$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: jyyuFISkOIAiUlDIs0RL7gUIjRHNaBw24yUcFCGk/MI= Subject key identifier: 83:CC:8C:4E:CD:95:D9:E0:FF:7F:C8:DE:A5:0E:30:14:AF:FF:5F:05 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019943CE7F13698EC1739B010F8E7F305ED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 0F05 Signing time: Sat 13 Sep 2025 16:00:30 +0000 Manifest this update: Sat 13 Sep 2025 16:00:30 +0000 Manifest next update: Sun 14 Sep 2025 16:00:30 +0000 Files and hashes: 1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=) 2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=) 3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=) 4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=) 5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=) 6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=) 7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=) 8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=) 9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=) 10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=) 11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=) 12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=) 13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=) 14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=) 15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=) 16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=) 17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=) 18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=) 19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=) 20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=) 21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=) 22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=) 23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=) 24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=) 25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=) 26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=) 27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=) 28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=) 29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: 0Br37EPcOBRnZUzWLCzhYa/Y6BcE09+pIPmxZ4vjoqY=) 30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=) 31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=) 32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=) 33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=) 34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=) 35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=) 36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Sep 2025 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:43:ce:7f:13:69:8e:c1:73:9b:01:0f:8e:7f:30:5e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Sep 13 16:00:30 2025 GMT Not After : Sep 14 16:00:30 2025 GMT Subject: CN=83cc8c4ecd95d9e0ff7fc8dea50e3014afff5f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:6f:90:3f:4c:37:7a:67:6d:a5:25:4d:77: 1a:6c:23:54:73:c9:fb:ef:63:b8:f6:b7:89:91:53: ba:aa:e1:6e:e5:70:6e:c3:7b:2c:5d:ed:4f:5e:bb: cd:32:f7:18:27:93:3f:66:ee:f6:ff:ab:c1:aa:61: c3:94:18:8f:c6:d4:24:a7:bd:78:3b:dd:cf:94:4a: 70:1d:b0:68:6a:81:b2:3b:f2:52:b6:b4:ba:6d:7f: 0c:ab:0e:f2:7a:76:73:25:14:13:88:f3:48:15:3f: a0:fb:4d:86:94:37:22:a8:88:c4:9e:ee:f7:17:fc: fb:85:2c:44:94:88:52:3b:f1:a4:6a:02:00:61:bc: c5:e6:62:64:ac:05:e4:5d:a2:3e:71:1c:81:df:56: d7:11:aa:18:26:98:d2:f4:74:4a:ae:fc:f1:23:48: 89:47:bd:30:76:e5:2d:4f:69:be:de:cb:07:9c:cf: 6c:fe:06:fa:59:44:aa:af:bc:4f:d3:a2:a2:a7:bb: 3b:97:a2:57:9b:82:42:56:9b:60:74:b7:41:d7:4a: bd:f1:e1:0e:12:3b:91:dc:74:98:81:16:b2:32:2f: d2:d5:76:70:a9:f1:39:43:54:8b:b3:32:52:b2:40: fa:e3:38:3f:93:c8:c8:6f:ef:cc:8f:16:55:85:58: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CC:8C:4E:CD:95:D9:E0:FF:7F:C8:DE:A5:0E:30:14:AF:FF:5F:05 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b9:fd:dd:14:d9:09:d2:ff:c2:3f:ee:b3:a0:b4:c7:d7:43: 80:d0:e8:e4:d7:de:3c:30:0c:82:70:5b:6d:e3:3a:cb:68:7f: 52:e2:bb:2d:c2:1d:eb:6e:3e:03:7f:cd:0e:28:77:3d:25:10: 95:39:9c:d4:ed:07:c6:7d:e9:b1:28:e7:85:39:7d:3c:6f:0b: 0b:49:60:1d:75:13:1a:c2:3e:e4:be:61:a2:97:a2:55:d2:bc: 81:11:d5:54:df:b7:83:bc:4f:3e:f4:c9:bb:eb:e0:87:c5:e6: cf:12:69:57:2b:07:ad:41:d4:39:6c:ad:e3:9e:07:df:87:ed: 40:e5:95:f1:ef:07:65:09:20:39:d7:46:3d:6f:60:d6:35:53: 81:bd:08:c2:8c:bc:8d:49:1a:b2:e6:86:de:95:28:56:39:20: 58:3f:5d:9b:4d:d4:d4:a1:e0:e7:56:b8:d6:1b:b5:16:d5:58: 18:3c:e0:ab:cc:ce:7e:b7:93:ef:bf:68:dc:2e:06:f5:43:e4: 43:a8:f3:6c:df:9a:c2:70:83:bf:2b:3f:97:cc:d3:8f:54:05: de:e9:80:90:75:bd:94:c6:cb:2c:a2:f5:6b:8c:db:aa:84:12: 82:bf:6b:51:81:a2:d5:f1:e1:22:ae:3d:4c:dd:2e:30:14:37: ba:f5:1a:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlDzn8TaY7Bc5sBD45/MF7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjUwOTEzMTYwMDMwWhcNMjUwOTE0MTYwMDMwWjAzMTEwLwYDVQQD Eyg4M2NjOGM0ZWNkOTVkOWUwZmY3ZmM4ZGVhNTBlMzAxNGFmZmY1ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LNvkD9MN3pnbaUlTXcabCNUc8n7 72O49reJkVO6quFu5XBuw3ssXe1PXrvNMvcYJ5M/Zu72/6vBqmHDlBiPxtQkp714 O93PlEpwHbBoaoGyO/JStrS6bX8Mqw7yenZzJRQTiPNIFT+g+02GlDciqIjEnu73 F/z7hSxElIhSO/GkagIAYbzF5mJkrAXkXaI+cRyB31bXEaoYJpjS9HRKrvzxI0iJ R70wduUtT2m+3ssHnM9s/gb6WUSqr7xP06Kip7s7l6JXm4JCVptgdLdB10q98eEO EjuR3HSYgRayMi/S1XZwqfE5Q1SLszJSskD64zg/k8jIb+/MjxZVhViTNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPMjE7Nldng/3/I3qUOMBSv/18FMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7n93RTZ CdL/wj/us6C0x9dDgNDo5NfePDAMgnBbbeM6y2h/UuK7LcId624+A3/NDih3PSUQ lTmc1O0Hxn3psSjnhTl9PG8LC0lgHXUTGsI+5L5hopeiVdK8gRHVVN+3g7xPPvTJ u+vgh8XmzxJpVysHrUHUOWyt454H34ftQOWV8e8HZQkgOddGPW9g1jVTgb0Iwoy8 jUkasuaG3pUoVjkgWD9dm03U1KHg51a41hu1FtVYGDzgq8zOfreT779o3C4G9UPk Q6jzbN+awnCDvys/l8zTj1QF3umAkHW9lMbLLKL1a4zbqoQSgr9rUYGi1fHhIq49 TN0uMBQ3uvUasg== -----END CERTIFICATE-----Generated at Sun Sep 14 01:52:04 2025 by rpki-client