$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft File: oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json) Hash identifier: Qf7byCYIjkFpbB/MXSgtvW67jGgKGyTS7Rp/E8w5tVA= Subject key identifier: 39:47:C2:CB:57:DC:7F:E4:2C:7A:44:7E:A1:7E:59:11:DF:8B:59:E9 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019A1428FE19CAE29C4B64B04197690BFFFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft Manifest number: 17BE Signing time: Fri 24 Oct 2025 03:00:22 +0000 Manifest this update: Fri 24 Oct 2025 03:00:22 +0000 Manifest next update: Sat 25 Oct 2025 03:00:22 +0000 Files and hashes: 1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=) 2: 2smUB5D8W7tuf_xW5EH9jWoz4DM.roa (hash: rTDJvm0oMNC8IUj5+JS+3prpnZefKwYKD4MK14dTYOE=) 3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=) 4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=) 5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=) 6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=) 7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=) 8: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=) 9: IStNe4e6LhEN0WqF0khMmbBnvEQ.roa (hash: SucxZMcCMGO/p9cXrgX+1VRtuUi5NI2PuW6+EwcCJx8=) 10: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=) 11: Khdam5ye6nHBc4YW_yrjL25Chls.roa (hash: zu0nJg15zErx3dxZklgiK5ZzU5CwLzliF0MMLUaHiLs=) 12: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=) 13: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=) 14: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=) 15: QXjuOZgIB7V4oeaWX_BSYxvGQAU.roa (hash: 5m//oQGydvMXsHbRUuZAe1hKShJ2UuaSj0j4KmQCCK0=) 16: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=) 17: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=) 18: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=) 19: VV3pVQmA3jL8s0bmbKamtZwlCt0.roa (hash: vCwn19zgG2GXQkWTrwcbkBf3n2pPD744DQga4uWIovg=) 20: VXguZ1IP4OPQ2wSfFG2Zt-8rRmU.roa (hash: FYCub9tLigFfu6QRGXOsYxtNUaq1jqWty883jSxTd34=) 21: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=) 22: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=) 23: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=) 24: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=) 25: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=) 26: fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa (hash: Aef8TeyLWHEX0HhoAhmS5O45O1FHLWTrY+cesMIs6t4=) 27: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=) 28: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=) 29: mygN9EXv15Mv_R2x5EM_di5X8p4.roa (hash: +hnEnqUqGPQ5/+etnnWXKfILgh8ttS98q0vUC8Q5rns=) 30: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: Dm+btSiEIrwRdx0SXIe9n0AnlNpjFx4O51kVuf0DHLI=) 31: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=) 32: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=) 33: ttAnXllamFmBtbR_DYOny1OSmYs.roa (hash: e98MJzYR91mKGrKILF7fKjR02eJfGXannZIuUuXRiAM=) 34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=) 35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:14:28:fe:19:ca:e2:9c:4b:64:b0:41:97:69:0b:ff:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Oct 24 03:00:22 2025 GMT Not After : Oct 25 03:00:22 2025 GMT Subject: CN=3947c2cb57dc7fe42c7a447ea17e5911df8b59e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f8:4e:4a:27:fd:c0:ba:48:fa:a4:93:12:f6: a3:01:94:bd:cc:35:ba:0b:97:3d:7b:c8:8d:4f:8c: 43:e1:9f:2e:7c:a1:07:bd:5a:96:e4:08:c4:22:7e: 20:a6:cd:ad:1d:6e:ef:d8:89:99:92:52:f1:ef:95: 92:f3:6b:09:23:74:f6:05:d3:37:7f:0d:ff:bd:c6: f3:c6:29:aa:b1:da:09:9c:c3:38:54:a3:4d:7c:5f: a0:99:8f:37:84:82:e6:9c:0e:f2:e1:31:12:41:71: a4:f2:6e:18:bf:3f:b7:d5:3c:78:45:4b:9c:89:8c: 28:fb:28:d8:8d:af:03:5c:d2:92:f0:46:8a:fc:60: fe:04:11:18:57:f2:64:a7:bd:3e:5f:4d:65:57:08: ae:42:13:33:cc:e8:39:88:54:25:4c:0c:d9:1b:50: 2c:0f:53:42:8f:66:39:50:ec:19:17:2b:3d:ea:36: 6b:66:6a:af:d1:ac:ba:2e:1c:3b:43:4e:37:a8:ed: c5:a2:00:5a:c9:3e:6d:e6:e1:26:43:01:de:76:1a: 2f:a4:dc:29:01:fd:6d:34:63:d6:64:e7:23:52:85: 43:d2:65:5b:f2:2c:f8:b0:94:4b:39:61:2b:42:56: 67:62:a4:45:a9:fa:5f:6e:42:07:8d:dc:e3:27:01: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:47:C2:CB:57:DC:7F:E4:2C:7A:44:7E:A1:7E:59:11:DF:8B:59:E9 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fb:fb:de:5f:09:51:e9:d9:1b:cc:93:18:dc:46:1b:6a:83: 31:81:ee:57:0e:d2:a0:02:ca:85:a6:df:dd:62:96:33:61:5f: 06:85:ac:f4:39:55:a5:cd:60:87:bb:95:76:4a:ea:db:0a:af: a5:a2:18:9b:d5:db:96:32:72:ca:8e:51:d9:6a:b2:b8:4b:f7: e2:f3:15:16:0d:06:e5:f1:90:9d:7f:08:e9:06:22:71:2b:b4: 9d:29:b7:be:81:a3:3d:54:08:63:37:2b:ec:fe:8a:85:56:e8: a0:ed:17:95:2b:d9:cd:8a:8b:cf:a5:5a:09:3d:c6:ef:11:47: 17:49:25:7d:ad:95:96:7b:f3:29:59:38:f4:8e:d0:0c:9a:0f: 6b:5d:29:14:d2:72:0b:5f:26:97:54:74:e9:6b:f8:dd:9c:49: 04:b2:06:da:45:86:cb:64:d1:5f:8f:7e:ce:fb:e0:1f:a3:90: 02:ae:ae:f0:5d:e4:4f:0f:cf:9f:35:ad:cb:2c:c3:63:5d:1c: f1:12:26:69:17:d8:4c:e1:4e:28:3d:45:6d:5f:8c:cf:a8:be: 78:8d:2b:49:19:05:c7:2e:67:b0:48:1f:3e:7f:c8:d5:30:49: 30:2c:3a:81:d1:ae:86:a6:62:b4:0c:df:cf:58:e7:19:dc:61: d9:e3:24:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoUKP4ZyuKcS2SwQZdpC//9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjUxMDI0MDMwMDIyWhcNMjUxMDI1MDMwMDIyWjAzMTEwLwYDVQQD EygzOTQ3YzJjYjU3ZGM3ZmU0MmM3YTQ0N2VhMTdlNTkxMWRmOGI1OWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PhOSif9wLpI+qSTEvajAZS9zDW6 C5c9e8iNT4xD4Z8ufKEHvVqW5AjEIn4gps2tHW7v2ImZklLx75WS82sJI3T2BdM3 fw3/vcbzximqsdoJnMM4VKNNfF+gmY83hILmnA7y4TESQXGk8m4Yvz+31Tx4RUuc iYwo+yjYja8DXNKS8EaK/GD+BBEYV/Jkp70+X01lVwiuQhMzzOg5iFQlTAzZG1As D1NCj2Y5UOwZFys96jZrZmqv0ay6Lhw7Q043qO3FogBayT5t5uEmQwHedhovpNwp Af1tNGPWZOcjUoVD0mVb8iz4sJRLOWErQlZnYqRFqfpfbkIHjdzjJwG6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlHwstX3H/kLHpEfqF+WRHfi1npMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/v73l8J UenZG8yTGNxGG2qDMYHuVw7SoALKhabf3WKWM2FfBoWs9DlVpc1gh7uVdkrq2wqv paIYm9XbljJyyo5R2WqyuEv34vMVFg0G5fGQnX8I6QYicSu0nSm3voGjPVQIYzcr 7P6KhVbooO0XlSvZzYqLz6VaCT3G7xFHF0klfa2VlnvzKVk49I7QDJoPa10pFNJy C18ml1R06Wv43ZxJBLIG2kWGy2TRX49+zvvgH6OQAq6u8F3kTw/PnzWtyyzDY10c 8RImaRfYTOFOKD1FbV+Mz6i+eI0rSRkFxy5nsEgfPn/I1TBJMCw6gdGuhqZitAzf z1jnGdxh2eMkPQ== -----END CERTIFICATE-----Generated at Fri Oct 24 09:05:55 2025 by rpki-client