$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: ahmCtInTMj03kCNwGV1p4MHyVK4FiZRm4osghbtAgNE= Subject key identifier: 27:D0:15:48:E7:47:F8:78:76:7C:93:84:EC:6D:C8:D3:96:C9:98:E9 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 0199FBEABBB9959233BB7B6400955C9406F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1762 Signing time: Sun 19 Oct 2025 10:01:28 +0000 Manifest this update: Sun 19 Oct 2025 10:01:28 +0000 Manifest next update: Mon 20 Oct 2025 10:01:28 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: 6/cEbVv23H4VFmMZ0KDdYBDj8XppW+UYGPCMi5zJ1m8=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 8: DckPkWZfljnAbQqV6SalR6Uqe94.roa (hash: ArN8TuTTCoe+jeefNsTkr92B/haNuKK1frU+GAU9yrI=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 11: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 12: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (hash: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 21: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 24: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 25: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 26: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 29: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 30: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 31: vR1O8tA1mGiTeMtfJzINcI7RCWk.roa (hash: 0xC4v/WeHAjP9QFPlKPBUq54B19dJ9KLIoE1Tq01Rt0=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ea:bb:b9:95:92:33:bb:7b:64:00:95:5c:94:06:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Oct 19 10:01:28 2025 GMT Not After : Oct 20 10:01:28 2025 GMT Subject: CN=27d01548e747f878767c9384ec6dc8d396c998e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:74:9e:b0:99:c3:5a:43:ac:b8:0b:af:48: be:b4:7e:d0:10:22:84:f4:73:3c:c2:9d:70:fd:92: f2:29:38:64:f5:2c:d6:7a:3c:2d:c0:b7:fb:88:58: 2e:fc:3d:6c:c4:84:aa:cb:64:7a:9b:7c:e5:d0:bf: 83:a0:33:70:41:bd:a5:b2:cb:36:58:11:74:90:0d: e6:0e:41:42:65:04:dc:ea:0b:58:b6:5e:8f:ea:2a: 63:23:53:92:60:76:78:d8:43:b3:ba:e9:fc:14:dd: 6e:c6:0b:77:6b:24:d0:04:79:f3:59:e0:c6:b1:ce: ae:28:20:44:e8:a2:d6:d4:0c:d3:2c:3b:f4:32:d5: 32:af:04:55:0d:2d:eb:72:ae:7d:f7:a7:3f:3a:91: de:90:77:59:72:4e:38:cb:38:0c:b6:44:de:65:d0: 55:a1:f9:a7:4d:b8:73:9e:db:9e:60:40:6a:5a:58: 3e:2f:d7:82:e2:1a:99:ef:c5:1b:d3:8b:1d:d4:48: 56:c3:cf:f0:0d:4e:5d:f9:84:70:32:f4:bd:df:53: 85:23:2c:73:7e:52:da:ca:aa:f2:9a:dd:3c:69:b4: 0f:bc:05:59:34:f4:45:44:ea:76:2a:b0:58:00:20: 2d:94:a8:71:03:1b:ba:15:87:11:8c:6f:1f:f2:14: f1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:15:48:E7:47:F8:78:76:7C:93:84:EC:6D:C8:D3:96:C9:98:E9 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:22:25:a5:a5:55:79:6d:af:8a:dc:f4:3a:67:1f:8e:8d:a9: 51:74:4f:5f:5b:8f:81:43:3c:f3:be:d8:0a:19:71:e7:b7:8c: 48:9e:8a:38:a9:1f:6f:88:c8:99:b8:6e:f8:f7:08:7d:74:19: 49:f5:51:4c:dc:f1:74:c9:19:5b:1b:fa:43:84:25:62:23:dd: 44:e6:74:e1:0d:dc:90:38:b3:df:b4:7c:7f:a2:44:42:10:82: 45:39:7d:1e:65:3e:c4:73:f5:fc:ae:49:8b:13:39:8f:79:1c: e8:56:1d:ee:ce:ca:bb:d3:5f:b6:f1:7b:b5:04:77:ff:7b:6c: 32:df:ae:cf:62:35:c1:41:14:75:2d:da:47:ad:c7:d2:61:0b: b3:ce:4d:fa:26:28:76:23:9b:54:9c:42:e7:4e:e3:fa:cf:b4: 22:1a:09:ef:2d:c4:8c:fb:3c:4b:f7:1f:19:51:88:91:4f:9b: 48:10:0c:3f:a0:05:ff:4b:db:03:a7:33:cf:3f:7d:a3:ee:82: b6:93:45:f9:d0:3b:56:5d:ba:49:5f:f0:ff:03:1e:67:cd:c6: ed:fa:de:72:78:48:15:29:ef:e3:d0:51:e3:ae:30:1f:8a:2d: 4f:25:36:84:17:52:93:fe:8e:3b:06:1e:04:0f:46:2d:65:df: 60:4d:c3:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76ru5lZIzu3tkAJVclAbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMDE5MTAwMTI4WhcNMjUxMDIwMTAwMTI4WjAzMTEwLwYDVQQD EygyN2QwMTU0OGU3NDdmODc4NzY3YzkzODRlYzZkYzhkMzk2Yzk5OGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q90nrCZw1pDrLgLr0i+tH7QECKE 9HM8wp1w/ZLyKThk9SzWejwtwLf7iFgu/D1sxISqy2R6m3zl0L+DoDNwQb2lsss2 WBF0kA3mDkFCZQTc6gtYtl6P6ipjI1OSYHZ42EOzuun8FN1uxgt3ayTQBHnzWeDG sc6uKCBE6KLW1AzTLDv0MtUyrwRVDS3rcq5996c/OpHekHdZck44yzgMtkTeZdBV ofmnTbhzntueYEBqWlg+L9eC4hqZ78Ub04sd1EhWw8/wDU5d+YRwMvS931OFIyxz flLayqrymt08abQPvAVZNPRFROp2KrBYACAtlKhxAxu6FYcRjG8f8hTxXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfQFUjnR/h4dnyThOxtyNOWyZjpMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCIlpaVV eW2vitz0Omcfjo2pUXRPX1uPgUM8877YChlx57eMSJ6KOKkfb4jImbhu+PcIfXQZ SfVRTNzxdMkZWxv6Q4QlYiPdROZ04Q3ckDiz37R8f6JEQhCCRTl9HmU+xHP1/K5J ixM5j3kc6FYd7s7Ku9NftvF7tQR3/3tsMt+uz2I1wUEUdS3aR63H0mELs85N+iYo diObVJxC507j+s+0IhoJ7y3EjPs8S/cfGVGIkU+bSBAMP6AF/0vbA6czzz99o+6C tpNF+dA7Vl26SV/w/wMeZ83G7frecnhIFSnv49BR464wH4otTyU2hBdSk/6OOwYe BA9GLWXfYE3Dhg== -----END CERTIFICATE-----Generated at Sun Oct 19 15:12:01 2025 by rpki-client