$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json) Hash identifier: GeOFtXMfeTR27FLjMzYMIyZunBiCp8pzflD70as6tuo= Subject key identifier: 1A:77:84:59:07:6D:EC:D6:BA:FA:F8:02:0B:4F:7A:FF:76:66:24:9E Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019A19BD13056A23EF902ED7A03ACB126510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft Manifest number: 1703 Signing time: Sat 25 Oct 2025 05:00:12 +0000 Manifest this update: Sat 25 Oct 2025 05:00:12 +0000 Manifest next update: Sun 26 Oct 2025 05:00:12 +0000 Files and hashes: 1: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=) 2: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: MSYCImBDtbaNywDqgRZ4HQHELdXP8YiZLWjprvcGwlo=) 3: 8bzVTIvU7VLto519WM6kmb1aC88.roa (hash: RKtsKte4GFMP8uvXTysNKUtwWTqGBn/sT3xSLBAL7kc=) 4: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=) 5: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=) 6: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=) 7: S5tOJLlP_fO4AuDKQ8_gge5ko6o.roa (hash: v1IqdqgiinrLaFWkomMQNKh2wkRHR0/kvJk++V8a1GU=) 8: U0jLu9ql5SdWIQT76CBH027LVAA.roa (hash: PMh+5OCLPKe8/WakcVuCjjuQ331xyUdKEkuwBGpmve4=) 9: WOy4XXuLEMlJp9KBWwhDiF407tA.roa (hash: 6fZWXR6YTfGld6EIK4/PHGRBk1q4g1SRUcUmJfhoCkw=) 10: ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa (hash: CAm7uW2+Hk0sF/LHF5dzV4+B9Tz215MhOa+XlD6Ei5U=) 11: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=) 12: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=) 13: j9WZYSGRdVfvzLNu1mDZtYatwaY.roa (hash: nUy51L/tmtGCGiZiltuVFci4bpVMC+ZdBO8uYz2YP0g=) 14: p-0-WRExyZV5USsnbA07oLLM0Dk.roa (hash: TpKQK+Apn7tf7RflC4lVp209f1NDxfhMP5jeUnHBKic=) 15: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=) 16: rXg2JiPJpfAU79JRlEbsnp3pLc8.roa (hash: MQVzfSubZdxq5yFhe68zUL+Rr+rpOcHAqeIz000zyLw=) 17: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=) 18: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=) 19: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=) 20: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=) 21: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 05:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:bd:13:05:6a:23:ef:90:2e:d7:a0:3a:cb:12:65:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Oct 25 05:00:12 2025 GMT Not After : Oct 26 05:00:12 2025 GMT Subject: CN=1a778459076decd6bafaf8020b4f7aff7666249e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e1:2e:02:d3:ff:29:d4:a1:bc:4c:41:cf:bd: 44:6e:ce:01:55:85:2e:5c:b1:8c:ee:a7:61:a7:d6: b9:85:b4:68:a9:12:69:91:e0:2c:2f:3e:31:ad:41: 9c:53:a4:72:9f:9d:70:11:0c:12:be:3f:78:00:3f: 74:dc:47:52:05:a4:09:4f:68:db:63:05:cc:a4:60: e6:61:7b:db:6f:c1:ae:36:1b:49:9f:01:e8:01:48: 39:80:ab:54:bf:14:bb:59:74:f6:ca:6b:63:de:bf: e7:43:92:d1:02:99:63:9e:34:a5:84:3d:21:cc:06: 11:0e:83:9d:07:6c:b5:72:ba:76:af:db:c9:96:6a: 83:be:fe:7e:f7:d2:42:4f:9c:15:a5:94:8f:0a:2c: 2d:fb:74:e5:9d:3e:8f:70:d7:f3:e8:92:ce:52:65: a3:5a:86:fb:a8:ca:c2:28:94:4d:af:68:52:65:6e: 82:0e:bf:4e:3f:9d:d4:37:43:dc:35:3d:5f:ee:2e: a4:e7:d9:b9:d4:17:9d:ef:6e:65:19:c6:fa:4b:45: 8f:55:d3:7c:6c:ef:85:39:a6:7a:bd:24:2d:60:37: 79:f8:89:b1:6d:8a:f0:4c:cd:0f:fc:2e:f2:46:2e: 5f:2f:19:b6:37:2c:cd:c5:0e:16:94:dd:20:47:9b: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:77:84:59:07:6D:EC:D6:BA:FA:F8:02:0B:4F:7A:FF:76:66:24:9E X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0f:76:9d:1a:3f:0e:68:c6:73:df:b1:f9:2e:ee:0c:42:f5: 98:5c:99:12:e1:ad:4b:51:f2:ff:47:e6:00:59:ed:98:f7:b4: 22:ab:28:8d:dc:f6:05:bb:b0:57:c3:4e:ab:7c:be:d2:03:77: ed:43:ce:94:f3:08:6e:dc:fc:bc:07:b3:79:98:1d:39:0e:ea: 86:96:d4:6b:23:b0:52:5e:19:7c:93:44:4d:c7:45:a7:7b:cf: 7d:82:60:0a:3f:e9:16:51:56:cb:50:ca:95:19:9c:1a:91:ae: 35:dd:b2:bf:3f:bf:40:fc:48:d4:c4:d9:fa:17:42:66:3c:21: 4f:8c:88:d7:93:99:87:7e:3a:b0:03:c2:92:b6:cb:27:98:3a: d9:ae:53:80:ab:6a:e7:43:e9:f0:a3:78:17:e0:90:e6:82:48: 36:32:70:e1:07:af:6e:4c:cb:bc:a3:4a:8b:50:21:31:6e:e0: e8:e2:8d:7f:33:e8:79:d8:4d:37:f5:cc:34:7b:d4:1e:b4:52: 07:e5:7f:29:a5:2b:41:1e:8b:35:1d:50:2d:20:b6:15:72:02: f4:51:09:ae:6d:fc:9a:f5:52:76:6e:40:6b:f4:b0:f6:cb:21: c8:0a:ff:d9:b7:df:d3:9b:56:3d:a5:3e:7e:83:a3:d3:0c:9f: 65:88:d7:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZvRMFaiPvkC7XoDrLEmUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUxMDI1MDUwMDEyWhcNMjUxMDI2MDUwMDEyWjAzMTEwLwYDVQQD EygxYTc3ODQ1OTA3NmRlY2Q2YmFmYWY4MDIwYjRmN2FmZjc2NjYyNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eEuAtP/KdShvExBz71Ebs4BVYUu XLGM7qdhp9a5hbRoqRJpkeAsLz4xrUGcU6Ryn51wEQwSvj94AD903EdSBaQJT2jb YwXMpGDmYXvbb8GuNhtJnwHoAUg5gKtUvxS7WXT2ymtj3r/nQ5LRApljnjSlhD0h zAYRDoOdB2y1crp2r9vJlmqDvv5+99JCT5wVpZSPCiwt+3TlnT6PcNfz6JLOUmWj Wob7qMrCKJRNr2hSZW6CDr9OP53UN0PcNT1f7i6k59m51Bed725lGcb6S0WPVdN8 bO+FOaZ6vSQtYDd5+ImxbYrwTM0P/C7yRi5fLxm2NyzNxQ4WlN0gR5u5MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp3hFkHbezWuvr4AgtPev92ZiSeMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw92nRo/ DmjGc9+x+S7uDEL1mFyZEuGtS1Hy/0fmAFntmPe0Iqsojdz2BbuwV8NOq3y+0gN3 7UPOlPMIbtz8vAezeZgdOQ7qhpbUayOwUl4ZfJNETcdFp3vPfYJgCj/pFlFWy1DK lRmcGpGuNd2yvz+/QPxI1MTZ+hdCZjwhT4yI15OZh346sAPCkrbLJ5g62a5TgKtq 50Pp8KN4F+CQ5oJINjJw4QevbkzLvKNKi1AhMW7g6OKNfzPoedhNN/XMNHvUHrRS B+V/KaUrQR6LNR1QLSC2FXIC9FEJrm38mvVSdm5Aa/Sw9sshyAr/2bff05tWPaU+ foOj0wyfZYjXeA== -----END CERTIFICATE-----Generated at Sat Oct 25 13:36:00 2025 by rpki-client