$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: 2vIKGEDXwCZzhKp1oExlJQdUBGXi2ESoZ+wbE0jRDjg= Subject key identifier: 31:AD:6F:F3:31:6B:38:A8:58:BC:9F:B6:89:8A:7C:0A:CE:92:E4:A6 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019A0A4A3FC00518230B3137728B84387F67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 165C Signing time: Wed 22 Oct 2025 05:00:29 +0000 Manifest this update: Wed 22 Oct 2025 05:00:29 +0000 Manifest next update: Thu 23 Oct 2025 05:00:29 +0000 Files and hashes: 1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: Q46LUbRK+MTnmcDHH42OQ7aC+CoZJgRMRYKZsobmfeY=) 2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=) 3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=) 4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=) 5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=) 6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=) 7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=) 8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=) 9: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=) 10: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=) 11: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=) 12: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=) 13: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=) 14: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=) 15: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=) 16: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=) 17: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=) 18: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=) 19: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=) 20: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=) 21: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=) 22: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=) 23: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=) 24: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0a:4a:3f:c0:05:18:23:0b:31:37:72:8b:84:38:7f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Oct 22 05:00:29 2025 GMT Not After : Oct 23 05:00:29 2025 GMT Subject: CN=31ad6ff3316b38a858bc9fb6898a7c0ace92e4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:ba:cf:29:b4:9e:8d:08:15:4c:76:82:3b: 9e:fa:1f:b0:1c:8e:3a:8c:72:5b:b6:64:e6:cb:01: 42:f8:31:49:95:bc:b4:f3:28:9a:35:5e:8c:41:cc: d5:20:d1:91:02:7b:7b:a9:db:5d:67:5c:09:59:17: 7a:ec:28:34:a0:c6:0f:fc:45:8a:04:e0:c3:b3:27: 56:6d:54:a6:ef:eb:52:07:7f:a4:cb:a2:14:be:e0: 1a:48:4c:97:93:b0:e3:17:af:4b:5c:ad:4c:31:75: cf:f5:92:44:95:3a:20:9b:09:2e:87:4f:61:ae:31: c1:8e:f9:83:a9:50:53:9f:a8:22:f3:01:85:3b:f1: 7b:4e:46:84:5e:84:c8:62:17:9d:3c:b7:5c:bf:2a: b4:9e:51:11:98:bf:1e:ff:79:8a:0e:af:ba:dd:52: e5:8b:ed:90:33:be:87:14:ad:1b:38:a5:ed:f7:5a: bb:d0:33:71:80:8c:89:c0:a1:1b:81:fa:92:01:6a: 53:50:d8:d7:49:ab:c7:25:d6:76:06:13:46:1b:2b: df:aa:da:15:a6:4f:bc:cf:8e:4d:2d:0b:5d:9c:bf: 9e:4f:7f:30:d8:95:14:7c:bf:e1:24:c9:44:15:8e: 15:a7:28:52:e2:fb:f9:e0:d1:d1:91:5f:44:2e:d3: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AD:6F:F3:31:6B:38:A8:58:BC:9F:B6:89:8A:7C:0A:CE:92:E4:A6 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:17:53:7f:2d:60:05:0c:ee:3e:f3:2d:e9:cd:06:e4:3f:7a: b0:d8:6b:9b:d1:8e:66:12:c2:35:e1:55:87:e4:72:a5:21:1e: 12:16:39:d5:c6:07:b4:19:28:17:f4:bd:e8:bd:47:3b:3b:97: 68:45:af:a1:82:0a:fc:43:00:22:28:8c:d0:9e:af:79:20:cc: 64:54:da:dc:21:13:70:79:64:20:33:8b:12:77:1b:49:94:17: b0:be:1b:31:b4:7a:a0:af:81:3a:1e:56:60:fa:90:1c:1c:f4: a9:e8:20:10:79:97:6a:9e:4e:78:de:e8:dd:37:d1:d6:96:9f: d7:9c:25:f5:4d:29:56:c5:39:bd:a5:3c:c2:39:40:86:17:9f: f6:96:f5:6e:2b:28:7a:ce:25:81:ab:94:bf:b9:a6:8f:b8:07: 56:3f:2f:5a:b8:3e:4d:e8:7d:ee:45:55:4a:87:da:a0:6d:54: ba:16:36:ea:ea:7a:7f:78:34:63:7a:03:48:9b:70:24:49:4e: 6c:69:ed:b7:a3:5e:19:6f:11:e7:ec:7b:8b:a8:63:72:85:47: 4c:f0:7f:05:61:10:67:d6:66:a4:cb:36:77:9d:1b:f9:9f:01: 31:2a:52:80:20:54:c1:b8:e1:2e:6f:30:f8:3e:18:93:fb:6c: 20:3f:89:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoKSj/ABRgjCzE3couEOH9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjUxMDIyMDUwMDI5WhcNMjUxMDIzMDUwMDI5WjAzMTEwLwYDVQQD EygzMWFkNmZmMzMxNmIzOGE4NThiYzlmYjY4OThhN2MwYWNlOTJlNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztK6zym0no0IFUx2gjue+h+wHI46 jHJbtmTmywFC+DFJlby08yiaNV6MQczVINGRAnt7qdtdZ1wJWRd67Cg0oMYP/EWK BODDsydWbVSm7+tSB3+ky6IUvuAaSEyXk7DjF69LXK1MMXXP9ZJElTogmwkuh09h rjHBjvmDqVBTn6gi8wGFO/F7TkaEXoTIYhedPLdcvyq0nlERmL8e/3mKDq+63VLl i+2QM76HFK0bOKXt91q70DNxgIyJwKEbgfqSAWpTUNjXSavHJdZ2BhNGGyvfqtoV pk+8z45NLQtdnL+eT38w2JUUfL/hJMlEFY4VpyhS4vv54NHRkV9ELtP8dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGtb/MxazioWLyftomKfArOkuSmMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhdTfy1g BQzuPvMt6c0G5D96sNhrm9GOZhLCNeFVh+RypSEeEhY51cYHtBkoF/S96L1HOzuX aEWvoYIK/EMAIiiM0J6veSDMZFTa3CETcHlkIDOLEncbSZQXsL4bMbR6oK+BOh5W YPqQHBz0qeggEHmXap5OeN7o3TfR1paf15wl9U0pVsU5vaU8wjlAhhef9pb1biso es4lgauUv7mmj7gHVj8vWrg+Teh97kVVSofaoG1UuhY26up6f3g0Y3oDSJtwJElO bGntt6NeGW8R5+x7i6hjcoVHTPB/BWEQZ9ZmpMs2d50b+Z8BMSpSgCBUwbjhLm8w +D4Yk/tsID+JZA== -----END CERTIFICATE-----Generated at Wed Oct 22 11:58:33 2025 by rpki-client