$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: e2DrGw0nwPtHH/17bQofoS2BgaoRkQP8h1hVNi6Nk58= Subject key identifier: 09:6A:BC:E3:69:5B:D9:8A:E4:2D:B4:29:1B:61:6C:CE:04:28:54:97 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019A1496E84EBE2682BA6D4012086E080BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0C7D Signing time: Fri 24 Oct 2025 05:00:25 +0000 Manifest this update: Fri 24 Oct 2025 05:00:25 +0000 Manifest next update: Sat 25 Oct 2025 05:00:25 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 5Xz9E7C6BAcx16iIMjwvM4HlgAw.roa (hash: O79+vzMdI2uDnbGewEwtLl1GFqHouBivbXJnQ4WHjFs=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: HIBKVvtinhweoi9ybbfYokGtkjg.roa (hash: khv1qHXammr1ZO8qVWulyea62D34wTqiuoPZd9ngssM=) 7: JjM1scO0M1VRz2BqKO1r_ZLa970.roa (hash: jE4M6onTNWLyp2LT8jDW1lcK5SlJ5FLJoUcPkAM9kEQ=) 8: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 9: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 10: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 11: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 12: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 13: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 14: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=) 15: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: GihmhJEGyJUUmHGvJGkTxX4Kmh6eoLnzjx1pbVu2xdc=) 16: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 17: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 18: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 19: tUIacj6VOPH10m5Y6XUJyWIow6U.roa (hash: 9uc/yuqmiqky5HfjpLsVrt/99q8zfLW5nmttPUpS6nU=) 20: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) 21: yvaGOInzvs_4CAqNb3HGPxfbkeM.roa (hash: 72X78jrEd3P7Wm2iZrDHAJIx0Gy7kHeFqupGxzOk0BE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:14:96:e8:4e:be:26:82:ba:6d:40:12:08:6e:08:0b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Oct 24 05:00:25 2025 GMT Not After : Oct 25 05:00:25 2025 GMT Subject: CN=096abce3695bd98ae42db4291b616cce04285497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:b3:cb:13:c1:2f:ac:cb:f4:f3:65:b9:fd: 9f:17:8f:89:6a:af:29:3c:af:4b:74:7e:cb:0c:18: b1:19:1f:07:34:59:b8:e4:44:87:c4:1c:cc:ee:e0: 1a:cb:4e:75:cd:ab:4d:73:14:89:91:6e:c9:ce:21: a5:1c:3e:69:a2:62:26:d5:9c:95:eb:51:51:cc:7d: 14:63:ec:39:d5:03:e5:66:0c:bf:94:40:dd:d9:77: 75:42:ad:2f:13:00:6b:fc:ea:6e:0a:55:d0:8c:6e: 39:e3:36:6a:5d:3b:f3:f7:21:03:17:6a:57:9a:80: bf:ef:43:f8:e2:ec:4b:3e:cb:5d:61:f8:f0:e9:79: e9:a7:9d:65:43:1a:e0:9d:73:b7:0d:c6:75:3c:20: 9e:3f:90:12:ff:44:2b:4e:99:60:69:81:27:e3:4c: db:3a:6e:98:00:27:38:a1:5c:0a:bd:0f:28:de:b9: 7c:a2:b2:67:fa:6f:67:9f:45:85:de:0e:69:a6:2a: 33:71:e8:b6:ba:25:aa:b2:80:ff:7a:ef:d0:30:6a: 6c:c9:40:d9:cc:60:70:28:72:6c:d3:54:3d:35:ec: 49:c1:1a:c6:f4:b5:e3:fc:ee:54:e6:73:f3:1f:b1: 60:0f:bf:34:0f:1b:f9:ab:b9:2f:80:cb:16:ba:84: e4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6A:BC:E3:69:5B:D9:8A:E4:2D:B4:29:1B:61:6C:CE:04:28:54:97 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:36:6d:a7:18:db:e8:57:21:5d:32:a6:5c:7d:32:04:b3:a8: 9b:85:64:9c:95:be:71:1d:b0:6b:8a:e2:0a:68:bf:63:90:44: e6:4a:38:e7:80:34:33:21:d2:20:37:6e:af:c8:7d:82:4a:d1: 8a:e5:e6:80:ad:82:79:91:dd:f6:a9:e6:11:ec:73:7f:52:46: 87:e6:87:eb:1c:25:16:12:ab:59:54:da:08:81:77:63:d6:0b: 03:1b:c2:66:71:5e:f4:68:55:b0:c1:da:92:0f:f9:dc:7f:61: 86:27:c0:a4:ad:65:fe:47:89:5f:0b:48:62:62:61:8a:bf:a3: 05:cb:e9:51:b8:f1:40:89:0b:8a:8d:60:22:79:2e:1e:77:2d: c5:e8:cd:cf:67:f1:d6:79:1d:f1:95:e0:bb:d4:57:07:a3:e4: c9:99:e5:2d:7d:30:f1:6d:21:f8:66:9f:ad:f6:5e:ce:4a:17: df:c2:ba:45:8b:d5:e8:a9:e4:ec:40:e3:da:0a:73:17:11:2b: 1b:16:8a:00:af:48:fc:6c:fb:e0:34:18:3f:18:a7:55:6e:48: df:ab:21:42:c3:07:72:90:52:59:4e:64:e1:f2:57:63:8c:f9: a6:98:8d:be:16:a9:40:bf:ef:b3:3c:d2:0c:85:6e:bf:60:cb: c9:7b:80:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoUluhOviaCum1AEghuCAv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUxMDI0MDUwMDI1WhcNMjUxMDI1MDUwMDI1WjAzMTEwLwYDVQQD EygwOTZhYmNlMzY5NWJkOThhZTQyZGI0MjkxYjYxNmNjZTA0Mjg1NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY+zyxPBL6zL9PNluf2fF4+Jaq8p PK9LdH7LDBixGR8HNFm45ESHxBzM7uAay051zatNcxSJkW7JziGlHD5pomIm1ZyV 61FRzH0UY+w51QPlZgy/lEDd2Xd1Qq0vEwBr/OpuClXQjG454zZqXTvz9yEDF2pX moC/70P44uxLPstdYfjw6Xnpp51lQxrgnXO3DcZ1PCCeP5AS/0QrTplgaYEn40zb Om6YACc4oVwKvQ8o3rl8orJn+m9nn0WF3g5ppiozcei2uiWqsoD/eu/QMGpsyUDZ zGBwKHJs01Q9NexJwRrG9LXj/O5U5nPzH7FgD780Dxv5q7kvgMsWuoTkbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlqvONpW9mK5C20KRthbM4EKFSXMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDZtpxjb 6FchXTKmXH0yBLOom4VknJW+cR2wa4riCmi/Y5BE5ko454A0MyHSIDdur8h9gkrR iuXmgK2CeZHd9qnmEexzf1JGh+aH6xwlFhKrWVTaCIF3Y9YLAxvCZnFe9GhVsMHa kg/53H9hhifApK1l/keJXwtIYmJhir+jBcvpUbjxQIkLio1gInkuHnctxejNz2fx 1nkd8ZXgu9RXB6PkyZnlLX0w8W0h+GafrfZezkoX38K6RYvV6Knk7EDj2gpzFxEr GxaKAK9I/Gz74DQYPxinVW5I36shQsMHcpBSWU5k4fJXY4z5ppiNvhapQL/vszzS DIVuv2DLyXuAYQ== -----END CERTIFICATE-----Generated at Fri Oct 24 12:46:51 2025 by rpki-client