$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: UvtpG2z1YpKzuRPQUUWV3iak6qRWFPab3xiFBSa3BbE= Subject key identifier: A8:C0:A7:B2:E1:5F:FD:8B:A4:A9:E8:80:51:32:AE:96:B1:30:00:0E Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 0199FC8F7DB3A0D6673EA68A9A3D6BE956F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 128B Signing time: Sun 19 Oct 2025 13:01:26 +0000 Manifest this update: Sun 19 Oct 2025 13:01:26 +0000 Manifest next update: Mon 20 Oct 2025 13:01:26 +0000 Files and hashes: 1: 2SQkaDFiykw7S_htqTdZsioPTwk.roa (hash: 0/kTMk+D78c5iSsKz/EIBR+DNPDmk0IqhFjX+lwI6LU=) 2: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=) 3: 45MvjfGKCC1KtPdc7nQX95sIMOQ.roa (hash: OJaP8IeT3Uy1A2hRxBoDBgRDgpbDvNEt1ZVBIoH1VAY=) 4: 7jwxCTrpuBYCzl_mE2RCtp0REXI.roa (hash: +ypxyRmQFEVXeIrygXjJlGbbYxoSAkj90Kr5Ppz5cVM=) 5: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=) 6: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: ZhObqhdkSUS/Ln4MtYgBbIQdu5nXfB6F8fX5qY5kb58=) 7: JS4HdBrbtnwjf3ioeu2kVfrsKWk.roa (hash: af+hY4hrX5r9rr7bdbLVSaWMR8FkV862x0g+pEnOaKA=) 8: NSYavHGFkjW9fPOW1IOQ-kAXpiw.roa (hash: bIlwmcqM0xR+NaQTXsekU/G4W1PV6OipwVLIIvkpte8=) 9: Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa (hash: M6uYkLbVdZzoxMrzslJAyf+dKNKxxdwwoY8rXjymTu4=) 10: Q2qnyLydoV_350r3ktyvCayeB4A.roa (hash: VKvgtQJ7GEIFvBeuyv+3v21yRGy73uTpFRdHzIJJWeo=) 11: UzvoNIBCTayYuI6U30KDrmerNuU.roa (hash: ER4WPs+jwzqBTn7Puvn1t7r63jTe9VQjgZr+2QHU1CA=) 12: bZqocWZwcU5ZaTTgVW1c4s9fiMo.roa (hash: V7YCD7e4GhCq4YTEJi9oA8hOwYBama0jJDytOGcYv1s=) 13: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=) 14: cdQEhr1O999um7MubPp-AySW3SU.roa (hash: kCWL/fzpDob5h7QESa50Y8FlUEupbCUO8I1kcI0W7jU=) 15: cyBS3fAo042cEWYq-ULKBfWmEYM.roa (hash: lGLWllBey91le8GZeS3K6F+EddIaYMAhM6BNqVcxruc=) 16: d2saFw16q2pF84_wTXbcc05opu8.roa (hash: 6T9K5GUb3CGy353ct1WBRUSg3/QBMCyAGbgccVGZCpE=) 17: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=) 18: fwVrtZ5ukpHJADRQ973fQLlwSq8.roa (hash: +fmmqMgZKKsqId3qofqToV4Cyb2Bc8ldGVtgwbDXlj8=) 19: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=) 20: zjSnJ16XlThMIiYCj6tPC8TJXio.roa (hash: 9Ul7kI7iMdV1TfeZfTiKReJpCqvEcbTxXI+TPRkPGyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:7d:b3:a0:d6:67:3e:a6:8a:9a:3d:6b:e9:56:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Oct 19 13:01:26 2025 GMT Not After : Oct 20 13:01:26 2025 GMT Subject: CN=a8c0a7b2e15ffd8ba4a9e8805132ae96b130000e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:ba:65:ee:0e:24:6b:08:47:cc:af:81:99: 80:6b:00:98:81:01:8f:92:32:6d:fc:5a:2b:fe:46: 73:dc:b2:49:c4:2b:47:16:aa:d1:5a:78:83:62:4e: a4:68:df:f9:e7:e5:b0:46:68:37:bb:8c:6b:99:b8: ce:48:6b:3a:3e:2f:a1:b8:42:9d:3f:33:d5:28:51: 2f:3b:15:12:8c:ea:d4:99:02:b9:f2:cc:ba:21:9d: 3d:cf:08:92:48:9c:38:14:80:9c:78:ca:c2:4e:2a: 97:20:52:7b:a6:6c:19:ab:f8:e4:cc:b7:43:cc:24: a0:6d:3f:5a:c5:a4:11:55:f2:1d:ff:83:b8:f5:ba: d8:f0:af:e1:a6:b6:9d:8b:c1:1e:4b:87:f1:8d:74: 0f:9c:70:cf:d3:4a:83:09:62:fd:17:10:7d:6b:aa: 97:83:1b:0c:5b:5d:73:25:f6:2e:d0:45:1a:bd:7a: 4c:67:17:1a:50:7e:79:a1:76:78:14:2f:e7:dc:a5: 93:31:9f:91:dc:15:38:40:bc:22:3c:c9:6b:bd:d7: 9f:46:27:91:fa:bf:12:2b:49:8c:e5:90:c4:81:83: d6:96:d9:62:33:f8:90:f1:3b:29:94:9a:fd:4a:9a: 74:8b:53:af:ae:53:55:64:87:12:4b:54:a5:99:c1: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C0:A7:B2:E1:5F:FD:8B:A4:A9:E8:80:51:32:AE:96:B1:30:00:0E X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:f4:1b:a5:94:4a:ce:17:7f:9e:da:b5:3b:ad:72:9e:90:06: dc:38:44:c0:59:38:0c:cc:b9:cb:85:a5:ae:81:5b:3c:7e:db: de:5d:87:aa:4d:da:bd:a2:92:ca:a3:b1:04:ab:72:85:7a:c7: 74:4f:26:3c:e0:32:18:0e:58:81:5c:d6:84:55:9b:7e:93:20: 8d:a7:94:4f:ce:7c:b8:12:f0:da:9d:72:03:a0:d3:2b:84:8f: 4d:de:5e:29:61:0e:3d:ce:a9:e4:2c:d3:8c:4f:78:6b:f7:93: 45:f0:69:39:52:e1:b6:b2:7c:cf:47:d4:9d:3b:02:8e:e1:07: e5:10:45:8a:5e:fa:98:90:85:fc:39:4d:74:ad:4d:21:a3:27: a8:ef:7e:17:ac:09:2d:00:48:b7:47:fb:79:3e:c8:a2:64:bb: 8a:1e:07:25:02:d5:6f:50:d5:5a:21:36:4f:ba:dc:f2:d4:87: 02:48:ce:31:bd:b0:32:39:ee:e0:27:d1:9c:17:18:0b:40:f3: d3:d5:1f:7f:48:db:0e:f5:11:51:c6:53:9f:21:3d:a2:39:21: 18:46:ac:fa:50:e9:07:0d:1d:f7:ea:6d:42:ec:36:5d:27:55: 86:75:9b:3c:f7:3d:42:a5:ce:1d:87:08:99:89:c5:a6:0c:73: 2e:95:ac:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j32zoNZnPqaKmj1r6VbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMDE5MTMwMTI2WhcNMjUxMDIwMTMwMTI2WjAzMTEwLwYDVQQD EyhhOGMwYTdiMmUxNWZmZDhiYTRhOWU4ODA1MTMyYWU5NmIxMzAwMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi26Ze4OJGsIR8yvgZmAawCYgQGP kjJt/For/kZz3LJJxCtHFqrRWniDYk6kaN/55+WwRmg3u4xrmbjOSGs6Pi+huEKd PzPVKFEvOxUSjOrUmQK58sy6IZ09zwiSSJw4FICceMrCTiqXIFJ7pmwZq/jkzLdD zCSgbT9axaQRVfId/4O49brY8K/hpradi8EeS4fxjXQPnHDP00qDCWL9FxB9a6qX gxsMW11zJfYu0EUavXpMZxcaUH55oXZ4FC/n3KWTMZ+R3BU4QLwiPMlrvdefRieR +r8SK0mM5ZDEgYPWltliM/iQ8TsplJr9Spp0i1OvrlNVZIcSS1SlmcGv6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjAp7LhX/2LpKnogFEyrpaxMAAOMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfQbpZRK zhd/ntq1O61ynpAG3DhEwFk4DMy5y4WlroFbPH7b3l2Hqk3avaKSyqOxBKtyhXrH dE8mPOAyGA5YgVzWhFWbfpMgjaeUT858uBLw2p1yA6DTK4SPTd5eKWEOPc6p5CzT jE94a/eTRfBpOVLhtrJ8z0fUnTsCjuEH5RBFil76mJCF/DlNdK1NIaMnqO9+F6wJ LQBIt0f7eT7IomS7ih4HJQLVb1DVWiE2T7rc8tSHAkjOMb2wMjnu4CfRnBcYC0Dz 09Uff0jbDvURUcZTnyE9ojkhGEas+lDpBw0d9+ptQuw2XSdVhnWbPPc9QqXOHYcI mYnFpgxzLpWsBQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:31:28 2025 by rpki-client