$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: ioPmRuqvH+XuTT+w8HIOhS3zH+LUHCvyynV2Qlo6fb8= Subject key identifier: 9B:B5:F7:A3:98:56:62:DA:C1:BB:0D:1C:60:C5:D4:B7:21:7C:F1:01 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019A06A4572A834E9DADD9300D2157E776FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 108A Signing time: Tue 21 Oct 2025 12:00:24 +0000 Manifest this update: Tue 21 Oct 2025 12:00:24 +0000 Manifest next update: Wed 22 Oct 2025 12:00:24 +0000 Files and hashes: 1: 5dCYwgA9XnsPyTZF0PH2sEFIENQ.roa (hash: HeN6VLa+RLAMtmcxH1afx2NR8Pkm/Q2bNQH+mpmkM84=) 2: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=) 3: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=) 4: BvGloeMd1pr-0RarsG3frbQCits.roa (hash: GcGKUXns2ciEuVorqL/ux5XGAMK5utLWLfmy9SJ0sbM=) 5: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: ze5xbUSECAAJdf6BNxShwfD4rh5fldBOJheN4cteun0=) 6: D5MvDrzK0eKeBhQPT5E-qcyDegE.roa (hash: ZZ3rGXDkZjhVdVSt+mJABSAAxbotcysbVgd0Yw1KZd4=) 7: GWboZrvlBziZoBcX3EIZ1oPONJw.roa (hash: AivjmWkJZRMdojRH4kleqZQJ33BcMzsWC3Fh1Qo8D3Q=) 8: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=) 9: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=) 10: RwYEm65b8XQNDy46vCHqyZW3Y6s.roa (hash: v8bQAfIVS0lLBFw7BBQ+R9uzZIlihT0yfMcq6jdQWUI=) 11: SRcQTsQI-tcWDkKInxMrE24Ysok.roa (hash: Ahr9YcByWBXusMBM+n1pwDVQOVjVHUrt6dCBioyhQio=) 12: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (hash: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=) 13: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=) 14: ZPm62e8uWHs6KBXJ7NoF7XOySMc.roa (hash: 30wlsbHL60VdCwwpHaURDp5qoaEvw/fBx8WqJfwV9hQ=) 15: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=) 16: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=) 17: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=) 18: gb_7RBDBHtSouzTkIocBb4u61RM.roa (hash: uthvRlwLyi3YEwwwgsTSY0oSHHc2cmy6aV2kce8gTFg=) 19: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=) 20: jCupyTailD4J3l_LQLBvtP05gjk.roa (hash: D5HBTRbrPgt5UiMToMLoELxSS8TE8kgjWsHI9+xY4kE=) 21: qLhyc6MW2r9mcmTEvOiGtvd2aUc.roa (hash: p41rnytxWXHHTN60Yh5AKBIQBvZ5+HCiPPoZWRXZ5x0=) 22: rPciKNxouTUmkCLDkFKKyn388Cc.roa (hash: zI+gdKXH7CP5oPaL5HXMew7Kewt2hB10+HNYNloE0UY=) 23: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:a4:57:2a:83:4e:9d:ad:d9:30:0d:21:57:e7:76:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Oct 21 12:00:24 2025 GMT Not After : Oct 22 12:00:24 2025 GMT Subject: CN=9bb5f7a3985662dac1bb0d1c60c5d4b7217cf101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:47:e3:2e:f8:a8:c2:ec:da:84:0c:9d:ac: 3d:53:85:4d:15:a4:d9:45:5d:06:c5:26:4e:eb:05: 66:2f:89:35:7e:3d:5d:0b:92:5b:97:83:22:6c:50: 00:e6:77:b0:45:77:19:6b:37:32:98:5e:81:ed:2f: e8:ec:4e:f2:c5:aa:fa:96:49:d3:de:7b:2a:63:f8: 0a:f5:ea:8d:a3:66:48:b4:d4:76:32:d3:3c:06:52: e3:40:f0:57:a0:80:57:43:dc:bb:50:1b:7f:81:a7: 65:2d:92:db:bb:ea:c7:33:7b:6a:3a:d9:c3:05:30: a3:ed:80:33:6f:7e:af:41:5b:ae:9f:06:29:67:e6: dd:13:fe:f2:d0:ed:48:86:04:f1:87:7d:70:fb:52: 5f:3f:ea:5c:cb:c3:40:51:4c:1c:9f:2d:b3:2b:f7: ce:8c:93:dc:cd:9f:2f:a7:e6:e8:4c:0d:be:6c:70: 08:eb:b2:1f:04:8c:c2:a2:70:f6:28:b1:5e:35:15: 77:07:b1:da:e9:b8:dd:1f:5c:bf:be:1f:0b:fd:9a: b4:14:fa:b5:13:c3:3a:de:09:f6:df:aa:27:66:d4: cf:17:21:f6:15:40:0c:09:c4:dd:1b:cd:41:49:c4: f1:04:98:ee:e3:7e:7e:19:df:ff:39:11:da:bd:f3: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B5:F7:A3:98:56:62:DA:C1:BB:0D:1C:60:C5:D4:B7:21:7C:F1:01 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:7e:de:f4:56:bd:a7:39:87:6e:97:27:2f:d9:d9:fd:24:d9: 70:e2:83:b0:78:cd:be:4c:9d:8d:a2:c2:c9:bd:0d:44:10:de: 0c:a3:16:5c:5b:91:d8:70:8a:c7:33:ea:60:7a:54:45:02:63: 01:e9:2d:42:ed:2b:d0:1e:20:79:0d:62:34:f3:44:2e:68:1d: fe:4a:59:39:77:24:3c:43:04:78:8e:97:69:a5:34:93:21:9a: d8:b5:22:28:ce:a9:d6:0f:4f:f8:85:5c:b6:6c:b3:00:9b:59: f4:76:d7:d4:0b:2d:f3:c4:f4:5d:c7:b1:65:07:34:ff:7b:5e: 9d:76:18:b9:5b:a8:53:30:f9:21:1d:c6:74:c5:a6:1f:f9:63: fe:88:73:77:5d:59:9f:c7:08:1e:04:3e:d4:e1:ca:78:e4:b7: c4:4e:b1:26:b4:66:0b:ef:53:20:e5:f1:93:7e:3e:d1:f5:6a: c5:65:dc:0f:d0:e4:ec:82:b5:c4:30:40:73:96:aa:2a:b9:b1: 4e:8e:be:be:a5:87:1b:f3:1f:50:ac:cf:bd:3b:c8:06:7e:cc: 7f:47:64:fc:68:7b:36:96:6b:16:ce:a8:5a:09:f8:56:0f:f3: d1:4f:c1:27:23:e9:27:ab:09:5f:64:ab:a6:07:9d:07:f4:44: 0c:ca:4a:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGpFcqg06drdkwDSFX53b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUxMDIxMTIwMDI0WhcNMjUxMDIyMTIwMDI0WjAzMTEwLwYDVQQD Eyg5YmI1ZjdhMzk4NTY2MmRhYzFiYjBkMWM2MGM1ZDRiNzIxN2NmMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfxH4y74qMLs2oQMnaw9U4VNFaTZ RV0GxSZO6wVmL4k1fj1dC5Jbl4MibFAA5newRXcZazcymF6B7S/o7E7yxar6lknT 3nsqY/gK9eqNo2ZItNR2MtM8BlLjQPBXoIBXQ9y7UBt/gadlLZLbu+rHM3tqOtnD BTCj7YAzb36vQVuunwYpZ+bdE/7y0O1IhgTxh31w+1JfP+pcy8NAUUwcny2zK/fO jJPczZ8vp+boTA2+bHAI67IfBIzConD2KLFeNRV3B7Ha6bjdH1y/vh8L/Zq0FPq1 E8M63gn236onZtTPFyH2FUAMCcTdG81BScTxBJju435+Gd//ORHavfPVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu196OYVmLawbsNHGDF1LchfPEBMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4n7e9Fa9 pzmHbpcnL9nZ/STZcOKDsHjNvkydjaLCyb0NRBDeDKMWXFuR2HCKxzPqYHpURQJj AektQu0r0B4geQ1iNPNELmgd/kpZOXckPEMEeI6XaaU0kyGa2LUiKM6p1g9P+IVc tmyzAJtZ9HbX1Ast88T0XcexZQc0/3tenXYYuVuoUzD5IR3GdMWmH/lj/ohzd11Z n8cIHgQ+1OHKeOS3xE6xJrRmC+9TIOXxk34+0fVqxWXcD9Dk7IK1xDBAc5aqKrmx To6+vqWHG/MfUKzPvTvIBn7Mf0dk/Gh7NpZrFs6oWgn4Vg/z0U/BJyPpJ6sJX2Sr pgedB/REDMpKCw== -----END CERTIFICATE-----Generated at Tue Oct 21 22:53:19 2025 by rpki-client