$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft File: TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json) Hash identifier: gDzLC5aysAXO8m8H5j116d2gE178KnlfV3SKf+AMWGQ= Subject key identifier: 90:DE:8B:1B:86:C0:D2:93:1B:8E:97:C7:25:75:A0:54:36:8C:27:5A Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019A0900D27EE975ADFA51B923B2B7CE9E79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft Manifest number: 162D Signing time: Tue 21 Oct 2025 23:00:40 +0000 Manifest this update: Tue 21 Oct 2025 23:00:40 +0000 Manifest next update: Wed 22 Oct 2025 23:00:40 +0000 Files and hashes: 1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=) 2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=) 3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=) 4: GqC3ZO1y9oc4vznv7EbpMYcfENc.roa (hash: Q4sGgT5nLBJ6T1APzes4amjNpmeLdQJEi2Te5mDw21c=) 5: HJEOMkcua2U0CXM_DgKdhgOVJuQ.roa (hash: aaUs28R4Qe5et2iRbl0aLBcKjuiS/pTOpAssm1pVNS4=) 6: JCqujfTGMs0CXH7Tcl7wXUJG7rk.roa (hash: EOjAhyUB1/yJybUbQZT8krxAn/rD2CzV6whjFRdiiOs=) 7: QxU1oUg0L71x8I3OUGU7EffxOtQ.roa (hash: x4WguF8OrW9WYJ2uUgagYn93WyWPPdlfvjM3+EJeaQQ=) 8: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: YMX7nZATkALtQ06AzacNACgF/YRUX9IcxTDKDxlS9n0=) 9: WScD7uexqWsVTcbkJjit77c6EOI.roa (hash: f2zrSoKeWZhUxfn8r26SKqbqog0gDJQR8fLpQvUe4SA=) 10: aTbpQVeF3qhdjwAef1H9xAeFlDY.roa (hash: xS42P2/TkS38R4InDxszyPR683sYKaN1Asg6o2Jnimc=) 11: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=) 12: euBBsPSZDk2hi4oMNwl8jWUt_ZQ.roa (hash: +ITOQ37NY3K8KZwFVE/U+tAJpUP5s6XRPDFSdyZ1pcc=) 13: hh7Gdh6zfaFogwbFBRa2NVcPr_I.roa (hash: ssBuLOF5j4levhxPJMBnrdwY3/mZUCOBNj16h6KB1U0=) 14: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=) 15: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=) 16: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 19:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:09:00:d2:7e:e9:75:ad:fa:51:b9:23:b2:b7:ce:9e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Oct 21 23:00:40 2025 GMT Not After : Oct 22 23:00:40 2025 GMT Subject: CN=90de8b1b86c0d2931b8e97c72575a054368c275a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:a0:70:2a:e0:9d:30:70:8e:43:b4:cf:cb: d3:8f:bb:08:7e:2d:87:1b:3e:ab:49:ad:61:37:29: aa:88:c8:dd:02:07:09:c8:db:db:3a:44:ae:e1:7a: ca:73:62:fd:c0:47:a7:8e:6d:95:f9:f7:97:c3:68: 4f:4c:81:09:0d:7d:30:1e:91:f6:5e:3c:71:74:26: 7f:5a:d3:bc:95:e0:17:78:ec:9f:b2:5c:2d:21:a6: ef:4f:83:f1:4d:d4:51:a2:7d:dc:84:6a:cb:c8:5e: 24:39:18:d5:7a:18:35:03:28:ab:b2:91:50:d4:3e: b1:51:3f:b6:11:80:33:0c:5e:9a:b6:3b:55:71:fa: 41:3b:3d:af:2b:8e:6d:cc:93:bd:45:0f:a4:81:7c: f0:a7:13:2f:a4:ee:6a:23:49:5b:e6:5a:db:10:13: 0c:c9:3b:30:f5:65:87:53:b7:30:62:e6:57:8c:40: 43:28:bf:27:74:d6:65:19:f3:ff:fa:93:b5:c5:7c: 71:ce:27:c1:07:f7:b5:cf:06:65:8f:14:9a:57:35: b0:e9:4d:bb:d7:35:60:21:a0:64:83:e4:6c:b2:4a: 79:3c:e1:67:0c:6c:d1:a1:7c:ef:51:31:d2:ee:88: 94:f6:3e:27:22:18:e4:23:42:b2:86:54:73:20:dc: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DE:8B:1B:86:C0:D2:93:1B:8E:97:C7:25:75:A0:54:36:8C:27:5A X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6e:c9:93:0e:29:d7:1c:00:1a:21:61:5f:62:69:e8:a2:ff: 5e:20:59:e0:e0:25:7a:3e:dc:cc:5b:2b:ce:44:f8:f8:ef:7d: ac:34:00:26:83:10:22:39:74:73:1a:93:48:ad:ab:65:8b:92: 09:a1:6f:d9:0e:79:e1:dc:62:70:a2:8a:da:4c:da:12:0d:b5: 3e:2e:f6:4b:9e:2f:a8:e2:a7:eb:cd:43:bf:f7:54:3a:c7:80: fe:5f:b1:b9:a0:00:7f:f4:9b:cd:4e:dd:1d:51:27:31:c7:61: 9f:41:b7:de:50:0b:27:07:6a:66:76:c0:ec:f1:fe:53:72:e6: 0c:dd:cc:e7:91:b7:8d:d5:e9:80:ff:5f:eb:04:39:29:51:95: 64:9d:c0:35:a3:e7:c4:8d:96:70:33:29:2d:81:1d:a4:9c:c9: 2c:47:0f:42:ae:d0:14:bc:13:35:2a:4f:aa:64:7d:23:30:9d: 8a:bd:fe:f6:97:1a:f8:6d:0c:89:0b:e5:1d:ad:51:3c:ad:b7: cb:20:c0:95:2d:48:25:d7:e9:8a:0a:b4:08:f6:5f:2b:1e:f2: ef:12:ec:e3:44:76:65:72:b9:18:dc:ab:dc:dc:8f:10:67:07: f7:0c:aa:15:cc:89:e6:13:fa:8d:d1:5d:c3:80:0f:3f:bf:f3: 8f:7b:02:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoJANJ+6XWt+lG5I7K3zp55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUxMDIxMjMwMDQwWhcNMjUxMDIyMjMwMDQwWjAzMTEwLwYDVQQD Eyg5MGRlOGIxYjg2YzBkMjkzMWI4ZTk3YzcyNTc1YTA1NDM2OGMyNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvOgcCrgnTBwjkO0z8vTj7sIfi2H Gz6rSa1hNymqiMjdAgcJyNvbOkSu4XrKc2L9wEenjm2V+feXw2hPTIEJDX0wHpH2 XjxxdCZ/WtO8leAXeOyfslwtIabvT4PxTdRRon3chGrLyF4kORjVehg1AyirspFQ 1D6xUT+2EYAzDF6atjtVcfpBOz2vK45tzJO9RQ+kgXzwpxMvpO5qI0lb5lrbEBMM yTsw9WWHU7cwYuZXjEBDKL8ndNZlGfP/+pO1xXxxzifBB/e1zwZljxSaVzWw6U27 1zVgIaBkg+Rsskp5POFnDGzRoXzvUTHS7oiU9j4nIhjkI0KyhlRzINzY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDeixuGwNKTG46XxyV1oFQ2jCdaMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG7Jkw4p 1xwAGiFhX2Jp6KL/XiBZ4OAlej7czFsrzkT4+O99rDQAJoMQIjl0cxqTSK2rZYuS CaFv2Q554dxicKKK2kzaEg21Pi72S54vqOKn681Dv/dUOseA/l+xuaAAf/SbzU7d HVEnMcdhn0G33lALJwdqZnbA7PH+U3LmDN3M55G3jdXpgP9f6wQ5KVGVZJ3ANaPn xI2WcDMpLYEdpJzJLEcPQq7QFLwTNSpPqmR9IzCdir3+9pca+G0MiQvlHa1RPK23 yyDAlS1IJdfpigq0CPZfKx7y7xLs40R2ZXK5GNyr3NyPEGcH9wyqFcyJ5hP6jdFd w4APP7/zj3sCEQ== -----END CERTIFICATE-----Generated at Wed Oct 22 01:12:35 2025 by rpki-client