$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json) Hash identifier: y2K4crJoFNatEiRb2EV6nXGy+tAnjGkr4O4Zmnksj9s= Subject key identifier: 3D:E8:2E:FF:6B:1A:E7:77:01:29:C0:FB:E9:08:16:4C:DF:57:11:39 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019A1805F326F243DB59D4CDF9A7DEEBF2B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft Manifest number: 09A5 Signing time: Fri 24 Oct 2025 21:00:34 +0000 Manifest this update: Fri 24 Oct 2025 21:00:34 +0000 Manifest next update: Sat 25 Oct 2025 21:00:34 +0000 Files and hashes: 1: 3lIHjKuigd-8wnJOYmIpykPGwEE.roa (hash: RbhnGqyFBszn7eUWI0qn8+G1e8ScDlyeFe7EddnRngY=) 2: 7RN5SRH01vnVuwmId81dIIGGm8U.roa (hash: 1/C/E5eYkrY6D/S5+koDYApbhvcMTNf0kx5arKlMVwM=) 3: CwxwigW-yHA-vYKKZaAl1IxpzAA.roa (hash: rW7hw/nZ3SfsJ2xESW9df5rJCWkAlL57M/KGPQGcJMI=) 4: Cyn89nSP-A380xB9jFU-SvGwOLk.roa (hash: 55NLzajp924cjij1HdQXLRUI6O4Sv4/7fK+uH+Ovruw=) 5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: ozgxUdwRk2ic2YC3asdD4pZPTJ/8wq+yUHuadeKQ3Tc=) 6: GYViSX4l2vjHhmFNhomqHFqkpSc.roa (hash: 3CgVrq2niOAF6athi7j5otFEVOSff0VY2syy7+cJym4=) 7: JXgg0_l5GaO7jP1zJeiTZnzRqjE.roa (hash: 4YX6bHKXPEIoYDxsMxDe1UOLGJ38lDkQmJub7lQqJ88=) 8: QhKGhq9RVjLUPSCejjoRE221C7U.roa (hash: 0khB5n2A42sHpAsF0tPwxAXTpxJUh3W1WQBMyyOav6Y=) 9: RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa (hash: vXTbGxFCLWqp0CNvIIccpXNG33skDlTQkxc0RSBrijk=) 10: TU10gdUCxQBjCnIZW9U6VNshcy8.roa (hash: LBXY7Mu4+F2Stbby6TE9MpekUANg9/WfPHUHl5054wI=) 11: WOeiegJydkxVE1vjiwGx6ATuFEY.roa (hash: QQ0/7N7W7DkOMFKnzycHP6yPRCFiGEALp7b0CpA3RZ0=) 12: XaybEw_MkTY28IquFGQbHrSpM7k.roa (hash: TwRW1DKYPixpCJP4Q5rOfw8R+B/zkE9LC0Lipg8NmYQ=) 13: fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa (hash: 3FK6PbiJEFCVQCpQogIU0uOqOIRz4gHsO2agb5Bk1QM=) 14: vLlnIbM4IzjjaW5_ksMl5w3Mdyo.roa (hash: qNTbjySkAkE6BruFWTSoo36zWMNK/1N9V7FWTBB9+Gc=) 15: zB69TVx0sEbC1RySFuzqMAIu3a0.roa (hash: usN4D5QBcD6XXA42H1Ot8IvkjdBuShhuURXZHjJ1m3k=) 16: zhgXsJzHOSwZ2vW5K0nW1lO6VOU.roa (hash: Yt6DAu9pUe7VspoY5/vTE3HMguhU3RqgQubcaVH+tIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:18:05:f3:26:f2:43:db:59:d4:cd:f9:a7:de:eb:f2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Oct 24 21:00:34 2025 GMT Not After : Oct 25 21:00:34 2025 GMT Subject: CN=3de82eff6b1ae7770129c0fbe908164cdf571139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:a7:e4:4d:d2:54:03:21:b4:d4:6c:68:4f: 62:01:cc:74:12:ab:f5:6b:df:10:bb:4e:c3:1c:a8: 6a:b6:ae:1e:a7:ec:03:1c:fe:bd:a7:10:bb:6b:92: ba:b7:d9:d3:f6:94:41:f7:ec:13:97:f4:77:f0:8f: 0b:3a:75:e1:68:5d:f2:46:29:e3:92:17:05:46:bf: 9a:ef:0b:24:b6:6c:35:49:10:58:17:a6:ee:71:41: 6b:cf:fb:ea:ed:58:85:90:77:09:7c:8a:c2:fe:2c: 07:1f:90:a8:73:33:a2:3a:1e:dd:a0:f9:b6:4f:e0: 4d:34:0c:d4:82:a8:8b:4d:5c:07:48:01:28:61:07: 00:c4:96:5f:61:6a:f5:95:a9:97:7c:f4:68:ac:b2: 2f:a4:04:d6:e5:0a:62:c9:f5:ba:4b:44:32:4f:46: d9:31:a8:48:68:66:69:42:fe:78:4c:5c:6e:90:b3: 80:58:37:e5:4f:6a:a9:7f:30:bb:be:74:2f:8c:54: 9e:49:e2:03:d6:8d:7b:bd:52:20:d1:2d:1b:39:db: a7:73:c4:28:cc:a1:3c:6a:f9:98:bc:e5:45:38:35: 51:05:76:de:78:27:05:16:7d:b7:23:37:36:74:0c: 03:2d:ca:51:09:43:70:44:15:b9:d8:a4:d9:c3:cf: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E8:2E:FF:6B:1A:E7:77:01:29:C0:FB:E9:08:16:4C:DF:57:11:39 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f2:66:cc:04:2c:eb:29:5a:45:cd:9a:9f:3e:82:ec:c4:64: a5:08:73:0c:9c:c7:85:ac:07:8b:6c:0b:58:f3:79:cb:5d:d4: a4:a7:88:0b:23:ae:2a:d9:23:69:b5:a0:8d:a0:30:11:55:cc: 1d:70:4e:cc:64:44:31:23:fc:0b:d3:03:43:4e:f5:51:9f:47: 5e:bf:48:5c:ce:2b:33:05:54:44:de:75:6e:b7:2a:48:44:40: 47:e3:6c:cf:56:c3:b7:5c:a9:6e:ac:0a:5d:49:56:e1:47:1c: 22:49:d3:f0:07:b5:02:97:3f:b8:3b:d7:4e:6b:42:63:64:35: 1f:fa:f0:30:0d:42:d7:c1:96:d2:1e:4a:32:a5:3a:bf:9b:fd: 92:a9:e4:85:2f:15:1a:01:86:6e:8e:d8:c0:16:e3:52:0d:be: 23:77:12:a2:c6:46:e8:ad:28:cf:15:63:98:35:18:38:b2:ed: 8a:47:0f:d9:e9:7b:0a:9b:1d:1a:b2:d9:24:c4:f1:d9:0c:0e: 4f:50:18:29:45:ae:a7:a1:c5:7d:78:d7:d1:24:49:d4:69:e8: 77:7b:d3:e4:82:22:d7:5f:1a:5f:31:9b:63:10:b3:75:dc:86: 9f:ca:dc:b0:ec:e9:94:1a:03:58:c1:92:3d:ee:ad:22:15:72: 00:eb:0d:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoYBfMm8kPbWdTN+afe6/KzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjUxMDI0MjEwMDM0WhcNMjUxMDI1MjEwMDM0WjAzMTEwLwYDVQQD EygzZGU4MmVmZjZiMWFlNzc3MDEyOWMwZmJlOTA4MTY0Y2RmNTcxMTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfen5E3SVAMhtNRsaE9iAcx0Eqv1 a98Qu07DHKhqtq4ep+wDHP69pxC7a5K6t9nT9pRB9+wTl/R38I8LOnXhaF3yRinj khcFRr+a7wsktmw1SRBYF6bucUFrz/vq7ViFkHcJfIrC/iwHH5CoczOiOh7doPm2 T+BNNAzUgqiLTVwHSAEoYQcAxJZfYWr1lamXfPRorLIvpATW5QpiyfW6S0QyT0bZ MahIaGZpQv54TFxukLOAWDflT2qpfzC7vnQvjFSeSeID1o17vVIg0S0bOdunc8Qo zKE8avmYvOVFODVRBXbeeCcFFn23Izc2dAwDLcpRCUNwRBW52KTZw8/NvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3oLv9rGud3ASnA++kIFkzfVxE5MB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/JmzAQs 6ylaRc2anz6C7MRkpQhzDJzHhawHi2wLWPN5y13UpKeICyOuKtkjabWgjaAwEVXM HXBOzGREMSP8C9MDQ071UZ9HXr9IXM4rMwVURN51brcqSERAR+Nsz1bDt1ypbqwK XUlW4UccIknT8Ae1Apc/uDvXTmtCY2Q1H/rwMA1C18GW0h5KMqU6v5v9kqnkhS8V GgGGbo7YwBbjUg2+I3cSosZG6K0ozxVjmDUYOLLtikcP2el7CpsdGrLZJMTx2QwO T1AYKUWup6HFfXjX0SRJ1Gnod3vT5IIi118aXzGbYxCzddyGn8rcsOzplBoDWMGS Pe6tIhVyAOsNWA== -----END CERTIFICATE-----Generated at Sat Oct 25 04:17:47 2025 by rpki-client