$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: Fv2iiXZXhF2vQu/aqAZJx80VCcF7fyL4FrZMo62O/9s= Subject key identifier: 61:A2:9A:0C:8A:A7:5A:1A:B7:D3:BE:51:BD:7D:E4:3A:1E:98:BB:DA Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 0199FC8F4CF99F7C3ED26204F4915A4834C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 1392 Signing time: Sun 19 Oct 2025 13:01:13 +0000 Manifest this update: Sun 19 Oct 2025 13:01:13 +0000 Manifest next update: Mon 20 Oct 2025 13:01:13 +0000 Files and hashes: 1: 1-DCahpulJuiQi8zdfIBNVSBP_a0.roa (hash: nTSeDU5/i/b0oztZzrG2CtOkwm9ZNipV4GkBR8TKl3w=) 2: 1-S5qpnBw1ylZG1spddvT9f57eco.roa (hash: maWJwVVWyYP373g2CIlTAWvamrZD0BLeDX8OlPQnHj0=) 3: 2e62pyAhQt2DxyPFxqODWQtQycw.roa (hash: 6QUHL09wvOyNqPTs2cgB2RoIpq+Ebpdxb1aI/fz0Ah0=) 4: 4HUEzjvO1URr-UPygZ4Bs6_KT9Q.roa (hash: 8gqeOkmM8zl20dUfCC3W3gzkl4K07sQTxtiB6AnAR2Q=) 5: 6QviIP7RKjJfXyJHP71i3FDYWL4.roa (hash: QwitosOHcwHPVpSg5VFkyXo/VZmtnyWUke/Nxvg71U0=) 6: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=) 7: 8rwWZi4spjQVqa4jtS9v8fqNE5I.roa (hash: mh6barGghhF0GUA74ZJ5iP4OJOtYcuU25+Ys7lgbD7E=) 8: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (hash: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=) 9: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=) 10: CAPtrPNnBdBiOUsFIZ1KMxmmZso.roa (hash: 9jgYa3vRUAb8QbrmXxskhHH0R6D/iCZRnkTtWpWyrOU=) 11: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=) 12: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=) 13: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=) 14: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=) 15: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=) 16: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=) 17: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=) 18: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=) 19: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=) 20: W5sU-ZO6WBhRXGkiRRiQQs5_9rk.roa (hash: buoQ3JOzvBjf3H+zLixOxcXYRqSn97Vev1LEOeeiEno=) 21: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (hash: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=) 22: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=) 23: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=) 24: gdi_J_c0GtCc5x443kexg-b8wPs.roa (hash: Aw5kYwxs8AG4Z/q8iT+6fyl5oYGYb5LB9ortXvdtI9I=) 25: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=) 26: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=) 27: i7VszA84SZS6OuHdokjMypdaGJc.roa (hash: m3y569SYJ1HX7ytRuzexHPJwkziPyzH7M0vjR2GZNvA=) 28: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=) 29: m7lMiWju66nWi4ie7Vt74icILpg.roa (hash: x3s/oVaZakSkOMeloqbQaRy3FaKUq2eo4wHClY5zjYc=) 30: pWKwCP_lM1lV6k1_8iA6jNpjHqg.roa (hash: RStEnKPVfL8STTUgjI+bGS1TABSbUFHPohIVOs18xGk=) 31: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=) 32: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: VYYJQkqok/KQoC1nk9zEbqW7osFeXVjpbFadMFaGWsg=) 33: vQzAhMwpPmutdIaZx4pns-t0q-U.roa (hash: Tkj980CBDkBPyZLJsGJn51P4EivgB58wkSryfRQwrD0=) 34: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=) 35: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:4c:f9:9f:7c:3e:d2:62:04:f4:91:5a:48:34:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Oct 19 13:01:13 2025 GMT Not After : Oct 20 13:01:13 2025 GMT Subject: CN=61a29a0c8aa75a1ab7d3be51bd7de43a1e98bbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:c5:ca:88:fc:ea:78:60:b3:7d:d3:0a:9a: 9f:af:36:ab:d1:d3:4e:20:53:e1:c1:da:f2:6f:49: 46:1d:c5:51:e5:40:9f:52:86:e0:89:85:52:6b:9f: 7e:f9:83:ec:f2:b4:3f:a5:c0:77:4e:15:47:08:ae: 91:f1:df:2c:f2:d9:ed:41:db:53:21:90:01:b5:11: b3:43:be:5e:fe:a6:dc:8a:7f:fd:53:d1:d6:8e:9d: f9:d7:f5:33:99:09:d9:08:8a:39:8b:65:5b:e1:46: a5:3a:10:0d:e9:3d:b5:b6:78:73:0d:f9:6c:9b:a5: f7:4e:ae:e3:53:a9:43:08:25:0e:07:8d:f1:b3:f7: 7c:9b:c3:84:23:c8:eb:a8:5a:6a:77:50:7a:ec:5f: d0:78:8f:25:df:f6:10:0e:7d:c9:f2:7c:a5:25:f7: 7b:35:78:45:a8:0b:8a:28:37:3f:7b:0c:b4:5d:42: 19:43:fd:3c:63:a5:cf:41:9d:2c:be:0b:87:73:c6: 8f:70:ee:4f:a1:f8:e0:27:c5:d4:77:e6:0a:80:bc: bb:7e:75:1c:6c:5e:29:9a:07:fa:d3:7f:da:e2:e4: c0:9b:b3:26:7a:b9:82:9c:db:65:b0:ad:31:a5:7d: 78:c7:a8:45:b4:b2:e2:19:4e:fd:7e:ec:4b:4c:c2: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A2:9A:0C:8A:A7:5A:1A:B7:D3:BE:51:BD:7D:E4:3A:1E:98:BB:DA X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:05:fb:dc:91:ee:e9:99:28:cc:d6:6c:35:15:74:7a:bf:21: 22:ea:63:6c:69:cd:38:bd:df:b7:62:e9:64:b9:f8:6d:59:ae: 60:ce:6d:ac:69:6d:a1:43:86:79:9c:eb:fa:4a:fd:4f:c6:9f: 96:88:7e:40:d1:fa:c2:e8:a9:04:ec:3d:1a:e3:29:ef:3c:3f: ff:ca:ef:d6:06:10:6d:96:28:18:7e:67:ea:b0:72:6c:fc:93: 6b:4c:7f:30:57:39:8c:0b:ca:d2:b1:a3:86:79:b2:b3:49:0e: 3d:05:ea:fd:ef:78:69:0c:16:e8:bf:56:4b:cc:4c:73:73:d4: 76:6d:63:61:ae:73:c9:36:f5:82:18:90:1e:ef:bf:3a:b4:d3: 03:a5:bd:3a:c6:9f:e1:4f:00:38:be:27:57:37:0c:fa:3f:a7: e4:f1:22:f8:c2:f4:1c:f5:c1:6f:a5:68:0f:cf:8c:b7:89:f3: 0e:62:63:c6:0f:4a:d8:5e:34:dd:54:5f:90:8e:7c:73:f9:49: b5:f6:a4:36:1d:79:d2:9d:52:6c:eb:19:23:79:e7:91:fb:7c: aa:26:af:b9:c1:ba:38:e7:33:55:a2:88:4c:c3:5e:29:7d:2c: a8:32:9a:32:92:89:27:a9:26:67:93:71:44:47:55:55:8c:8f: b5:13:0b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j0z5n3w+0mIE9JFaSDTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMDE5MTMwMTEzWhcNMjUxMDIwMTMwMTEzWjAzMTEwLwYDVQQD Eyg2MWEyOWEwYzhhYTc1YTFhYjdkM2JlNTFiZDdkZTQzYTFlOThiYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0crFyoj86nhgs33TCpqfrzar0dNO IFPhwdryb0lGHcVR5UCfUobgiYVSa59++YPs8rQ/pcB3ThVHCK6R8d8s8tntQdtT IZABtRGzQ75e/qbcin/9U9HWjp351/UzmQnZCIo5i2Vb4UalOhAN6T21tnhzDfls m6X3Tq7jU6lDCCUOB43xs/d8m8OEI8jrqFpqd1B67F/QeI8l3/YQDn3J8nylJfd7 NXhFqAuKKDc/ewy0XUIZQ/08Y6XPQZ0svguHc8aPcO5PofjgJ8XUd+YKgLy7fnUc bF4pmgf603/a4uTAm7MmermCnNtlsK0xpX14x6hFtLLiGU79fuxLTMLEKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGimgyKp1oat9O+Ub195DoemLvaMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgX73JHu 6ZkozNZsNRV0er8hIupjbGnNOL3ft2LpZLn4bVmuYM5trGltoUOGeZzr+kr9T8af loh+QNH6wuipBOw9GuMp7zw//8rv1gYQbZYoGH5n6rBybPyTa0x/MFc5jAvK0rGj hnmys0kOPQXq/e94aQwW6L9WS8xMc3PUdm1jYa5zyTb1ghiQHu+/OrTTA6W9Osaf 4U8AOL4nVzcM+j+n5PEi+ML0HPXBb6VoD8+Mt4nzDmJjxg9K2F403VRfkI58c/lJ tfakNh150p1SbOsZI3nnkft8qiavucG6OOczVaKITMNeKX0sqDKaMpKJJ6kmZ5Nx REdVVYyPtRMLog== -----END CERTIFICATE-----Generated at Sun Oct 19 20:39:43 2025 by rpki-client