$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: lm3BeCeK/WfLWJlF61bLROxiSB0LLKZepiiLVpL8oX0= Subject key identifier: 12:A1:85:91:A5:A3:60:0A:D1:C0:BF:05:28:03:C2:BB:03:57:07:F6 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019A7CE0459B048ED597E50A159A76804768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 172F Signing time: Thu 13 Nov 2025 11:01:03 +0000 Manifest this update: Thu 13 Nov 2025 11:01:03 +0000 Manifest next update: Fri 14 Nov 2025 11:01:03 +0000 Files and hashes: 1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=) 2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=) 3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: A3x7fxc/c/cPXzELfoTixLt8evV0wbqhTf5MMAsZ7Lk=) 4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=) 5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=) 6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=) 7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=) 8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=) 9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=) 10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=) 11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=) 12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=) 13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=) 14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=) 15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=) 16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=) 17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=) 18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=) 19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=) 20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=) 21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=) 22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=) 23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=) 24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Nov 2025 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:e0:45:9b:04:8e:d5:97:e5:0a:15:9a:76:80:47:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Nov 13 11:01:03 2025 GMT Not After : Nov 14 11:01:03 2025 GMT Subject: CN=12a18591a5a3600ad1c0bf052803c2bb035707f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:08:35:d6:a0:52:de:ff:a4:44:c4:98:8f: 13:c3:ca:bc:6b:bf:f8:47:45:d6:d1:a4:d4:c0:8f: 46:a3:b8:05:c6:c0:30:5e:60:14:e0:09:52:58:96: 94:3d:ba:cf:f4:3b:30:cf:57:84:d8:3e:39:06:da: 51:a2:65:f9:c0:53:33:d6:35:12:25:97:d2:7b:48: aa:b7:77:b8:16:19:53:b1:e8:49:3b:3f:c9:4d:6c: f2:e4:5d:24:db:75:dd:a7:17:1a:ec:b7:25:4e:4f: a6:e3:e3:09:8e:16:bf:f5:59:f4:31:79:4f:e6:0c: 14:82:6f:29:45:c5:72:65:fb:ab:f9:6f:11:fd:c5: 4b:c1:50:39:97:74:67:6a:22:2f:e7:8e:7f:c3:27: f6:c4:e8:cc:70:86:66:ef:d7:eb:0a:2e:6c:66:73: ba:dc:6b:2b:1f:77:fa:fc:2e:11:b9:35:3f:3f:c4: d2:e6:5f:20:8d:da:13:89:1e:ee:f1:60:54:eb:de: cc:16:9c:ce:ae:24:88:d5:94:e3:6c:66:38:62:81: 96:2a:8d:29:f9:46:06:e5:14:1b:c2:7a:75:d8:24: 3c:64:59:d2:ab:3a:c5:87:e9:0c:a8:e7:69:c0:48: bc:da:7c:fa:c7:3d:fc:de:21:08:8a:c1:4e:00:8e: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A1:85:91:A5:A3:60:0A:D1:C0:BF:05:28:03:C2:BB:03:57:07:F6 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:c7:75:ac:11:7e:53:29:74:3e:a8:80:b8:e3:40:4d:cb:81: d2:67:c3:88:c0:af:35:c8:17:8e:f6:bc:27:9f:a8:42:86:f2: 23:d8:96:f7:a6:86:33:3b:46:9d:44:ac:20:99:b5:9c:ef:98: 3b:ac:98:04:85:25:9d:ba:af:aa:4f:ae:e0:17:6f:29:79:10: b7:0b:91:d2:d2:ef:fd:f1:46:30:94:43:89:6b:70:40:8d:1e: 4e:50:b0:49:10:00:d3:4a:24:4c:ca:ee:24:bf:a7:27:82:66: 9a:e5:c8:19:c7:f8:fe:8e:e9:ee:a5:da:30:67:f0:c7:58:ea: db:52:d5:ea:b1:51:1a:ac:9d:06:0c:fd:de:a2:30:fa:0b:3b: 86:26:a4:92:26:76:10:a6:ea:3b:22:36:dc:b5:61:80:b1:8b: 28:75:9d:44:ba:d1:a5:36:6e:c5:5e:0a:30:ac:8b:a4:e9:ae: 03:c1:a4:34:c7:72:55:d5:7d:7e:5f:22:3e:a0:37:a4:62:81: 30:31:42:82:ac:26:3a:e0:eb:23:26:da:a1:28:a4:84:f9:f2: 9c:4c:3d:19:bc:20:ad:23:ae:f9:64:aa:4d:e5:43:6b:ee:82: b3:f3:93:c5:e3:56:80:2e:68:75:03:67:78:49:58:2f:d1:01: 52:33:f7:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp84EWbBI7Vl+UKFZp2gEdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjUxMTEzMTEwMTAzWhcNMjUxMTE0MTEwMTAzWjAzMTEwLwYDVQQD EygxMmExODU5MWE1YTM2MDBhZDFjMGJmMDUyODAzYzJiYjAzNTcwN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTMINdagUt7/pETEmI8Tw8q8a7/4 R0XW0aTUwI9Go7gFxsAwXmAU4AlSWJaUPbrP9Dswz1eE2D45BtpRomX5wFMz1jUS JZfSe0iqt3e4FhlTsehJOz/JTWzy5F0k23Xdpxca7LclTk+m4+MJjha/9Vn0MXlP 5gwUgm8pRcVyZfur+W8R/cVLwVA5l3RnaiIv545/wyf2xOjMcIZm79frCi5sZnO6 3GsrH3f6/C4RuTU/P8TS5l8gjdoTiR7u8WBU697MFpzOriSI1ZTjbGY4YoGWKo0p +UYG5RQbwnp12CQ8ZFnSqzrFh+kMqOdpwEi82nz6xz383iEIisFOAI5yjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKhhZGlo2AK0cC/BSgDwrsDVwf2MB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMd1rBF+ Uyl0PqiAuONATcuB0mfDiMCvNcgXjva8J5+oQobyI9iW96aGMztGnUSsIJm1nO+Y O6yYBIUlnbqvqk+u4BdvKXkQtwuR0tLv/fFGMJRDiWtwQI0eTlCwSRAA00okTMru JL+nJ4JmmuXIGcf4/o7p7qXaMGfwx1jq21LV6rFRGqydBgz93qIw+gs7hiakkiZ2 EKbqOyI23LVhgLGLKHWdRLrRpTZuxV4KMKyLpOmuA8GkNMdyVdV9fl8iPqA3pGKB MDFCgqwmOuDrIybaoSikhPnynEw9GbwgrSOu+WSqTeVDa+6Cs/OTxeNWgC5odQNn eElYL9EBUjP3CA== -----END CERTIFICATE-----Generated at Thu Nov 13 15:33:24 2025 by rpki-client