$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: xEl30CkAdYtGfNQlutpZ7mRVS34K0PhXL53mCS2VssI= Subject key identifier: 23:B2:3F:65:F4:79:B8:B1:D6:4E:1C:E2:14:9C:A6:02:CB:35:2D:5C Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019A5375B95E81F864A02E062E9F080827D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 176C Signing time: Wed 05 Nov 2025 10:00:15 +0000 Manifest this update: Wed 05 Nov 2025 10:00:15 +0000 Manifest next update: Thu 06 Nov 2025 10:00:15 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 4YpVbO9HFvvq74shOPQXNaG5KS0.roa (hash: bVpCtuoPNa1SZMwszxLRHo7H9I6mu3GeU6NgJiv+OkM=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 7: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 8: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 9: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: a3yD3NikkNv0aHeb2KfHBiiSN72MGJmPHrVSmGrG36s=) 11: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 12: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 13: kJYpVxtVyfv4dwbVg4WNh0NM0_w.roa (hash: wZE3vmAhLe9i25qjRpSrq5TNgZ7FBQQ+/m7aI5d1gmY=) 14: lSE1obQ59T94JWyP17qNbBJ8Mi4.roa (hash: //1SxIcij8D7RTJOSo9c6uRC0w9XN7/ELpwWy3gm8m8=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:75:b9:5e:81:f8:64:a0:2e:06:2e:9f:08:08:27:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Nov 5 10:00:15 2025 GMT Not After : Nov 6 10:00:15 2025 GMT Subject: CN=23b23f65f479b8b1d64e1ce2149ca602cb352d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:37:72:42:77:a6:55:f1:fa:da:83:fd:3b: 7c:7b:41:db:b8:51:8b:b7:28:e8:e0:49:3b:1a:ba: d1:6d:58:a2:dc:09:36:3e:f0:53:52:26:da:15:f9: 56:aa:10:6a:e8:d0:6f:32:93:e6:1b:32:01:1b:58: a7:cc:eb:32:bd:78:ce:2d:db:50:2e:fd:ae:9a:61: a4:83:96:ae:c7:3c:a4:c4:7e:b4:ae:6f:6b:2f:21: 96:4e:11:f9:77:0c:35:66:e0:ca:7c:cd:f0:88:5d: d5:6e:d4:84:51:9b:c9:4d:ce:68:72:65:56:23:fa: 94:04:be:9f:0a:94:f6:00:02:85:ac:fe:26:fc:14: e7:3d:87:0e:23:66:54:b0:12:56:66:eb:07:de:53: 19:09:d1:19:62:24:66:1f:4b:46:be:37:75:1d:8a: 11:7b:42:43:a1:5d:e8:97:b9:82:f3:2f:29:32:ed: 39:52:c5:6c:6c:0a:aa:40:2f:40:59:da:5c:9d:1d: 20:2a:b0:c8:03:e6:9b:b6:10:bf:64:3e:df:3f:26: 21:b7:f5:de:4a:6c:6e:22:65:e3:b2:b9:42:dd:27: 96:59:f3:df:7b:fc:d3:92:93:20:33:cb:7d:7a:3c: 52:b5:6b:be:70:16:3a:7c:59:00:7d:e5:8b:b5:4d: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B2:3F:65:F4:79:B8:B1:D6:4E:1C:E2:14:9C:A6:02:CB:35:2D:5C X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:45:78:fe:73:2e:73:2c:c9:e7:4e:12:0e:dc:46:54:35:45: e2:28:6b:4b:d5:f7:dc:2a:8f:0e:7e:2f:db:9d:13:cd:7b:81: 19:55:91:b4:0e:80:8e:8f:72:89:12:27:76:1c:a4:9e:97:e6: d7:98:85:8c:b2:fc:d7:49:42:6f:c9:74:bc:c3:98:5a:da:1f: a1:35:e0:91:91:08:f1:71:39:1c:f9:f7:53:07:a4:02:0c:c9: 46:f3:d3:0d:99:af:e0:ae:88:3e:be:2f:ff:f4:58:95:b3:78: 64:70:52:02:c9:cd:17:50:73:ff:f4:24:a3:41:68:09:79:2f: fd:c5:c0:a2:8a:d9:df:8a:43:c7:a9:b1:71:b0:b1:9e:bd:b1: ae:3c:1b:5e:86:58:77:64:4e:02:17:f3:b7:41:11:7a:91:79: 23:c7:dc:d8:e4:df:77:13:d0:6f:6e:42:b8:4d:17:45:c3:40: b8:4d:69:cb:4a:6a:98:98:31:a3:8c:a0:72:19:4b:ff:5f:e7: 2e:78:22:ed:e8:dc:a3:0f:17:6f:01:f2:c1:25:48:98:47:af: 8b:b2:ae:25:d9:3b:65:8b:8a:b1:e8:64:e8:a4:a8:2b:8b:bf: a8:f4:aa:a6:0a:85:92:30:15:72:2f:06:14:bb:a5:b0:7d:7c: 0d:66:7c:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTdblegfhkoC4GLp8ICCfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUxMTA1MTAwMDE1WhcNMjUxMTA2MTAwMDE1WjAzMTEwLwYDVQQD EygyM2IyM2Y2NWY0NzliOGIxZDY0ZTFjZTIxNDljYTYwMmNiMzUyZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H83ckJ3plXx+tqD/Tt8e0HbuFGL tyjo4Ek7GrrRbVii3Ak2PvBTUibaFflWqhBq6NBvMpPmGzIBG1inzOsyvXjOLdtQ Lv2ummGkg5auxzykxH60rm9rLyGWThH5dww1ZuDKfM3wiF3VbtSEUZvJTc5ocmVW I/qUBL6fCpT2AAKFrP4m/BTnPYcOI2ZUsBJWZusH3lMZCdEZYiRmH0tGvjd1HYoR e0JDoV3ol7mC8y8pMu05UsVsbAqqQC9AWdpcnR0gKrDIA+abthC/ZD7fPyYht/Xe SmxuImXjsrlC3SeWWfPfe/zTkpMgM8t9ejxStWu+cBY6fFkAfeWLtU0LqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOyP2X0ebix1k4c4hScpgLLNS1cMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3UV4/nMu cyzJ504SDtxGVDVF4ihrS9X33CqPDn4v250TzXuBGVWRtA6Ajo9yiRIndhyknpfm 15iFjLL810lCb8l0vMOYWtofoTXgkZEI8XE5HPn3UwekAgzJRvPTDZmv4K6IPr4v //RYlbN4ZHBSAsnNF1Bz//Qko0FoCXkv/cXAoorZ34pDx6mxcbCxnr2xrjwbXoZY d2ROAhfzt0ERepF5I8fc2OTfdxPQb25CuE0XRcNAuE1py0pqmJgxo4ygchlL/1/n Lngi7ejcow8XbwHywSVImEevi7KuJdk7ZYuKsehk6KSoK4u/qPSqpgqFkjAVci8G FLulsH18DWZ8Zg== -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:54 2025 by rpki-client