$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft File: dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json) Hash identifier: 6w+c2FyHvrm6AyRSvTZ2RT3qkza6SsnfM08sPpDlu3s= Subject key identifier: DA:B5:CE:B6:AC:1E:54:23:9A:17:C9:9C:C7:CD:6D:78:7D:31:50:5E Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019A198638D51A3ACFAE5404E495A397BB86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft Manifest number: 1760 Signing time: Sat 25 Oct 2025 04:00:17 +0000 Manifest this update: Sat 25 Oct 2025 04:00:17 +0000 Manifest next update: Sun 26 Oct 2025 04:00:17 +0000 Files and hashes: 1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=) 2: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=) 3: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=) 4: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=) 5: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=) 6: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=) 7: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=) 8: JPWgfoIicBY7uqLCE-abW2DSU0c.roa (hash: A927JecYLMujCKzkMKtyVfZVMSoezFJjSy/bYsYd8SE=) 9: Kvx3aMKyyHxozL3U3ap2oLWDca0.roa (hash: Zz8Vm/BEn2VlT/RjADj2XxnM/3K7+ZuLbhNPkP9kcOQ=) 10: LMdQpYE9dBNTzanGIqV59og3G5Y.roa (hash: O9iBbYU6FJx61oOEQm4eZUxrBSFdJBoBF1RZ/jgTxRE=) 11: M7UMw75zEMferpyTZliqTtxFYGw.roa (hash: bhGEILsyYzSvD2gGTZix+BRHPPr9Z15A13HndBQFJh0=) 12: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=) 13: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=) 14: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=) 15: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=) 16: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=) 17: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=) 18: YmJQTVDgl6pT6ifoZvYr6OgSo-4.roa (hash: IEA1sge5kazioWkKzPv9VfD2BEf9Xg5te8xiJRghijI=) 19: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: Wko26LkzyOs4ntSrxmKYH9/j5MoSwCFDmxx7jKRb2Uw=) 20: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=) 21: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=) 22: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=) 23: jJYsZg4wnTyX9mV0JNA_riAb8aI.roa (hash: 2YSmon6Fik8vSjQAeDBGETPmH22iZ7Gu1aYziQraG2Q=) 24: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=) 25: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=) 26: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=) 27: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=) 28: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=) 29: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=) 30: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=) 31: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=) 32: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=) 33: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=) 34: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=) 35: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:86:38:d5:1a:3a:cf:ae:54:04:e4:95:a3:97:bb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Oct 25 04:00:17 2025 GMT Not After : Oct 26 04:00:17 2025 GMT Subject: CN=dab5ceb6ac1e54239a17c99cc7cd6d787d31505e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:79:13:02:20:05:8a:31:83:b3:a2:50:8c:86: 7c:66:15:50:bf:c5:e4:92:ab:4f:97:aa:20:24:f8: 49:c0:ab:3f:9b:ba:20:53:9d:89:6d:f0:c9:8c:f3: 97:8d:5b:cd:2e:0e:a3:42:69:40:0b:66:c2:c8:33: 36:1f:a1:75:58:5c:0f:1e:d7:72:e3:36:0a:88:ae: 49:46:b6:f7:c2:a9:41:7d:05:5f:65:05:1c:c2:b5: 05:aa:f8:6f:bd:72:23:06:42:b4:a8:df:16:c0:36: d0:6d:3e:b9:c0:57:21:20:1c:0f:39:07:b9:0f:b7: bb:56:ae:19:5f:6d:54:40:e4:1c:da:63:57:ff:7c: 71:e1:1e:12:43:b1:52:8b:55:77:61:53:ca:37:ba: 59:e0:da:e0:b7:f7:3d:71:35:0d:2f:41:58:03:f5: 0f:0b:af:f6:68:25:27:6b:b3:35:8b:8b:df:2c:59: ef:f4:60:16:b6:cc:4d:85:f1:47:41:23:c2:7f:d9: 82:06:71:7e:94:a5:fd:73:72:c5:77:c6:94:fa:87: a3:fe:fb:a0:f7:9f:1a:8c:64:c9:67:3a:dc:b8:83: 48:c5:cc:c0:ef:64:0f:33:00:4e:69:ac:cd:e8:05: e1:6e:21:c4:93:f1:fc:53:49:c7:d8:4a:07:5a:9d: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B5:CE:B6:AC:1E:54:23:9A:17:C9:9C:C7:CD:6D:78:7D:31:50:5E X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:54:13:37:ad:c6:6d:88:81:98:4d:2f:9a:9e:4e:ae:38:39: 0b:50:cc:2a:b4:87:55:0b:1e:94:28:24:b7:d5:f2:0b:51:36: cd:c1:9f:56:55:59:c4:66:bf:d1:14:89:71:f1:0e:0e:0a:d2: 08:a8:bd:f9:26:b8:40:0d:18:56:23:bf:9d:33:bb:20:20:9b: 82:31:16:66:1e:21:db:6b:fb:c9:ed:f0:c7:d4:28:54:70:df: a5:c7:fa:19:00:b3:0c:1b:89:76:b5:cc:b8:03:5e:e7:60:46: a5:60:f8:4c:13:e6:84:91:6c:47:49:7f:8f:17:74:1f:43:ec: 17:dd:83:e3:66:4b:c4:a7:06:68:b1:b7:bd:49:d2:d2:48:d4: 4f:d1:f5:e5:7b:e9:44:df:f8:f0:5d:2f:28:d3:e8:8b:2a:a8: 4d:85:8d:57:39:3a:31:70:1b:23:ef:6b:11:e2:ae:75:d5:49: 9a:61:7e:8d:f1:62:ea:18:4e:3a:0d:75:c4:47:8b:e3:52:e6: 32:95:28:e3:f4:2f:0e:03:f4:8b:74:8b:1d:02:0c:5b:bc:13: da:00:59:5f:0a:5c:95:a5:13:2b:89:22:54:24:95:e0:46:94: 3f:f7:d9:ff:19:f9:18:8a:4b:b2:68:f2:ef:2e:8e:b1:2d:89: ab:a9:24:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZhjjVGjrPrlQE5JWjl7uGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjUxMDI1MDQwMDE3WhcNMjUxMDI2MDQwMDE3WjAzMTEwLwYDVQQD EyhkYWI1Y2ViNmFjMWU1NDIzOWExN2M5OWNjN2NkNmQ3ODdkMzE1MDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3kTAiAFijGDs6JQjIZ8ZhVQv8Xk kqtPl6ogJPhJwKs/m7ogU52JbfDJjPOXjVvNLg6jQmlAC2bCyDM2H6F1WFwPHtdy 4zYKiK5JRrb3wqlBfQVfZQUcwrUFqvhvvXIjBkK0qN8WwDbQbT65wFchIBwPOQe5 D7e7Vq4ZX21UQOQc2mNX/3xx4R4SQ7FSi1V3YVPKN7pZ4Nrgt/c9cTUNL0FYA/UP C6/2aCUna7M1i4vfLFnv9GAWtsxNhfFHQSPCf9mCBnF+lKX9c3LFd8aU+oej/vug 958ajGTJZzrcuINIxczA72QPMwBOaazN6AXhbiHEk/H8U0nH2EoHWp0tMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNq1zrasHlQjmhfJnMfNbXh9MVBeMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlQTN63G bYiBmE0vmp5Orjg5C1DMKrSHVQselCgkt9XyC1E2zcGfVlVZxGa/0RSJcfEODgrS CKi9+Sa4QA0YViO/nTO7ICCbgjEWZh4h22v7ye3wx9QoVHDfpcf6GQCzDBuJdrXM uANe52BGpWD4TBPmhJFsR0l/jxd0H0PsF92D42ZLxKcGaLG3vUnS0kjUT9H15Xvp RN/48F0vKNPoiyqoTYWNVzk6MXAbI+9rEeKuddVJmmF+jfFi6hhOOg11xEeL41Lm MpUo4/QvDgP0i3SLHQIMW7wT2gBZXwpclaUTK4kiVCSV4EaUP/fZ/xn5GIpLsmjy 7y6OsS2Jq6kk3w== -----END CERTIFICATE-----Generated at Sat Oct 25 13:41:45 2025 by rpki-client