$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: GoHL5/Qm4h78JmCYyW6aXR5Avw6LUXQFvA0mXjBPrsM= Subject key identifier: CD:65:75:85:C3:CF:BA:7A:44:91:4D:5B:25:D7:A4:E1:82:8A:24:55 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019A1D2C167E4FE3ABEE87352E6169B0FDA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1723 Signing time: Sat 25 Oct 2025 21:00:19 +0000 Manifest this update: Sat 25 Oct 2025 21:00:19 +0000 Manifest next update: Sun 26 Oct 2025 21:00:19 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=) 4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 5: 4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa (hash: 2TrrPS30sWSSBNdC0ytp9VKstwP0OWe2UIx3Dtm2/JM=) 6: 8el_85ZAH8aq3AEKg2owSg43oEs.roa (hash: ZN2s6r11cxbxo8vjSw7bFeJsSnkCygEY0SgCumj8ptw=) 7: EYPDvxacKnqAiwCcH_eLh5D-wzo.roa (hash: SGm3Pfgt15u6hgkLS+1eCeSmFoagCG2dGfjKmmJu+Tg=) 8: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 9: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 10: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 11: PYK2EWVjncskVSm_Hdlre_awIFg.roa (hash: VWAN/Yr75jkjvzOpnYs2pejQXpvZbkMRMFEQFcncIVo=) 12: Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa (hash: EfiDKy3AvswJNKh8pdzYyd3VC1uN6AzI3TYPRG8NcaE=) 13: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 14: W1iU6dEXCAbvhe2vd34tim5xizw.roa (hash: YozzXBe30PzSXaZDLGORJxpoX87WhdRqewFqwkX77GE=) 15: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 16: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: b4l3Y1SepBts4LjqAnDjzFg+xFsXmgj9NfcatHlI43c=) 17: fc4acbvNm8eL7oGsRsgVou-N-Dc.roa (hash: +7YGm7DsfQNaJ/x1pn93s/gp9V84BIKegCYeTVVZ0jE=) 18: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=) 19: mxHk_x4_7-pXmkuBflFU5C_xuDU.roa (hash: gtzHct2NI5Df3c0cYS0pdqVMvUN2VqKpHBWx5S3TAmU=) 20: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:2c:16:7e:4f:e3:ab:ee:87:35:2e:61:69:b0:fd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Oct 25 21:00:19 2025 GMT Not After : Oct 26 21:00:19 2025 GMT Subject: CN=cd657585c3cfba7a44914d5b25d7a4e1828a2455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:06:e1:49:2d:e9:95:de:b6:56:28:d5:d2: 82:4f:6a:d3:90:a6:fe:c2:55:e7:00:34:01:85:fb: a5:d5:25:01:52:92:52:58:e1:05:75:60:ad:e1:fe: db:9e:4e:a9:88:fb:23:a0:0f:20:8e:6b:3f:16:78: f3:4a:e1:96:44:4f:4c:ab:7c:d8:4d:37:b8:0a:b4: 4b:3a:72:b0:c8:b4:76:58:17:fd:b7:33:46:2c:03: 34:c0:a8:04:b4:db:24:d4:ce:18:54:88:2a:b5:2a: 8e:72:6c:4c:d2:88:1b:e5:d6:a1:75:01:82:3f:16: 53:a4:72:8f:e0:8e:2d:4a:50:3d:fb:42:ae:81:4d: f8:f1:30:64:a3:7f:76:59:f4:c7:0f:f7:9e:4c:d1: 30:08:31:4a:e0:46:02:9c:5a:2a:ca:9c:f3:39:36: 12:c1:6a:44:a5:f7:7e:5b:e6:ec:39:ae:e0:a4:54: 21:19:3f:72:2f:8d:85:e2:f4:3e:d0:b7:60:8d:8e: 2c:60:50:95:70:ae:d8:61:fb:36:0a:d9:60:a9:94: ce:0c:a2:57:bf:09:af:36:b8:24:b4:b8:85:f6:85: 63:4d:72:98:7c:48:07:1d:b9:d9:fd:d1:95:90:cb: 0c:ba:7a:c3:75:2d:2a:65:80:e3:19:95:1b:e7:2b: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:65:75:85:C3:CF:BA:7A:44:91:4D:5B:25:D7:A4:E1:82:8A:24:55 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:19:a6:30:0f:31:3d:83:49:51:8b:cc:3b:a7:44:a0:7d:3f: 60:55:d8:2a:64:5a:6c:b3:a7:9a:59:1d:0c:3f:fd:a5:fd:64: 2a:c6:7f:79:4a:03:af:39:aa:66:7e:d3:cc:50:02:6a:22:14: fe:ca:23:d4:02:36:00:a8:b8:74:6d:da:4d:18:09:0f:4d:be: 18:70:24:ea:9a:a4:4e:a4:48:f8:19:07:88:12:15:94:1b:07: 99:97:4c:92:68:0d:9b:00:95:89:4d:f1:3e:aa:bd:8f:53:36: 07:eb:d3:89:3b:1d:3a:33:40:21:f0:f0:e6:b0:95:75:41:0a: b6:9e:11:18:f6:ee:53:ea:8c:1e:96:64:da:58:b6:94:d7:55: b6:50:8f:da:f6:7e:f1:87:6e:82:e7:c1:34:75:b1:c4:67:d2: 09:17:fe:7b:9a:c9:56:db:78:33:24:29:7f:75:46:49:a9:c5: f0:e8:5a:ad:36:da:02:98:88:1f:dd:cc:c9:0e:00:7a:c6:81: c2:b4:65:ee:a0:56:45:79:04:e8:95:94:c4:b4:da:c2:ac:6f: bd:91:60:23:8b:1d:6c:ab:b0:0a:58:7e:33:c1:5f:53:1d:e4: 4f:95:c4:7e:86:f2:3f:e1:b8:3d:e3:bc:9e:35:c3:5c:29:06: ee:17:c6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZodLBZ+T+Or7oc1LmFpsP2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUxMDI1MjEwMDE5WhcNMjUxMDI2MjEwMDE5WjAzMTEwLwYDVQQD EyhjZDY1NzU4NWMzY2ZiYTdhNDQ5MTRkNWIyNWQ3YTRlMTgyOGEyNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXIG4Ukt6ZXetlYo1dKCT2rTkKb+ wlXnADQBhful1SUBUpJSWOEFdWCt4f7bnk6piPsjoA8gjms/FnjzSuGWRE9Mq3zY TTe4CrRLOnKwyLR2WBf9tzNGLAM0wKgEtNsk1M4YVIgqtSqOcmxM0ogb5dahdQGC PxZTpHKP4I4tSlA9+0KugU348TBko392WfTHD/eeTNEwCDFK4EYCnFoqypzzOTYS wWpEpfd+W+bsOa7gpFQhGT9yL42F4vQ+0LdgjY4sYFCVcK7YYfs2CtlgqZTODKJX vwmvNrgktLiF9oVjTXKYfEgHHbnZ/dGVkMsMunrDdS0qZYDjGZUb5yvwmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1ldYXDz7p6RJFNWyXXpOGCiiRVMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRmmMA8x PYNJUYvMO6dEoH0/YFXYKmRabLOnmlkdDD/9pf1kKsZ/eUoDrzmqZn7TzFACaiIU /soj1AI2AKi4dG3aTRgJD02+GHAk6pqkTqRI+BkHiBIVlBsHmZdMkmgNmwCViU3x Pqq9j1M2B+vTiTsdOjNAIfDw5rCVdUEKtp4RGPbuU+qMHpZk2li2lNdVtlCP2vZ+ 8YdugufBNHWxxGfSCRf+e5rJVtt4MyQpf3VGSanF8OharTbaApiIH93MyQ4AesaB wrRl7qBWRXkE6JWUxLTawqxvvZFgI4sdbKuwClh+M8FfUx3kT5XEfobyP+G4PeO8 njXDXCkG7hfGyA== -----END CERTIFICATE-----Generated at Sun Oct 26 05:17:34 2025 by rpki-client