$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: PPsOYbyht+dil2ceLLkRP6g7OZCu0aX28T583ofQRGA= Subject key identifier: 6F:7B:3F:3C:5D:83:53:A7:B9:93:00:6C:AA:33:77:7B:26:96:18:B8 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 0199FC8FB0176A6BB6AD031164EA2BB3EF25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0D4F Signing time: Sun 19 Oct 2025 13:01:39 +0000 Manifest this update: Sun 19 Oct 2025 13:01:39 +0000 Manifest next update: Mon 20 Oct 2025 13:01:39 +0000 Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 5: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: d+IFWzowieQm3QZf7r1uhmY7UiFLxEuqkMidJnewYBA=) 6: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 7: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 8: H2vFxn04c_UElBs7HiPTVRvXT9g.roa (hash: muCBnxins6P5wLUKuHQztma0de4wIlDkYgQ/aFtysgk=) 9: RzhyO8qxAJ77cqxCfeziTDtNyv8.roa (hash: BGITpHqwxRqG1jhwrkApRiadMapDZZ0OyB7EAhclGyM=) 10: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 11: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 12: a55ksyXQIpivD8Gjg-hOowj4guI.roa (hash: QSYDUfnNAcf2/9VpaYdVd8L7gvJcLWio5hJOW44x6Xs=) 13: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 14: dMFcY3_aVR4kfHxbP5vv3qBabqw.roa (hash: JpbCDAMO8fWIjj6WoFdRVVLkHKZ826knAkONoBSK6TY=) 15: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 16: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 17: gJaJMZFu2Xun5us_hvLQ2sX0jTI.roa (hash: z619KX2EhgVMmsrswd0EgoK+J2Yavf87i9QdahrdS84=) 18: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 19: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 20: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 21: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 22: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 23: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 24: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) 25: v0SLn4Gc7KackReJSVE0I4Wcz38.roa (hash: BYq+5DCkWzZd64Eu8y+wlUPzr+kNsQ+QL28hTm32XqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:b0:17:6a:6b:b6:ad:03:11:64:ea:2b:b3:ef:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Oct 19 13:01:39 2025 GMT Not After : Oct 20 13:01:39 2025 GMT Subject: CN=6f7b3f3c5d8353a7b993006caa33777b269618b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:93:3b:14:7d:41:57:22:0a:26:3f:41:66: 77:7a:23:d7:11:32:bb:d7:16:10:1a:14:af:de:94: 39:c4:fc:34:2a:03:ea:7f:5e:a6:11:72:f9:d7:5e: ad:22:1c:d6:31:46:3b:bd:3f:70:78:4b:79:66:80: c5:6f:4c:02:da:a6:2c:66:e6:c5:18:8a:bd:f3:4d: 01:ac:45:54:54:03:46:ea:97:f7:71:c2:9a:51:58: a9:ef:a4:04:d5:77:63:62:99:e3:cf:af:e3:51:2e: bf:6c:08:2f:7d:d0:42:36:c8:a9:c0:a1:dd:64:c1: af:41:4c:66:ba:91:59:2c:63:9f:fc:08:86:1f:79: b2:92:f0:df:04:da:b4:d0:bd:8b:0d:81:8f:20:4c: 14:c2:ff:40:88:0f:90:90:5b:d5:20:38:06:fc:0b: 62:89:5b:9a:4f:ab:09:a5:b8:5d:eb:b7:c9:5b:7d: 16:de:4d:75:c5:38:40:be:54:25:98:5c:f6:0d:99: 88:8f:59:b3:8b:b8:3b:02:d0:ac:ca:af:1b:23:60: 4e:0a:b3:2e:ed:1f:5c:22:1a:7c:3a:45:99:f0:95: bd:c6:34:0c:12:d5:fa:0f:4e:a6:3a:01:e7:ab:95: fc:5a:2a:83:cf:43:9a:d7:f0:57:52:e3:ce:2b:83: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7B:3F:3C:5D:83:53:A7:B9:93:00:6C:AA:33:77:7B:26:96:18:B8 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ee:50:32:41:d9:b1:98:e9:50:61:07:b3:25:5b:53:3e:72: 3d:91:6a:34:cd:cc:3a:ca:ae:57:65:34:56:27:84:5e:a6:36: 2e:ac:36:85:76:92:71:7c:16:36:3c:0e:f3:76:a6:eb:ab:61: d2:00:8e:86:a6:ce:df:77:ba:6a:d6:ae:ca:34:79:21:12:eb: ee:cc:70:c3:76:8a:52:71:06:fd:cc:39:6d:ae:38:b7:6a:51: 76:cf:dc:d2:eb:70:49:30:e6:bc:7f:b9:26:f8:f1:a4:93:b2: 45:89:9a:90:ea:97:b5:37:05:b7:e5:6d:73:c3:6d:19:7b:c4: f6:8c:fe:a8:b0:d6:bf:dd:ca:62:df:36:53:b1:04:21:5c:c2: 3f:39:cc:e8:24:66:f9:52:15:07:ae:d6:21:df:35:cc:0e:25: 1d:93:44:af:7e:85:cc:66:7e:d0:a6:33:ca:17:87:92:a3:f3: 76:a1:a6:0f:38:ad:ca:99:99:e5:1e:41:a1:3c:f4:56:f2:ec: e2:3c:f2:b6:b2:b9:99:9b:c1:95:af:9b:3c:e2:b5:47:e2:39: 6e:5e:84:e9:23:e7:30:db:a3:33:04:1d:6c:05:82:79:51:95: b9:c8:5e:df:b3:18:a1:86:cc:76:1f:24:aa:6a:55:16:eb:9c: c9:db:9d:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j7AXamu2rQMRZOors+8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMDE5MTMwMTM5WhcNMjUxMDIwMTMwMTM5WjAzMTEwLwYDVQQD Eyg2ZjdiM2YzYzVkODM1M2E3Yjk5MzAwNmNhYTMzNzc3YjI2OTYxOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrqTOxR9QVciCiY/QWZ3eiPXETK7 1xYQGhSv3pQ5xPw0KgPqf16mEXL5116tIhzWMUY7vT9weEt5ZoDFb0wC2qYsZubF GIq9800BrEVUVANG6pf3ccKaUVip76QE1XdjYpnjz6/jUS6/bAgvfdBCNsipwKHd ZMGvQUxmupFZLGOf/AiGH3mykvDfBNq00L2LDYGPIEwUwv9AiA+QkFvVIDgG/Ati iVuaT6sJpbhd67fJW30W3k11xThAvlQlmFz2DZmIj1mzi7g7AtCsyq8bI2BOCrMu 7R9cIhp8OkWZ8JW9xjQMEtX6D06mOgHnq5X8WiqDz0Oa1/BXUuPOK4O2AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG97Pzxdg1OnuZMAbKozd3smlhi4MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXe5QMkHZ sZjpUGEHsyVbUz5yPZFqNM3MOsquV2U0VieEXqY2Lqw2hXaScXwWNjwO83am66th 0gCOhqbO33e6atauyjR5IRLr7sxww3aKUnEG/cw5ba44t2pRds/c0utwSTDmvH+5 JvjxpJOyRYmakOqXtTcFt+Vtc8NtGXvE9oz+qLDWv93KYt82U7EEIVzCPznM6CRm +VIVB67WId81zA4lHZNEr36FzGZ+0KYzyheHkqPzdqGmDzitypmZ5R5BoTz0VvLs 4jzytrK5mZvBla+bPOK1R+I5bl6E6SPnMNujMwQdbAWCeVGVuche37MYoYbMdh8k qmpVFuucydudWQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:07:48 2025 by rpki-client