$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: E+vILdkPNSmkwGtYIQzIz/ymiSfgbP1RHjORVu33KiY= Subject key identifier: 4B:7D:EB:C5:E7:FF:14:CA:5D:93:6E:9C:DD:80:32:2E:8B:87:0D:F5 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019A04485D1E951A5BECDFACBA8CC99DB019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 17E2 Signing time: Tue 21 Oct 2025 01:00:42 +0000 Manifest this update: Tue 21 Oct 2025 01:00:42 +0000 Manifest next update: Wed 22 Oct 2025 01:00:42 +0000 Files and hashes: 1: 1f-9tUF1QCZIsfJt2ipW4khRx9g.roa (hash: qvsbL3ItSjRr+HrTxGxdX6hRWDpLj1yz143EUSJxB+k=) 2: 47LP3M4DnpAhDBPc8Xe1KqevZ2c.roa (hash: mk2gBXTfAFrg1QI3/EfLEXfTmlSexo0wvcwH/k20wTk=) 3: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=) 4: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=) 5: DfUSjPi2INTZBxoOQDwjln-TPKA.roa (hash: /ysoks/fge7Q4Y/49e0Xa6J+sfHs/2M2DRhW7QPhPZM=) 6: F4WBg9MCoqcRguuT9HyCgQ2xI58.roa (hash: C982bPOPxBwa7z3CYCODJzbbCImuDivtdpfCpusb190=) 7: FscYqFjraHvELbE2bDX_GeV2HSM.roa (hash: nEqjDMKGSyCyu7mJaJDlkbmcQx/bLcYMyZ0fzhn9wcE=) 8: Ik6QwSrfDqHUI7Ij7qbG8q-IHQM.roa (hash: sfqW1SHNQD9LIu80Ra3gYUQ7btog4CT5/tG0jAIfAgU=) 9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=) 10: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=) 11: Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa (hash: RVta5cu/zmPSf403glh7WoQpDtLpGKMPuUokA8G+dNU=) 12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=) 13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=) 14: PWojxW9iXS1jgfgbFPdUQeVZND0.roa (hash: YToPlOG2G4JuPFJzGtMhxZmKt4Yh4oO1yAxhQTyQoC8=) 15: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=) 16: Sl1txCYU9DdbNCbQ2vVXAA_9LNU.roa (hash: NNNtBKmCmkesRj5ZlziPlaehQT+qG9xRPKoV7sVJzhk=) 17: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=) 18: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=) 19: ZTQZTuLauBHiGKTld9JnjezgqOg.roa (hash: 65y7nBou84F4bzQFdYgr5T7QPfwypx7IoDskfxC/cVA=) 20: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=) 21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: FcPk2NzcMsNpayTOt4CfFBzzQ+UxsZ7noT/SBxz0Beo=) 22: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=) 23: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=) 24: kSYUKc4rBAz8MfIEJ_WMzjzhFA8.roa (hash: irH9QeqTuF37osVFPeokf05FXw+yoOdv4lX5HDy0GLE=) 25: pVdfXUwosJ8KsorkaZco4tqDBa8.roa (hash: Lt1k5lM1qRumIXSyRVec7p+24rwON9jxZ+FAtlLGexw=) 26: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=) 27: tT6ASrHAosYkp4sWCxMRwoxhYS4.roa (hash: iT5+PFN5V9lv2Ui5UEIdkGr/yriWuv+ENg/CnaGzDgo=) 28: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=) 29: uZfvttHeYCpTmwGtvthls2GR6Mk.roa (hash: +oUNgtgeFHW/Ao/Yv6Zmwz+f8VUM2x/qnI4Y2b/e5es=) 30: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=) 31: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=) 32: z9DA-AUTa3uWkodHptZWBoBW_Y8.roa (hash: kzWytCKWeVLHNrJ/XTBOU1L7OCFCNf+bLfFOmqVpvPA=) 33: zLZPib2q4N-wxUBLghJm8S0LpmI.roa (hash: zwKUjOOpiqrym9HQMr4/mJ1TtSF5ArH6j4HJ3LWd0ZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:04:48:5d:1e:95:1a:5b:ec:df:ac:ba:8c:c9:9d:b0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Oct 21 01:00:42 2025 GMT Not After : Oct 22 01:00:42 2025 GMT Subject: CN=4b7debc5e7ff14ca5d936e9cdd80322e8b870df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:c4:2e:46:02:88:97:7c:53:70:1a:04:d1: 5b:5c:cb:9e:db:e7:d4:e5:5f:f0:fe:bb:30:75:82: 04:fa:53:c0:8e:e5:5c:06:e3:96:3d:76:ce:5b:5c: 21:85:43:38:e7:3a:22:e8:59:b5:60:5e:5e:87:4b: f0:e5:ef:a7:ef:18:64:b8:04:e9:8c:cf:da:3b:e7: 81:a5:e7:3b:cd:31:b4:3b:d3:c2:b2:00:61:cd:70: d5:0c:e5:7c:ac:26:88:c3:e6:00:36:52:de:0c:af: 9e:1c:c3:fc:69:7b:50:08:58:a0:8d:ed:0e:43:eb: c1:70:f3:49:6a:c2:58:14:03:c8:03:94:2b:7f:9d: 98:c7:82:d3:55:86:8e:1b:c1:1a:39:a2:ef:4c:e2: 9e:fc:95:de:95:d4:d6:0a:a8:29:84:9f:8a:9c:c4: ec:a4:43:50:72:72:08:82:93:a6:bc:33:9a:a3:14: 99:00:a1:05:5b:29:20:e1:c7:ac:8c:3a:d9:5d:00: 8b:a4:81:7d:f3:69:4c:96:f8:d4:32:66:16:ae:7f: f4:5b:b2:bd:d4:1c:f5:8b:bd:2c:21:53:99:cd:87: 4d:dd:3a:d0:82:40:72:24:a4:02:5d:87:a1:1d:aa: a9:52:de:af:9e:14:01:ac:8f:26:f1:5d:1f:5e:81: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7D:EB:C5:E7:FF:14:CA:5D:93:6E:9C:DD:80:32:2E:8B:87:0D:F5 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2f:77:5a:8f:a0:de:d3:8c:99:ec:b9:80:77:11:d2:e4:0a: 1b:f7:29:75:6b:d7:49:82:6d:38:99:d8:f4:89:4f:a4:0c:cd: b6:0e:51:16:1b:ca:c8:3b:b2:60:37:cb:65:48:53:90:08:e3: 8f:f6:a9:15:ab:2e:6f:cb:62:95:d8:13:82:32:da:6f:ad:7b: 03:50:fe:f3:56:2c:23:57:0d:97:dc:df:cb:d6:ba:8e:4d:31: b6:1e:e6:6d:a5:f5:e1:5c:a2:47:46:9d:0f:e0:f0:49:6a:e2: 8c:ae:fc:f7:8a:20:e1:0c:a0:ba:87:28:4b:88:d0:1e:a7:41: 8e:82:d8:c5:d4:50:19:d4:be:67:e6:83:17:28:cc:4b:15:c6: 96:96:a0:e1:0e:fe:60:e0:cd:ab:43:6b:8e:79:a7:cc:59:25: b7:00:d7:48:0e:ff:2f:b6:bf:43:f1:fd:00:9e:cd:62:cc:23: 15:9e:5e:43:22:30:30:41:ef:7a:9c:73:b0:a2:b2:7f:cd:b7: 64:3c:6b:b4:f4:a9:af:42:2a:84:26:13:5b:32:3c:58:1e:d3: 6e:c3:3f:b3:95:96:d1:89:d7:d0:03:bd:af:e7:7d:52:a2:be: 04:00:92:6b:a8:d7:55:e7:a9:15:e2:c9:df:13:40:e6:d3:4c: 23:48:aa:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoESF0elRpb7N+suozJnbAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUxMDIxMDEwMDQyWhcNMjUxMDIyMDEwMDQyWjAzMTEwLwYDVQQD Eyg0YjdkZWJjNWU3ZmYxNGNhNWQ5MzZlOWNkZDgwMzIyZThiODcwZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y7ELkYCiJd8U3AaBNFbXMue2+fU 5V/w/rswdYIE+lPAjuVcBuOWPXbOW1whhUM45zoi6Fm1YF5eh0vw5e+n7xhkuATp jM/aO+eBpec7zTG0O9PCsgBhzXDVDOV8rCaIw+YANlLeDK+eHMP8aXtQCFigje0O Q+vBcPNJasJYFAPIA5Qrf52Yx4LTVYaOG8EaOaLvTOKe/JXeldTWCqgphJ+KnMTs pENQcnIIgpOmvDOaoxSZAKEFWykg4cesjDrZXQCLpIF982lMlvjUMmYWrn/0W7K9 1Bz1i70sIVOZzYdN3TrQgkByJKQCXYehHaqpUt6vnhQBrI8m8V0fXoHZmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt968Xn/xTKXZNunN2AMi6Lhw31MB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZy93Wo+g 3tOMmey5gHcR0uQKG/cpdWvXSYJtOJnY9IlPpAzNtg5RFhvKyDuyYDfLZUhTkAjj j/apFasub8tildgTgjLab617A1D+81YsI1cNl9zfy9a6jk0xth7mbaX14VyiR0ad D+DwSWrijK7894og4QyguocoS4jQHqdBjoLYxdRQGdS+Z+aDFyjMSxXGlpag4Q7+ YODNq0NrjnmnzFkltwDXSA7/L7a/Q/H9AJ7NYswjFZ5eQyIwMEHvepxzsKKyf823 ZDxrtPSpr0IqhCYTWzI8WB7TbsM/s5WW0YnX0AO9r+d9UqK+BACSa6jXVeepFeLJ 3xNA5tNMI0iqZg== -----END CERTIFICATE-----Generated at Tue Oct 21 07:48:11 2025 by rpki-client