$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: GB7ZEY09M53Z/DWuOYXImpb6NmVn2ayLil0v3AzrB7k= Subject key identifier: 15:0C:72:C2:45:95:9F:6A:39:BB:27:C3:1E:AF:5C:93:60:96:B6:4F Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019A1F51BAA254C2B6773FD7343D63F2F622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 170A Signing time: Sun 26 Oct 2025 07:00:40 +0000 Manifest this update: Sun 26 Oct 2025 07:00:40 +0000 Manifest next update: Mon 27 Oct 2025 07:00:40 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 3: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 4: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 5: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 6: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 7: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 8: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 9: AKM5h6Ix-3LMoRtdGUA19KyVLio.roa (hash: P77lNcJ0zrzNLtgfjbd4pt0XLBw/55/N1ocxrR5mz8k=) 10: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 11: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 12: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 13: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 14: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 15: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 16: PfuePBqyE9oSuvuOqPl2yYw0_nM.roa (hash: I912gPvDq9Xcn/nApuI3hIUcz4zJdPzL8TmlGrNFHYI=) 17: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=) 18: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 19: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 20: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 21: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 22: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=) 23: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 24: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 25: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 26: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=) 27: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 28: fOCG8GZHTaRDntl_g9LNFOGmkqw.roa (hash: bR9905Jw5jekH7I9Vxe1eqFMLaQsdQXCVYQbjYCAIBw=) 29: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 30: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=) 31: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 32: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 33: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: 8oBJbH3ZoyBujr5LFl8vG7lD52HMxfmCkaYDoNy+Bj8=) 34: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) 35: zeZ61iX-XErVVOagrLymRhqtVs4.roa (hash: /TVn1IqCr3rkgm7hee64o/NjLqoDVeiwVYa0FN7+DSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 05:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:51:ba:a2:54:c2:b6:77:3f:d7:34:3d:63:f2:f6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Oct 26 07:00:40 2025 GMT Not After : Oct 27 07:00:40 2025 GMT Subject: CN=150c72c245959f6a39bb27c31eaf5c936096b64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:fb:4c:9a:e0:b5:7f:9f:59:33:f8:d9:a4: 2e:a0:50:8d:8d:00:8d:07:f8:6b:72:54:9d:75:1f: 7f:fc:10:68:4b:2a:63:32:5a:4d:2d:9e:c2:3f:a5: 8e:c8:a1:06:bd:f3:3a:e7:91:19:23:af:ad:90:c7: b3:73:67:67:07:18:02:fc:3d:5f:73:b4:cb:a0:0d: 9d:92:4f:b6:89:c6:24:03:65:94:c7:55:6a:3a:22: 18:02:00:fc:ad:fa:d1:87:22:cd:cf:89:89:c3:d7: 27:aa:d9:8b:fb:d4:fa:a7:71:c5:57:8b:a9:16:32: 97:16:16:84:68:c7:cd:ff:d7:2c:02:42:7b:a4:78: df:8b:93:14:d2:a2:c4:8b:87:4f:98:3f:0b:01:47: 74:b7:ca:30:84:ec:d5:b4:44:7c:21:dc:b4:7e:bb: 92:81:37:2e:3d:2e:a8:67:31:ee:7f:80:d3:b0:63: 10:0d:9b:cf:9c:a1:60:12:2d:d5:03:c7:bd:83:17: cb:69:37:d9:95:bc:69:21:e6:cd:eb:37:64:2d:0a: 72:16:31:f0:76:f7:bb:e9:0d:e3:e5:eb:34:58:9d: 6d:49:ad:c3:dd:32:c8:69:e4:aa:3f:2f:cf:d9:f0: 4f:c6:93:4e:e5:0f:45:a9:81:8e:a6:a1:08:6e:c1: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0C:72:C2:45:95:9F:6A:39:BB:27:C3:1E:AF:5C:93:60:96:B6:4F X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:59:ab:ac:e8:b9:c1:b1:91:7c:df:2a:12:e6:7e:bf:ff:9c: 38:8d:28:30:30:53:8e:9f:f4:e5:b9:80:e6:1f:81:3e:01:a6: 81:87:a1:8d:fd:2c:68:10:0a:57:5c:35:72:6d:87:82:fe:b5: 5c:f4:f8:e6:54:13:91:fc:1d:ec:da:dc:e4:1d:c3:09:1d:1c: d8:01:db:62:de:c9:9f:1e:be:cc:02:e3:06:3f:42:2f:6d:91: 88:cc:e8:53:54:6f:32:61:b4:97:d0:39:c0:c7:64:38:8e:ee: 62:1c:79:c4:07:a6:7f:88:b9:95:c1:8a:8e:dc:7c:61:23:5f: 86:84:c8:be:32:ea:ba:3a:9a:e1:32:fc:3b:58:85:1b:d5:cf: 63:bd:7f:c7:81:56:5f:c5:38:83:d3:ea:d4:0e:07:2a:73:e3: b0:5b:47:94:cc:82:2c:f7:10:d7:35:9d:05:5a:27:67:d2:81: 34:08:70:80:c0:c1:1f:1f:8e:1b:f2:a6:c3:6d:67:26:40:ff: 59:25:56:d6:02:6f:53:fa:ab:52:a5:3e:fe:8c:a3:3f:75:8e: a4:8f:3a:47:26:35:d4:9e:0a:dc:62:73:82:ac:02:10:32:a4: 32:08:1e:92:3f:9d:7f:7a:7e:5c:2d:e6:69:44:c0:10:9c:81: 01:ff:cd:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofUbqiVMK2dz/XND1j8vYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUxMDI2MDcwMDQwWhcNMjUxMDI3MDcwMDQwWjAzMTEwLwYDVQQD EygxNTBjNzJjMjQ1OTU5ZjZhMzliYjI3YzMxZWFmNWM5MzYwOTZiNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueP7TJrgtX+fWTP42aQuoFCNjQCN B/hrclSddR9//BBoSypjMlpNLZ7CP6WOyKEGvfM655EZI6+tkMezc2dnBxgC/D1f c7TLoA2dkk+2icYkA2WUx1VqOiIYAgD8rfrRhyLNz4mJw9cnqtmL+9T6p3HFV4up FjKXFhaEaMfN/9csAkJ7pHjfi5MU0qLEi4dPmD8LAUd0t8owhOzVtER8Idy0fruS gTcuPS6oZzHuf4DTsGMQDZvPnKFgEi3VA8e9gxfLaTfZlbxpIebN6zdkLQpyFjHw dve76Q3j5es0WJ1tSa3D3TLIaeSqPy/P2fBPxpNO5Q9FqYGOpqEIbsGCxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUMcsJFlZ9qObsnwx6vXJNglrZPMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1mrrOi5 wbGRfN8qEuZ+v/+cOI0oMDBTjp/05bmA5h+BPgGmgYehjf0saBAKV1w1cm2Hgv61 XPT45lQTkfwd7Nrc5B3DCR0c2AHbYt7Jnx6+zALjBj9CL22RiMzoU1RvMmG0l9A5 wMdkOI7uYhx5xAemf4i5lcGKjtx8YSNfhoTIvjLqujqa4TL8O1iFG9XPY71/x4FW X8U4g9Pq1A4HKnPjsFtHlMyCLPcQ1zWdBVonZ9KBNAhwgMDBHx+OG/Kmw21nJkD/ WSVW1gJvU/qrUqU+/oyjP3WOpI86RyY11J4K3GJzgqwCEDKkMggekj+df3p+XC3m aUTAEJyBAf/Nfg== -----END CERTIFICATE-----Generated at Sun Oct 26 14:29:09 2025 by rpki-client