$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: SHAmezRvQci/bWc7q72Pd9tFOlC1alrEouDgevLvVls= Subject key identifier: C0:17:F6:D0:44:0D:73:E5:86:E9:99:1F:B0:A5:F1:D1:A8:1D:B9:CB Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019A1D9A941392CC5A65AF73F40B6909DE67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 1747 Signing time: Sat 25 Oct 2025 23:01:00 +0000 Manifest this update: Sat 25 Oct 2025 23:01:00 +0000 Manifest next update: Sun 26 Oct 2025 23:01:00 +0000 Files and hashes: 1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=) 2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=) 3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=) 4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=) 5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=) 6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=) 7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=) 8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=) 9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=) 10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=) 11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=) 12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=) 13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=) 14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=) 15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=) 16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=) 17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: 2VVgvh2Ef+ri7KhxKDRkWfBN33fKW8JvuxQS3OH+J2Q=) 18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=) 19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=) 20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:9a:94:13:92:cc:5a:65:af:73:f4:0b:69:09:de:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Oct 25 23:01:00 2025 GMT Not After : Oct 26 23:01:00 2025 GMT Subject: CN=c017f6d0440d73e586e9991fb0a5f1d1a81db9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:7a:4a:72:41:ce:9c:9e:fa:d6:16:61:68: 62:c7:ef:b0:12:14:3e:b3:c6:8a:37:c9:48:f1:6c: 88:00:aa:5d:7f:2e:70:60:cb:34:92:aa:e1:f8:99: 00:f2:98:e3:72:f7:9c:7f:e0:52:a6:5d:c4:21:90: 58:84:db:c9:03:4f:90:69:7b:6c:e7:c0:df:dc:3b: 39:4a:06:69:d9:40:76:49:66:dc:09:0d:fc:a6:e4: 84:af:84:36:92:d1:eb:55:a3:69:64:b4:12:cf:fd: 20:24:c8:fc:03:7f:a8:3c:c9:bd:a2:fd:6b:b7:66: c0:f4:a3:cb:82:45:4a:44:2b:cc:1b:3f:29:d5:dd: 9c:a1:22:e8:a8:f0:43:ae:fa:91:3a:3c:6f:84:41: 83:ec:fd:ce:38:db:1e:c1:33:d8:05:3f:29:1a:5e: 9d:58:15:66:3b:c4:fe:93:a0:e2:af:84:8b:00:c6: 77:72:89:a0:79:9a:75:5a:cf:f8:e7:5d:08:97:0a: da:71:d1:f5:14:92:8a:50:7a:d7:a7:4e:ee:cb:ad: de:b6:11:42:06:94:70:f1:ce:37:e2:2a:92:a7:37: eb:88:db:7e:54:30:f3:33:2c:87:c5:6e:32:ec:a9: c6:56:a8:fa:8e:77:e8:32:c4:ab:a2:ec:bd:47:b4: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:17:F6:D0:44:0D:73:E5:86:E9:99:1F:B0:A5:F1:D1:A8:1D:B9:CB X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:de:30:0f:cd:a0:f2:f3:68:69:1e:3b:8d:3c:aa:34:86:30: bd:07:28:07:43:a9:04:a2:c4:bc:94:a5:d9:fc:a2:ac:e3:90: e4:48:9b:f6:cb:6e:69:e6:60:07:82:f7:42:8e:01:cb:6c:c0: 4f:dd:34:74:a2:e2:b2:eb:01:5b:44:d7:11:41:01:21:12:5c: 34:23:ae:e6:62:fb:1f:13:60:27:c0:24:5a:47:8b:a3:3a:e4: 3b:43:31:47:29:9d:c8:3e:52:98:68:a6:c0:d2:31:fb:8b:0b: 96:5d:09:c4:4e:fd:4d:4b:e9:6d:ad:d2:5c:dc:81:4e:54:ce: d4:7d:47:3c:52:e4:8b:75:7f:9f:c6:a3:3e:cd:90:79:6b:16: a3:9a:c6:ba:ae:f9:b8:2f:c0:dd:c2:6f:1c:5e:7c:9b:b8:7c: 43:b4:e4:27:f9:5a:d4:f7:9b:b2:44:bb:75:6e:80:99:4f:9d: d2:e9:d0:5b:7f:8a:2d:3c:1f:78:f1:c5:c0:97:07:66:11:51: c4:84:29:f6:6c:f3:0c:09:17:d6:2b:a2:d1:bf:30:67:f2:75: 2d:0c:01:f7:66:b2:f4:f2:33:0d:d8:3a:8d:f2:15:18:e4:f4: 5f:16:a8:96:16:05:c2:57:ec:9a:cd:4e:59:e2:f8:7c:15:95: 66:b4:8b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZodmpQTksxaZa9z9AtpCd5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjUxMDI1MjMwMTAwWhcNMjUxMDI2MjMwMTAwWjAzMTEwLwYDVQQD EyhjMDE3ZjZkMDQ0MGQ3M2U1ODZlOTk5MWZiMGE1ZjFkMWE4MWRiOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutB6SnJBzpye+tYWYWhix++wEhQ+ s8aKN8lI8WyIAKpdfy5wYMs0kqrh+JkA8pjjcvecf+BSpl3EIZBYhNvJA0+QaXts 58Df3Ds5SgZp2UB2SWbcCQ38puSEr4Q2ktHrVaNpZLQSz/0gJMj8A3+oPMm9ov1r t2bA9KPLgkVKRCvMGz8p1d2coSLoqPBDrvqROjxvhEGD7P3OONsewTPYBT8pGl6d WBVmO8T+k6Dir4SLAMZ3comgeZp1Ws/4510IlwracdH1FJKKUHrXp07uy63ethFC BpRw8c434iqSpzfriNt+VDDzMyyHxW4y7KnGVqj6jnfoMsSrouy9R7T1FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAX9tBEDXPlhumZH7Cl8dGoHbnLMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkt4wD82g 8vNoaR47jTyqNIYwvQcoB0OpBKLEvJSl2fyirOOQ5Eib9stuaeZgB4L3Qo4By2zA T900dKLisusBW0TXEUEBIRJcNCOu5mL7HxNgJ8AkWkeLozrkO0MxRymdyD5SmGim wNIx+4sLll0JxE79TUvpba3SXNyBTlTO1H1HPFLki3V/n8ajPs2QeWsWo5rGuq75 uC/A3cJvHF58m7h8Q7TkJ/la1PebskS7dW6AmU+d0unQW3+KLTwfePHFwJcHZhFR xIQp9mzzDAkX1iui0b8wZ/J1LQwB92ay9PIzDdg6jfIVGOT0XxaolhYFwlfsms1O WeL4fBWVZrSL9A== -----END CERTIFICATE-----Generated at Sun Oct 26 03:12:21 2025 by rpki-client