$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: 4paAsHvwHkNi2NvrBT65afNexaIBgV6FS2Ph9MTluWA= Subject key identifier: 7D:69:BE:E3:1D:74:15:E6:3A:70:2B:F8:5C:DC:A8:64:D0:4B:2B:09 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 0199FCFD62AE01AE2FC3CE12EDF062C77B9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 1004 Signing time: Sun 19 Oct 2025 15:01:28 +0000 Manifest this update: Sun 19 Oct 2025 15:01:28 +0000 Manifest next update: Mon 20 Oct 2025 15:01:28 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: nDMShJm+tT2L/S4KzytZ6mKXGEByy0XZv/zFsUHTao8=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:62:ae:01:ae:2f:c3:ce:12:ed:f0:62:c7:7b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Oct 19 15:01:28 2025 GMT Not After : Oct 20 15:01:28 2025 GMT Subject: CN=7d69bee31d7415e63a702bf85cdca864d04b2b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:29:d5:11:a8:6d:d3:89:69:7a:ce:da:37: e0:42:3d:7a:c8:36:21:5c:c9:6c:b1:af:74:1f:c1: b2:27:07:ac:60:20:cd:8a:03:6a:a8:8e:e5:c9:ea: 2b:cb:13:31:98:3a:f9:d1:1f:36:76:67:3c:f7:91: 22:e3:c2:6e:16:18:7b:f8:99:d2:89:fd:2d:a1:f7: 22:f5:32:12:e0:63:4b:dd:fc:62:b1:ea:c1:f3:f7: 67:40:6f:fc:b5:e5:95:35:dd:0b:f3:f1:54:82:5b: 4e:6e:7e:7e:f1:a9:3e:c3:7a:31:28:92:40:83:0c: 52:0a:af:69:81:36:3c:7e:d4:5b:f2:b6:61:03:52: 49:9d:d5:00:8c:ee:d2:f8:e5:6f:81:cc:70:a3:a8: 01:ba:e6:1d:da:f8:19:4b:6c:6e:ca:db:1c:e3:d2: d1:fd:44:41:48:6b:44:eb:e7:1d:21:36:e0:22:f6: 92:0a:ca:04:07:c1:8e:72:25:ed:0a:02:71:54:93: f8:69:5a:d3:d7:cf:08:22:45:70:0a:7d:11:70:09: 27:e1:22:27:d0:eb:6f:21:96:f2:ba:15:e2:b5:8d: 4b:66:a8:cc:17:dc:42:c2:2c:47:b3:46:40:ad:0c: 36:a1:73:84:31:7e:c6:3c:55:f7:6a:9a:5f:de:0e: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:69:BE:E3:1D:74:15:E6:3A:70:2B:F8:5C:DC:A8:64:D0:4B:2B:09 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ef:cb:04:27:40:4e:d2:07:c0:af:a8:7c:c1:1e:51:c4:bb: c3:73:2b:c6:6e:5c:df:fe:8f:0f:8c:bb:00:93:2d:55:48:c4: 4c:d1:94:44:3b:1c:cf:89:bc:23:9d:4f:08:4c:97:8b:fd:7c: 50:2e:a9:96:63:0c:a5:25:ae:2b:21:50:9d:e6:0c:dc:a2:3f: a5:07:d0:d4:07:30:a7:60:0b:a9:08:01:c8:99:9f:71:81:1f: a2:d2:ca:5e:4a:ec:1b:48:fe:20:aa:a4:48:9c:5b:f6:f8:aa: 06:d9:7f:f4:88:a6:dd:a0:d7:c4:3f:16:0d:e4:cb:b5:ec:ac: cd:b0:ac:e5:e3:27:d6:ef:1e:16:d4:80:64:06:ac:7c:5c:09: 17:28:2d:b6:62:0c:65:1f:e1:6b:8c:52:20:9e:eb:04:9a:d9: 7e:4a:62:0e:9a:2b:fc:21:f9:f3:b3:b2:09:f8:0a:24:25:cf: 3d:7e:c0:84:66:f2:ec:8f:f1:f6:fd:1d:8e:9b:cb:8c:fa:51: 55:1c:3b:57:87:06:51:d7:9c:a3:af:0a:6e:02:1b:04:06:10: 0b:ba:e2:aa:3a:8b:11:aa:b6:2d:7f:e1:94:4f:49:df:57:6f: 70:83:07:47:56:bf:fb:07:1e:de:f9:a7:1f:e8:b2:72:23:b6: 58:95:c4:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/WKuAa4vw84S7fBix3udMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUxMDE5MTUwMTI4WhcNMjUxMDIwMTUwMTI4WjAzMTEwLwYDVQQD Eyg3ZDY5YmVlMzFkNzQxNWU2M2E3MDJiZjg1Y2RjYTg2NGQwNGIyYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs70p1RGobdOJaXrO2jfgQj16yDYh XMlssa90H8GyJwesYCDNigNqqI7lyeoryxMxmDr50R82dmc895Ei48JuFhh7+JnS if0tofci9TIS4GNL3fxiserB8/dnQG/8teWVNd0L8/FUgltObn5+8ak+w3oxKJJA gwxSCq9pgTY8ftRb8rZhA1JJndUAjO7S+OVvgcxwo6gBuuYd2vgZS2xuytsc49LR /URBSGtE6+cdITbgIvaSCsoEB8GOciXtCgJxVJP4aVrT188IIkVwCn0RcAkn4SIn 0OtvIZbyuhXitY1LZqjMF9xCwixHs0ZArQw2oXOEMX7GPFX3appf3g5frQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1pvuMddBXmOnAr+FzcqGTQSysJMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu/LBCdA TtIHwK+ofMEeUcS7w3Mrxm5c3/6PD4y7AJMtVUjETNGURDscz4m8I51PCEyXi/18 UC6plmMMpSWuKyFQneYM3KI/pQfQ1Acwp2ALqQgByJmfcYEfotLKXkrsG0j+IKqk SJxb9viqBtl/9Iim3aDXxD8WDeTLteyszbCs5eMn1u8eFtSAZAasfFwJFygttmIM ZR/ha4xSIJ7rBJrZfkpiDpor/CH587OyCfgKJCXPPX7AhGby7I/x9v0djpvLjPpR VRw7V4cGUdeco68KbgIbBAYQC7riqjqLEaq2LX/hlE9J31dvcIMHR1a/+wce3vmn H+iyciO2WJXEGg== -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:00 2025 by rpki-client