$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json) Hash identifier: ynA6PAgE36n7cYaXrRYTVZ2EH3tjnvWm/CCjFA1a/7s= Subject key identifier: CD:95:8E:92:F1:F8:8B:93:23:42:F5:2B:84:C4:3D:2D:66:C4:F2:1B Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019A047F75516BD58A80CD34AC269FD474B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft Manifest number: 17D7 Signing time: Tue 21 Oct 2025 02:00:53 +0000 Manifest this update: Tue 21 Oct 2025 02:00:53 +0000 Manifest next update: Wed 22 Oct 2025 02:00:53 +0000 Files and hashes: 1: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=) 2: 60lT6E7Hw-SybLa6dCTef8Owqso.roa (hash: kxBaSXQQFFLnQ/jWfDvLC1N4uboGoYMJnKAExPscFWo=) 3: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: /VOsxpteM3TMOeCTdOA7wW7GwE1JlpUf2WwIewlhM7M=) 4: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=) 5: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=) 6: G9iD8U4QCioeA79cHr2xVSAWeEI.roa (hash: isof3/aO68rNSeHuTbxaBE/zI2rUwZRzXlA4N/t2RR8=) 7: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=) 8: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=) 9: MNEt8VrSmpVV6QQFZEtFkOb964o.roa (hash: Qp6oqipOgd4f6BqRbUAiNDAjU+YosYUxQPAPrWVqcBE=) 10: Mdp9Kv-Vu7KoI3CAPKr9JqJyQF0.roa (hash: SVNqMzugCbLVwMP8haqTfMrXYGbHl90Ct7rAkwp4GGU=) 11: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=) 12: O9cN0ZR3uRs9JZLPjZ_apekO_1o.roa (hash: VyuL/Lcqim34ks+x+bFHqTVYiETL9VCXnibosD6RzqE=) 13: Obd0TP3GM2qFhxCeUl776x_wh1g.roa (hash: OVSI64PyDEHSWLVlOyHTkwd2XBJdT2kOn3yTEvpf6KI=) 14: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=) 15: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=) 16: S5aHdm30TryFtG2jDVy3wkSOz2Q.roa (hash: gGROgcge0wvbKabdkDSLw/YtICixKaiQd0Hk++1c5Is=) 17: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=) 18: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=) 19: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=) 20: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=) 21: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=) 22: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=) 23: eB2hSV_Hdx6UpXi8AI7IynGR-nU.roa (hash: dc/doO6o1+KWXt12g3TR56aCxeeTLAIL3hhXaij4HvQ=) 24: eYe0ntoHsn5C9aoZKH_cB21Bfys.roa (hash: rbiYcU0iwzMDkl2hqOmLPRmcdqv8DqvFIgub7i+wD8o=) 25: f460IPqQlQEG9Ilmybk9LOnau4A.roa (hash: 1vIbZBuCjlKIeaULpU2EaovNh3t6eGRb6tKyHFFkmzQ=) 26: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=) 27: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=) 28: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=) 29: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:7f:75:51:6b:d5:8a:80:cd:34:ac:26:9f:d4:74:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Oct 21 02:00:53 2025 GMT Not After : Oct 22 02:00:53 2025 GMT Subject: CN=cd958e92f1f88b932342f52b84c43d2d66c4f21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:ba:4a:cf:3a:e4:2c:03:00:ba:77:f7:1a: 6e:52:be:45:1e:b0:02:ff:4c:b8:82:31:57:ce:52: 2f:4f:ea:8f:c9:43:15:85:72:bb:59:02:b2:1a:be: 87:60:1c:4b:d9:6c:ab:b6:3c:81:a1:90:71:de:ec: 66:68:bb:ae:6e:52:d3:63:b3:71:97:83:23:57:31: 63:fd:65:9b:2c:d0:96:c8:ad:f1:c6:16:32:cd:06: 85:15:d2:91:17:9c:fd:77:8f:6e:b1:a7:aa:ad:b2: bb:ed:fe:fb:0c:26:e6:60:9d:e1:87:89:8f:7a:3d: d7:f8:ff:f4:f0:ff:ca:07:ba:8a:15:ba:18:d4:95: fd:9f:18:71:dc:86:9f:71:a5:ca:7e:65:a4:f4:ae: 45:2a:b5:c1:56:9e:e7:25:65:d2:15:1c:ae:54:b8: e2:97:0b:5b:50:05:cc:b9:84:88:7c:ee:3d:d0:b2: 96:9b:76:7c:b3:45:b8:b6:db:6a:df:bd:e9:79:39: e5:de:a9:a6:c8:40:09:ea:82:97:ce:ec:08:52:6f: 1f:65:27:44:96:43:a6:17:7c:ab:a8:2f:c0:8d:12: c7:4e:2b:39:83:47:d2:92:b6:e3:92:35:2f:cf:13: 34:37:a3:d9:7b:6b:4e:a4:3a:e9:c8:10:63:68:d9: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:95:8E:92:F1:F8:8B:93:23:42:F5:2B:84:C4:3D:2D:66:C4:F2:1B X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8a:46:18:bd:21:d1:73:1a:25:b1:dc:2a:92:20:29:07:fa: eb:47:f4:b6:b4:7a:63:83:5e:07:67:42:91:a6:0b:50:f7:de: 59:f1:73:9c:e9:5c:d8:cc:92:b5:6b:57:a6:cd:d9:68:89:34: ec:10:32:58:b8:3f:67:52:71:06:88:a7:11:62:05:db:40:21: 3e:18:c3:19:64:66:23:4c:5f:c5:46:a3:8e:03:2b:45:9d:c4: 1d:04:6f:b9:1e:9c:0d:9f:a1:a5:8e:02:dd:64:0b:f4:9d:27: ab:c9:74:12:05:d3:15:ea:64:ae:a3:65:21:fd:b0:c1:a9:37: 7a:c9:cf:3b:d1:fd:7e:dd:73:08:72:42:d0:a9:c4:b2:94:0e: c8:21:e5:c1:83:15:71:be:21:23:7c:e9:a2:00:e5:81:91:86: 1b:8e:f0:4a:ce:26:15:92:55:83:8b:0d:a3:f1:15:8f:7b:8d: 8f:4f:c7:d5:eb:9c:76:a4:46:d1:08:61:fe:27:95:19:50:4d: 0c:87:ae:42:54:f0:33:9d:ae:c9:61:1b:16:2a:ec:d7:66:6c: f5:92:44:35:50:cd:12:3e:18:e3:63:87:fb:46:c9:6f:ff:ea: 19:09:dc:bc:35:5f:cc:43:2b:af:9f:76:3e:37:ac:86:1e:0c: 53:f0:46:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoEf3VRa9WKgM00rCaf1HSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjUxMDIxMDIwMDUzWhcNMjUxMDIyMDIwMDUzWjAzMTEwLwYDVQQD EyhjZDk1OGU5MmYxZjg4YjkzMjM0MmY1MmI4NGM0M2QyZDY2YzRmMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nu6Ss865CwDALp39xpuUr5FHrAC /0y4gjFXzlIvT+qPyUMVhXK7WQKyGr6HYBxL2WyrtjyBoZBx3uxmaLuublLTY7Nx l4MjVzFj/WWbLNCWyK3xxhYyzQaFFdKRF5z9d49usaeqrbK77f77DCbmYJ3hh4mP ej3X+P/08P/KB7qKFboY1JX9nxhx3IafcaXKfmWk9K5FKrXBVp7nJWXSFRyuVLji lwtbUAXMuYSIfO490LKWm3Z8s0W4tttq373peTnl3qmmyEAJ6oKXzuwIUm8fZSdE lkOmF3yrqC/AjRLHTis5g0fSkrbjkjUvzxM0N6PZe2tOpDrpyBBjaNn6xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2VjpLx+IuTI0L1K4TEPS1mxPIbMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIpGGL0h 0XMaJbHcKpIgKQf660f0trR6Y4NeB2dCkaYLUPfeWfFznOlc2MyStWtXps3ZaIk0 7BAyWLg/Z1JxBoinEWIF20AhPhjDGWRmI0xfxUajjgMrRZ3EHQRvuR6cDZ+hpY4C 3WQL9J0nq8l0EgXTFepkrqNlIf2wwak3esnPO9H9ft1zCHJC0KnEspQOyCHlwYMV cb4hI3zpogDlgZGGG47wSs4mFZJVg4sNo/EVj3uNj0/H1eucdqRG0Qhh/ieVGVBN DIeuQlTwM52uyWEbFirs12Zs9ZJENVDNEj4Y42OH+0bJb//qGQncvDVfzEMrr592 Pjeshh4MU/BGSg== -----END CERTIFICATE-----Generated at Tue Oct 21 07:48:10 2025 by rpki-client