$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: WOLAsDpZZqMs0ofPxcq1QcvmR3AJoRoz0we1G9xM93c= Subject key identifier: AB:3D:C5:0E:BA:EF:F7:9D:CB:0E:53:67:ED:56:FC:DC:55:9A:77:EF Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019A1FBF7D26515E25CD002F58A9916056C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0B10 Signing time: Sun 26 Oct 2025 09:00:34 +0000 Manifest this update: Sun 26 Oct 2025 09:00:34 +0000 Manifest next update: Mon 27 Oct 2025 09:00:34 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 10: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 11: cY4oD3aJCA3hPJ-HG5yOe86pth0.roa (hash: 6XtYpPP1NejHMwoPGzkgvVeeFIxmxEEEbrl1v95CK6c=) 12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 15: hAltwAar8cruPnrUggNtE-ckX2E.roa (hash: L6YarcwAfqpMI8vHdXzsk7yBc6dzjR+YnQY4CVhZuBE=) 16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: xrZu48plzaH6Rjr49uYFD1wTUSFKwW8YQC8lDvwgtCk=) 17: rCpV33sYtGVJt5YUfEHIV76lYwM.roa (hash: WOOfDrHmClUASPz1AvvDv7s8UiSaGZ142B0UsKi/kcM=) 18: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=) 19: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 05:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:bf:7d:26:51:5e:25:cd:00:2f:58:a9:91:60:56:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Oct 26 09:00:34 2025 GMT Not After : Oct 27 09:00:34 2025 GMT Subject: CN=ab3dc50ebaeff79dcb0e5367ed56fcdc559a77ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:7f:6e:a0:c7:29:7b:ed:5b:b1:c2:48:81: 52:75:8f:34:00:42:eb:62:1e:21:45:e5:5a:24:ae: e3:fc:ed:87:89:70:fb:29:08:a7:73:ac:28:19:de: 40:9e:c7:36:8e:7a:2d:41:2f:d1:f7:ba:3d:91:ec: f7:e2:4a:5b:07:42:92:09:60:b0:23:76:4e:da:e3: fb:dd:6c:b9:6f:49:88:70:b1:71:33:ac:51:7b:7c: 1c:74:26:a9:a2:79:7d:af:fc:2c:47:2c:a1:5c:e8: 85:e4:bd:14:73:bf:55:a0:a7:57:e7:47:a9:82:77: 48:4a:fe:73:0e:46:af:e0:f3:ad:0d:e7:70:9a:d7: 99:12:38:64:c8:43:0a:f2:10:62:24:10:b0:b7:1d: 02:c4:4a:7c:39:49:80:dc:29:a7:04:f9:0e:5e:b7: 90:f0:be:ab:09:b8:01:f0:66:58:b9:0f:2a:c0:9b: 8c:da:9c:ba:af:50:91:1c:7c:e6:14:8c:53:03:03: b1:78:a0:fc:31:9c:7b:f1:63:41:db:76:50:a7:23: 82:af:44:4b:bb:a0:0b:18:03:1f:44:0f:38:d2:27: d1:d2:30:ce:4a:82:31:27:42:9f:ac:74:c3:5a:41: 49:57:da:ac:78:4b:1d:70:e2:de:3d:d4:2b:67:61: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3D:C5:0E:BA:EF:F7:9D:CB:0E:53:67:ED:56:FC:DC:55:9A:77:EF X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1d:3d:f2:db:22:41:89:d0:d0:de:e7:4d:e4:27:b2:44:0c: ae:70:b2:ca:9f:af:dc:67:45:04:28:8b:d8:62:b4:05:78:d8: 4e:53:a8:b2:73:05:02:d6:f6:11:3f:fe:81:1d:be:12:9a:dc: 46:48:cf:82:ae:df:c8:5a:37:10:b6:67:d5:ab:6f:c7:71:6f: 5a:55:9c:1b:ea:07:4d:80:bf:23:e1:6e:34:89:be:93:9f:f2: 73:3e:e4:8c:e9:07:00:5b:0d:fa:1c:1f:8d:52:91:45:92:6c: 0f:57:f0:a5:eb:09:fc:ec:3c:e8:c2:03:20:88:b7:16:bb:09: 3a:53:5c:65:d2:1c:4d:ca:c0:2e:fa:20:9a:2c:ee:5e:0f:59: f6:da:4b:b4:b6:16:4f:82:59:bb:21:40:49:7b:51:5e:16:49: 3f:42:2f:59:ee:ef:f4:c7:7c:8c:d3:00:03:09:f5:25:57:a4: d3:d2:21:f9:9b:b3:2c:28:f2:6f:11:32:f8:a8:e6:21:54:a7: 25:0c:f0:6d:4f:6d:1c:cb:48:53:02:2c:b1:3f:a8:fa:95:15: 3c:d4:ca:2a:ac:60:b9:26:00:28:c2:f6:5a:e0:02:3d:65:88: cf:1d:5f:8f:d6:3b:a8:9d:e3:f7:25:24:d9:2a:ba:01:39:91: c4:bd:b4:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofv30mUV4lzQAvWKmRYFbGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUxMDI2MDkwMDM0WhcNMjUxMDI3MDkwMDM0WjAzMTEwLwYDVQQD EyhhYjNkYzUwZWJhZWZmNzlkY2IwZTUzNjdlZDU2ZmNkYzU1OWE3N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz9/bqDHKXvtW7HCSIFSdY80AELr Yh4hReVaJK7j/O2HiXD7KQinc6woGd5Ansc2jnotQS/R97o9kez34kpbB0KSCWCw I3ZO2uP73Wy5b0mIcLFxM6xRe3wcdCaponl9r/wsRyyhXOiF5L0Uc79VoKdX50ep gndISv5zDkav4POtDedwmteZEjhkyEMK8hBiJBCwtx0CxEp8OUmA3CmnBPkOXreQ 8L6rCbgB8GZYuQ8qwJuM2py6r1CRHHzmFIxTAwOxeKD8MZx78WNB23ZQpyOCr0RL u6ALGAMfRA840ifR0jDOSoIxJ0KfrHTDWkFJV9qseEsdcOLePdQrZ2HuOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs9xQ667/edyw5TZ+1W/NxVmnfvMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh098tsi QYnQ0N7nTeQnskQMrnCyyp+v3GdFBCiL2GK0BXjYTlOosnMFAtb2ET/+gR2+Eprc RkjPgq7fyFo3ELZn1atvx3FvWlWcG+oHTYC/I+FuNIm+k5/ycz7kjOkHAFsN+hwf jVKRRZJsD1fwpesJ/Ow86MIDIIi3FrsJOlNcZdIcTcrALvogmizuXg9Z9tpLtLYW T4JZuyFASXtRXhZJP0IvWe7v9Md8jNMAAwn1JVek09Ih+ZuzLCjybxEy+KjmIVSn JQzwbU9tHMtIUwIssT+o+pUVPNTKKqxguSYAKML2WuACPWWIzx1fj9Y7qJ3j9yUk 2Sq6ATmRxL20SQ== -----END CERTIFICATE-----Generated at Sun Oct 26 14:06:18 2025 by rpki-client