$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft File: rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json) Hash identifier: palkqyIlvpf6AY0Q1C+5XQ65mvG0Tlf97QgLljnHWuk= Subject key identifier: 6D:4A:22:BF:9C:63:80:C7:33:57:7F:43:D4:E3:F4:7F:08:05:B4:B3 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019A239C6E1F508250F589A00A1F05B29C0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft Manifest number: 1725 Signing time: Mon 27 Oct 2025 03:00:45 +0000 Manifest this update: Mon 27 Oct 2025 03:00:45 +0000 Manifest next update: Tue 28 Oct 2025 03:00:45 +0000 Files and hashes: 1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=) 2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=) 3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=) 4: CrYEjKshkcVwXojHUA2iB3nVrOw.roa (hash: //0WAavd4RI2DQnPnVlZjyvEfdTG3OpsN/1EoBd8PaU=) 5: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=) 6: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=) 7: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=) 8: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=) 9: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=) 10: RCBQ78HrA6zcu7jc8sKk6jncLUU.roa (hash: oDJBQCIPyt+/lFWpzZ5c4//GWpOPhBAX9DdpdyWzxdU=) 11: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=) 12: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=) 13: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=) 14: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=) 15: onb3rJiukMEmxTOk_8qYPQ5pFvg.roa (hash: rVertN8iUSrJY5Sj1WLa+FHIXHq3KLU3I9MXMNSNWto=) 16: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=) 17: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=) 18: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: NFYzFgRPMaahU6HobtALC0SBBAAjZ/PgLS7EvFhxQtY=) 19: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=) 20: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=) 21: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:23:9c:6e:1f:50:82:50:f5:89:a0:0a:1f:05:b2:9c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Oct 27 03:00:45 2025 GMT Not After : Oct 28 03:00:45 2025 GMT Subject: CN=6d4a22bf9c6380c733577f43d4e3f47f0805b4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:eb:be:52:94:20:82:cf:a8:77:f9:0f:a0: 59:04:8d:ac:4a:77:95:b3:72:16:09:93:d4:1d:57: 0f:9a:c7:07:bd:d9:05:d8:eb:e1:a5:68:d9:6a:1a: c7:a5:41:ba:44:da:22:47:88:6a:ed:db:58:2e:61: 51:14:1a:0a:ea:49:14:2c:2f:85:8d:d7:7f:f0:29: 1d:29:58:8e:70:1e:60:0a:8b:1e:c1:e1:49:0c:81: 59:76:cd:64:df:7a:1a:89:28:84:8d:84:9d:24:54: 6b:6a:f4:3b:c3:6b:2c:94:f9:de:7a:8f:d3:3b:dc: 40:79:a9:45:71:33:72:bc:2d:45:33:66:ef:17:a6: eb:ef:d1:34:35:17:18:84:c8:a7:24:02:b0:3c:f8: 02:2d:5b:b1:95:a8:ed:a1:b0:12:e1:dc:60:4f:9c: ab:2a:1a:f0:ba:86:4c:87:6a:ed:53:78:d8:40:59: 9b:91:38:7d:5e:e1:04:d2:63:e8:fc:3a:16:c3:95: ee:73:00:01:72:6b:60:19:b3:9b:49:e7:72:a9:14: 7e:76:53:3b:24:a9:02:53:4c:d2:db:7f:40:d5:74: 28:1a:35:8d:1d:ce:c4:3f:90:e6:bb:04:f3:10:3e: ce:25:a1:1a:f1:16:36:d4:75:c8:ab:ea:79:bf:85: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4A:22:BF:9C:63:80:C7:33:57:7F:43:D4:E3:F4:7F:08:05:B4:B3 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:97:8d:45:b6:f5:02:58:ad:36:6c:e4:12:da:1e:11:75:8b: fa:a9:93:28:26:b5:0c:b8:07:a5:62:44:d9:db:b5:88:ea:8a: f6:56:d9:03:88:30:f5:e3:c4:ef:7d:3b:09:16:d3:3f:a4:8b: 87:56:7f:88:7e:36:5e:4d:d7:5d:3d:18:c3:e3:c0:2b:a6:9e: 19:07:b6:e8:4f:e8:96:0b:e4:96:10:ba:d0:48:0e:4c:52:77: a7:b1:9e:d9:29:72:08:b8:51:e8:4a:ff:84:13:97:ce:ca:c7: 1e:eb:c9:42:4f:84:58:ac:3b:87:db:63:d1:c0:0e:e5:28:b7: 5b:80:db:bc:7e:73:b4:d3:7b:96:e3:61:ba:59:38:2c:37:cc: 3f:c0:ef:33:c1:65:4b:97:57:5c:84:d6:1b:77:d2:9e:4d:3e: a8:0a:cf:96:1b:ab:7a:71:30:e3:88:99:52:9c:80:b2:50:1c: 7b:59:22:58:c6:4f:04:3c:9d:0b:b5:ae:0e:e6:25:c1:e3:18: 13:1b:46:54:70:21:46:23:08:67:dc:73:18:64:01:ad:6a:a5: 82:5f:09:99:3d:58:26:9a:b6:f7:db:06:74:8b:42:4c:25:94: 4b:98:01:6e:23:71:8c:4c:3d:7e:2b:47:9c:82:35:eb:da:43: c9:dd:5b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZojnG4fUIJQ9YmgCh8FspwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjUxMDI3MDMwMDQ1WhcNMjUxMDI4MDMwMDQ1WjAzMTEwLwYDVQQD Eyg2ZDRhMjJiZjljNjM4MGM3MzM1NzdmNDNkNGUzZjQ3ZjA4MDViNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH3rvlKUIILPqHf5D6BZBI2sSneV s3IWCZPUHVcPmscHvdkF2OvhpWjZahrHpUG6RNoiR4hq7dtYLmFRFBoK6kkULC+F jdd/8CkdKViOcB5gCoseweFJDIFZds1k33oaiSiEjYSdJFRravQ7w2sslPneeo/T O9xAealFcTNyvC1FM2bvF6br79E0NRcYhMinJAKwPPgCLVuxlajtobAS4dxgT5yr KhrwuoZMh2rtU3jYQFmbkTh9XuEE0mPo/DoWw5XucwABcmtgGbObSedyqRR+dlM7 JKkCU0zS239A1XQoGjWNHc7EP5DmuwTzED7OJaEa8RY21HXIq+p5v4XsuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1KIr+cY4DHM1d/Q9Tj9H8IBbSzMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpeNRbb1 AlitNmzkEtoeEXWL+qmTKCa1DLgHpWJE2du1iOqK9lbZA4gw9ePE7307CRbTP6SL h1Z/iH42Xk3XXT0Yw+PAK6aeGQe26E/olgvklhC60EgOTFJ3p7Ge2SlyCLhR6Er/ hBOXzsrHHuvJQk+EWKw7h9tj0cAO5Si3W4DbvH5ztNN7luNhulk4LDfMP8DvM8Fl S5dXXITWG3fSnk0+qArPlhurenEw44iZUpyAslAce1kiWMZPBDydC7WuDuYlweMY ExtGVHAhRiMIZ9xzGGQBrWqlgl8JmT1YJpq299sGdItCTCWUS5gBbiNxjEw9fitH nII169pDyd1boA== -----END CERTIFICATE-----Generated at Mon Oct 27 07:08:49 2025 by rpki-client