$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json) Hash identifier: QY7kV8k7UAF5KUp1hhcQa+GU+C8uZY064nxVOy10wxQ= Subject key identifier: E3:8F:B5:BD:64:82:51:59:BD:E1:F3:70:CA:F7:2B:9D:BD:C1:F0:D0 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019A2176ABAB1F69AB9C9F880A99F20979B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft Manifest number: 17B1 Signing time: Sun 26 Oct 2025 17:00:16 +0000 Manifest this update: Sun 26 Oct 2025 17:00:16 +0000 Manifest next update: Mon 27 Oct 2025 17:00:16 +0000 Files and hashes: 1: 0Az8-y_KKTpzbB4tcQ1mv98QYpA.roa (hash: BCyqOL27w0i6u+MninJ11nOG/6FodeTBGbeIRACetV8=) 2: 0r3ZOs3tSGQOAwKzjx9H3w3zD1I.roa (hash: ImJALobce0VudmZQsXxpxY8sBnoTPMqNKew3nU3/sEU=) 3: 1-NHa_YcZhp-nK2n288M5FCE5vQY.roa (hash: hEBg9dyMGjhv3pv/E42ZRBfy4c26HYSK7nxx5lYpnkQ=) 4: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=) 5: 5ZGlxXtHkl_D3voGj6rx85jwlZU.roa (hash: JM4dPNTX67vo7LYoTP+WEMvsk0f45bFlZOiulkq76Ww=) 6: 7sokSdMBchYZMEnBvod8waTOzqo.roa (hash: oYENQuxHUAl4Ib35jlGS9V7jC+uuxKfZxyKIG9teMqc=) 7: 9kKrY-00aHCLZ5_iE5q85XwU7ck.roa (hash: JZlIoGUSP8LhD5Ex99sUi6EUJNNOAyUQks5HiOIipSE=) 8: H8z4r6H8LYjpLKJ1cCrKD18uGn0.roa (hash: iuDiaW8fmmSMkkJYvoBKP+/a4jOUnqwnHMc0pBzDG3o=) 9: IsmNaCvuzsXJ7mZx6ck2uhVnWfY.roa (hash: 5eWNodxG2i37/4nnN3ZMtyCR75XHHge/btm6KjXlzgs=) 10: NUttqqXP8pEImO0rZuGzsvGLu5Q.roa (hash: 52JdBvzrAL+Cv3h/jUh1SQWWYKCUR72hiXa1BlbLWYY=) 11: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=) 12: R4JA4ZrzZRT6P7L7s0XA8tBlvow.roa (hash: UZWxFLVEGSwKY6r7vPrE+HW6Om5TTOD3+yQvi0X4C9A=) 13: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: HJxFoUwkSfvCZBjIyhXHdGYD5Cklk2oTxU3HyIqoj+M=) 14: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=) 15: VcWZUDSfSSKFrHgiIqRuCEBIomE.roa (hash: 8diyMJmOQ9BNiLPCYYS2Sa8Mn23tj7FWiq6+eMmQjW0=) 16: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=) 17: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=) 18: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=) 19: eimfmg3jBbUserzdoIvcOhSBTOw.roa (hash: ytvv5FD6OzAKLzPji7YHqLJf5LTjx5UpXLhsY+SlnBk=) 20: iLq3_4XBIqdahBK6ZAbNC_BoDIk.roa (hash: yGHeMjl6w0xnIs7bhpeRABIGyuoMa8xkrNR26t1mdDM=) 21: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=) 22: kBKYk4uhNAGH1CtBwmS0AY7Gp_8.roa (hash: 8lmYx36kKXJB0BwydSs6lNlptu9viDlLOQYTir6X8AE=) 23: kqzmke5DCaDSpAALdz2M4JyRnDc.roa (hash: p8Tm6XLjOyoV/HE5AOIHdMledO3k7Y8Bht+FixkENxs=) 24: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=) 25: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=) 26: z9ae-Gs7r9KKpMcDJbVz7FmiTRs.roa (hash: JszRMzQKTmymxrpiY4Ap7YZRfZnYk8CJdCSLIzjXOQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:76:ab:ab:1f:69:ab:9c:9f:88:0a:99:f2:09:79:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Oct 26 17:00:16 2025 GMT Not After : Oct 27 17:00:16 2025 GMT Subject: CN=e38fb5bd64825159bde1f370caf72b9dbdc1f0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:a8:1a:e9:f4:c5:a2:fa:59:ce:eb:1d:50: 98:8f:d4:d0:1b:78:e1:98:67:ba:0a:a5:54:ec:67: f9:48:2e:42:da:a3:5f:29:3d:f3:4a:d6:66:64:ff: 27:4e:b5:7a:49:b7:b4:74:e8:21:aa:16:5f:55:37: 74:0e:8c:77:6c:26:68:75:19:31:db:14:ec:20:85: 5a:fe:6e:6b:c4:b6:4a:ad:76:c0:fc:01:e8:32:c1: 0c:3b:4e:21:b1:9b:de:b5:16:dc:15:8b:24:85:50: 15:38:37:16:e7:d2:0f:3b:9f:b3:4a:aa:71:14:d5: 64:fd:f9:b2:76:02:e6:07:8d:cc:6a:cd:2d:9c:2b: 5f:32:b9:87:da:4b:cb:2d:f6:c2:47:e1:18:44:eb: 1c:e4:8f:16:db:3b:74:29:f6:7a:05:58:7c:2b:86: 00:95:01:f8:72:32:e9:43:4f:3c:8f:8c:e1:2c:7d: df:ef:82:c4:9d:c4:72:ba:fe:4b:32:6f:2e:2e:84: 1b:00:0a:a7:97:4b:66:60:f3:1f:8d:7b:ad:89:2a: 21:72:26:1e:33:ad:68:bf:97:d1:1c:f0:a8:57:af: 9b:fe:fc:47:c8:06:18:e6:1c:a3:8d:76:ad:b8:19: 15:62:2f:54:91:ff:b8:05:8d:2f:20:0c:c3:fd:f6: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:B5:BD:64:82:51:59:BD:E1:F3:70:CA:F7:2B:9D:BD:C1:F0:D0 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f2:60:bb:4f:27:49:0b:6d:83:da:3c:5f:85:0b:70:8f:f1: 31:39:74:76:51:36:cf:4a:9f:03:24:83:b7:6f:38:69:a4:e4: a5:17:4a:d1:4c:66:4c:a8:9d:e5:c7:6c:9e:a6:10:ec:eb:8c: a0:2f:76:36:95:9c:0e:ac:2f:e0:d6:f4:64:5f:65:23:ea:0e: ec:cd:3d:46:c1:eb:b8:1f:7a:74:60:07:c3:88:c2:2f:09:d6: 64:7a:88:e6:8c:a9:f3:60:8e:bf:84:f0:3f:d0:3e:ed:4d:56: 68:1a:61:52:10:d0:08:ac:6e:23:d7:be:d7:af:5c:8b:35:9b: dd:f4:14:d8:37:10:5f:36:8e:58:c8:c4:0b:76:6c:a1:86:0d: 71:9b:2d:da:36:ff:79:90:f3:46:89:1f:3d:6c:1f:26:cb:9c: 28:c8:f0:07:3b:0a:ba:9d:44:43:bc:0c:53:1f:63:c1:27:06: 3a:f0:81:2e:8e:69:85:a0:bf:ae:8c:3d:37:42:45:3f:8a:59: 72:0d:e4:3a:7b:0c:ba:78:82:bf:3c:f0:6a:27:c1:58:64:eb: 8d:ff:70:02:eb:17:d0:dc:4d:b2:1d:07:0b:81:7a:f2:73:93: 61:8c:bd:a4:a3:62:6b:e2:5c:cc:84:e3:60:3e:a0:53:70:df: cc:20:1c:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZohdqurH2mrnJ+ICpnyCXm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUxMDI2MTcwMDE2WhcNMjUxMDI3MTcwMDE2WjAzMTEwLwYDVQQD EyhlMzhmYjViZDY0ODI1MTU5YmRlMWYzNzBjYWY3MmI5ZGJkYzFmMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eOoGun0xaL6Wc7rHVCYj9TQG3jh mGe6CqVU7Gf5SC5C2qNfKT3zStZmZP8nTrV6Sbe0dOghqhZfVTd0Dox3bCZodRkx 2xTsIIVa/m5rxLZKrXbA/AHoMsEMO04hsZvetRbcFYskhVAVODcW59IPO5+zSqpx FNVk/fmydgLmB43Mas0tnCtfMrmH2kvLLfbCR+EYROsc5I8W2zt0KfZ6BVh8K4YA lQH4cjLpQ088j4zhLH3f74LEncRyuv5LMm8uLoQbAAqnl0tmYPMfjXutiSohciYe M61ov5fRHPCoV6+b/vxHyAYY5hyjjXatuBkVYi9Ukf+4BY0vIAzD/fbDuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOPtb1kglFZveHzcMr3K529wfDQMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/Jgu08n SQttg9o8X4ULcI/xMTl0dlE2z0qfAySDt284aaTkpRdK0UxmTKid5cdsnqYQ7OuM oC92NpWcDqwv4Nb0ZF9lI+oO7M09RsHruB96dGAHw4jCLwnWZHqI5oyp82COv4Tw P9A+7U1WaBphUhDQCKxuI9e+169cizWb3fQU2DcQXzaOWMjEC3ZsoYYNcZst2jb/ eZDzRokfPWwfJsucKMjwBzsKup1EQ7wMUx9jwScGOvCBLo5phaC/row9N0JFP4pZ cg3kOnsMuniCvzzwaifBWGTrjf9wAusX0NxNsh0HC4F68nOTYYy9pKNia+JczITj YD6gU3DfzCAcYw== -----END CERTIFICATE-----Generated at Sun Oct 26 21:18:41 2025 by rpki-client