$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: PGgxb2TDwSZCUgJ2ESPHGZBfK12o0PVnvFjcRA84m00= Subject key identifier: 27:07:FA:58:C6:5C:DA:C9:12:1D:F7:2F:A8:5C:D4:3E:6F:AA:86:72 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 0199FB0F3C6ABBB340C86D752D9C97666ACA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 16FA Signing time: Sun 19 Oct 2025 06:01:43 +0000 Manifest this update: Sun 19 Oct 2025 06:01:43 +0000 Manifest next update: Mon 20 Oct 2025 06:01:43 +0000 Files and hashes: 1: 0Oc2gUlOBhHggQCKLFtd_Q9SZu8.roa (hash: lO8VRv7zTZ1lZGexXwpCSSefCLh4/ylUfznYotZ/r9I=) 2: 1-SnnIDOhH63HQ_N0BxypNJP3QjU.roa (hash: fAjpmK6Zca137o7vGKPycBeoqRjl3sX6zuEiOW/w6J8=) 3: 1-tVuMhvJHoeYNSWvwIs4Uj-ZhRk.roa (hash: ZcAfnmmPqdN3AkoVqXCV/iL8CT5WscJ/XlK/uMPt5lg=) 4: 1yKKrsNupGDzzD03jZOpe8iPhUA.roa (hash: HrCCQdsLhhK0Dd1/JhgsMNYCYEDcKrntK3e2NJtO0xE=) 5: 64sC994hi2WYh6eTSxEzaxlZ1_8.roa (hash: B08XbDrWOA66KC5S+jrPQzf/aaibB9EmnAg/mlaAA/4=) 6: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (hash: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=) 7: 8fRQ2gaaSUyxlPfMmZU6YlBuF9s.roa (hash: J9iYhZ57NpzmVPmwg60w1m9TXW93kheuWUSOq5fqcNo=) 8: CYNZ0RAHrT9vV8_0mrfX5LM1kug.roa (hash: O/PKWyYrv2+2Dwkphq4C7HezWG7bAEi2rS0D+m+yIdU=) 9: MhqcPUVWdGpPrfIWk_ee5vpXfV4.roa (hash: VZyy53zNRKBJnQR8hOjgwk1ZMB+3U3h7IQWl1MMyJAE=) 10: OnRHsiqDeR9lPOPphyyOmOlqHJI.roa (hash: sc+Pmya8TqVV8sQvDFxWsBcLjxza8djqPlBaIMjD3rA=) 11: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (hash: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=) 12: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (hash: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=) 13: a-yIKeqgoYQNBR0ZqftsK2VKwtA.roa (hash: rYqhW3CVRIKIDuB7VC8t0ykZxEcqYyXyUHcCODKusRw=) 14: aEX6iGvtmMCBLbcN3D9lR9wWfYs.roa (hash: ck3g/sMwdLbMyNkBAAhpjxk0gLfl6oyVxwY3SE1wY/I=) 15: clP1LLso4z020v4QpmTmPRbZSto.roa (hash: lQLaEJcBPi63juWNagsHVyBgAJjdQuoynWou1IAm/GM=) 16: cvexNa_0mj6FW8KZpLGAFQIE4OA.roa (hash: iCleYEjTV16uifIQzD0T3cEabw9bGQHX0EZMLPEVxN4=) 17: e6KXF5wF0vO-qqTzdKeyh2Ean8Y.roa (hash: KHUWWv5iYnIrkVVVgtcwtIxqcrf8XOGEsuNQcxfs8gw=) 18: iX51NeJFLA8hZbYydiWCSJNdBac.roa (hash: feK/rKksTFQbgNdFYUDfTjFuIeyOIK8QXCIqWjoXBaI=) 19: l5nptPnNKKQFhoiS91lJWqnWlyE.roa (hash: e570cnA3CxKqJo/gWfnmYUg3TNwae9HIQvRpHl8vuuY=) 20: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (hash: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=) 21: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (hash: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=) 22: mclNf4bSFt9zruWTpd4m4MEyVzM.roa (hash: XlAEFr1TWS3BT/lafylN5Pl3NVyaBtZCZ/ZvLEzRc/k=) 23: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (hash: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=) 24: piCyct0NVy-piTUDW9-m-zFaGCY.roa (hash: vC+LbNogTxwCzmTJZpmElrpfct/lmLrelfVwT361cKc=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: jnJkNdIHg8wO1NWFoywXmq4bnmxwBYZv40VNk1AjPdw=) 26: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (hash: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0f:3c:6a:bb:b3:40:c8:6d:75:2d:9c:97:66:6a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Oct 19 06:01:43 2025 GMT Not After : Oct 20 06:01:43 2025 GMT Subject: CN=2707fa58c65cdac9121df72fa85cd43e6faa8672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:c8:af:8d:a8:ee:ea:e4:d4:62:6a:f6:2c: 45:bd:5b:e9:c0:67:9b:d8:6e:b7:d3:d5:56:a0:68: 62:02:8a:5d:67:cc:70:1f:f4:72:7c:54:7f:30:d3: b8:dd:e9:f5:2e:f0:c8:66:50:99:06:0a:2d:eb:20: d1:6e:7d:15:76:a9:f5:9e:f3:b0:81:a2:ef:7b:a2: 27:e6:25:5a:bb:b3:18:58:81:2f:57:83:90:a3:07: 98:8f:85:1d:ba:30:27:0b:0c:a3:15:9b:28:33:f3: c0:07:69:69:e5:36:6b:14:ec:c2:de:e7:be:0d:f9: bd:88:2b:c3:24:29:00:97:22:5b:2c:db:6e:ed:fd: c5:c3:bf:50:d5:18:e6:fc:39:c1:7d:27:40:2f:69: 5c:74:75:af:75:80:8d:bf:d6:97:23:b4:6c:99:15: 38:ab:56:ec:df:89:7a:81:1b:0d:83:de:99:35:f0: 2a:47:ec:98:3f:e0:44:68:5f:c3:86:7d:df:48:23: 14:9b:9d:15:75:5a:71:98:a8:dd:66:bd:6f:83:83: 71:2f:20:00:3a:60:b8:67:6e:51:0c:8f:8d:40:fe: 5b:f4:65:16:57:fe:99:e7:e0:55:64:0b:81:0d:06: 57:99:cc:5b:ba:35:93:dc:b2:ce:9e:85:24:78:c9: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:07:FA:58:C6:5C:DA:C9:12:1D:F7:2F:A8:5C:D4:3E:6F:AA:86:72 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:01:28:b5:32:dc:83:df:ef:b2:c6:af:4e:a1:b6:a6:3c:58: f4:75:da:45:0d:1d:77:e2:59:e6:c8:ac:f7:54:7a:6a:71:b3: dd:d4:3d:e5:13:25:a9:26:56:9e:dd:5f:99:bb:07:4f:eb:54: b5:fa:b4:96:f1:f7:a1:77:74:b3:bc:59:ba:66:e5:d7:46:27: 41:28:5e:34:33:26:b2:37:9d:7d:44:a0:3d:5b:5c:29:60:70: 0c:53:5a:fa:83:b1:e8:73:15:bb:ef:f2:df:a4:76:15:33:52: c9:18:e3:30:f0:2f:cc:ce:bc:2d:93:9e:62:56:2c:00:1c:fc: 37:d5:e2:d3:83:26:fc:c5:66:8d:29:0d:5a:ed:33:89:c8:2f: 68:a8:d3:b4:06:a3:cf:98:97:33:e7:32:0e:37:1a:ea:59:64: c3:a7:8f:38:e6:96:81:08:4e:f4:ff:95:53:21:d9:02:c2:c3: 8d:04:b0:e6:52:95:43:7b:5b:ec:93:ca:4b:b0:b9:5f:13:3e: 29:29:26:16:5a:0e:e6:a4:26:08:fa:1e:73:b6:5b:32:46:d7: f4:36:e3:24:52:2d:44:33:62:0e:6e:fe:c4:4e:da:8d:14:bc: 15:d7:79:f9:10:b9:68:30:4b:95:3f:84:f7:c3:0d:72:04:be: 1d:e1:28:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7Dzxqu7NAyG11LZyXZmrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjUxMDE5MDYwMTQzWhcNMjUxMDIwMDYwMTQzWjAzMTEwLwYDVQQD EygyNzA3ZmE1OGM2NWNkYWM5MTIxZGY3MmZhODVjZDQzZTZmYWE4NjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8jIr42o7urk1GJq9ixFvVvpwGeb 2G6309VWoGhiAopdZ8xwH/RyfFR/MNO43en1LvDIZlCZBgot6yDRbn0Vdqn1nvOw gaLve6In5iVau7MYWIEvV4OQoweYj4UdujAnCwyjFZsoM/PAB2lp5TZrFOzC3ue+ Dfm9iCvDJCkAlyJbLNtu7f3Fw79Q1Rjm/DnBfSdAL2lcdHWvdYCNv9aXI7RsmRU4 q1bs34l6gRsNg96ZNfAqR+yYP+BEaF/Dhn3fSCMUm50VdVpxmKjdZr1vg4NxLyAA OmC4Z25RDI+NQP5b9GUWV/6Z5+BVZAuBDQZXmcxbujWT3LLOnoUkeMnnbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcH+ljGXNrJEh33L6hc1D5vqoZyMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAEotTLc g9/vssavTqG2pjxY9HXaRQ0dd+JZ5sis91R6anGz3dQ95RMlqSZWnt1fmbsHT+tU tfq0lvH3oXd0s7xZumbl10YnQSheNDMmsjedfUSgPVtcKWBwDFNa+oOx6HMVu+/y 36R2FTNSyRjjMPAvzM68LZOeYlYsABz8N9Xi04Mm/MVmjSkNWu0zicgvaKjTtAaj z5iXM+cyDjca6llkw6ePOOaWgQhO9P+VUyHZAsLDjQSw5lKVQ3tb7JPKS7C5XxM+ KSkmFloO5qQmCPoec7ZbMkbX9DbjJFItRDNiDm7+xE7ajRS8Fdd5+RC5aDBLlT+E 98MNcgS+HeEoDw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:37:42 2025 by rpki-client