$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json) Hash identifier: MEfT5P74z4FYb0ZP2IGMjoYF3g01doE456RAvU1I3qI= Subject key identifier: 9A:79:15:0A:0C:D7:9D:5B:D9:83:6F:5A:1C:E5:9D:DE:9D:52:C7:8A Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019A047ECE17205A1A16121D2176485E282C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft Manifest number: 0114 Signing time: Tue 21 Oct 2025 02:00:10 +0000 Manifest this update: Tue 21 Oct 2025 02:00:10 +0000 Manifest next update: Wed 22 Oct 2025 02:00:10 +0000 Files and hashes: 1: BLL7KvTCffO6tp4kIOP_sSt6WzU.roa (hash: K2KxT9evveKUcS3Zp6W/L1otqyWrsiDb4Q4jrBUnW7c=) 2: Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa (hash: j2OXrFqgsDjaKg5s5TvNOiiSOulderYWQlkF+sXQtfA=) 3: GXNfhhCLmXkcBaMcM3Wqb41chEc.roa (hash: rifz7ON+2GOQGOKbBBrmdaYyl9eb/JIR5S1cj3TU4jE=) 4: JoDgj6_aYuH2h_z7acYlnllXJD8.roa (hash: s9ZiFfWtjJJRskfMKESh5wPV+ucKeG1v2mAsgKvSMUs=) 5: TH3AhVbNZPfpfze9jk4P8EYhJRk.roa (hash: CvDuj4p8KBdrmQoz9VsmO+AYAN5CIQ+jW9RXbyF9x5g=) 6: U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa (hash: ZdJ45ZazcA/TtNU+GF97U74ZRNYKvCtVCEwip83Krrs=) 7: X1OJBmObFYHg6-TEw8S-Kw2Q7ic.roa (hash: Oyq+zf+xTb/nBsWGWwl35Zcj+K8DjFf57comG4rLZLc=) 8: Y8i3rrn4fUUiKvEOTWMIpo8Wdg0.roa (hash: lhJRliSxc8nIrWSQMwOkXfftJXTelhvnTEYCqHEODt0=) 9: Z1M_6TrqOd8wD9NKtj0iTyQonVc.roa (hash: aDWP4uHhbYWLYFp3XR/+E+EeJ5Rm4IXEZcu1iYff0qg=) 10: ZDayT6lDLS2GCPR-v8fqvcLoQK4.roa (hash: +ziQ7srcO8pPuSJWXnBHZoMe2FpncGGdN6aXUGmO+8s=) 11: dHXXvm5G29XbZTMm4RwPjpLYBp4.roa (hash: Y17gdHapZNrAnkNJtHU7rPFemKpgw5uE5ulxbMkkwBE=) 12: dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa (hash: pBj1g6kNC1lCzmrnByXYXnQfvQx7VuBxAQQxYeHelao=) 13: emjANyISkJRoOdzxCAt2kq4CVQE.roa (hash: 9W1oN3mBYbWV8A6Uo6B7h78llPTnM+uYRLY9fCXhQlY=) 14: gchhAVJFDCU8blLfh1bBR6nV7eE.roa (hash: i4UDZqnLoafc9IhMJrDyMFSOYLmIkEVFeY6p5LZlGi4=) 15: hLDp0R1tKZ1uQpk7clza_OXTeIc.roa (hash: 2IvvdqWOvjCen06JgJKZvx4rVETFnJduNU5B5/20Srw=) 16: hok1h3DBZfbszYTqi9gXzI5jkqU.roa (hash: Rrp79AM7R2rghKYLAtKfPleubz/8AHn7KNcJJOJ8/Y0=) 17: oYGGiYdbxpGeCKboMYRmQpGsbJg.roa (hash: 4Tb5SbH+PWEL8ZWRvMbss+TVaZCN9gSpmDVf6SCXqwg=) 18: p2_7XpLZT8F42rihOd0TzCMxmCo.roa (hash: f2RKPMbWax0ofSjG9a3ohFFR7biXce7y0gFKOZaUepQ=) 19: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: Kwm5Ln8aMkh19k/12Y4Ug3ks2KeIvpj1Q6pUIFiv6ig=) 20: qYUhOlm7rxtE24ifggtJupvHC-U.roa (hash: Eq0prYYqmBCy3NmWTbhlJMhDQOJrr51MgbHFrPYHpts=) 21: z1lDJAYiSGQWP0hQT2qsq0NQckw.roa (hash: +w84SriAFLfwafgawze6gO/oCWYDdlLPo2xuwocy9KU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:7e:ce:17:20:5a:1a:16:12:1d:21:76:48:5e:28:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Oct 21 02:00:10 2025 GMT Not After : Oct 22 02:00:10 2025 GMT Subject: CN=9a79150a0cd79d5bd9836f5a1ce59dde9d52c78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:36:69:79:94:ae:d2:3f:25:62:99:a1:c2:a6: 28:86:a8:43:b9:e7:59:15:74:34:e9:6c:c8:50:cd: 7e:85:78:44:95:84:7a:42:34:ae:b2:5f:f1:28:09: a9:67:39:da:fb:bb:dd:00:86:a1:c6:a3:02:b8:88: bd:90:09:61:8e:8f:6f:0d:73:31:d6:7b:34:ce:53: 26:eb:30:37:d5:f9:3b:b5:c4:11:14:5c:4d:45:42: 16:80:0a:93:50:15:34:84:9a:7d:56:19:4e:07:1b: 32:a1:fa:6b:70:d3:f7:22:53:fd:5a:13:f3:b3:83: 4e:35:d9:8c:62:d3:cf:f7:56:3a:54:b3:04:e0:77: cf:e4:39:13:14:eb:8d:81:d5:f9:a1:ce:7d:1c:8f: bb:b9:50:6a:6d:de:0c:07:ec:c6:dc:94:0b:a7:d8: 12:04:e9:d9:b6:5e:cd:7e:9e:59:4c:2b:63:78:0f: 01:1a:72:13:97:1f:08:6e:0c:16:23:e2:b3:ab:b3: 93:82:43:e4:ca:73:2c:fb:50:77:92:fa:73:20:e3: 9d:b6:9c:1d:68:97:ff:3b:85:ff:16:72:7f:f7:5f: 50:e5:4a:e0:e7:99:14:d7:c4:32:a9:25:fb:2d:3f: 2d:5a:77:57:54:4d:c9:53:df:f1:fe:cf:5c:5c:c2: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:79:15:0A:0C:D7:9D:5B:D9:83:6F:5A:1C:E5:9D:DE:9D:52:C7:8A X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1a:1b:08:f8:04:16:b2:46:2d:e0:d0:9f:c6:84:e5:bf:c6: 56:fc:b7:1e:c4:3e:27:2f:68:2e:ed:03:f9:b7:6f:84:ab:ee: b0:2e:53:fb:43:94:f6:76:5c:be:6c:a8:73:22:80:54:5b:aa: d0:9b:0d:26:ad:05:c7:5a:2d:2b:c5:1c:57:6d:1e:14:f5:55: 16:39:d8:be:ce:f5:f3:88:6b:5a:d8:50:0f:78:53:2a:23:a3: 91:23:7d:0b:3c:68:09:71:49:17:0a:26:f4:dc:92:12:41:ac: 94:53:2c:7e:f0:69:0a:47:56:46:06:16:7c:bb:a9:c0:de:f1: d8:2d:34:9a:20:de:24:7a:2a:a6:43:ff:65:cc:9b:7a:f9:ba: cf:e7:f6:52:2e:fe:c1:2c:66:0f:bd:0e:ad:63:cf:8f:f6:d1: 7b:d5:de:44:77:72:aa:e8:ad:5a:0b:a7:45:e4:33:19:64:3d: f9:c1:a6:eb:6e:3e:ea:ea:c7:5c:7e:8e:f8:74:54:aa:d2:0a: 54:13:69:22:fb:02:90:ef:d4:86:0e:3d:d2:4f:66:84:86:08: 84:fa:33:e6:71:7c:b0:0b:47:63:2a:bf:c9:ec:c4:e6:b0:c1: f4:cb:5a:5e:3b:4a:4e:e6:d1:fc:26:29:54:14:13:6f:a6:00: 0b:9a:10:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoEfs4XIFoaFhIdIXZIXigsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUxMDIxMDIwMDEwWhcNMjUxMDIyMDIwMDEwWjAzMTEwLwYDVQQD Eyg5YTc5MTUwYTBjZDc5ZDViZDk4MzZmNWExY2U1OWRkZTlkNTJjNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jZpeZSu0j8lYpmhwqYohqhDuedZ FXQ06WzIUM1+hXhElYR6QjSusl/xKAmpZzna+7vdAIahxqMCuIi9kAlhjo9vDXMx 1ns0zlMm6zA31fk7tcQRFFxNRUIWgAqTUBU0hJp9VhlOBxsyofprcNP3IlP9WhPz s4NONdmMYtPP91Y6VLME4HfP5DkTFOuNgdX5oc59HI+7uVBqbd4MB+zG3JQLp9gS BOnZtl7Nfp5ZTCtjeA8BGnITlx8IbgwWI+Kzq7OTgkPkynMs+1B3kvpzIOOdtpwd aJf/O4X/FnJ/919Q5Urg55kU18QyqSX7LT8tWndXVE3JU9/x/s9cXMKBdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp5FQoM151b2YNvWhzlnd6dUseKMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxobCPgE FrJGLeDQn8aE5b/GVvy3HsQ+Jy9oLu0D+bdvhKvusC5T+0OU9nZcvmyocyKAVFuq 0JsNJq0Fx1otK8UcV20eFPVVFjnYvs7184hrWthQD3hTKiOjkSN9CzxoCXFJFwom 9NySEkGslFMsfvBpCkdWRgYWfLupwN7x2C00miDeJHoqpkP/Zcybevm6z+f2Ui7+ wSxmD70OrWPPj/bRe9XeRHdyquitWgunReQzGWQ9+cGm624+6urHXH6O+HRUqtIK VBNpIvsCkO/Uhg490k9mhIYIhPoz5nF8sAtHYyq/yezE5rDB9MtaXjtKTubR/CYp VBQTb6YAC5oQYA== -----END CERTIFICATE-----Generated at Tue Oct 21 09:16:32 2025 by rpki-client