$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: wkNEBEf5VOdErpD1vZTJzVq13UHBwVCNI1svFOQnKUs= Subject key identifier: 21:5E:5B:EF:89:03:FA:07:9F:A6:A2:E6:7B:64:DB:47:B2:D2:36:AA Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 0199FD3438CBFC1F5AAA0B4BDDCD9E5D34AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 16EC Signing time: Sun 19 Oct 2025 16:01:22 +0000 Manifest this update: Sun 19 Oct 2025 16:01:22 +0000 Manifest next update: Mon 20 Oct 2025 16:01:22 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: HFfdVDELBKDPgPc8xwN6ce2bNwvVXy8hez2RgEExfAU=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:38:cb:fc:1f:5a:aa:0b:4b:dd:cd:9e:5d:34:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Oct 19 16:01:22 2025 GMT Not After : Oct 20 16:01:22 2025 GMT Subject: CN=215e5bef8903fa079fa6a2e67b64db47b2d236aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:87:cf:04:52:d0:3a:9b:61:08:77:26:d3: 5f:92:c1:d4:94:03:e6:90:71:51:bc:ea:69:32:eb: 52:69:5d:40:70:13:bc:2a:6e:b2:99:c4:9b:5e:21: a4:14:e1:16:5d:45:a3:1f:fc:fd:bb:2d:b6:68:fb: 4c:f0:43:60:c3:5a:b2:a6:ee:77:1b:fc:1d:3d:7f: 2e:fb:15:cc:e1:89:dc:6f:fe:b8:e3:d0:e4:16:fd: b7:dd:4f:8f:a8:97:83:b8:ef:a5:2e:de:21:19:8c: 29:b4:c2:67:15:4d:ed:5b:16:70:16:d7:6d:95:4a: 0f:7e:05:52:f5:0d:a8:12:30:72:1d:e9:c0:14:b5: 25:86:07:1d:4b:70:2c:5a:e4:1c:5a:94:c4:27:79: f5:8f:e2:bd:4f:c5:99:f0:8d:89:e2:f7:84:e3:60: 86:3d:97:94:f9:d1:78:cb:3a:91:5a:8e:35:c7:33: 54:03:e8:3e:f3:d7:57:13:b2:02:6b:dd:93:df:4a: cd:01:ca:e1:c5:c6:31:de:ad:ae:8c:b5:f3:df:b9: 09:83:c1:d3:07:3d:bb:72:0a:de:8f:66:a8:26:3c: e6:96:47:35:85:2f:b6:84:3e:5b:3f:43:99:13:12: d1:8a:df:b2:35:42:ff:cf:8a:f7:ce:8c:83:d2:6e: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5E:5B:EF:89:03:FA:07:9F:A6:A2:E6:7B:64:DB:47:B2:D2:36:AA X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e7:f2:bb:2e:9e:b0:9b:83:6f:cc:9d:93:81:ef:ef:b1:43: 88:28:e9:b9:ae:23:3e:3d:99:3e:66:80:be:70:6c:15:4e:cc: cf:45:54:b8:04:13:a8:7b:7a:82:4f:ab:d3:f2:3d:1d:66:66: be:16:3d:cb:30:49:b6:9b:8c:0a:e3:c0:4e:83:0a:2c:e3:f4: e5:69:40:63:f4:22:86:5b:ef:a2:43:4d:39:5c:cc:31:70:58: 22:57:27:ed:05:af:ba:4b:7b:a6:95:b9:94:b4:e2:d6:fe:89: 1b:27:18:f1:c8:3b:bc:44:db:48:0c:5d:e9:7d:33:96:04:5f: c1:91:44:67:e6:de:f3:71:ce:52:b5:e6:bf:13:ae:4c:55:74: c1:ab:ac:fd:4c:84:a7:46:75:c1:32:2c:fe:71:7c:37:db:76: 9b:d5:34:03:7f:42:46:28:18:b3:6d:cc:ed:aa:ff:78:70:2f: a0:35:88:28:d2:c0:1f:02:19:0b:b2:cd:5c:da:30:17:39:b2: 24:0b:06:60:64:84:e9:5e:1d:1b:71:83:ab:f5:63:0a:43:2c: 02:8e:31:3a:0a:bd:c8:12:8d:78:b2:83:1a:8c:3a:8d:5a:6b: 47:8f:6b:43:7c:0c:c1:fa:89:c0:6a:41:54:8c:34:a1:58:a5: 56:cc:bf:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NDjL/B9aqgtL3c2eXTSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUxMDE5MTYwMTIyWhcNMjUxMDIwMTYwMTIyWjAzMTEwLwYDVQQD EygyMTVlNWJlZjg5MDNmYTA3OWZhNmEyZTY3YjY0ZGI0N2IyZDIzNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCiHzwRS0DqbYQh3JtNfksHUlAPm kHFRvOppMutSaV1AcBO8Km6ymcSbXiGkFOEWXUWjH/z9uy22aPtM8ENgw1qypu53 G/wdPX8u+xXM4Yncb/6449DkFv233U+PqJeDuO+lLt4hGYwptMJnFU3tWxZwFtdt lUoPfgVS9Q2oEjByHenAFLUlhgcdS3AsWuQcWpTEJ3n1j+K9T8WZ8I2J4veE42CG PZeU+dF4yzqRWo41xzNUA+g+89dXE7ICa92T30rNAcrhxcYx3q2ujLXz37kJg8HT Bz27cgrej2aoJjzmlkc1hS+2hD5bP0OZExLRit+yNUL/z4r3zoyD0m48XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFeW++JA/oHn6ai5ntk20ey0jaqMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+fyuy6e sJuDb8ydk4Hv77FDiCjpua4jPj2ZPmaAvnBsFU7Mz0VUuAQTqHt6gk+r0/I9HWZm vhY9yzBJtpuMCuPAToMKLOP05WlAY/QihlvvokNNOVzMMXBYIlcn7QWvukt7ppW5 lLTi1v6JGycY8cg7vETbSAxd6X0zlgRfwZFEZ+be83HOUrXmvxOuTFV0waus/UyE p0Z1wTIs/nF8N9t2m9U0A39CRigYs23M7ar/eHAvoDWIKNLAHwIZC7LNXNowFzmy JAsGYGSE6V4dG3GDq/VjCkMsAo4xOgq9yBKNeLKDGow6jVprR49rQ3wMwfqJwGpB VIw0oVilVsy/+w== -----END CERTIFICATE-----Generated at Sun Oct 19 20:13:52 2025 by rpki-client