$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: AC+pL8yu+usDhPunQjmrJv6THHZNjkeFXYL7Bec3IC0= Subject key identifier: C9:A1:1C:CA:43:50:FA:18:49:D8:1A:F5:A1:63:B4:55:B4:7C:90:60 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 0199FC8F27828219A0B0E69FBCFC80FA0C25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 15E6 Signing time: Sun 19 Oct 2025 13:01:04 +0000 Manifest this update: Sun 19 Oct 2025 13:01:04 +0000 Manifest next update: Mon 20 Oct 2025 13:01:04 +0000 Files and hashes: 1: 1-wNbXwWq_rcd31KdtUHBjHqlOYw.roa (hash: Vna41k3RUzjuu4Rno9oMx5pWO8RDhSOU/oHNJLNrfMg=) 2: 1cBjbhQO7ncLuCJPPP3ax-BP1rc.roa (hash: Jy5kekjzCQxDaa0ItIoXnMNYM41DXr2Kna+F8NZUTeI=) 3: 5eRHhosWaEn81OkNyusCZwVd7dE.roa (hash: ocfP0fS6gnrVeOxLsKmob4730X36T0aRDwqF+FQB7po=) 4: 7dOxBPA-NVqHM_R34TmdQX-eiVk.roa (hash: F50CnYYnm4HGmpVuvVtE+trmrhmEhsgxat1JiN/ij8U=) 5: 8hRBXjeqaNVqsRXwD3teVm2IptQ.roa (hash: 7trj/DN0w0nR+thBLV8DeXduqLYmWtu9yjYZdu4vyJw=) 6: DYlegyxuugcrHdLCVkPaKjiFwIA.roa (hash: ZmFhBg5sskdoXlqUSzUPJuG9Erq+ftlETUSEq7NYxR0=) 7: Ff-r3-0iyLfe2eC4tftKl7r4ksA.roa (hash: XBCuFAzYlK+KS0b0qdNX4BGXCyC4kES1ua5iNmQkljo=) 8: Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa (hash: jB+LwnmkqI7LD0NI0i2IOq5xZm+2j2nKXigXc5yngNg=) 9: I-d3mGhKAHlT8J9wAcisFqLqGFQ.roa (hash: +t66xrsaCPSb5WzTrykjh+nmEbajrQRTzYzj7itFceY=) 10: Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa (hash: 4mvPk5YCIebKrrCqmTuHh7apgwePzT2ptGjzqSnMQ2k=) 11: RpFEf2i-KdvJWns5f60QFIiul8A.roa (hash: IhnLzk7nknFDNbFcmh5KMyW66l5exCsFA25jgANhkOU=) 12: S1WNVPH-yhQYVBlY1oxGoA4pYB8.roa (hash: /KwKr2NjkF6vHZXTNqR2GuVfyY5uthmni4bhiTmH1io=) 13: TKHVPCgKWgmlRhWEubfTc_2iNdo.roa (hash: kNRIFdkqpRBsn7JG22+KFQspfd2argAfeCH1zb4/CE4=) 14: V2uTQCIG7cpvASw3b1o6E1FEC9w.roa (hash: lSRRwHc5aUwf96o9oByRNWmxPAHRtbICzuXtltcIQaU=) 15: YC4l494MMi7jTGcWqfTEBZhM2VY.roa (hash: DmaVqTngLmKv88xcCzv/bh/3DcOXypOgid+RGqcY+/k=) 16: aIC6ROQmIBkJtMQV3BLilIyM4Jc.roa (hash: +ZDiWP7vx5S7AAhHLcn6ylil5bTpyx1nO3rHC5JU56A=) 17: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: 308aBLJjb6txw+28Wt8o7rkvSYlPouSKi91H4n4l778=) 18: hmhsGXGseV2PwIXfLkkzy9brjH8.roa (hash: LD7+KdCf6+q+GHIUMNOAE/kbGPimpdSNwZOTxjTUsL4=) 19: mrPMPRRrlkwWoRTckPExVReGdzU.roa (hash: udQkxnQ/puhpRZBZD7aeBvy0qFXVY4xyBvq7R9flC08=) 20: o5T0k_44TSkIgUx_Ff4U-HFRZqU.roa (hash: IFaPUBy92F06F1cq2klHPE/ZCTKON9EkjF2KsBLKJXw=) 21: qSlaLn-7EYhvBs__DrzBebluApA.roa (hash: /m9RdlfwCPFmSdntKKJTP1sX7ETuhSL8wJhpD8u8EQU=) 22: rgzdAffmWWAVB7HsZPyDscdDfUs.roa (hash: PHFUtB9FTI42HYVNCn11UAKgdzJHvZkAvCdcalSeSVs=) 23: vyh_XE53itxxZ2DN3zJiSHad7oQ.roa (hash: BwwJTDqClirjAI8z/+dm20U+LpRGL9usTj1KRJXE4gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:27:82:82:19:a0:b0:e6:9f:bc:fc:80:fa:0c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Oct 19 13:01:04 2025 GMT Not After : Oct 20 13:01:04 2025 GMT Subject: CN=c9a11cca4350fa1849d81af5a163b455b47c9060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:64:44:89:5a:45:b7:23:c5:10:1f:f0:31: 79:94:14:1e:db:bb:dd:3a:8f:f8:80:9b:da:16:46: 5d:3b:99:7b:8b:eb:0a:56:2f:38:65:f3:39:cb:1c: ea:a4:0f:b9:63:88:71:8b:c7:b9:cf:be:23:d1:3c: 2b:17:8c:ab:61:af:80:8d:9b:57:3e:65:6e:d9:1b: 1d:e5:cd:d2:5e:83:81:7c:a3:13:a4:b5:e1:7e:8c: e7:c8:b3:46:29:b3:8c:54:68:d0:53:31:c5:ed:ab: 4c:57:03:e2:76:73:18:75:68:2d:c8:b6:a9:a2:d7: 6f:40:e7:0b:0a:7f:e7:cc:70:82:06:41:25:c2:9d: 30:18:ff:35:e4:0b:7a:e2:4c:1d:bc:05:4f:43:81: c4:6b:ec:6d:3d:6d:38:7e:69:cc:8a:43:c1:6b:f3: 54:f9:ff:06:b6:15:25:34:20:fe:6d:25:94:3e:de: 05:c4:17:ad:70:62:5a:71:eb:79:4d:f9:7a:54:e2: 8d:31:dd:e1:82:62:32:ac:28:25:f0:0f:bf:9f:08: 9c:f8:77:14:68:37:00:90:ea:b7:00:b9:a2:9c:58: 53:5b:4d:1d:e9:55:c4:6e:47:4d:8f:0d:b9:cd:2e: b2:f0:40:9c:f7:e3:97:54:51:3b:f0:67:ba:b2:db: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:1C:CA:43:50:FA:18:49:D8:1A:F5:A1:63:B4:55:B4:7C:90:60 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7b:5a:4e:d9:04:74:93:36:91:33:33:43:aa:41:31:e2:7f: c2:1a:d8:c1:68:b3:c3:7f:e7:c3:d7:a8:a7:af:40:b7:3a:d7: e2:4c:a3:78:2a:f4:8d:6c:c7:41:00:7a:4a:13:bf:78:29:c0: a7:29:bd:2e:a9:ed:9d:8a:7f:f2:90:df:bb:ea:57:80:74:ca: 2f:2c:c8:1b:d9:8e:dc:26:f7:c1:9c:77:b8:43:05:54:c1:02: 5c:1e:9e:33:41:7b:27:9c:5e:5f:e5:4b:dc:ef:70:30:f7:ff: 40:af:22:c0:b3:5b:16:0b:cb:d3:a8:47:f7:e3:0c:ee:d6:d1: b9:f6:cd:12:bd:0e:0a:57:3e:8a:27:50:7f:e6:df:d4:5d:e4: 0e:6c:04:92:07:7a:58:20:44:a8:ae:c3:55:24:f3:91:12:5d: da:73:7a:05:96:8d:b3:fd:82:51:09:0b:c7:df:0c:c2:d3:a0: 3f:ab:d3:2c:87:ab:e6:28:f8:6b:8c:81:c5:08:d9:16:6f:c7: 7b:d8:f1:d1:73:a3:d0:9d:1c:1d:fd:a7:f8:07:df:89:2f:e1: ee:8b:96:44:a8:f9:2a:6f:48:c3:cf:ea:a9:65:2c:ce:26:fa: 81:58:af:a9:e0:38:b7:9f:f7:df:3e:d8:64:59:d6:64:23:b9: 60:25:71:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8jyeCghmgsOafvPyA+gwlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjUxMDE5MTMwMTA0WhcNMjUxMDIwMTMwMTA0WjAzMTEwLwYDVQQD EyhjOWExMWNjYTQzNTBmYTE4NDlkODFhZjVhMTYzYjQ1NWI0N2M5MDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XlkRIlaRbcjxRAf8DF5lBQe27vd Oo/4gJvaFkZdO5l7i+sKVi84ZfM5yxzqpA+5Y4hxi8e5z74j0TwrF4yrYa+AjZtX PmVu2Rsd5c3SXoOBfKMTpLXhfoznyLNGKbOMVGjQUzHF7atMVwPidnMYdWgtyLap otdvQOcLCn/nzHCCBkElwp0wGP815At64kwdvAVPQ4HEa+xtPW04fmnMikPBa/NU +f8GthUlNCD+bSWUPt4FxBetcGJacet5Tfl6VOKNMd3hgmIyrCgl8A+/nwic+HcU aDcAkOq3ALminFhTW00d6VXEbkdNjw25zS6y8ECc9+OXVFE78Ge6stvqywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmhHMpDUPoYSdga9aFjtFW0fJBgMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXtaTtkE dJM2kTMzQ6pBMeJ/whrYwWizw3/nw9eop69AtzrX4kyjeCr0jWzHQQB6ShO/eCnA pym9LqntnYp/8pDfu+pXgHTKLyzIG9mO3Cb3wZx3uEMFVMECXB6eM0F7J5xeX+VL 3O9wMPf/QK8iwLNbFgvL06hH9+MM7tbRufbNEr0OClc+iidQf+bf1F3kDmwEkgd6 WCBEqK7DVSTzkRJd2nN6BZaNs/2CUQkLx98MwtOgP6vTLIer5ij4a4yBxQjZFm/H e9jx0XOj0J0cHf2n+AffiS/h7ouWRKj5Km9Iw8/qqWUszib6gVivqeA4t5/33z7Y ZFnWZCO5YCVxgQ== -----END CERTIFICATE-----Generated at Sun Oct 19 19:57:19 2025 by rpki-client