$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: Ktq2VEzeBh+SZN4pmBucwk0mK+xNmwKpdbyWJ+34RwQ= Subject key identifier: E4:71:82:1E:19:0F:0A:0C:5E:B7:08:75:44:AB:1B:6B:BB:9A:38:2C Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019A4F996FDDF5194B0F4B22EA547E2E26C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 171F Signing time: Tue 04 Nov 2025 16:00:46 +0000 Manifest this update: Tue 04 Nov 2025 16:00:46 +0000 Manifest next update: Wed 05 Nov 2025 16:00:46 +0000 Files and hashes: 1: 3mlxlqxxKeV1HcJ7bUJquBWrLPM.roa (hash: LdsNRL7zR8y++XszDkFJs9ezvrT1lTI0NjP093U5ljg=) 2: 4SdJi3BPt8-RDec3IP7ET9slx0Q.roa (hash: QGo99RDwnHzRGoxgfvvtNisf3X6cgnQ851GWbQCaLvs=) 3: 7bwXhpAggJ_eID4STuVsUUonWWE.roa (hash: jwAsf9XJ11Ai8DUGeYC8bRJZ9GOha8mucoK1IxHdfkY=) 4: CzaaDeOWHQ6kTwaAx_O9YkLSomg.roa (hash: GUI6ZQYLsnldTDNTDgycT5JJ61OE2lf64zAhH2MlHo0=) 5: F-IifLCSbkSEOgi4sKV1jV1DQV8.roa (hash: 7kKwPi2Jx1AhBc2lAsg83y6Ji6J7QPEIqmUmsdkgOP8=) 6: M9dXL-Oza0PNDTAVGMoUMD1-IlA.roa (hash: jhP7c0ubJpNShQl4AZbo7W8l+sNrqPUvkjw+552fAtk=) 7: N8yg-rsBIkNZqhIg3aIitQuuaUk.roa (hash: Vq9e+6B3g3tkLctdReugpY+B6dczna3y7yxghSqb1lg=) 8: O_1KEMFUqgk53YPdkiJOMWFybCU.roa (hash: 4rGooap/6UNkN/imOgEGeKddbOoLvOCJN4FBsaaC0Sw=) 9: Oac09hx3rqQddn6sXzqSQ66tEsk.roa (hash: 0YnaolK2p37HCU8XIKe9HEtLFbwrR1vF1VCsBkGV6VQ=) 10: QB06ZN3QBBlBCzXQ38Wxu-W0hTY.roa (hash: YOe7BlkRM3bRTDlXC12POtxs/G4SQHLEyUujJ2j8le4=) 11: QeLZg2QtCjiT_FgF9I_8vW-GdW8.roa (hash: SAeRikMKDg+ufTk9edjpL98DiGUmXizgEulF/oacLNQ=) 12: cjQzMFxVd-iqEhVM-o1DNZllV_0.roa (hash: 85nOtiPI0UFXyc2nAprk9yS+5gMOcb9EUZheWPhZTEk=) 13: dnVM1cVOQmo9o53eHsEv3eXfeEM.roa (hash: h/M7g6bSmmEmFXClXRgmZ/cbukURXTiejXMMoqawhio=) 14: o9IncMeHSMz3mrSJeF9aMdkFAcU.roa (hash: KamLMqMs7PVReutKf0aHBQwg2azCb9n4pFhxDQwK6vA=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: b+Y+VvJz0n3nXjKG5B3BB1lGI/+uFn9IMGbnTPMa+J4=) 16: uFTtcjsPGnkaZVI5W5A8IkTF394.roa (hash: SZYFDFQluX6/of0g5ijROkb7a9Qa6zQP//c286jjxKM=) 17: w3UqKWnMOF5NaXpk2iA4PKS4_bM.roa (hash: u2j3jAMfurHPfPAg9hddmCUv1bl75zA9+z27+zKCwbI=) 18: xZ_023oKHQSUR6TwKwMkGIsy224.roa (hash: ifrv9R6haJqU4fA+SuKlYO2IqiC8qB9Zjz5Ablqp45M=) 19: y_VdrldyiOysCbP_n_SofIR2xM4.roa (hash: 3Y8+s1Vq2DoJJO2anwZwA2qsfUgRB7+A97MBZINmwUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:6f:dd:f5:19:4b:0f:4b:22:ea:54:7e:2e:26:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Nov 4 16:00:46 2025 GMT Not After : Nov 5 16:00:46 2025 GMT Subject: CN=e471821e190f0a0c5eb7087544ab1b6bbb9a382c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:27:03:2c:e3:10:e0:af:e6:a6:a4:d3:17: 7a:c6:f0:d1:43:c9:65:99:63:d0:6b:ed:a1:3f:da: a2:87:e2:fe:3d:6b:61:b1:32:b2:bd:e6:ac:53:a5: e4:b2:99:19:00:76:87:87:32:e4:c8:57:08:1b:61: 3c:85:88:93:4f:01:25:9c:51:29:3f:11:3d:53:90: 1e:e4:68:6b:06:d4:cc:8d:1d:ed:72:68:73:58:0c: c5:a1:b8:3d:fb:9b:d9:70:48:20:72:e6:d4:29:d5: e9:cb:f9:ea:1e:fa:2b:41:0d:dd:e4:b0:f2:e9:3b: 50:88:b4:ca:c9:14:50:4f:d4:0a:14:69:9b:5a:3c: b0:35:4d:e1:b6:83:92:c6:b2:9e:e8:26:6f:ea:f8: c9:25:4a:94:30:56:63:1b:ff:01:c3:73:2b:28:47: 5a:c9:c1:e5:c8:d3:84:d6:77:ad:ca:05:9e:b2:87: 20:b7:ef:41:0c:51:10:fc:69:41:6b:eb:92:3b:1e: a8:67:04:8e:26:34:3d:0f:67:ad:f3:b7:dd:08:0f: 02:11:7c:90:86:0e:09:28:e4:e2:72:7d:b2:66:b6: 2d:c9:dc:c1:14:48:1f:c9:dc:fc:f6:42:e2:f8:cb: 05:b7:91:53:9f:82:0e:60:d2:ed:d9:d0:3f:50:fb: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:82:1E:19:0F:0A:0C:5E:B7:08:75:44:AB:1B:6B:BB:9A:38:2C X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8c:e2:1f:80:b9:14:3d:ac:5b:5b:cf:1a:dd:23:92:3b:08: 77:4d:61:28:44:62:aa:67:ef:f9:f6:82:20:69:b7:3b:2b:d3: 0e:b7:27:83:c8:d7:4b:87:27:01:4e:4d:cf:dd:44:09:0f:4a: a8:4c:40:e7:7f:6c:0a:d4:50:ff:1f:fb:87:27:31:b5:1d:d0: 4c:5b:b5:e0:6e:41:cc:ff:b5:fe:89:8c:c0:aa:a9:0f:22:9c: 88:9c:71:2d:08:fe:76:c5:17:a6:47:57:33:0d:47:c4:fb:eb: 83:6c:2a:ab:2b:c8:a7:ba:11:17:5a:4f:2a:24:2e:66:98:c9: e2:7b:7c:15:3a:bf:45:5b:63:48:84:53:30:40:6b:25:ee:bb: 06:e7:70:43:50:05:b6:a7:d7:a2:a3:73:ea:ca:f3:70:d7:01: 8e:08:40:3f:4d:f3:41:36:77:e1:8a:e6:d3:ae:56:2a:fb:8a: 80:09:c5:c9:2d:cc:b0:2b:95:97:7b:e1:ba:78:2e:e0:7f:f7: 69:a1:51:4a:7a:33:f7:5a:eb:fb:b7:d3:1e:13:d3:dd:da:10: a6:26:bb:67:95:db:9d:9f:c3:b2:c4:35:bf:9e:22:41:62:2b: 9c:b5:2b:13:14:6f:f0:28:d0:43:0b:79:02:d5:a0:a4:44:95: ec:81:8a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmW/d9RlLD0si6lR+LibHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjUxMTA0MTYwMDQ2WhcNMjUxMTA1MTYwMDQ2WjAzMTEwLwYDVQQD EyhlNDcxODIxZTE5MGYwYTBjNWViNzA4NzU0NGFiMWI2YmJiOWEzODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGYnAyzjEOCv5qak0xd6xvDRQ8ll mWPQa+2hP9qih+L+PWthsTKyveasU6XkspkZAHaHhzLkyFcIG2E8hYiTTwElnFEp PxE9U5Ae5GhrBtTMjR3tcmhzWAzFobg9+5vZcEggcubUKdXpy/nqHvorQQ3d5LDy 6TtQiLTKyRRQT9QKFGmbWjywNU3htoOSxrKe6CZv6vjJJUqUMFZjG/8Bw3MrKEda ycHlyNOE1netygWesocgt+9BDFEQ/GlBa+uSOx6oZwSOJjQ9D2et87fdCA8CEXyQ hg4JKOTicn2yZrYtydzBFEgfydz89kLi+MsFt5FTn4IOYNLt2dA/UPuedQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORxgh4ZDwoMXrcIdUSrG2u7mjgsMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIziH4C5 FD2sW1vPGt0jkjsId01hKERiqmfv+faCIGm3OyvTDrcng8jXS4cnAU5Nz91ECQ9K qExA539sCtRQ/x/7hycxtR3QTFu14G5BzP+1/omMwKqpDyKciJxxLQj+dsUXpkdX Mw1HxPvrg2wqqyvIp7oRF1pPKiQuZpjJ4nt8FTq/RVtjSIRTMEBrJe67BudwQ1AF tqfXoqNz6srzcNcBjghAP03zQTZ34Yrm065WKvuKgAnFyS3MsCuVl3vhungu4H/3 aaFRSnoz91rr+7fTHhPT3doQpia7Z5XbnZ/DssQ1v54iQWIrnLUrExRv8CjQQwt5 AtWgpESV7IGKVw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:56:33 2025 by rpki-client