$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft File: TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json) Hash identifier: KvoArvVTz5ZhpNbkODdHUNJcERxiSA7vf/443VwLyXc= Subject key identifier: E4:22:98:67:78:EB:57:85:B8:D5:93:EB:B6:80:22:B0:C5:D7:7A:C7 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019A03A47856AB810A44567EB2C51FD50F18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft Manifest number: 16FA Signing time: Mon 20 Oct 2025 22:01:41 +0000 Manifest this update: Mon 20 Oct 2025 22:01:41 +0000 Manifest next update: Tue 21 Oct 2025 22:01:41 +0000 Files and hashes: 1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=) 2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=) 3: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=) 4: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=) 5: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=) 6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=) 7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=) 8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=) 9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=) 10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=) 11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=) 12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=) 13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: PpjJQZ6Ve2FuY4BQpX1fVjLE4gJkiJyHZWNUovlbPPI=) 14: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=) 15: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=) 16: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=) 17: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=) 18: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=) 19: qkTqrO7XelpW6Q5iX68CrdjzWos.roa (hash: 2la/hVcZll8gvRBsY59IVSBJ7qK4GiwOVnBOoPlYkfg=) 20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=) 21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:03:a4:78:56:ab:81:0a:44:56:7e:b2:c5:1f:d5:0f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Oct 20 22:01:41 2025 GMT Not After : Oct 21 22:01:41 2025 GMT Subject: CN=e422986778eb5785b8d593ebb68022b0c5d77ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:ec:2b:8f:9a:de:72:31:2d:20:82:55:2b: f3:f1:50:57:18:3f:08:fb:a7:fb:13:eb:86:f1:b0: 13:bd:1a:19:b3:21:1b:23:59:76:33:eb:c9:6a:d8: 7b:e3:64:ae:c8:31:03:ea:b8:e0:ed:49:65:60:01: 23:2c:2c:74:31:d0:7a:91:83:73:8a:f0:6d:af:11: bd:ff:fe:3e:ee:b8:3b:5f:e0:14:c9:54:d3:52:15: 06:c2:e3:6d:f3:b2:a5:64:37:27:93:42:da:04:d1: 2c:c7:78:e0:22:97:3c:0f:8d:70:79:5b:05:09:41: 7d:0d:f8:e7:ad:fc:f5:fb:20:89:36:34:dc:2e:7d: d0:b7:a6:12:2d:81:b1:86:f8:e2:34:79:f9:50:0d: 52:d5:5a:fd:ab:c1:55:0d:d3:42:ba:fa:bc:ef:1e: 01:cf:24:67:8c:1b:3d:31:50:fd:c0:12:15:5f:d2: eb:ea:96:0e:dd:5c:fe:1e:d1:52:7c:26:6f:34:f2: 31:17:c9:1a:8d:03:a6:96:78:4e:84:18:51:d8:ca: 09:da:96:80:cc:79:b3:0c:97:1f:fd:c3:8a:66:21: d9:f9:40:ac:bc:1f:2a:89:06:21:d5:89:4c:39:a6: 43:4c:b2:f9:dd:cd:d1:ad:6d:18:f7:be:68:86:96: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:22:98:67:78:EB:57:85:B8:D5:93:EB:B6:80:22:B0:C5:D7:7A:C7 X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:14:e0:ff:19:03:c4:f6:37:61:28:1c:de:25:49:86:bc:73: 8e:dd:9d:2c:e5:2c:f7:57:f6:42:51:96:28:ec:f1:56:40:56: 8b:dd:c9:a4:09:5c:34:14:4f:c1:b4:8c:f2:b3:dc:2e:4f:4c: 71:81:64:ff:61:e1:6c:2b:5b:aa:62:1d:72:1a:a0:e9:7e:7e: 3b:1f:f7:e0:ba:df:30:e0:f7:a5:fe:e9:7a:5b:4e:24:da:34: b3:9f:28:00:be:28:95:80:16:a4:a6:41:23:a3:51:a6:88:9a: 49:f5:1c:89:94:47:1e:19:6a:cf:e2:a2:ba:d7:0a:65:66:29: dc:43:94:cf:b9:93:a4:d2:58:f0:22:cd:94:90:ab:68:4c:c4: 2a:fc:bc:70:6b:f0:4e:13:7a:86:95:e2:1f:5f:62:94:0c:43: e2:09:79:67:95:8e:ad:55:12:b0:5f:c2:8b:48:01:b0:79:7b: bc:9b:ba:20:c6:ce:b8:b1:bc:06:ba:b5:98:09:1b:00:af:18: 78:45:57:b9:be:64:92:ce:bf:ef:2b:67:fa:7d:da:44:df:37: 57:7a:c7:04:d4:07:9f:ab:82:5c:b3:72:c8:7b:cc:48:94:af: 33:e5:21:9a:e1:91:3a:f6:e9:06:cb:ab:5d:6c:ee:a6:f2:a0: 7c:ce:66:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoDpHhWq4EKRFZ+ssUf1Q8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjUxMDIwMjIwMTQxWhcNMjUxMDIxMjIwMTQxWjAzMTEwLwYDVQQD EyhlNDIyOTg2Nzc4ZWI1Nzg1YjhkNTkzZWJiNjgwMjJiMGM1ZDc3YWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfnsK4+a3nIxLSCCVSvz8VBXGD8I +6f7E+uG8bATvRoZsyEbI1l2M+vJath742SuyDED6rjg7UllYAEjLCx0MdB6kYNz ivBtrxG9//4+7rg7X+AUyVTTUhUGwuNt87KlZDcnk0LaBNEsx3jgIpc8D41weVsF CUF9Dfjnrfz1+yCJNjTcLn3Qt6YSLYGxhvjiNHn5UA1S1Vr9q8FVDdNCuvq87x4B zyRnjBs9MVD9wBIVX9Lr6pYO3Vz+HtFSfCZvNPIxF8kajQOmlnhOhBhR2MoJ2paA zHmzDJcf/cOKZiHZ+UCsvB8qiQYh1YlMOaZDTLL53c3RrW0Y975ohpbK/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQimGd461eFuNWT67aAIrDF13rHMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzBTg/xkD xPY3YSgc3iVJhrxzjt2dLOUs91f2QlGWKOzxVkBWi93JpAlcNBRPwbSM8rPcLk9M cYFk/2HhbCtbqmIdchqg6X5+Ox/34LrfMOD3pf7peltOJNo0s58oAL4olYAWpKZB I6NRpoiaSfUciZRHHhlqz+KiutcKZWYp3EOUz7mTpNJY8CLNlJCraEzEKvy8cGvw ThN6hpXiH19ilAxD4gl5Z5WOrVUSsF/Ci0gBsHl7vJu6IMbOuLG8Brq1mAkbAK8Y eEVXub5kks6/7ytn+n3aRN83V3rHBNQHn6uCXLNyyHvMSJSvM+UhmuGROvbpBsur XWzupvKgfM5mQg== -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:22 2025 by rpki-client