$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: 8XMK+y8dSqsSb2hqfHRZ/uGCIwfuHmENXXTqP9Qb+Pg= Subject key identifier: 4D:80:D0:3E:4C:EC:05:AB:11:AB:84:22:31:6E:84:1F:D8:C5:D4:55 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019A06A4248F5A53262CC92922AB6BDF1CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1744 Signing time: Tue 21 Oct 2025 12:00:11 +0000 Manifest this update: Tue 21 Oct 2025 12:00:11 +0000 Manifest next update: Wed 22 Oct 2025 12:00:11 +0000 Files and hashes: 1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=) 2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=) 3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=) 4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=) 5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=) 6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=) 7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=) 8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=) 9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=) 10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=) 11: J2u-WNebQOND5pQrDIUacy8j8l8.roa (hash: Vvd0TjXjR9FhkBvtO2YJqbWdHXAU/GB3ZQoXK3zVnls=) 12: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=) 13: V-iBWNvDzOjE3oj3ZsxRXOFIkLI.roa (hash: bJv9u1JtLOAJLodQfH0YKSj356adakaFHXlAlJZDi/w=) 14: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=) 15: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=) 16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=) 17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=) 18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=) 19: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: 0Gs8h9frRNj0BIvjVLqjJo4LYDJgmfSKL+SGMLD9nJc=) 20: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=) 21: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=) 22: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=) 23: qlRuFgW9QpSZ-B-QqBWtqwtHSbQ.roa (hash: NvSiolrhWigq47yPhLr31U+7NECb9us+yowLt16g6Mw=) 24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=) 25: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=) 26: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=) 27: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=) 28: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=) 29: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:a4:24:8f:5a:53:26:2c:c9:29:22:ab:6b:df:1c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Oct 21 12:00:11 2025 GMT Not After : Oct 22 12:00:11 2025 GMT Subject: CN=4d80d03e4cec05ab11ab8422316e841fd8c5d455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:64:9b:59:cd:ce:70:1d:2c:d5:57:89:6f: f4:80:20:b6:ca:1b:63:6b:a0:bf:b8:30:07:af:6f: bd:16:44:75:78:60:8d:07:96:cf:e8:63:25:fb:3f: b8:0b:6c:ca:16:7c:85:bd:30:f3:fb:3d:fd:95:e8: 28:aa:54:9a:8c:a1:8b:a0:a4:3f:47:20:63:a8:42: e6:32:d8:30:94:42:e4:96:1d:07:dd:6a:d0:30:8c: dd:7d:13:52:cf:f8:79:16:c5:e6:99:8c:b8:30:a7: a1:e2:8c:28:87:88:61:45:f1:6c:07:83:39:cf:4e: c3:d4:d5:1e:0a:0f:c1:3d:c8:e0:c8:cd:28:ae:d8: 19:82:85:c1:cc:93:2b:c1:94:18:ab:02:39:af:c8: 93:b1:e7:ce:d7:94:03:2c:99:48:8b:27:f8:8d:57: 68:f2:0c:05:02:d6:bc:7c:0f:85:0d:00:8c:d4:d6: e3:3f:19:50:49:e0:f6:16:ce:f7:c4:cc:35:2b:b8: 39:f2:df:ba:5c:e1:7d:36:d6:25:1d:4c:51:19:ba: d3:c5:94:03:a4:b6:db:87:35:94:af:00:66:f3:54: 42:44:70:eb:2e:0f:9f:b6:e2:b1:b5:81:17:2c:f6: f0:47:93:3d:af:10:e3:cd:10:1f:d1:e5:f1:b5:2a: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:80:D0:3E:4C:EC:05:AB:11:AB:84:22:31:6E:84:1F:D8:C5:D4:55 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:60:52:40:3a:b3:3d:2c:40:4d:2a:05:f7:68:d2:2b:ae:38: ad:05:c8:8c:19:b3:f9:56:04:f9:3c:71:ec:b4:ce:78:2d:e5: 7f:84:6d:0b:96:19:d4:97:1d:be:ed:51:a8:31:ab:9e:b7:71: 1c:8c:7a:d6:23:9c:52:7a:30:1f:0e:22:0e:2e:42:c9:5a:a0: c6:e3:de:ac:0d:25:d7:57:2b:7a:fe:b5:e5:47:ef:e7:7d:a8: 1f:73:5e:78:f9:d7:e3:36:fa:9b:71:1a:3d:3f:85:21:35:53: 20:5e:c5:de:68:89:15:b6:cc:0d:f6:ca:cc:3d:2b:2b:20:11: 59:21:c0:ef:67:eb:e0:8f:63:18:42:21:c7:67:01:49:76:d1: e9:6e:36:45:ee:b5:ae:2d:3d:76:7b:ce:94:9e:ae:7e:03:ab: d1:95:2d:10:50:3a:22:c2:e0:b1:40:13:0f:1f:8f:33:e3:45: 93:80:c6:c0:6e:9c:f6:86:25:8b:c3:9b:e3:3e:c1:1c:ed:7e: c9:54:7a:4c:3e:64:ef:0a:3e:27:db:39:ea:09:e3:7d:9a:82: 27:64:41:f8:ca:75:2a:b7:40:11:85:31:74:be:a6:ab:bb:d3: 2c:39:e1:af:f2:e8:03:cc:8a:c4:00:17:d5:08:41:7c:1f:84: 7f:4b:33:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGpCSPWlMmLMkpIqtr3xytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjUxMDIxMTIwMDExWhcNMjUxMDIyMTIwMDExWjAzMTEwLwYDVQQD Eyg0ZDgwZDAzZTRjZWMwNWFiMTFhYjg0MjIzMTZlODQxZmQ4YzVkNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Plkm1nNznAdLNVXiW/0gCC2yhtj a6C/uDAHr2+9FkR1eGCNB5bP6GMl+z+4C2zKFnyFvTDz+z39legoqlSajKGLoKQ/ RyBjqELmMtgwlELklh0H3WrQMIzdfRNSz/h5FsXmmYy4MKeh4owoh4hhRfFsB4M5 z07D1NUeCg/BPcjgyM0ortgZgoXBzJMrwZQYqwI5r8iTsefO15QDLJlIiyf4jVdo 8gwFAta8fA+FDQCM1NbjPxlQSeD2Fs73xMw1K7g58t+6XOF9NtYlHUxRGbrTxZQD pLbbhzWUrwBm81RCRHDrLg+ftuKxtYEXLPbwR5M9rxDjzRAf0eXxtSoidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2A0D5M7AWrEauEIjFuhB/YxdRVMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmBSQDqz PSxATSoF92jSK644rQXIjBmz+VYE+Txx7LTOeC3lf4RtC5YZ1Jcdvu1RqDGrnrdx HIx61iOcUnowHw4iDi5CyVqgxuPerA0l11crev615Ufv532oH3NeePnX4zb6m3Ea PT+FITVTIF7F3miJFbbMDfbKzD0rKyARWSHA72fr4I9jGEIhx2cBSXbR6W42Re61 ri09dnvOlJ6ufgOr0ZUtEFA6IsLgsUATDx+PM+NFk4DGwG6c9oYli8Ob4z7BHO1+ yVR6TD5k7wo+J9s56gnjfZqCJ2RB+Mp1KrdAEYUxdL6mq7vTLDnhr/LoA8yKxAAX 1QhBfB+Ef0szGA== -----END CERTIFICATE-----Generated at Tue Oct 21 16:58:55 2025 by rpki-client