$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: QWtoZ2oDSpV3DM2ca/osYzaXLdS48Hc0emxBJH9TlUI= Subject key identifier: D4:BB:99:C6:71:DD:34:A5:75:E1:DA:4A:19:38:7F:04:87:6E:AB:0A Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019A04ED0D57EC5A0B641EAA4CCB2BD8DFA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1487 Signing time: Tue 21 Oct 2025 04:00:35 +0000 Manifest this update: Tue 21 Oct 2025 04:00:35 +0000 Manifest next update: Wed 22 Oct 2025 04:00:35 +0000 Files and hashes: 1: 0vnSiPOWnmFU81unx3CiiKoqL9Y.roa (hash: DfmLpO9j7T70YWipxuVu48t55S7NoYp0HKdaTOCmQYU=) 2: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=) 3: 5hhLPsRpw9KA7o9wasEihzJSXoA.roa (hash: rLTFQz+FRyLZFkOs44WSv8ULNMp8Sfi16jOBN6XhYiE=) 4: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=) 5: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=) 6: GMWgFQwd8nrIkV51lAwKwBtEBhI.roa (hash: +zDKOCeZ+E87qba/A9Qx+V3SrLOM1wpx9qfe7qe53g8=) 7: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=) 8: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=) 9: TGAbtOOQvJAO29jntkyfdiXsA34.roa (hash: Qa/Pmj8niQ7pWqzQURSMGZYQ5K31JvVZc6izGiwMvgM=) 10: VvWxBpgkQSp13g1sdt8P4SzC2m0.roa (hash: 9FE7dSvN+4LiBj47pFfaG8MIDBafbeRoSmTUhhQ2sfk=) 11: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=) 12: _CppwLlq6EutxXy9VYLWRzQtpMI.roa (hash: HLVjcT4MvYXdp8jvaIO+svVJJc+g5S0hq1BnrCGWs9M=) 13: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: IK9oeojuf7Rj3UeKej0KA7gD5rR4vOtKktkUpbDetEs=) 14: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=) 15: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=) 16: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=) 17: q56DpE6SjT4lDV119A67V9CrQMI.roa (hash: sEJe90A/qwDILaO38ksc6uM3fs95yXl9fIcKPIheClI=) 18: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=) 19: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:ed:0d:57:ec:5a:0b:64:1e:aa:4c:cb:2b:d8:df:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Oct 21 04:00:35 2025 GMT Not After : Oct 22 04:00:35 2025 GMT Subject: CN=d4bb99c671dd34a575e1da4a19387f04876eab0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:cd:1b:42:cd:1e:13:18:f1:58:24:55:fc: 9f:c4:95:c9:c1:52:51:a1:73:1a:af:11:19:a2:e3: 1b:0c:1c:96:7e:47:65:87:23:35:3f:af:ab:12:8a: d6:f3:df:e4:fa:89:aa:7a:81:2c:ec:76:7c:83:33: 5b:3c:dc:60:63:04:a2:ad:49:ff:81:1b:05:ba:12: 88:36:31:d7:d8:ae:f0:19:f4:2e:fc:13:a7:91:60: 35:e6:73:4e:43:a3:fb:47:4d:1f:0f:21:ce:4a:d7: 28:22:19:0e:a9:b6:1e:b4:67:80:51:b9:d8:78:b1: 0c:f0:4a:0a:32:17:33:84:53:4c:d3:70:85:7f:6a: 46:7e:94:45:7c:ca:cf:8f:41:e9:5b:82:1e:57:dc: 24:bb:ff:42:e7:b9:6f:5b:ec:19:0a:05:9f:36:d0: 60:9f:f8:2b:6a:29:e3:18:32:6b:25:87:a4:9b:08: ef:87:5f:35:da:29:f2:6f:91:ed:3d:88:fb:e7:90: ff:c3:5c:fa:58:53:d0:fa:37:09:43:a2:39:ea:9f: 55:26:ec:b6:9b:d3:f8:c6:cc:20:c6:77:70:64:10: 51:d2:1e:57:28:78:4b:65:81:34:e6:6a:e7:e6:97: 71:81:8f:12:d1:98:bf:a5:ee:66:4c:a8:00:e6:53: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BB:99:C6:71:DD:34:A5:75:E1:DA:4A:19:38:7F:04:87:6E:AB:0A X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:88:42:cf:72:42:b3:37:db:45:3a:46:4f:d8:c6:39:15:2d: 36:95:aa:45:78:b7:81:21:45:a0:b1:e1:60:11:24:c0:7f:2a: 2d:4e:47:ad:ec:af:2d:51:5b:c3:04:25:51:46:b7:db:8a:d3: f0:aa:9c:8c:bb:a2:47:a7:67:3c:af:d5:d0:73:49:01:e1:38: 99:d3:a5:8b:77:33:63:75:67:41:54:f9:d3:d5:cf:e5:c4:57: 7b:b3:66:10:18:75:c8:43:db:01:47:48:96:fc:0a:8e:f1:66: d0:a0:b4:e4:ef:89:20:97:ed:e6:6d:b9:20:b3:e7:ae:86:d9: 24:38:d3:de:e5:5a:86:62:44:a0:89:26:ad:63:86:b0:7a:b4: d7:66:25:f0:40:cb:7e:e4:2f:ea:3c:1c:f6:0f:bc:01:df:47: ee:9f:df:32:2a:8e:2f:e5:b1:e1:8f:70:d1:19:cc:48:2e:11: 21:c6:b1:09:2e:da:60:b8:d0:8a:6b:0b:91:67:e1:c3:2b:29: 60:25:ee:cf:34:9e:d6:c1:cf:c9:50:1a:b0:06:03:3b:76:bd: de:9d:e2:ba:0d:00:42:7d:aa:ef:41:df:d7:bc:da:55:ef:71: e7:7f:9b:85:4f:24:6e:10:a9:14:2b:8b:62:a4:73:c2:c7:c6: f4:ba:78:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoE7Q1X7FoLZB6qTMsr2N+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUxMDIxMDQwMDM1WhcNMjUxMDIyMDQwMDM1WjAzMTEwLwYDVQQD EyhkNGJiOTljNjcxZGQzNGE1NzVlMWRhNGExOTM4N2YwNDg3NmVhYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSnNG0LNHhMY8VgkVfyfxJXJwVJR oXMarxEZouMbDByWfkdlhyM1P6+rEorW89/k+omqeoEs7HZ8gzNbPNxgYwSirUn/ gRsFuhKINjHX2K7wGfQu/BOnkWA15nNOQ6P7R00fDyHOStcoIhkOqbYetGeAUbnY eLEM8EoKMhczhFNM03CFf2pGfpRFfMrPj0HpW4IeV9wku/9C57lvW+wZCgWfNtBg n/grainjGDJrJYekmwjvh1812inyb5HtPYj755D/w1z6WFPQ+jcJQ6I56p9VJuy2 m9P4xswgxndwZBBR0h5XKHhLZYE05mrn5pdxgY8S0Zi/pe5mTKgA5lOD7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS7mcZx3TSldeHaShk4fwSHbqsKMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4hCz3JC szfbRTpGT9jGORUtNpWqRXi3gSFFoLHhYBEkwH8qLU5HreyvLVFbwwQlUUa324rT 8KqcjLuiR6dnPK/V0HNJAeE4mdOli3czY3VnQVT509XP5cRXe7NmEBh1yEPbAUdI lvwKjvFm0KC05O+JIJft5m25ILPnrobZJDjT3uVahmJEoIkmrWOGsHq012Yl8EDL fuQv6jwc9g+8Ad9H7p/fMiqOL+Wx4Y9w0RnMSC4RIcaxCS7aYLjQimsLkWfhwysp YCXuzzSe1sHPyVAasAYDO3a93p3iug0AQn2q70Hf17zaVe9x53+bhU8kbhCpFCuL YqRzwsfG9Lp4KQ== -----END CERTIFICATE-----Generated at Tue Oct 21 07:48:12 2025 by rpki-client