$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft File: 8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json) Hash identifier: xSetPxDdPqTDJr5WErgj30WmDc9kQKinoUFJOB2lfvA= Subject key identifier: 63:FE:83:7F:67:D2:C6:15:AA:72:21:83:53:7B:63:7D:99:27:A5:B1 Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019A029976F632F406A1BE0D81B1EA94F10B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft Manifest number: 0167 Signing time: Mon 20 Oct 2025 17:10:03 +0000 Manifest this update: Mon 20 Oct 2025 17:10:03 +0000 Manifest next update: Tue 21 Oct 2025 17:10:03 +0000 Files and hashes: 1: 0sjaeJEz0pkXr_1gNdMz2cgZ7yo.roa (hash: KEt6yf7XHSBUNm4BTBszmuIVVsyz9gawMwqvtjbHFdA=) 2: 1AUBGar-Dkm9IGeLOai4h81bTI4.roa (hash: HxWiw+GJIuNrrCIq+aNjmMHwMaeriM4XOrwvLx1NPNQ=) 3: 236LhhUxi4bM3CWFXv5ENeEDLw0.roa (hash: mXwa812L7Sgc5PaLadbZYWsB2jusWGtKQaaUXJX7ZCw=) 4: 26wR-zBZgEkmFf1adE8GJHuoqPU.roa (hash: rl+0y7cKEh+pIKYEueM3wxoK7uD1ezs5gktU26nNymw=) 5: 3BuRgA8d-bVZ94RHjJWDyP66hAI.roa (hash: JyObWKJemQ9DI1DqgPGHC9xny6jFhDNgmUcIOlrrZYw=) 6: 3fgaOhXfUotdSWtyNnpqhlDzp4c.roa (hash: eyd9QrSqosiV2gaC9MJAN+1hmScBoXqJjKw/JU3YPoI=) 7: 8-UTSmmikIzDkpf0jL_kGGJPN4s.roa (hash: EBr/YhkCc/K1S8mfHokN1PL/lYcuifmD75ce6JBSUi8=) 8: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: tBiHG5GWZ6a/DJJVMSeXou4RmaL5Pd2OwIWCLMP/TNE=) 9: CV3NnE-QsQryxxElCs-1NhEhMkY.roa (hash: Bd1MXZANILqfSs5hKTqIyVVsL0Uet461BsywLdXUbv8=) 10: FUpeWXxqIfCxNO-RWnSDXxCgpZs.roa (hash: UO+np20IJHxMb4n3/H4mp/Ku17r4EDdBI7uWg/d9s8A=) 11: NKwQkAuvf9XPj3AmUQ6FU2-ZaLU.roa (hash: a+QjCZZgfle5XUxuZw5fd1louVl08y58mFNbwvIbBSE=) 12: Q-OBGjb6oBDZXn0az_tHjhT317o.roa (hash: 955aOscnf+j7V/Y/zcZbXtZ0JZfV473pEcIFT2Lzb6s=) 13: TMV5PmtdF5l5jatCNFDaS9eThjI.roa (hash: HIP7dgnaDkAx7w0vdo6ttHih6JO7o16Fnu3jUjRxZ2c=) 14: eMmTdEKMhHfhdwq777Ha_KP82bo.roa (hash: YBC4C13Q1mBNrJGDJx43435vURQnAmXfSUtTeHdwHjk=) 15: fFmtmgKBQaBlgrSOFcsTezZIQoE.roa (hash: yE6+Hjg8rOpz8XvJzcksmApmABBmT2uvG1pyVMepNuc=) 16: gVvA0OWh1IBLntBHMjTP1bYGg30.roa (hash: pBPR2W1OlVpvUfjlWZD1hII2sbxHvPmzVnORFzfXJj4=) 17: hM2DQyGvMA6K4boc_QhRKIOi0hw.roa (hash: vWWHSpzelpfBl3PU+PZsIY63QGWJmL7fksNqS1DGAac=) 18: jvpoTrK8_4-54LFnamVFN0Rvxkw.roa (hash: 9sm18Po8k3lNOXS81IduJpV4VijHut9tPDKg3wbowQo=) 19: sR-Ppx8JeczHGpmG679YSmj6PQw.roa (hash: scwumdgu3Rey827HmDFQQtaV3M/WPcpows7lj9RX2yY=) 20: sj04Ofad7HoBJaa3jacdqQiOCAM.roa (hash: k93GvRLi7WE9LRwN+r8m1L7z3CF5zil6ZM5SoRSBKmM=) 21: vAHwQcFMw1t4Bzyb8dqj65X42dQ.roa (hash: 7xiUtacwkiCjYN44H3r6SZATgzXzkj4cI+A2bkFG+nE=) 22: vEwEQe-Knh09uPRNwYDGXQrpTk8.roa (hash: g+lIOboiGWHICqS/0eOl2tbwSAM2DaVhhNc4NGrTYIY=) 23: xFSc9eumG2-IIg_Vg_sRl2DeVI8.roa (hash: 9z1/aWLIVyXrZPmU5XbcoDAb83WgcRq4rt5jAfhhjBM=) 24: xNR2TH7qOvL89YUzm8tC_DyVzRM.roa (hash: zc7P10O5xpRwbPH+qYrp3N03fh3LNeueq58VSoil/R8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 15:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:02:99:76:f6:32:f4:06:a1:be:0d:81:b1:ea:94:f1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Oct 20 17:10:03 2025 GMT Not After : Oct 21 17:10:03 2025 GMT Subject: CN=63fe837f67d2c615aa722183537b637d9927a5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:8d:a3:bd:d1:8b:d6:80:d6:52:2e:5f:9c: 18:c0:82:f2:08:cc:ac:80:fc:4c:f6:4e:79:97:ad: 0b:36:b9:93:30:7d:bf:67:b8:cb:3e:93:e2:04:b5: 5a:e3:73:a6:38:a9:47:a2:12:9b:0a:86:94:38:dc: 74:75:f0:8f:59:a2:18:0c:03:1a:e5:73:87:e1:f9: 33:12:8a:f9:07:c9:de:b4:3b:91:4b:70:37:4a:04: 29:32:6c:ce:6c:0a:3f:02:5a:29:c4:73:2e:c3:6e: bc:bb:97:ea:ec:75:66:9c:77:9e:3b:67:f6:45:fb: f6:cd:62:ac:08:7e:34:ef:30:e9:83:06:80:41:a9: d3:44:64:28:87:10:fa:de:23:d8:ad:c5:5a:ca:e8: 30:1b:66:ea:e4:4c:06:96:eb:7f:7b:9e:47:37:3b: 72:58:8e:74:b3:65:44:30:10:14:9f:41:ea:27:49: 26:1e:93:a1:bf:c5:b7:22:1f:f0:e1:ce:85:58:0a: 8f:a4:a2:8f:fa:f1:ac:80:ea:af:12:06:43:59:5e: 1e:be:a1:12:16:94:8e:b0:ad:0a:8d:d4:a7:65:27: 0c:a5:b9:49:a7:e0:39:2d:15:7e:c8:d3:0b:c2:65: 48:e8:61:cd:3d:c9:74:0f:b8:a4:cc:c5:3a:10:bb: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:83:7F:67:D2:C6:15:AA:72:21:83:53:7B:63:7D:99:27:A5:B1 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cc:3b:93:a0:08:e6:a4:a6:0d:c9:77:ea:4a:2b:b8:c8:92: 33:8a:55:73:d1:cf:62:a0:4a:3e:a0:6e:78:22:49:0f:82:92: 71:a8:08:f3:4a:c3:31:08:05:c9:35:4c:a8:75:0b:22:6e:82: ca:fa:30:3b:95:ca:ab:da:4b:d6:3d:ec:31:a3:db:14:ca:b0: bc:ac:d0:e8:ba:a8:aa:3c:68:f8:92:c3:8a:97:30:64:76:67: 66:6f:c6:92:b9:28:f1:fb:58:89:ad:3e:86:0d:a3:a6:68:fb: f4:05:8d:74:96:92:7b:35:be:2a:18:fb:ee:06:20:01:69:66: ab:37:0c:aa:bf:1a:6b:1a:07:c4:57:05:6d:30:49:8d:c2:2f: 5e:9c:aa:8f:dc:d1:1a:5e:f1:45:30:7e:cd:c9:1b:25:18:f3: 75:69:ca:3f:2d:78:43:fb:7e:de:e7:e4:55:07:3c:b5:28:f8: 56:fd:6f:b4:9c:3f:ec:a1:8b:c4:df:48:49:2c:68:2b:cf:c6: e2:d2:57:a3:cd:99:31:bd:b3:03:d9:b2:24:86:71:20:10:2d: a8:98:73:58:21:b6:ac:dc:5c:30:32:dd:48:8e:9f:bc:74:0c: f8:1c:f7:a9:72:14:ef:a9:57:18:68:23:82:b4:57:1b:a2:82: 52:96:db:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoCmXb2MvQGob4NgbHqlPELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjUxMDIwMTcxMDAzWhcNMjUxMDIxMTcxMDAzWjAzMTEwLwYDVQQD Eyg2M2ZlODM3ZjY3ZDJjNjE1YWE3MjIxODM1MzdiNjM3ZDk5MjdhNWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yiNo73Ri9aA1lIuX5wYwILyCMys gPxM9k55l60LNrmTMH2/Z7jLPpPiBLVa43OmOKlHohKbCoaUONx0dfCPWaIYDAMa 5XOH4fkzEor5B8netDuRS3A3SgQpMmzObAo/AlopxHMuw268u5fq7HVmnHeeO2f2 Rfv2zWKsCH407zDpgwaAQanTRGQohxD63iPYrcVayugwG2bq5EwGlut/e55HNzty WI50s2VEMBAUn0HqJ0kmHpOhv8W3Ih/w4c6FWAqPpKKP+vGsgOqvEgZDWV4evqES FpSOsK0KjdSnZScMpblJp+A5LRV+yNMLwmVI6GHNPcl0D7ikzMU6ELuZAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP+g39n0sYVqnIhg1N7Y32ZJ6WxMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8w7k6AI 5qSmDcl36koruMiSM4pVc9HPYqBKPqBueCJJD4KScagI80rDMQgFyTVMqHULIm6C yvowO5XKq9pL1j3sMaPbFMqwvKzQ6Lqoqjxo+JLDipcwZHZnZm/Gkrko8ftYia0+ hg2jpmj79AWNdJaSezW+Khj77gYgAWlmqzcMqr8aaxoHxFcFbTBJjcIvXpyqj9zR Gl7xRTB+zckbJRjzdWnKPy14Q/t+3ufkVQc8tSj4Vv1vtJw/7KGLxN9ISSxoK8/G 4tJXo82ZMb2zA9myJIZxIBAtqJhzWCG2rNxcMDLdSI6fvHQM+Bz3qXIU76lXGGgj grRXG6KCUpbbwQ== -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:00 2025 by rpki-client