$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: WwNqPZ794hEElkNMlibrwkzKLb3H+ext7IkA1w3zic8= Subject key identifier: 25:17:73:95:BD:65:77:EF:33:C8:6B:C1:27:11:4B:DC:43:4B:04:51 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019A1F88B37CD3EFAB382798E94AF0C11D98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 1723 Signing time: Sun 26 Oct 2025 08:00:43 +0000 Manifest this update: Sun 26 Oct 2025 08:00:43 +0000 Manifest next update: Mon 27 Oct 2025 08:00:43 +0000 Files and hashes: 1: 0RyrSS5TsuNkSrgX42mZlqnL_6Y.roa (hash: BRzu0fdIaz6Lovt3QNbsRMaTYaq8KePDTC4YuQ5xp+8=) 2: 13v_SFUUaJanH2ti7gyyAMAe4E8.roa (hash: 9BOoaT9u38i4PO8whYYhUIN3eU3jwn/DC/9uSOlK5Wc=) 3: 1JXcZFx0cVgp_nurSkDz34ejXRw.roa (hash: eT3VUKiYG35yZHjK8chZuS2ARmnYiiATHH1jK3UENw4=) 4: 6z4rHWGcADRparknQzyj2yRTc7Q.roa (hash: n4ymMhjOhAWzzuUuICwnt0DuPDacCxWlW+NEkRCL8OQ=) 5: 7-CIZj9uif--br5voFAmQlLSW6c.roa (hash: uTSjmKpL+cFNc34iNkcWzIdWbLSiGj8LHYTNjwuj3bY=) 6: 8JryklODS-H6RCW3s1L6jAA10aM.roa (hash: N4V6jxdE6ULDTseAhDT5eiy4WHG+mdZx70Ca/CGSOis=) 7: A31_B2nuhoGFF02yDR9tIcsA9vo.roa (hash: xg/RP32VB0XjW0/mDPvjyFUORhRt5edu/HqQYElspR4=) 8: BAByn752h23LDapbWtvPQCf7FGA.roa (hash: aEzN77kDLNn/k0lFsBHzbqjz++GYSZ5QPiWUhv2jUcs=) 9: DgqNbF9iJTN6tJqFHFsmrsPTN-0.roa (hash: LWJhYWGLPkv6XiCgsYq7ikNGs7uAsKZdQqaT/g/DLbI=) 10: EA04VGqvrPQszKxiTiYT5otCGRs.roa (hash: jxzccstOx8k+w6FBDeBmh5NVBQOSYOxvaie7YTOrrr0=) 11: EHXBWUxeWMDtm-263T3CeCfIQg0.roa (hash: upykUfWusTim+qPavoonZ87RcamCDQGsa5cCnxfzAXA=) 12: EJJjIWEkSJVR16lMZ3JAA3Erae4.roa (hash: cEYNtBA9K74UcwqPRIFv+v9Gz/Ga0WnXLgpuQ29y8a4=) 13: F8f4kxW24uJzOzniLERBk3yZc8g.roa (hash: Ve8YWI7OVk2wPQ5uGjmWzFVz86n7rtMNCFhPgNLkgZE=) 14: Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa (hash: 97mQ1AfgdstY7yHk40JSfso1yc9R8LG4mzhYmCvo4E0=) 15: IUoj14L85V7dFoSNxHQERg8IME0.roa (hash: yLZKOBB3BN8zxQwSxMgLL7kO6gXgb1541/UgXA3XP8c=) 16: Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa (hash: v37HfVcSPPGTt9P/qQorvZQf7f7Dq5xgbuMnSpO2rw0=) 17: LZ4tnH9lGxh0iu-rU3u9Fkm-pFk.roa (hash: +JM6B0zdaawDdz8KRtRSCTdjUiYYSokishxaS8i4x7Y=) 18: QO4VVs5SI_NodctTdkKAUO1ebEc.roa (hash: Lg34OgBQ8Ox1b1e+BjsftLuK02aFfjJ/oJTA/t+0XB8=) 19: Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa (hash: CsJlJBJH3+6jV3tl9xVBuGfLlTLLS9kglg9jMQQ1KqQ=) 20: ZIBj51rvzdxNBOQu45s1TsXZfA4.roa (hash: Mlg1sMaq1AzoqpdQv0YafCX4XwaQte0j2dMM5uFDd64=) 21: ZbERZjYg6cuT4X-RnR4eWqsmK2w.roa (hash: nziMUISsqPUXbIiPbxCVPBDhbRy0MibwmCl8xQisRW8=) 22: b_rI4TYzOidB7VM9UUtKiSxW5LU.roa (hash: FSPXI3Dcd4NYJhk5Uaoa5iEsUpA3P4ClToZPryW5vs4=) 23: cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa (hash: +Q93BMqAczWnkXHr2ly5zbZ8kF90gI/c8DRSS/XTs0A=) 24: eH9NeYZ6476-_LV8hEYeX0fc0QI.roa (hash: qpYMUOd5FFvMlQNvSubLKokumQC5dpDSUWn6yu3Z38Q=) 25: fiXZjFVhkN8HnCYHCQ4y4EM5tTw.roa (hash: WGUlo6TBZJCZDArB+udlJuMvOeQwlu964bRVTQeiYz0=) 26: hgUVlBMr-3weLeCDxLmYbzcEvDs.roa (hash: uNZAsOSUtlXYpFt0EPAGWC7rkjy2E7P557kov/78pUY=) 27: hsXTdDwIDQeR8Y4thDk7zd5XS_E.roa (hash: WxjjzedasgKM79/0bmtsmVyW63ILl73WxBDKWi3e8Sw=) 28: i-BpcnBIQppslPVpu9Ytz-GUVDI.roa (hash: v2afblKiPEHq9bVQqxQqdwwNaJR3fRJr4v5JF0bAYU8=) 29: iiCSGGgxN2dI_YNYAYnLsWSzIvk.roa (hash: rHuaFNuztgBdjSOmq2nEo94MqWDd+bV87f0qBWPvt94=) 30: kjCBwq1j9xX1EaDBTI424dSK14A.roa (hash: y34Z+vhK1gAu2AvvEzAPgCnHcDqbgumJZa/tYihBKvk=) 31: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: 88euxoYZtUbW22GKIoT/IN/4R030Klvgqw+gLgZ8wIA=) 32: npSbX89ppW1EvXT8SquAkvP6voE.roa (hash: MxmtVOWJZ2CbOzuQXF5iaQtC+5JJ6zax1Xsv1/neKxU=) 33: olZgy9U7ThNnepinAJEKzkRvZJg.roa (hash: 4b9F9m0pUTdzvwoF0mVT1XODHic5uNOOg/5TKG+EAGE=) 34: udpFcarhA2Di-ueqJLzwdxMkwFU.roa (hash: /CtOZMK/oLqOqAo2qZJtD+fd7exGsI2oA16cE8ogLbU=) 35: vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa (hash: EgxlYUmqGL8wGtFTWH2dHB4zW0mfcmREpW1FWRXtq8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 03:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:88:b3:7c:d3:ef:ab:38:27:98:e9:4a:f0:c1:1d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Oct 26 08:00:43 2025 GMT Not After : Oct 27 08:00:43 2025 GMT Subject: CN=25177395bd6577ef33c86bc127114bdc434b0451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:7f:44:9f:66:9c:8d:4a:0a:8b:87:21:1e: c1:4a:f6:b6:da:10:af:a5:77:3c:57:2c:d5:28:69: 22:db:4d:40:f1:32:6d:6b:02:17:f9:b4:7f:9a:a2: 19:25:9c:31:fa:ff:ec:cf:1c:19:49:05:1d:98:71: 74:0d:53:ea:a7:72:13:89:33:8f:6c:ba:fb:7b:35: 87:7a:b5:47:2e:33:d7:c8:7e:9c:c5:8a:ff:b7:3d: 67:8a:be:1c:94:8e:65:73:cd:72:62:41:89:28:49: c7:ba:69:17:b4:10:3c:62:9d:b6:4c:84:78:0e:9a: cd:28:4f:85:6a:49:6f:ea:c2:df:79:f7:47:02:12: ce:b0:a0:de:97:1f:9f:61:eb:61:04:93:7f:ca:fe: 15:a0:fe:42:d3:34:69:76:b2:9f:ce:4f:c2:0d:ef: 90:c8:e5:6a:1a:6c:eb:78:d0:d0:6b:a1:59:24:71: 3c:33:e4:90:84:5c:4c:0e:5d:fb:72:3f:14:fc:7c: a7:77:83:ff:17:47:b6:03:6e:4f:86:86:23:c3:63: 06:4b:ee:67:7f:c8:2b:70:22:64:08:2b:2c:e2:c2: 45:2f:20:a9:89:c3:e6:49:fa:a2:1f:a4:3b:5b:f2: 64:08:7f:64:57:48:b9:ff:74:c0:2f:64:0e:b9:8f: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:17:73:95:BD:65:77:EF:33:C8:6B:C1:27:11:4B:DC:43:4B:04:51 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c3:05:09:67:e8:c0:42:ca:15:c1:20:67:82:92:4a:8d:4d: f6:9c:1e:c3:d2:87:a3:ea:6d:fd:71:66:4b:a0:bc:d6:99:d5: f1:9b:5a:9e:1a:cb:d7:01:24:8b:cd:4c:7a:61:a8:c2:83:45: 04:1f:cc:42:e9:4a:49:0a:ba:4d:2d:40:29:dd:5a:8d:48:04: b3:75:36:0f:d8:8e:f4:f5:ac:54:60:ca:e8:27:be:aa:61:a7: 65:b0:e5:08:45:6b:3c:88:6e:8d:d3:f6:46:05:12:23:5f:fe: 9f:73:84:03:b0:ab:a7:bd:8c:9b:15:92:a8:97:1a:0e:01:a5: 6f:52:ec:fa:20:3e:70:4f:7e:5c:82:23:6d:ee:f4:b6:2c:3f: 0f:22:23:9e:92:34:74:15:65:c3:8a:2a:f0:f2:71:02:e3:39: 59:f2:ae:1c:8b:99:f7:d0:e3:20:4f:70:67:d7:70:70:dd:21: a1:1f:94:1c:95:f5:08:0c:4d:f5:50:af:ca:d0:f0:4a:2d:3a: 40:73:f6:47:f3:42:7f:27:73:80:e6:a8:68:18:af:10:00:18: 6b:88:6d:3d:00:4c:b9:8f:47:3c:f7:02:df:7a:3a:e9:4c:9f: fc:13:69:51:2a:04:ee:8c:42:46:a2:43:24:66:8a:3c:ce:15: d1:31:44:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofiLN80++rOCeY6UrwwR2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjUxMDI2MDgwMDQzWhcNMjUxMDI3MDgwMDQzWjAzMTEwLwYDVQQD EygyNTE3NzM5NWJkNjU3N2VmMzNjODZiYzEyNzExNGJkYzQzNGIwNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKR/RJ9mnI1KCouHIR7BSva22hCv pXc8VyzVKGki201A8TJtawIX+bR/mqIZJZwx+v/szxwZSQUdmHF0DVPqp3ITiTOP bLr7ezWHerVHLjPXyH6cxYr/tz1nir4clI5lc81yYkGJKEnHumkXtBA8Yp22TIR4 DprNKE+Faklv6sLfefdHAhLOsKDelx+fYethBJN/yv4VoP5C0zRpdrKfzk/CDe+Q yOVqGmzreNDQa6FZJHE8M+SQhFxMDl37cj8U/Hynd4P/F0e2A25PhoYjw2MGS+5n f8grcCJkCCss4sJFLyCpicPmSfqiH6Q7W/JkCH9kV0i5/3TAL2QOuY/mrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUXc5W9ZXfvM8hrwScRS9xDSwRRMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsMFCWfo wELKFcEgZ4KSSo1N9pwew9KHo+pt/XFmS6C81pnV8ZtanhrL1wEki81MemGowoNF BB/MQulKSQq6TS1AKd1ajUgEs3U2D9iO9PWsVGDK6Ce+qmGnZbDlCEVrPIhujdP2 RgUSI1/+n3OEA7Crp72MmxWSqJcaDgGlb1Ls+iA+cE9+XIIjbe70tiw/DyIjnpI0 dBVlw4oq8PJxAuM5WfKuHIuZ99DjIE9wZ9dwcN0hoR+UHJX1CAxN9VCvytDwSi06 QHP2R/NCfydzgOaoaBivEAAYa4htPQBMuY9HPPcC33o66Uyf/BNpUSoE7oxCRqJD JGaKPM4V0TFESg== -----END CERTIFICATE-----Generated at Sun Oct 26 11:16:38 2025 by rpki-client