$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: MNKxLhgTyOO8WMYbe3hLMPXhrQXnX4ZZQSADuNBJApU= Subject key identifier: 2E:77:CE:49:18:7B:25:A0:ED:8E:83:E2:67:63:B0:4A:92:AF:AE:3B Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019A3345E7997EE79B9BCE3F6F8FE2535F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 0F81 Signing time: Thu 30 Oct 2025 04:00:10 +0000 Manifest this update: Thu 30 Oct 2025 04:00:10 +0000 Manifest next update: Fri 31 Oct 2025 04:00:10 +0000 Files and hashes: 1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=) 2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=) 3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=) 4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=) 5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=) 6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=) 7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=) 8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=) 9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=) 10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=) 11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=) 12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=) 13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=) 14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=) 15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=) 16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=) 17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=) 18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=) 19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=) 20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=) 21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=) 22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=) 23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=) 24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=) 25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=) 26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=) 27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=) 28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=) 29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: x9sjW1+WExSSewaDDxvdzClb5RLAPal0DktI4GjO1fA=) 30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=) 31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=) 32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=) 33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=) 34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=) 35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=) 36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Oct 2025 01:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:33:45:e7:99:7e:e7:9b:9b:ce:3f:6f:8f:e2:53:5f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Oct 30 04:00:10 2025 GMT Not After : Oct 31 04:00:10 2025 GMT Subject: CN=2e77ce49187b25a0ed8e83e26763b04a92afae3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5e:dd:65:21:58:71:6a:bb:d1:21:c3:27:2b: 0f:1c:fe:32:bc:24:48:7e:98:cf:91:0c:88:9d:fc: ad:d4:72:40:78:00:9f:7d:b9:38:b8:5b:fe:f5:b0: 2a:03:66:04:64:c8:4f:b2:d2:23:a9:34:f9:87:56: cb:9d:c9:1b:6f:fb:01:6b:34:ed:91:98:4b:3f:9e: a9:41:67:ec:86:a3:45:59:8c:2a:d4:be:b7:49:59: 72:9d:77:0a:be:42:4b:f7:a7:24:1d:40:cd:81:fc: b5:9b:ff:44:1e:05:b9:2a:4d:0a:46:77:c2:51:c6: bc:c6:de:ee:42:c0:7f:5d:fb:91:46:7a:51:32:84: 83:fe:63:18:48:08:72:09:1a:5a:25:ec:d6:6a:c9: 4e:aa:d1:1e:ab:91:41:b2:e3:07:23:ab:39:a9:fb: 02:e6:ee:f1:7e:a6:4c:ea:3b:c0:c7:72:e4:18:2a: 83:de:09:21:54:3e:04:ab:1c:6c:e7:98:05:c0:47: ef:e6:e9:31:45:d0:7d:23:ad:15:60:6a:f2:e6:35: 9f:9a:0f:f7:45:f6:bb:22:da:8b:c4:19:21:7c:ae: b3:b7:b5:0b:87:ed:44:fd:19:9a:15:95:af:32:ba: 68:a4:77:8a:21:a5:7e:07:4e:d8:17:9a:e4:7b:07: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:77:CE:49:18:7B:25:A0:ED:8E:83:E2:67:63:B0:4A:92:AF:AE:3B X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:40:74:b5:a9:bc:2b:a4:76:2f:bd:2e:13:33:9b:0e:66:18: 1d:53:99:10:b5:62:82:e1:3e:0e:a9:ef:fe:8a:f4:17:87:bb: 45:f4:f0:19:e3:9b:7a:e3:47:c5:36:13:ab:3c:b7:ba:30:01: df:3e:d5:d6:b1:9b:a8:e5:80:be:9b:80:4d:6c:53:de:8a:59: 82:ac:5d:cc:3a:df:16:e9:75:d5:7f:a6:58:23:d6:60:36:97: b0:87:ce:95:62:82:28:9c:68:12:19:87:53:23:87:f7:62:ca: 57:f4:48:6f:43:d9:81:2c:4f:61:ce:79:7d:1d:c5:a4:ca:9d: 07:a6:2e:70:99:c4:b1:8e:e7:ce:6d:27:7a:5c:ec:ae:be:98: 16:cd:f0:b1:57:d5:b2:46:e3:75:0c:4e:ac:3b:19:95:62:b4: 7b:e3:c2:3c:8e:fb:d6:33:76:cf:c7:b9:5d:58:18:a4:fa:4e: 4e:af:90:bc:0a:ff:82:8f:57:1d:11:b1:1d:f9:f5:34:8a:62: 8e:fb:50:c4:88:d5:fb:5d:02:d5:45:1e:a7:bc:96:fa:82:d6: 05:18:13:9f:4a:af:7b:0e:81:bf:b2:11:e5:bd:e5:0b:a1:be: 61:65:69:80:06:f1:18:a8:b3:b4:3b:6e:74:83:23:bc:6c:f1: 6e:95:be:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZozReeZfuebm84/b4/iU18XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjUxMDMwMDQwMDEwWhcNMjUxMDMxMDQwMDEwWjAzMTEwLwYDVQQD EygyZTc3Y2U0OTE4N2IyNWEwZWQ4ZTgzZTI2NzYzYjA0YTkyYWZhZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil7dZSFYcWq70SHDJysPHP4yvCRI fpjPkQyInfyt1HJAeACffbk4uFv+9bAqA2YEZMhPstIjqTT5h1bLnckbb/sBazTt kZhLP56pQWfshqNFWYwq1L63SVlynXcKvkJL96ckHUDNgfy1m/9EHgW5Kk0KRnfC Uca8xt7uQsB/XfuRRnpRMoSD/mMYSAhyCRpaJezWaslOqtEeq5FBsuMHI6s5qfsC 5u7xfqZM6jvAx3LkGCqD3gkhVD4Eqxxs55gFwEfv5ukxRdB9I60VYGry5jWfmg/3 Rfa7ItqLxBkhfK6zt7ULh+1E/RmaFZWvMrpopHeKIaV+B07YF5rkewf8swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC53zkkYeyWg7Y6D4mdjsEqSr647MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUB0tam8 K6R2L70uEzObDmYYHVOZELViguE+Dqnv/or0F4e7RfTwGeObeuNHxTYTqzy3ujAB 3z7V1rGbqOWAvpuATWxT3opZgqxdzDrfFul11X+mWCPWYDaXsIfOlWKCKJxoEhmH UyOH92LKV/RIb0PZgSxPYc55fR3FpMqdB6YucJnEsY7nzm0nelzsrr6YFs3wsVfV skbjdQxOrDsZlWK0e+PCPI771jN2z8e5XVgYpPpOTq+QvAr/go9XHRGxHfn1NIpi jvtQxIjV+10C1UUep7yW+oLWBRgTn0qvew6Bv7IR5b3lC6G+YWVpgAbxGKiztDtu dIMjvGzxbpW+uQ== -----END CERTIFICATE-----Generated at Thu Oct 30 05:13:00 2025 by rpki-client