$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: ZuI0+8ZfK0vOczFuPW8TZHv1YogHryrbHpPAx/k8WGU= Subject key identifier: 84:8A:4F:F3:1F:08:8D:01:04:76:AD:7E:36:5F:0A:0E:ED:99:4A:70 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019A19862FF3CACC9575E2ED084557F46D9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 17A1 Signing time: Sat 25 Oct 2025 04:00:15 +0000 Manifest this update: Sat 25 Oct 2025 04:00:15 +0000 Manifest next update: Sun 26 Oct 2025 04:00:15 +0000 Files and hashes: 1: 0SqzGu12mDjFCGhzy8gHIULllqg.roa (hash: q/N5B3QV4KYlMCuam0x9LaRBbkHiisoMmXCRQH3slec=) 2: 1tP6HbCLfJQolIJff1meJLf4HpI.roa (hash: Jqq8+MBFvN33b5MWz0+bttdbA5gDNeaR+L9jbZUqu6E=) 3: 6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa (hash: FZsvLuR+Gv0TTTTehRc9baUO0MbvwTK+elKj7u0SA+A=) 4: 96ar9m-bGL-MgyLfFLGB37-jKJw.roa (hash: Th24yD0i3kvTxzcR1uGKbyFN4whCra0flQBFeq2u56c=) 5: DiJuQ_kG7WvUzBjzRy7osCFiLa0.roa (hash: ZZdF3mZX0+NSB3GzJXDHjRpoKegOrxgL6WcAfOKZIVo=) 6: HAicZvITeyleor-6egpXMr7Qpw4.roa (hash: e7xMYcGEuBR+nLo70n2qEgYYrjFEpdzgW97wkgGJRs0=) 7: JpuV5HcluBalVoMeoldTQN8DAn8.roa (hash: 0lAWMY1XRCrRPS6rRebMRa+pBrqjVQZeCT1ofxGRwac=) 8: K4j3TVsL4gnmFiz9srl9RAcBvvY.roa (hash: wFXlK8wv1SsW+ShrU0Dc1r1iGz+dGvdi49gKuqhv10g=) 9: Lc0sdbOTNo4PG9AcRMnHD1ZdjTA.roa (hash: QyWcllmsgsfma+CXqtcPhBcL7qxdhG/KE09cbC5TDFE=) 10: RKnIbaV6UL_9ANWtNqGZZQu3yts.roa (hash: jyYhVILnHC5qMnxjfXjvdXIkELevKM9iXOHgHKyLBGQ=) 11: UkwQ5P4K-6hNdEb9fPfnCQvn8Cg.roa (hash: 3YnYR2wJLHM5g/DZxwAp32GCtIPF1553r3/M3FEeh+s=) 12: VWCKQLWfEJArBPgjqn1y3QF-M0s.roa (hash: Pvnjz6Z1kdnTY2B8V2B0JwmeucbK2OLPuOj7UzzKFk8=) 13: Wxba01eGRfIHYvB1oPclxJQ4A0o.roa (hash: sSvWgZ3B4RqSdjjqU7MubuyAeeaSCSvFOe1guspwNLI=) 14: X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa (hash: rQu7xdiT+nmHcmLVj2/49bWlcYuEeveWXCKAsMSKvZs=) 15: Z2wUduBacPPn24EXsqlot_meu2w.roa (hash: AEMqV7i2lS/tTsR42US266Qk+OTUkbe36ZW2IKlEfq8=) 16: _iGFugOP1tiOEaPOTqAHoHJWFQc.roa (hash: 8esaTWX6gTmO0Sy1HkL3uRDiAwcID3fH35AmBjVF024=) 17: _qAPGYVD_1gJgljuSDHPl3Z-xK8.roa (hash: mSFnXP7nj9WP4ezEw+z517FTzVwTAKGKRj7RSpQ5oaI=) 18: bZwjzP4gjKnjcT_SMEdSZH0cpus.roa (hash: Ae2HLoEm9GipjYsypJz84+I8/D7aRxBKdkOkxmref+c=) 19: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: e9eWhUrVFUArKpjWyos8Nm+Bf06+eTlVMU7zAgEmeL8=) 20: cUxNuuncWZfarme1cI14yQnQNsg.roa (hash: PonhIqEq+HlR25qBRv/lgkjVfu5bq061Uc+5tUF57MQ=) 21: dNq1dUWXo15xfK5j2ALgaL9-X9M.roa (hash: mGCrS09whic27p0ypY0pInzSeZzWepSv0K6RiezO+4c=) 22: gXnyfZ7WRzAT1jk1R3OiRc3jdHI.roa (hash: 1IuLazqVse8UR3WGm/7OBA3uGo+uBSbgZ52bY8PWM0E=) 23: kwpnT1xPB1VAITNADjwIbPKhMO8.roa (hash: ldLWOu27228oPxmRhkfkGlE8wNUIUYwgvY62aRxFVm8=) 24: mazjpEOiTRGyO0IL263f_3CQd1U.roa (hash: MKiEFvVqubL0G1YHY988sj28nrhwlcgHnMA3zXfPogY=) 25: n7Fl57Sl1pGzpjbP-2vnnXGeCSM.roa (hash: yMYv0kAJ/QEz5fR9SrsfYu/yiezyRaShWj8NQosvLuo=) 26: oDvyhw0Z5BzGywcGv613xbb1a04.roa (hash: TggFNJyRaWKwfnI72CJfFi7OzR+7gBXBZSwCOfYLwgM=) 27: t7GXfmFs4SvUU1woS_yjKajz9qA.roa (hash: qpOOpZ+Lx6VRGoW3LqmTlKrk3gdbsn1KHmD1554Ouzw=) 28: vvKX9oflY3swSadfJukjOxOYg3M.roa (hash: wjPx8ZTmwvSDu1PVRFMY+WcMogZCOGW5+T7IBF9kYL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:86:2f:f3:ca:cc:95:75:e2:ed:08:45:57:f4:6d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Oct 25 04:00:15 2025 GMT Not After : Oct 26 04:00:15 2025 GMT Subject: CN=848a4ff31f088d010476ad7e365f0a0eed994a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:29:8e:1c:f7:79:2e:d7:f6:ef:5f:3d:80: 56:08:63:38:ca:e9:80:73:f0:55:d6:da:b6:2c:ca: 0b:b1:0f:85:8b:f4:0a:3e:8a:5a:c5:83:9d:68:51: fb:8b:04:16:b7:d0:a5:dc:d5:60:8a:06:3c:a5:86: 1b:0d:90:20:2a:03:ab:b6:8e:6f:1c:be:57:88:3e: 20:3e:46:d7:48:47:36:08:20:79:e3:df:47:56:b8: a7:7a:40:2d:98:2b:97:b6:e3:0d:1d:de:3e:50:5c: 3d:3c:4d:13:d5:86:78:37:54:69:e0:5a:71:f2:a2: 7a:16:92:32:7f:af:14:d6:53:89:9a:2e:a5:94:b4: 0c:30:06:64:73:a9:30:7f:b1:fe:0f:7e:26:b7:bc: 67:c8:8e:1b:3e:85:ee:10:c9:74:19:46:e5:92:14: 6e:18:49:88:49:26:ab:44:c3:ac:ac:a2:76:9e:fa: b9:bb:18:55:6c:73:2f:f7:ac:30:5f:05:fc:00:b9: 3f:16:fb:a2:e1:37:14:1f:ef:7c:db:4d:60:74:59: fd:cf:60:8d:d5:ce:bb:24:fe:95:76:c5:8b:72:b1: a9:fc:31:36:5a:85:57:99:2c:9d:54:dd:b6:1b:e3: 16:c8:43:38:75:d4:e3:14:52:fa:97:af:8a:1a:5e: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8A:4F:F3:1F:08:8D:01:04:76:AD:7E:36:5F:0A:0E:ED:99:4A:70 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:97:e7:3d:ee:c3:d9:60:92:0a:12:dc:b5:d5:4a:67:15:09: df:d1:1f:5d:36:87:1e:35:ed:dc:3a:16:04:38:96:96:07:1e: d8:84:19:b2:af:81:fe:8f:43:3e:9a:bc:68:04:9f:97:43:64: 2f:6c:21:d9:40:8a:b2:75:7e:62:16:c5:e6:f0:a2:f5:cb:b2: 3f:50:a3:f0:8a:f1:db:68:ce:0f:85:0b:0c:c9:11:05:09:1a: c1:46:bc:da:5e:04:3a:29:3a:22:8a:0a:39:6d:cc:2f:9e:ea: d4:2f:6e:c3:01:a3:6d:d5:60:22:72:91:93:e2:22:b4:21:a1: 82:0a:1d:6d:72:c4:27:03:3d:00:44:f5:9d:ee:31:f6:90:f4: 47:70:39:5c:de:23:ab:bc:b1:ae:00:8b:65:ec:c0:ab:0c:a9: 6f:26:c2:7a:c4:0e:d0:30:46:92:76:e1:69:5f:b4:a9:00:1f: 7e:36:46:fe:44:15:8a:b3:5b:e4:1b:f1:2b:92:d6:06:7f:5c: 7b:f6:05:f2:84:99:a6:31:50:51:80:dd:a1:59:90:fd:e6:58: 82:90:4e:f8:b5:3a:8a:26:ac:a0:8a:68:dc:9b:86:ce:20:4b: 96:e3:7e:a3:b5:32:4a:97:c2:b9:85:63:fd:67:67:e8:b1:05: 1f:6e:56:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZhi/zysyVdeLtCEVX9G2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjUxMDI1MDQwMDE1WhcNMjUxMDI2MDQwMDE1WjAzMTEwLwYDVQQD Eyg4NDhhNGZmMzFmMDg4ZDAxMDQ3NmFkN2UzNjVmMGEwZWVkOTk0YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkkpjhz3eS7X9u9fPYBWCGM4yumA c/BV1tq2LMoLsQ+Fi/QKPopaxYOdaFH7iwQWt9Cl3NVgigY8pYYbDZAgKgOrto5v HL5XiD4gPkbXSEc2CCB5499HVrinekAtmCuXtuMNHd4+UFw9PE0T1YZ4N1Rp4Fpx 8qJ6FpIyf68U1lOJmi6llLQMMAZkc6kwf7H+D34mt7xnyI4bPoXuEMl0GUblkhRu GEmISSarRMOsrKJ2nvq5uxhVbHMv96wwXwX8ALk/Fvui4TcUH+98201gdFn9z2CN 1c67JP6VdsWLcrGp/DE2WoVXmSydVN22G+MWyEM4ddTjFFL6l6+KGl5lmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISKT/MfCI0BBHatfjZfCg7tmUpwMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZfnPe7D 2WCSChLctdVKZxUJ39EfXTaHHjXt3DoWBDiWlgce2IQZsq+B/o9DPpq8aASfl0Nk L2wh2UCKsnV+YhbF5vCi9cuyP1Cj8Irx22jOD4ULDMkRBQkawUa82l4EOik6IooK OW3ML57q1C9uwwGjbdVgInKRk+IitCGhggodbXLEJwM9AET1ne4x9pD0R3A5XN4j q7yxrgCLZezAqwypbybCesQO0DBGknbhaV+0qQAffjZG/kQVirNb5BvxK5LWBn9c e/YF8oSZpjFQUYDdoVmQ/eZYgpBO+LU6iiasoIpo3JuGziBLluN+o7UySpfCuYVj /Wdn6LEFH25WHw== -----END CERTIFICATE-----Generated at Sat Oct 25 09:41:40 2025 by rpki-client