$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: KTdUe9aCvxsqcbzK6qJuFeDSfubs4Nv2pvkD8+pEAeo= Subject key identifier: BF:60:E4:F7:45:ED:00:EA:43:D6:22:FC:D0:4F:0B:61:53:4E:B3:D4 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019A804F501572B203E41E3F9786698A2973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0609 Signing time: Fri 14 Nov 2025 03:01:12 +0000 Manifest this update: Fri 14 Nov 2025 03:01:12 +0000 Manifest next update: Sat 15 Nov 2025 03:01:12 +0000 Files and hashes: 1: 06Lo3TEshbdLYbOiItMhIrRRP7Y.roa (hash: UneRobUa0HOEvhDKQSJldaXTwM77pPlsoKNgn+2tT6w=) 2: 1-pnnUKWpCO7g-oyYSyyU_EoGV_c.roa (hash: nZP6B6GRqHHfjfeYVyMFTNBoRQupuuOfgOI2fjJzj7s=) 3: 1-t-p-2vAGI8XzdVIGKTjQY6vkRc.roa (hash: Kd9bjRzd8RjLzTNaJJt0WwExTzzY9wLuuIO7FKDAktI=) 4: 37BTPRJ2mUzJ-nKimdQrOdGeJ_U.roa (hash: VASG+LCLBWHHY3tdJ3+/Ec8TDU9J5mXR8pTNwrsjDxE=) 5: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=) 6: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=) 7: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=) 8: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=) 9: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=) 10: EtvYYt1SsPhVbUBlb-gyRW3BpiI.roa (hash: mKLlkYLYAV8TtsT89IDg/2Tbl2phQohLCpJVPEdEhrA=) 11: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=) 12: IvRgmT2reOzeuytZym-ijAGPPBk.roa (hash: dSmrvci4sQWpc2gVp+CZfEWf5dBDbTlu7yUnaMUzc1w=) 13: JxZ2PV2RYnx-i5FgEdX8_ua6vLk.roa (hash: knnuID3189A1YGf/2FgAAdsJ3ixY4wa1onnycZbuIbI=) 14: KAJR7Az03SttMk_zWkKXtcY_Zv4.roa (hash: mPYizTtCYKtuALtzDruuWZjX6sFa/cj7Bo/6GSj1GAA=) 15: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=) 16: RWE60Ns1mQje11llf2ihFVQVFic.roa (hash: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=) 17: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=) 18: YyaG3S0poVAnzLCPDdFpzugK_PQ.roa (hash: 24Gl7AEyeVcP6AdBrJexExnxFpJwqifZ9iimIKjJBOQ=) 19: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=) 20: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=) 21: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: vCKAimq0r3+KW+fPyCEE5b0PAWdIZM8KBBhGOhN1uIY=) 22: fMNp0WawB9aiZNJhENwtDIMKv6s.roa (hash: kX9bqTf62TSE/EgEllfWIXr155ziuFoEFR2CWnne/68=) 23: fiCGtzKKE-k-7cha3uNWaHMAwQE.roa (hash: DG4Oq1uFkwkg9DHh3q1fJzBn5icOEgMS7FPAHL+4K8o=) 24: grdt8mgDzKnb-AIa5iVppNSJziE.roa (hash: YgndpH0ES5lTVzS9HaDo0++Ke9eabHkve02TiNj7Qmg=) 25: tx4Fg1lZCftTlOqdZzz3VUxny5A.roa (hash: YfKwLGhi+IqH7ACriVDXhCQ+ssHF1d2DL7St3G18BL8=) 26: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=) 27: w4fdgcM_VAZQqEjdsKX2MaMiGZs.roa (hash: YDrr6E1j35eer9d2XxL6nLYIzyCqbmfyxlWv4gXRs3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Nov 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:80:4f:50:15:72:b2:03:e4:1e:3f:97:86:69:8a:29:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Nov 14 03:01:12 2025 GMT Not After : Nov 15 03:01:12 2025 GMT Subject: CN=bf60e4f745ed00ea43d622fcd04f0b61534eb3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:c7:3e:3f:14:07:27:07:07:e1:a7:98:19: b7:09:b2:57:25:a4:d1:77:69:4d:a5:77:04:21:85: 60:92:9e:60:9d:d4:83:ce:a5:f9:91:37:0b:49:2c: 13:cc:f1:5f:f0:24:1a:56:c0:5f:47:b6:5f:08:ef: 3a:09:3f:ed:29:9c:e3:71:df:ce:6a:ed:cc:56:90: c2:26:e6:3b:4b:35:0c:90:54:53:15:c3:50:a9:31: 09:77:1d:1a:31:73:67:80:a9:3e:79:61:ff:77:d2: 00:81:70:0a:ef:bc:07:e5:77:49:8a:42:e4:99:54: ed:ff:31:6e:93:4f:cf:6e:c0:47:da:75:42:d5:18: ff:62:85:76:f5:b0:58:02:9c:10:f1:a6:c0:d2:f4: 78:32:55:17:a5:29:a8:0c:c7:4a:e4:c9:93:01:1b: 87:1f:be:b9:3e:a8:44:11:52:df:47:4a:88:53:c1: 98:09:33:fe:00:b5:ce:d1:db:87:41:ca:c5:4d:54: 26:3c:13:b6:b7:16:3e:47:df:37:b9:9d:18:99:2e: 34:ee:a8:da:27:09:c4:a8:bb:2c:b2:18:6a:3e:bf: b9:98:e2:54:ea:7f:c7:ba:9f:9f:df:ed:29:94:70: fb:1e:18:ef:34:0f:51:ed:78:d7:c8:6a:ba:61:eb: 63:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:60:E4:F7:45:ED:00:EA:43:D6:22:FC:D0:4F:0B:61:53:4E:B3:D4 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:85:3d:48:61:a8:bf:bf:4b:2c:bb:49:e9:58:eb:9a:02:e3: 2d:fd:b2:28:94:c6:85:f0:80:96:17:76:a5:d1:c3:8c:b1:4f: cd:7d:89:06:50:17:b2:89:ab:ce:f3:19:e1:8b:ef:fe:b2:f4: 2a:57:f3:20:36:09:65:3e:5b:8f:8b:ff:20:56:bb:b2:ad:1f: a0:7c:00:eb:92:a4:39:ea:1b:16:c4:5e:ad:06:4a:07:b4:18: 0d:ca:09:6f:32:9b:5d:8b:f3:81:38:3a:3f:f2:10:6b:d4:87: ae:b7:bc:aa:76:fc:3a:56:e0:c4:b2:8a:d0:22:8c:d9:57:60: ae:ea:91:83:fe:7a:e9:5e:f8:35:37:1f:00:59:3d:22:57:55: f9:82:3f:99:51:d1:5d:25:5f:bf:7d:54:57:50:c6:87:3b:a0: a7:b9:8c:32:54:69:68:4c:ae:02:15:e6:87:7a:1d:6c:bb:6f: e7:29:37:43:b6:6c:01:c5:cf:a1:59:86:85:30:2d:a2:b9:ac: 21:24:ab:76:bc:eb:96:89:ec:af:ad:a5:6f:b3:82:49:9e:65: 3a:30:1d:58:49:d0:c8:cd:b2:6c:b5:6c:cc:58:9c:bb:07:fb: 35:16:9f:80:af:69:83:c7:19:3d:5f:6d:3f:b5:7f:a4:8a:61: 47:64:d7:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqAT1AVcrID5B4/l4ZpiilzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMTE0MDMwMTEyWhcNMjUxMTE1MDMwMTEyWjAzMTEwLwYDVQQD EyhiZjYwZTRmNzQ1ZWQwMGVhNDNkNjIyZmNkMDRmMGI2MTUzNGViM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+jHPj8UBycHB+GnmBm3CbJXJaTR d2lNpXcEIYVgkp5gndSDzqX5kTcLSSwTzPFf8CQaVsBfR7ZfCO86CT/tKZzjcd/O au3MVpDCJuY7SzUMkFRTFcNQqTEJdx0aMXNngKk+eWH/d9IAgXAK77wH5XdJikLk mVTt/zFuk0/PbsBH2nVC1Rj/YoV29bBYApwQ8abA0vR4MlUXpSmoDMdK5MmTARuH H765PqhEEVLfR0qIU8GYCTP+ALXO0duHQcrFTVQmPBO2txY+R983uZ0YmS407qja JwnEqLssshhqPr+5mOJU6n/Hup+f3+0plHD7HhjvNA9R7XjXyGq6YetjAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9g5PdF7QDqQ9Yi/NBPC2FTTrPUMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4U9SGGo v79LLLtJ6VjrmgLjLf2yKJTGhfCAlhd2pdHDjLFPzX2JBlAXsomrzvMZ4Yvv/rL0 KlfzIDYJZT5bj4v/IFa7sq0foHwA65KkOeobFsRerQZKB7QYDcoJbzKbXYvzgTg6 P/IQa9SHrre8qnb8OlbgxLKK0CKM2VdgruqRg/566V74NTcfAFk9IldV+YI/mVHR XSVfv31UV1DGhzugp7mMMlRpaEyuAhXmh3odbLtv5yk3Q7ZsAcXPoVmGhTAtorms ISSrdrzrlonsr62lb7OCSZ5lOjAdWEnQyM2ybLVszFicuwf7NRafgK9pg8cZPV9t P7V/pIphR2TX1g== -----END CERTIFICATE-----Generated at Fri Nov 14 10:46:54 2025 by rpki-client