b:77: 17:37:5e:e5:84:78:7b:0d:ac:be:23:e2:6c:83:f8: 5d:91:af:a9:5c:fa:cf:84:a4:44:74:bb:fd:a9:27: 30:a8:46:31:35:ec:14:ee:65:22:0c:fc:e5:7f:21: e9:64:33:d4:41:21:c4:db:ef:18:6e:91:1c:dc:96: 53:f1:c7:49:52:33:ef:11:df:b6:1e:f6:1d:ed:28: 44:3b:f2:59:c4:74:47:62:94:2b:f4:5b:49:0c:79: b1:b7:7b:18:9c:de:e3:f0:cb:94:ba:ed:76:e3:78: 77:f5:92:b0:0c:e7:3c:6b:e2:9f:80:62:ff:a0:24: a3:3b:ca:29:21:6e:ab:8d:4c:8f:5a:bf:f1:01:4c: 09:49:5f:ad:ed:ba:bb:5c:a4:22:23:32:07:3a:62: 84:30:e5:20:f7:26:26:57:3f:01:f4:18:5e:43:22: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D6:DA:CF:C7:60:4D:28:B4:D4:AA:C8:21:C9:38:95:FA:80:BE:8E X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d1:74:90:9b:4c:39:66:75:6e:44:b9:e2:b2:34:60:f0:6d: 1c:58:b1:48:e2:4f:2d:ce:00:e7:be:61:d6:4b:f6:df:9d:a9: e9:90:ec:fd:0d:45:b0:f5:f8:50:52:ae:f2:e0:17:68:07:93: d7:d6:bd:c9:96:1e:25:f3:63:c4:f2:9b:39:8f:bc:07:e2:12: d8:bf:d1:f5:d5:e4:34:5d:e7:a4:4d:89:d0:6e:e3:fe:12:7f: 4e:f0:c6:18:77:13:4d:88:88:ec:cf:21:79:d4:27:e5:e8:c9: 37:2d:b4:e0:c3:f7:7a:e7:31:2a:bd:22:ca:91:bf:e7:f3:c9: 22:2e:aa:48:59:75:0e:45:d4:6a:11:1d:c0:a0:9f:26:fa:9b: 0e:77:a0:ae:91:dd:0a:6c:bb:a1:a7:af:15:f7:15:73:e8:0d: 86:7d:c9:a8:47:80:47:61:ad:93:f1:44:b9:0b:d7:e2:7b:a7: 5e:21:24:10:df:75:0f:0a:5d:4a:c8:bf:10:6a:76:a4:66:59: 73:15:c3:97:23:c1:a1:8e:ae:09:54:aa:6a:3f:f0:be:eb:20: 84:1c:bf:e3:78:a8:d5:6a:ee:0a:f7:ef:26:cd:42:fe:d0:a9: 5b:26:d1:c6:8b:fc:61:1b:bd:e5:3b:05:40:cf:64:06:65:4b: 3c:34:7c:09 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZoXzzqSeKzdSQ1vWwUTAadBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjUxMDI0MjAwMDQ4WhcNMjUxMDI1MjAwMDQ4WjAzMTEwLwYDVQQD Eyg0ZWQ2ZGFjZmM3NjA0ZDI4YjRkNGFhYzgyMWM5Mzg5NWZhODBiZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykH0iwVIHrpyznsy9DhfGblB+ImQ Qs0Zm0WUa/+8OGglbkEfqD7V44cPjklvUngYyYDUh+oKEUYETu3Mttrwbosu44EA 5mimmHQp9QrnNAdMRXisCSlVC3cXN17lhHh7Day+I+Jsg/hdka+pXPrPhKREdLv9 qScwqEYxNewU7mUiDPzlfyHpZDPUQSHE2+8YbpEc3JZT8cdJUjPvEd+2HvYd7ShE O/JZxHRHYpQr9FtJDHmxt3sYnN7j8MuUuu1243h39ZKwDOc8a+KfgGL/oCSjO8op IW6rjUyPWr/xAUwJSV+t7bq7XKQiIzIHOmKEMOUg9yYmVz8B9BheQyJ44QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE7W2s/HYE0otNSqyCHJOJX6gL6OMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtF0 kJtMOWZ1bkS54rI0YPBtHFixSOJPLc4A575h1kv2352p6ZDs/Q1FsPX4UFKu8uAX aAeT19a9yZYeJfNjxPKbOY+8B+IS2L/R9dXkNF3npE2J0G7j/hJ/TvDGGHcTTYiI 7M8hedQn5ejJNy204MP3eucxKr0iypG/5/PJIi6qSFl1DkXUahEdwKCfJvqbDneg rpHdCmy7oaevFfcVc+gNhn3JqEeAR2Gtk/FEuQvX4nunXiEkEN91DwpdSsi/EGp2 pGZZcxXDlyPBoY6uCVSqaj/wvusghBy/43io1WruCvfvJs1C/tCpWybRxov8YRu9 5TsFQM9kBmVLPDR8CQ== -----END CERTIFICATE-----Generated at Sat Oct 25 01:58:39 2025 by rpki-client