$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: hfWbKiXV/HW6EG3Bbfrx7hUFfmSOsfkeyOXjsc6BLbY= Subject key identifier: 82:1E:A8:FC:77:9C:CD:B2:B8:85:89:E0:C8:CC:F1:B1:49:C5:5D:D1 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019A0712784BF01C871928E4880BFCE80635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 145E Signing time: Tue 21 Oct 2025 14:00:42 +0000 Manifest this update: Tue 21 Oct 2025 14:00:42 +0000 Manifest next update: Wed 22 Oct 2025 14:00:42 +0000 Files and hashes: 1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=) 2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=) 3: 2P8shKd_220nYdZMZlSUBMfyDxs.roa (hash: DHVwQ61Uemg4pxo94GshwMHSxRxws7x9ytMWEMfUpCA=) 4: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=) 5: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=) 6: 8SguPHIphMGnD7X3CTG_nndU6mE.roa (hash: Of38WddSvMyNlDKwk9utKdII5/SSSiTvKKiNw3Nm+mE=) 7: 9USzYLBawhQVkHZbF2gEbzhvC5s.roa (hash: gAEvHU7vjJHAyOa+y6y8BFG0zaydLqnsUXwSsV0Q83s=) 8: 9X2bVs01Q2tfw1vRsiEx9bwgnng.roa (hash: xUZPkg/6d28gZt22/LQ5MI3h9zeoZfSZKL8cddD08VU=) 9: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=) 10: K8EjZ_3WPjwv0W2aNfotejGzQUI.roa (hash: ZD6jTjKGAi5Tbhse2TYNz3HcAvqRtLDhJzjyCqSgJiE=) 11: LrE2frxOXcAoeq_ZVzCqNTXk33M.roa (hash: mwK8Mh8KOX9KMr5MZyXTGGmMVq9yTgz6tm3vdRw+NkY=) 12: NaTaPKfujJr1Jp0amujqpmQcKM4.roa (hash: D7evRFh9Yxe+0NOmwrrS5eICjJ6z7dDqjSv+6CysBxM=) 13: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=) 14: WhC5y6HpYw6m_MGiQ6XfIsLdv2c.roa (hash: Nv/Imvyk9dKOiF0TKduhR4D3FxweHs4gpbY5BnEHT2A=) 15: _B--CuBhqTjZFsr-jhEXlNZoRk0.roa (hash: jcQpONRIAvkERwo6Ybngiz+/HwyvO0eTzP8ZF+C5RuI=) 16: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=) 17: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=) 18: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=) 19: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=) 20: t65dNvZ6mIPWzEgYcMlAUQutKR4.roa (hash: IJP/pC4d01Se7R3R057e96hfMZC2OpsCJpYV3fv+Wfw=) 21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: dM3dM01dQujwL39f/+NbhGPtylKD3mws7nzlk/6Pedw=) 22: xNLoxQtBTrsDYCoH65tbo0fGdFg.roa (hash: yD4EdHjgdB7qynHghTscrUeU4YcPg+faYfRSy+GnRMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:12:78:4b:f0:1c:87:19:28:e4:88:0b:fc:e8:06:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Oct 21 14:00:42 2025 GMT Not After : Oct 22 14:00:42 2025 GMT Subject: CN=821ea8fc779ccdb2b88589e0c8ccf1b149c55dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:6c:ac:9a:6b:db:89:38:99:ff:f6:cb:39: aa:53:eb:53:46:58:11:d8:ee:c6:da:2e:dd:e3:d9: 3b:b5:3a:aa:ef:a1:d0:4c:32:a8:dd:1a:f1:65:99: 08:49:4c:86:d2:a7:8b:49:f5:1b:5b:37:45:a9:88: ac:b8:5a:0d:2b:e5:59:1f:4b:bd:92:b6:05:96:8b: 3b:e8:a8:2c:11:42:58:03:95:e4:a6:24:39:d6:55: 7a:e7:27:10:b2:78:92:f1:92:ec:71:61:68:95:24: 9f:03:fa:f8:03:b5:6f:b1:39:14:43:9c:43:f6:ba: 28:3c:e3:4e:46:c6:77:66:0b:eb:2f:b6:a4:c3:08: 4a:13:5f:f2:e4:cc:b3:ee:66:29:8d:4c:af:35:ab: 90:7f:91:9b:fa:ad:22:76:46:26:cc:35:f5:37:0b: f4:13:68:bb:7e:9f:70:da:92:ae:64:84:52:3d:d6: 1f:25:63:ed:1f:07:98:52:ef:4c:7f:d4:25:2f:af: bb:e9:1a:9f:bc:a2:73:98:1d:a7:3c:c7:2d:14:35: 29:da:cc:36:18:25:2a:4e:c0:08:b8:96:3f:87:72: 5e:2c:e2:12:f9:9a:d3:11:30:d8:dd:90:e4:9c:02: 4d:27:bb:3f:cc:92:e9:f1:0c:05:b9:cb:1c:57:6b: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1E:A8:FC:77:9C:CD:B2:B8:85:89:E0:C8:CC:F1:B1:49:C5:5D:D1 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d7:6f:5f:36:d6:d4:f6:f1:df:50:68:44:b3:cd:68:af:24: af:29:d2:de:7a:8d:13:c7:a7:ab:08:cc:e0:56:c7:3c:ab:fc: 1c:2b:c3:ad:c4:da:cf:ee:31:f9:db:12:44:94:b6:42:23:60: 35:e3:a7:23:92:54:13:ba:8a:24:f6:99:a9:1a:5f:05:a2:3e: d1:02:ad:bb:d9:8d:1a:ea:cc:93:ce:39:9f:b1:2e:1f:32:6f: 62:4b:cf:24:6e:cd:a2:5e:86:62:61:c6:9b:ea:9f:e5:c6:f4: 8a:92:b3:e7:b8:55:49:a3:8b:43:a3:c4:f6:3c:a7:c0:b4:0a: 08:60:17:98:86:8c:94:73:15:aa:f3:93:a7:34:5c:eb:0f:a7: 9b:29:e1:54:ed:67:0c:77:68:16:0e:66:16:48:62:43:7d:11: 4c:34:ba:3c:95:3d:d7:34:ef:39:96:54:65:9f:e6:c0:a0:bb: 30:ee:e8:84:8e:31:4a:a5:66:92:3a:54:7f:3a:c2:24:a1:fb: 8f:a7:39:4c:c1:c7:d0:e9:03:76:1d:22:24:e9:33:e3:6c:89: ad:1e:a4:cf:9c:ba:b4:75:54:f7:84:9f:76:dd:c3:b4:90:29: 72:06:42:b5:6c:86:35:4d:57:48:cd:5c:95:ee:8c:1e:e7:d2: 59:c1:c1:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHEnhL8ByHGSjkiAv86AY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUxMDIxMTQwMDQyWhcNMjUxMDIyMTQwMDQyWjAzMTEwLwYDVQQD Eyg4MjFlYThmYzc3OWNjZGIyYjg4NTg5ZTBjOGNjZjFiMTQ5YzU1ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty9srJpr24k4mf/2yzmqU+tTRlgR 2O7G2i7d49k7tTqq76HQTDKo3RrxZZkISUyG0qeLSfUbWzdFqYisuFoNK+VZH0u9 krYFlos76KgsEUJYA5XkpiQ51lV65ycQsniS8ZLscWFolSSfA/r4A7VvsTkUQ5xD 9rooPONORsZ3ZgvrL7akwwhKE1/y5Myz7mYpjUyvNauQf5Gb+q0idkYmzDX1Nwv0 E2i7fp9w2pKuZIRSPdYfJWPtHweYUu9Mf9QlL6+76RqfvKJzmB2nPMctFDUp2sw2 GCUqTsAIuJY/h3JeLOIS+ZrTETDY3ZDknAJNJ7s/zJLp8QwFucscV2uVKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIeqPx3nM2yuIWJ4MjM8bFJxV3RMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9dvXzbW 1Pbx31BoRLPNaK8krynS3nqNE8enqwjM4FbHPKv8HCvDrcTaz+4x+dsSRJS2QiNg NeOnI5JUE7qKJPaZqRpfBaI+0QKtu9mNGurMk845n7EuHzJvYkvPJG7Nol6GYmHG m+qf5cb0ipKz57hVSaOLQ6PE9jynwLQKCGAXmIaMlHMVqvOTpzRc6w+nmynhVO1n DHdoFg5mFkhiQ30RTDS6PJU91zTvOZZUZZ/mwKC7MO7ohI4xSqVmkjpUfzrCJKH7 j6c5TMHH0OkDdh0iJOkz42yJrR6kz5y6tHVU94Sfdt3DtJApcgZCtWyGNU1XSM1c le6MHufSWcHBtA== -----END CERTIFICATE-----Generated at Tue Oct 21 20:48:30 2025 by rpki-client