$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft File: RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json) Hash identifier: QKRyLEJ0bVJLA5bIcr2qno+LB0o31VHH68uRHfuOOpg= Subject key identifier: 6F:55:69:82:28:CC:4E:6F:2E:12:64:F9:5C:CD:A4:46:72:8E:E3:55 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019A08929346A243CED8A1CE5B01EAC181FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft Manifest number: 17BE Signing time: Tue 21 Oct 2025 21:00:14 +0000 Manifest this update: Tue 21 Oct 2025 21:00:14 +0000 Manifest next update: Wed 22 Oct 2025 21:00:14 +0000 Files and hashes: 1: 6ugQ7Op1QlEgpnnjZORYaHyj-n4.roa (hash: da6x8ewYyKy59i5CpZgWQCl1+/GS7ELU/wuWQ0Fl69Q=) 2: 93XoyOBot5Q31NIUzCFTG35eypU.roa (hash: 3DisuqOhct1g6Kl/cifQgLMmcCXnn6jb3AkS/2a6zZU=) 3: 9lb0b8puZUrfHtd0Z5dIrE77_nU.roa (hash: OJTr3zPbOINFegVE0vxgz27hNWHc6eDJ+C9CqzwclrQ=) 4: Ch-PYAhyFagok0fhupPjZ_Lqcbg.roa (hash: MkUDcB5uA+GO6qe6fT2sF+iljffZj0n8p1hLZtz2zP0=) 5: JUyxU9F3JlDU8_kPHaIM7D1fTB4.roa (hash: lVPZY1fXxxj7hHiCvzUwToPcItRxiXJdn4MbDVZ/BIE=) 6: OOKUSdBo719Fy6eQLO8FhLRmb-A.roa (hash: 0lNFdByCLqg9LTuNeACyTh+4cjDobHcCQ2yCIpT7EoU=) 7: ORMfVTwPs1g4XJUABRwPxcI2TlM.roa (hash: 9SsDOeofewDgil5pBAt7LCSquVuRcpzseNGmRukWM3E=) 8: PEiuIrxRAt_nWSHWFCZ-Y1OnDuo.roa (hash: ZSdReMmjCAzPhYFnV9uySINs/4oWCSJNtieIfzwYQ/s=) 9: POIbET2y0PbfSBlBzEywzQzwDZM.roa (hash: c2xoo6jdbzcBQgJLO4NjoS/VTJiuYBB4TzzOCdQY54Y=) 10: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: irvLgngejLvo67zDIBcxhb+gyww2Zj/pM7ZodGJnh80=) 11: S-jHXkuTv3yEQ2sUq6iz0jvEKR8.roa (hash: tKw9zDphV/qDQspavEJGBoVyfasBPoIBbRoqri6AaYg=) 12: W8pbaE9SITvmp3StMfJ7E--X4M0.roa (hash: uRUesuHnpXbWgYa8xNv9zFt/fxahoQmchuNu9Hzil3c=) 13: ZI6GdsMzohLPUFShGgyzJq1kyik.roa (hash: PrDvAMB+nPO9eaE9jiZQHT0Ok3/0hmxZNq9LGHu2LmY=) 14: ZTNxxf9Sv4EBIpVp27CcJMGatqI.roa (hash: qgnMNoDlY76gADXwHdrnws2enpTow72z+24Q3TkgA6g=) 15: bOCirTuv1rJ7d21sCVfI-ZEZsC0.roa (hash: dYryQSN+J2/I1HVZ6aOA/OKAyzM7xMkAvl6Lj9fmkRc=) 16: doTkTINLFVROWpT2utaeKFTTyfg.roa (hash: JBSOler1D5ArGxteRfH6QxI8GrNqgOUNUjr08yLOppA=) 17: fppOoPtasrtX4ZPzc57YRYYu954.roa (hash: b5+haWAHnyoPiS6Ivn63/MAGZ3E+APtZSJu8to6vL6M=) 18: ijaEBGBM7o1seGP9ZFryQWjDWk4.roa (hash: Pjmjb1/h0AeL+KxQ/QOIKyfX0TnoNPhenlbIfi1Wt9Y=) 19: pI7XDjTTax8lwNnKoyATZH6iINk.roa (hash: KiV42z1Tt5AFA+Qqb4Fmz7NSYrfFKo/28iS+QhxS8xc=) 20: pIq4SZw2Svh3QOShxoTk15XsP8I.roa (hash: 7+fT26kynb0u9jWu0Oa/khgp+953vZ0+uc0j+qVL1gw=) 21: pJLtq0OEiC2n7NLXkBcDtX4LKDI.roa (hash: uNIUZktT2Y68Tva6qi8p96kvm5I4VqlHL5j6Sqmwjo8=) 22: r47m3eotHrMfZKa0-yAY8glxtLY.roa (hash: mRtglxssp+DT8qOyFoRUQ5mLUPm3H45BSG3whqlcJGc=) 23: rznOCTPZyadrsSzyPCChz69ZAxU.roa (hash: 2zkH1SRaKlvMmrIdmVipWy+g7uH2rfqKdzk0RNlqPlA=) 24: sTTymR01F6RDoynC8TSKvkamGWE.roa (hash: Q6Klebt7/VfO16Ve7IU7cVobaORhn/KAvxjY4XLaEeQ=) 25: wJSVIQ5jg_-lv48HD0WKwu2CbdM.roa (hash: oRLIIxFVnadydVwsfyy8jjdbfqtuyuSbLDJWjt8TqWI=) 26: wrl9kLnP1rk7nT8nfaCtICzeH9s.roa (hash: hvWb2rrC33UUwdJUa2tUX3NGj1r9RLGSxKqLlZYr8D4=) 27: xPpE8yilatvrlQqhaODXcuCQMRQ.roa (hash: m1iGFellVqhw09DmfgQAIie/XJNCkARQnPCE/n/F5H4=) 28: ziWOGVzc91RDjHDHhPd1qawwCoQ.roa (hash: MaCT2em34JjV5QJZwshEC6RNemddpDFN1wmBFpOjty8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 19:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:08:92:93:46:a2:43:ce:d8:a1:ce:5b:01:ea:c1:81:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Oct 21 21:00:14 2025 GMT Not After : Oct 22 21:00:14 2025 GMT Subject: CN=6f55698228cc4e6f2e1264f95ccda446728ee355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:57:58:81:20:4a:e9:83:28:e8:c1:f0:8a:62: b8:2d:30:83:38:9d:e4:f7:15:d9:db:3b:47:f1:b0: 11:ec:be:b8:09:05:c3:9a:01:d9:e1:e4:42:da:ac: ce:01:91:51:22:66:fc:2d:bc:ef:a4:bc:1d:59:58: fd:fd:b7:32:c4:b5:e3:aa:75:77:8f:98:e3:a1:5d: 0c:6c:2f:89:9a:64:2f:b3:89:32:65:a3:a1:65:78: 32:53:98:e3:c2:d4:e5:34:21:2a:07:e2:a5:79:03: 2f:6d:e6:d7:4b:50:bf:d1:69:0c:63:0b:88:fb:dd: 41:d2:6f:00:3a:9f:3e:2d:57:9d:05:df:e0:b4:85: 3e:3e:b7:ce:cd:9f:f8:c3:a3:61:f0:45:32:12:c8: 2a:0b:86:af:bd:5c:56:5d:2b:70:9d:7a:39:19:5e: 87:0a:99:6b:e9:df:28:02:fb:92:be:5b:14:2e:66: cf:78:7f:4d:c6:52:1c:95:b9:e2:0f:91:01:eb:34: e3:69:a8:01:3c:1c:1d:a6:f9:37:ba:f8:ee:6a:6b: 0f:c9:00:e6:2b:10:9d:a7:89:fb:8d:70:c1:b4:ed: 7f:b1:8c:ee:fb:0b:20:b3:f5:f1:ea:86:19:9b:c1: c9:80:38:de:6d:14:d8:bf:ed:f6:08:b1:8d:37:56: e9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:55:69:82:28:CC:4E:6F:2E:12:64:F9:5C:CD:A4:46:72:8E:E3:55 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:de:70:82:71:8c:e7:e9:62:a9:73:7b:e1:8d:1e:a1:11:fd: 10:d6:21:42:66:08:d3:2b:62:31:8b:8a:80:f9:9d:d4:b6:9b: d4:56:e8:79:86:24:cb:b1:8d:c1:5d:47:b2:66:b6:67:3d:f4: 16:9a:41:68:be:38:64:7f:ed:fe:ca:c7:3d:ce:34:af:6e:6c: a8:ac:a4:c2:1c:4d:36:a2:a8:93:ab:cb:89:c4:ef:b6:73:90: 8d:d0:45:7d:78:0c:dd:e3:8b:04:c3:fa:67:b6:7f:f8:62:7c: 30:39:01:67:f9:6c:b6:38:ee:ff:22:1d:43:88:d5:7a:dd:61: dd:81:4f:f6:f2:c4:64:31:07:f2:89:99:70:cf:2e:6d:cc:ab: 33:9a:a5:b6:77:50:b5:1d:ae:f4:00:b4:ca:b3:cb:25:8c:4e: 11:bd:9f:27:3b:50:86:e1:54:18:3a:d2:19:38:60:3e:c8:02: 91:b5:6b:b3:2c:e3:81:94:ad:75:d3:a1:27:3d:6d:ed:95:c9: aa:4a:11:6b:c4:1d:74:27:a0:b3:59:a1:6b:75:50:ea:0f:35: 71:b4:19:0b:a2:8d:53:b2:07:93:d7:7b:86:e1:3f:ff:cd:27: 65:3b:12:1a:75:a5:c6:20:ae:6e:a4:b0:53:5f:97:99:d6:4f: 98:7d:48:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoIkpNGokPO2KHOWwHqwYH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjUxMDIxMjEwMDE0WhcNMjUxMDIyMjEwMDE0WjAzMTEwLwYDVQQD Eyg2ZjU1Njk4MjI4Y2M0ZTZmMmUxMjY0Zjk1Y2NkYTQ0NjcyOGVlMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFdYgSBK6YMo6MHwimK4LTCDOJ3k 9xXZ2ztH8bAR7L64CQXDmgHZ4eRC2qzOAZFRImb8LbzvpLwdWVj9/bcyxLXjqnV3 j5jjoV0MbC+JmmQvs4kyZaOhZXgyU5jjwtTlNCEqB+KleQMvbebXS1C/0WkMYwuI +91B0m8AOp8+LVedBd/gtIU+PrfOzZ/4w6Nh8EUyEsgqC4avvVxWXStwnXo5GV6H Cplr6d8oAvuSvlsULmbPeH9NxlIclbniD5EB6zTjaagBPBwdpvk3uvjuamsPyQDm KxCdp4n7jXDBtO1/sYzu+wsgs/Xx6oYZm8HJgDjebRTYv+32CLGNN1bpxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9VaYIozE5vLhJk+VzNpEZyjuNVMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm95wgnGM 5+liqXN74Y0eoRH9ENYhQmYI0ytiMYuKgPmd1Lab1FboeYYky7GNwV1Hsma2Zz30 FppBaL44ZH/t/srHPc40r25sqKykwhxNNqKok6vLicTvtnOQjdBFfXgM3eOLBMP6 Z7Z/+GJ8MDkBZ/lstjju/yIdQ4jVet1h3YFP9vLEZDEH8omZcM8ubcyrM5qltndQ tR2u9AC0yrPLJYxOEb2fJztQhuFUGDrSGThgPsgCkbVrsyzjgZStddOhJz1t7ZXJ qkoRa8QddCegs1mha3VQ6g81cbQZC6KNU7IHk9d7huE//80nZTsSGnWlxiCubqSw U1+XmdZPmH1ITg== -----END CERTIFICATE-----Generated at Wed Oct 22 04:39:25 2025 by rpki-client