$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: wX2u6yTxMRfFsFN/O3sKaNPwEs5SfgLKO92OknUoNV0= Subject key identifier: CD:FC:E4:55:B3:41:B9:83:E5:E6:16:33:A3:BB:05:E5:15:C5:B9:1C Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019A213FAC88A98AA1F90EFB3BF160D8B7F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 1403 Signing time: Sun 26 Oct 2025 16:00:11 +0000 Manifest this update: Sun 26 Oct 2025 16:00:11 +0000 Manifest next update: Mon 27 Oct 2025 16:00:11 +0000 Files and hashes: 1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=) 2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=) 3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=) 4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=) 5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=) 6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=) 7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=) 8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=) 9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=) 10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=) 11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=) 12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=) 13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=) 14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=) 15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=) 16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=) 17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: JYyJzKZKnGmUJzmsmN25/UQbMu4EDYW5ERjrYVf+kNo=) 18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:3f:ac:88:a9:8a:a1:f9:0e:fb:3b:f1:60:d8:b7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Oct 26 16:00:11 2025 GMT Not After : Oct 27 16:00:11 2025 GMT Subject: CN=cdfce455b341b983e5e61633a3bb05e515c5b91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:53:09:93:91:dd:ba:f5:c6:9c:6c:ad:86: c8:21:b9:2f:be:55:90:4e:a6:54:d8:6d:c6:58:20: 8a:07:96:1a:a4:54:6e:e2:da:15:88:cf:ea:b0:39: 07:af:42:26:5e:f5:92:2d:08:e5:2d:3d:ed:c9:28: 3d:97:91:de:59:fb:a1:94:a5:c9:c2:75:67:d3:18: 43:c4:5e:62:2c:4c:19:a1:dc:b3:73:0a:b9:9f:30: 7a:d5:7a:43:03:a6:dc:5e:d3:66:ec:a8:40:cf:65: 8b:f3:4f:f9:0a:9c:3e:49:cf:eb:39:03:b3:96:1e: 43:40:30:95:5c:fd:63:4f:69:7f:2f:d2:ba:15:df: 96:64:72:d0:e2:3b:fc:50:2d:90:f3:3b:8c:37:01: b7:57:2d:d1:98:a9:14:15:92:e7:49:56:9d:fa:9a: 49:06:8c:f7:c7:17:cf:d4:da:d8:23:ad:14:d1:55: 7d:24:64:3d:96:98:2d:e5:8e:8d:bc:55:ad:ed:ba: 4c:db:af:e8:ed:7e:18:56:d3:8f:58:64:0c:1b:f1: 55:be:d4:71:2c:e0:c6:b3:e2:97:6f:36:7a:49:30: 7f:fb:e6:f0:37:0b:94:ba:52:b4:cb:a5:8d:64:31: 57:52:c4:7a:44:ab:d6:de:2d:23:d0:32:7a:07:3e: 86:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FC:E4:55:B3:41:B9:83:E5:E6:16:33:A3:BB:05:E5:15:C5:B9:1C X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:06:52:ee:c6:7c:9b:ec:cd:b6:9e:5f:11:82:6f:9a:0b:81: d2:86:c5:e8:ae:a1:99:c3:e1:2c:2b:f4:82:0c:52:59:78:15: ac:18:a2:90:7e:f8:d7:d6:e3:63:5c:72:c9:78:4c:c8:fa:ca: eb:f8:dc:2d:dd:f8:48:f7:d1:7b:7c:9a:16:3f:bb:85:92:23: 2f:38:65:f2:e3:71:cd:30:7d:be:82:f0:ed:74:11:5d:1f:9a: 75:0d:2f:00:c0:91:4e:f1:ad:f6:f6:55:47:0f:6d:75:83:79: 93:e0:79:e8:ff:a6:6f:9a:47:5b:76:80:f4:cf:f1:11:01:53: 4f:70:be:bc:cd:14:7c:d1:fc:fa:5a:d0:a5:b6:fe:fa:ce:35: 6c:98:23:a2:2c:93:bf:b9:86:cb:4f:65:de:8b:91:e4:0f:3c: 91:18:f2:a4:b2:69:29:e6:58:66:e7:56:41:b2:1f:d8:5b:36: f7:a4:54:25:b6:c4:13:1b:2b:eb:42:e5:c8:41:e5:dc:ce:10: ee:70:4a:d2:4d:38:8e:72:9b:87:aa:df:dd:3a:30:56:00:88: 97:08:b7:d5:bf:1b:e5:61:d9:ba:ab:2a:c5:f7:92:d2:0b:3b: 8d:9f:0d:c0:99:a1:55:74:d9:5c:bb:4d:a7:11:87:ab:7e:a8: 84:0a:a8:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZohP6yIqYqh+Q77O/Fg2Lf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjUxMDI2MTYwMDExWhcNMjUxMDI3MTYwMDExWjAzMTEwLwYDVQQD EyhjZGZjZTQ1NWIzNDFiOTgzZTVlNjE2MzNhM2JiMDVlNTE1YzViOTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gJTCZOR3br1xpxsrYbIIbkvvlWQ TqZU2G3GWCCKB5YapFRu4toViM/qsDkHr0ImXvWSLQjlLT3tySg9l5HeWfuhlKXJ wnVn0xhDxF5iLEwZodyzcwq5nzB61XpDA6bcXtNm7KhAz2WL80/5Cpw+Sc/rOQOz lh5DQDCVXP1jT2l/L9K6Fd+WZHLQ4jv8UC2Q8zuMNwG3Vy3RmKkUFZLnSVad+ppJ Boz3xxfP1NrYI60U0VV9JGQ9lpgt5Y6NvFWt7bpM26/o7X4YVtOPWGQMG/FVvtRx LODGs+KXbzZ6STB/++bwNwuUulK0y6WNZDFXUsR6RKvW3i0j0DJ6Bz6GFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM385FWzQbmD5eYWM6O7BeUVxbkcMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwZS7sZ8 m+zNtp5fEYJvmguB0obF6K6hmcPhLCv0ggxSWXgVrBiikH7419bjY1xyyXhMyPrK 6/jcLd34SPfRe3yaFj+7hZIjLzhl8uNxzTB9voLw7XQRXR+adQ0vAMCRTvGt9vZV Rw9tdYN5k+B56P+mb5pHW3aA9M/xEQFTT3C+vM0UfNH8+lrQpbb++s41bJgjoiyT v7mGy09l3ouR5A88kRjypLJpKeZYZudWQbIf2Fs296RUJbbEExsr60LlyEHl3M4Q 7nBK0k04jnKbh6rf3TowVgCIlwi31b8b5WHZuqsqxfeS0gs7jZ8NwJmhVXTZXLtN pxGHq36ohAqoiQ== -----END CERTIFICATE-----Generated at Sun Oct 26 20:37:39 2025 by rpki-client