$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: BUHhlUdNUiDoDIQIFu/9JhKcZubW1QsotQosn0kz97g= Subject key identifier: 21:4E:F1:D2:68:7B:22:60:18:CF:65:60:D8:41:14:98:F0:14:68:C3 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019A221B892BCD50CF9F57C31741D9B85A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0ABF Signing time: Sun 26 Oct 2025 20:00:20 +0000 Manifest this update: Sun 26 Oct 2025 20:00:20 +0000 Manifest next update: Mon 27 Oct 2025 20:00:20 +0000 Files and hashes: 1: 0yfwmVxTJLER4DUt2Vg6_khLCpA.roa (hash: MKcDvWwqHVE9vZSHOg8w0ciXql+cjgazIARUal2yFTQ=) 2: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: lZBUNl9nyH2tw2bJu0HzHnm71Xvg0Z3dqd6h9uGnZMA=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa (hash: /86x8Ad2qWfAQIfFdegFnzg0b1Bm2R4794B+ZpXq6Eo=) 21: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 22: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 23: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:22:1b:89:2b:cd:50:cf:9f:57:c3:17:41:d9:b8:5a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Oct 26 20:00:20 2025 GMT Not After : Oct 27 20:00:20 2025 GMT Subject: CN=214ef1d2687b226018cf6560d8411498f01468c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:a8:0c:37:10:c3:ef:15:3c:90:4c:2a:fa: b3:fa:61:47:1b:6e:12:2a:00:b7:a3:4d:22:9f:63: 74:31:3c:f7:a9:b5:58:2e:c4:3a:6a:76:1f:01:6d: 5e:83:69:6f:1d:85:dc:55:4e:c0:d7:5d:e7:ad:e0: a9:01:29:57:44:9a:e3:0d:ef:cd:8c:0f:9d:42:b6: 93:01:fd:69:50:2a:2c:dd:39:dc:3b:dd:ba:aa:ec: 05:4f:85:74:82:e4:d3:cc:04:86:ce:19:cd:99:35: 22:fa:fd:08:de:d6:39:b0:62:f1:20:fb:bf:1e:48: fb:87:5d:51:5d:cf:e9:2e:bd:af:96:92:89:e6:21: 12:18:ff:16:34:02:6d:1b:67:ba:0e:4f:0f:db:38: 76:03:00:52:a5:b0:c8:87:01:41:e9:35:d7:62:67: 27:85:99:52:31:89:ae:61:27:28:de:07:c3:01:d8: 4e:21:e8:17:b3:58:28:a8:d5:bc:5d:35:36:08:c6: ee:df:10:69:46:08:06:7f:8e:36:c1:5b:28:b3:b0: 14:e9:0f:31:6b:95:fa:e8:51:a4:9c:cd:f0:bb:da: a1:ef:2e:73:b6:ef:e6:e2:7b:12:65:2e:59:24:53: 08:c9:59:3d:91:ee:25:76:e8:71:05:49:14:68:5d: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4E:F1:D2:68:7B:22:60:18:CF:65:60:D8:41:14:98:F0:14:68:C3 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8a:ce:d1:20:ae:9c:19:11:94:81:2e:ba:9d:81:f5:99:5d: 0d:76:f0:f0:a7:3d:bd:aa:59:fa:b8:b8:69:e4:6f:4d:4e:a6: c3:0f:b2:55:ec:72:d2:86:7f:54:91:7b:57:43:33:62:99:74: 3b:e5:f2:2a:55:81:2b:13:b7:92:a5:db:61:7f:1f:f1:13:42: f5:6c:94:4a:3d:79:39:6c:e9:01:ce:10:55:7c:74:df:9e:d0: 9e:13:f9:08:72:d2:a8:e4:5d:1f:45:4f:0c:75:6e:7e:b4:a8: 86:9c:70:a6:9b:a7:49:c7:d9:52:ba:b5:a6:b6:1a:65:8e:aa: fe:85:bb:9d:e6:21:38:d8:6c:42:39:c7:77:2b:ce:7c:17:c0: e3:7f:bf:d5:8b:b1:0f:cd:da:c2:5c:5b:94:3a:cb:99:ae:80: 17:66:e8:b9:17:87:26:63:2e:00:3b:f6:6a:71:2f:6a:1a:19: 9a:2f:d4:1c:a0:e8:25:1e:a0:92:99:d4:0d:61:92:22:6b:94: 5b:7c:ab:a2:eb:16:58:68:9a:b0:e6:85:42:25:3f:14:65:f5: 62:9f:b5:61:20:37:52:fd:6d:b8:53:2b:4a:bd:79:72:e9:82: ed:a1:d2:15:53:5d:cc:cb:ae:2a:11:80:e3:3a:e2:b9:c0:a0: 6d:b6:77:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoiG4krzVDPn1fDF0HZuFoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUxMDI2MjAwMDIwWhcNMjUxMDI3MjAwMDIwWjAzMTEwLwYDVQQD EygyMTRlZjFkMjY4N2IyMjYwMThjZjY1NjBkODQxMTQ5OGYwMTQ2OGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPaoDDcQw+8VPJBMKvqz+mFHG24S KgC3o00in2N0MTz3qbVYLsQ6anYfAW1eg2lvHYXcVU7A113nreCpASlXRJrjDe/N jA+dQraTAf1pUCos3TncO926quwFT4V0guTTzASGzhnNmTUi+v0I3tY5sGLxIPu/ Hkj7h11RXc/pLr2vlpKJ5iESGP8WNAJtG2e6Dk8P2zh2AwBSpbDIhwFB6TXXYmcn hZlSMYmuYSco3gfDAdhOIegXs1goqNW8XTU2CMbu3xBpRggGf442wVsos7AU6Q8x a5X66FGknM3wu9qh7y5ztu/m4nsSZS5ZJFMIyVk9ke4lduhxBUkUaF3uewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFO8dJoeyJgGM9lYNhBFJjwFGjDMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYrO0SCu nBkRlIEuup2B9ZldDXbw8Kc9vapZ+ri4aeRvTU6mww+yVexy0oZ/VJF7V0MzYpl0 O+XyKlWBKxO3kqXbYX8f8RNC9WyUSj15OWzpAc4QVXx0357QnhP5CHLSqORdH0VP DHVufrSohpxwppunScfZUrq1prYaZY6q/oW7neYhONhsQjnHdyvOfBfA43+/1Yux D83awlxblDrLma6AF2bouReHJmMuADv2anEvahoZmi/UHKDoJR6gkpnUDWGSImuU W3yrousWWGiasOaFQiU/FGX1Yp+1YSA3Uv1tuFMrSr15cumC7aHSFVNdzMuuKhGA 4zriucCgbbZ32Q== -----END CERTIFICATE-----Generated at Mon Oct 27 04:03:57 2025 by rpki-client