$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: Cvxp0Ccnk2oE3tCBtaFaboq0OkXtbFIbhBCOQUXjmC0= Subject key identifier: F1:81:17:71:E5:C8:4F:37:3F:74:04:20:AC:7D:36:F2:EE:E9:DB:AB Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019A19BDA3799640B476082D43C7205EA09C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 10BE Signing time: Sat 25 Oct 2025 05:00:49 +0000 Manifest this update: Sat 25 Oct 2025 05:00:49 +0000 Manifest next update: Sun 26 Oct 2025 05:00:49 +0000 Files and hashes: 1: 0mnSL4P1Mb9qsD-XMEq-yyZjaoE.roa (hash: TztJkngsor+bYH8BNBvFcrCq8QN/N29xad2ATDFfZg4=) 2: 4SJGO0ahyGrj6_wgUycRPIM87rQ.roa (hash: KKyfxNUe79UZQMGD42WojNOLaLKHp+8lyvcAmB4f9dM=) 3: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 4: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 5: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: cAWBQZRA9nFF84LEQzLkjURhG40lWjAR4PV/UvNPVG0=) 6: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 7: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 8: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 9: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 10: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 11: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 12: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 13: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:bd:a3:79:96:40:b4:76:08:2d:43:c7:20:5e:a0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Oct 25 05:00:49 2025 GMT Not After : Oct 26 05:00:49 2025 GMT Subject: CN=f1811771e5c84f373f740420ac7d36f2eee9dbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:1c:4a:12:29:fe:08:da:b2:e9:63:15:79: 64:34:d4:b9:e9:73:a8:d2:83:31:f9:3c:47:d6:28: 4d:61:c8:dc:47:17:dc:2b:88:9a:47:7c:14:a3:23: dd:66:dc:f8:a7:a3:ae:8c:29:19:1c:23:4e:9e:17: c0:e0:21:b5:ee:a9:23:a9:cd:d1:58:da:59:2f:3d: c7:fe:0f:6f:07:59:05:da:84:d7:ec:68:f1:36:83: 44:e2:a9:f5:3c:f8:15:0a:35:4a:bd:19:7a:38:03: 4d:fb:95:64:a1:28:cf:02:bc:84:6d:45:ae:ef:51: 51:7c:e2:26:c8:13:1b:72:9d:50:9c:8d:87:db:cc: c1:bd:fa:5c:8f:f6:4a:3f:27:ea:6f:d8:83:82:66: ea:96:a7:d5:ef:7c:33:df:d4:9c:28:c3:08:cb:74: f9:3b:84:08:75:87:e0:e7:2f:52:59:04:84:3b:c9: 5e:e0:92:42:9a:f0:86:ea:f1:e6:eb:11:f0:59:84: 62:00:74:3b:e8:c5:4c:40:a4:a0:7f:e7:8e:23:16: 3d:f4:65:5f:d5:b4:ca:75:5a:17:1d:b3:74:99:6e: 9a:9f:e3:7e:b7:a7:39:d7:2c:3b:34:67:b5:f5:5b: 8f:1f:bd:7c:17:bc:ca:25:45:f5:16:60:6b:da:23: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:81:17:71:E5:C8:4F:37:3F:74:04:20:AC:7D:36:F2:EE:E9:DB:AB X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c2:43:4c:9d:6b:95:fc:57:e9:ab:14:d6:0f:31:e4:02:89: 72:30:4f:91:8e:dc:bc:06:f5:ab:48:ec:96:d4:ab:cb:67:c5: 3c:d2:1b:1b:a1:5d:82:9b:bb:22:28:87:30:cc:bf:b7:ea:57: dd:82:f9:84:3f:3c:1c:13:ad:9f:23:cb:44:36:bd:a7:46:0e: eb:e8:60:9f:6d:02:e9:49:4a:8c:e2:b2:8c:f1:4f:e5:5b:2c: 6c:02:78:30:b7:36:0f:bc:77:a4:84:11:dc:bc:74:6d:9e:cd: 6b:17:2d:ba:8f:c2:f7:2d:06:53:ba:dc:72:d8:6f:97:e2:d2: 8e:b6:17:1f:fc:47:81:89:cd:82:4e:3f:c9:c7:55:af:df:94: 65:4a:9f:64:34:bf:0e:ec:81:c0:b6:75:b5:46:7a:b2:65:dd: db:84:5c:0a:7c:e4:c0:63:50:ee:b6:28:9f:41:d2:4d:55:ba: c5:09:d3:90:00:0f:cf:28:c6:8b:9d:b9:5e:91:97:a7:15:d8: 69:05:ee:51:de:93:e9:f2:21:97:57:0e:91:f1:fc:5c:1c:7d: 06:34:20:0c:4a:4b:63:e0:fc:41:2d:73:8d:1a:4b:59:95:19: 64:80:07:89:17:0b:c5:4d:5b:de:ea:d5:7e:ee:e8:9d:45:71: 80:23:34:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZvaN5lkC0dggtQ8cgXqCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUxMDI1MDUwMDQ5WhcNMjUxMDI2MDUwMDQ5WjAzMTEwLwYDVQQD EyhmMTgxMTc3MWU1Yzg0ZjM3M2Y3NDA0MjBhYzdkMzZmMmVlZTlkYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMYcShIp/gjasuljFXlkNNS56XOo 0oMx+TxH1ihNYcjcRxfcK4iaR3wUoyPdZtz4p6OujCkZHCNOnhfA4CG17qkjqc3R WNpZLz3H/g9vB1kF2oTX7GjxNoNE4qn1PPgVCjVKvRl6OANN+5VkoSjPAryEbUWu 71FRfOImyBMbcp1QnI2H28zBvfpcj/ZKPyfqb9iDgmbqlqfV73wz39ScKMMIy3T5 O4QIdYfg5y9SWQSEO8le4JJCmvCG6vHm6xHwWYRiAHQ76MVMQKSgf+eOIxY99GVf 1bTKdVoXHbN0mW6an+N+t6c51yw7NGe19VuPH718F7zKJUX1FmBr2iM0AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGBF3HlyE83P3QEIKx9NvLu6durMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsJDTJ1r lfxX6asU1g8x5AKJcjBPkY7cvAb1q0jsltSry2fFPNIbG6Fdgpu7IiiHMMy/t+pX 3YL5hD88HBOtnyPLRDa9p0YO6+hgn20C6UlKjOKyjPFP5VssbAJ4MLc2D7x3pIQR 3Lx0bZ7Naxctuo/C9y0GU7rccthvl+LSjrYXH/xHgYnNgk4/ycdVr9+UZUqfZDS/ DuyBwLZ1tUZ6smXd24RcCnzkwGNQ7rYon0HSTVW6xQnTkAAPzyjGi525XpGXpxXY aQXuUd6T6fIhl1cOkfH8XBx9BjQgDEpLY+D8QS1zjRpLWZUZZIAHiRcLxU1b3urV fu7onUVxgCM08Q== -----END CERTIFICATE-----Generated at Sat Oct 25 08:18:09 2025 by rpki-client