$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: vSiy6XOyq13d1feS3aXE9mdA1nF0LchNMcqUX69i/V4= Subject key identifier: 63:28:0E:F1:2E:97:39:27:A1:A3:EC:EE:F7:AA:15:E4:8F:63:F1:D7 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019A036C1D846082ACF4CE33315B1934121C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 17BD Signing time: Mon 20 Oct 2025 21:00:08 +0000 Manifest this update: Mon 20 Oct 2025 21:00:08 +0000 Manifest next update: Tue 21 Oct 2025 21:00:08 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: 9576YYlhoP7f2pSzcYlCJOH8MSo.roa (hash: 8ylOR07mWV1t96DQR+NXsOjeZN13g3RKILzsyJYBK2E=) 7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=) 8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 12: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=) 13: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 14: Q8a1d3JDYnlpHCeBJ-ilEaaN7uI.roa (hash: Ott4lu7y1mmRSijCCygPfZ0PWm281dG6wYxdj7K5J+Q=) 15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 16: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 17: UhKvXl_m9nZBE-_rxYy3N0dwSmQ.roa (hash: MTKTbfYtfwy4jMu3+6j7vVJcG2UaV+0Ha/vAze0SZ3c=) 18: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 19: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 20: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 21: gOur9f5G5_TsmAlnK3ja7lGjuYI.roa (hash: VbaOkcXfs2hbyLhB93vkkjUKgWJ53FBk2752UP4mSQo=) 22: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 23: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: QZ2CXlImyJpwl+eTMcl43uzXXsg57fVWtP66qUVjkU8=) 24: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 26: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=) 27: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=) 28: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 29: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 30: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 31: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 32: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 33: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 34: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 15:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:03:6c:1d:84:60:82:ac:f4:ce:33:31:5b:19:34:12:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Oct 20 21:00:08 2025 GMT Not After : Oct 21 21:00:08 2025 GMT Subject: CN=63280ef12e973927a1a3eceef7aa15e48f63f1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:c0:77:6a:a5:df:bf:b2:d8:c6:0f:23:5c: d2:08:86:5d:8d:e6:4d:8f:49:f3:37:66:30:b8:64: 3b:8d:e0:31:a4:7c:b4:a4:29:3d:d9:9d:dd:59:fd: 0d:7a:43:0e:da:be:a6:27:6a:41:47:76:b1:0d:40: 19:3d:e2:ef:81:0e:4e:6b:4e:ff:cb:b3:9a:7c:95: bc:f0:ef:0f:d2:4a:c9:3d:ad:11:fb:26:61:c3:f6: 3d:7d:a5:5c:1d:84:63:7b:e2:fc:5b:83:2e:99:90: e8:11:fe:76:04:15:e9:64:ee:c9:19:12:15:9d:e4: 5f:d8:1a:b0:64:c5:f5:a1:9b:38:63:bb:d2:13:6f: 21:19:de:3a:d0:a3:20:84:33:d3:59:80:25:4a:9b: d9:45:a6:3a:35:3e:ef:11:84:b5:9e:51:70:2b:19: 1a:71:31:d2:64:56:f2:83:75:03:01:59:88:55:63: 8b:ad:06:79:d0:86:b5:1f:0f:38:77:14:b4:3a:f9: 09:3b:77:aa:f2:5f:86:5d:40:c7:2c:c2:7e:14:9c: 92:0d:1a:df:0b:02:bc:21:bc:65:0a:3f:8f:08:d4: bf:b5:b0:c8:05:e9:bf:5c:81:2f:20:dc:09:82:d6: c9:46:30:c9:64:55:24:63:43:6d:c6:f2:88:00:2e: 91:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:0E:F1:2E:97:39:27:A1:A3:EC:EE:F7:AA:15:E4:8F:63:F1:D7 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:82:7c:b6:78:43:a0:88:3b:88:5f:b3:b3:cb:27:a4:7d:22: 8a:7b:8f:19:2d:15:19:c8:77:9f:7e:a3:b5:6c:65:43:98:3d: ff:2a:c9:5c:38:ea:34:bf:8f:17:e2:ff:cc:1c:c4:e7:a5:f8: da:a7:0b:61:09:2a:3f:f9:8b:1c:ee:47:f1:8d:4f:20:52:f2: 21:29:7f:27:32:7b:30:af:b9:f8:a8:89:a3:2d:00:25:17:21: 42:40:2c:5f:b5:9e:ce:81:af:26:1d:4d:33:a4:5b:56:19:dd: 01:5b:47:18:76:c8:49:75:c2:be:ec:62:d9:f8:21:e0:a4:0d: e9:da:c9:5c:de:82:ce:98:2f:e8:8f:a8:2b:0e:4d:c8:8b:d9: 4e:d5:55:9f:c1:48:44:c4:51:9e:ea:18:ee:4f:2a:5b:a0:f9: 4b:fa:38:c3:a5:98:d3:49:04:ae:3f:75:8d:12:02:2f:b8:d9: 35:b2:e2:13:4e:c0:6e:35:7e:a9:6c:7a:f8:b0:9f:cf:81:aa: 30:7d:43:b8:85:a6:ea:e2:c3:8e:8d:fc:35:4e:e4:47:a6:fe: 9a:ba:2d:8d:3b:3e:5c:59:7b:6a:15:f0:e8:24:d0:03:f0:94: df:cd:db:ad:a9:a8:61:36:4b:5c:08:1e:3d:f7:9c:97:1d:3a: 2e:6b:3b:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoDbB2EYIKs9M4zMVsZNBIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMDIwMjEwMDA4WhcNMjUxMDIxMjEwMDA4WjAzMTEwLwYDVQQD Eyg2MzI4MGVmMTJlOTczOTI3YTFhM2VjZWVmN2FhMTVlNDhmNjNmMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmnAd2ql37+y2MYPI1zSCIZdjeZN j0nzN2YwuGQ7jeAxpHy0pCk92Z3dWf0NekMO2r6mJ2pBR3axDUAZPeLvgQ5Oa07/ y7OafJW88O8P0krJPa0R+yZhw/Y9faVcHYRje+L8W4MumZDoEf52BBXpZO7JGRIV neRf2BqwZMX1oZs4Y7vSE28hGd460KMghDPTWYAlSpvZRaY6NT7vEYS1nlFwKxka cTHSZFbyg3UDAVmIVWOLrQZ50Ia1Hw84dxS0OvkJO3eq8l+GXUDHLMJ+FJySDRrf CwK8IbxlCj+PCNS/tbDIBem/XIEvINwJgtbJRjDJZFUkY0NtxvKIAC6RKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMoDvEulzknoaPs7veqFeSPY/HXMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4J8tnhD oIg7iF+zs8snpH0iinuPGS0VGch3n36jtWxlQ5g9/yrJXDjqNL+PF+L/zBzE56X4 2qcLYQkqP/mLHO5H8Y1PIFLyISl/JzJ7MK+5+KiJoy0AJRchQkAsX7WezoGvJh1N M6RbVhndAVtHGHbISXXCvuxi2fgh4KQN6drJXN6Czpgv6I+oKw5NyIvZTtVVn8FI RMRRnuoY7k8qW6D5S/o4w6WY00kErj91jRICL7jZNbLiE07AbjV+qWx6+LCfz4Gq MH1DuIWm6uLDjo38NU7kR6b+mrotjTs+XFl7ahXw6CTQA/CU383bramoYTZLXAge Pfeclx06Lms7rw== -----END CERTIFICATE-----Generated at Tue Oct 21 01:41:55 2025 by rpki-client