$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: w9CyN1aTLBO2eV13TYY0WitwXQIlg6CDVxd2FNrYVKY= Subject key identifier: 1B:C8:02:76:19:39:A6:66:9F:7D:A3:1E:0B:42:AC:55:B2:CC:E5:F5 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 0199FCFD7E0FFED5078D33A985C5800670EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 16F1 Signing time: Sun 19 Oct 2025 15:01:35 +0000 Manifest this update: Sun 19 Oct 2025 15:01:35 +0000 Manifest next update: Mon 20 Oct 2025 15:01:35 +0000 Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=) 2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=) 3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=) 4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=) 5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=) 6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=) 7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=) 8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=) 9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=) 10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=) 11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=) 12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=) 13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=) 14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=) 15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=) 16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=) 17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=) 18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=) 19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=) 20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=) 21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=) 22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=) 23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=) 24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: xNUY6vCtOFY1zBjpEOnyf3CJHVPTRyz3aRXrNWqwu10=) 25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=) 26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:7e:0f:fe:d5:07:8d:33:a9:85:c5:80:06:70:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Oct 19 15:01:35 2025 GMT Not After : Oct 20 15:01:35 2025 GMT Subject: CN=1bc802761939a6669f7da31e0b42ac55b2cce5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:6a:1e:3b:7b:fe:4d:50:83:25:45:56:2b: ea:b6:55:69:00:7a:ce:1e:c0:14:6b:d9:14:32:17: 0e:65:80:fe:75:2e:38:91:42:38:7f:34:f6:65:3a: 04:92:39:a1:b8:fb:4e:0b:cf:eb:8f:4b:f8:2f:24: 49:1a:de:04:38:f2:97:ac:90:60:73:fe:b5:18:fb: 82:4c:db:1b:ad:03:74:c7:be:f4:19:e5:ab:bb:7c: 59:e4:78:da:d2:1f:6a:54:b7:0d:df:b9:39:06:4d: 26:c6:e5:ea:14:6e:c8:93:59:e0:75:60:2b:43:0f: a7:89:9d:51:58:07:a2:9b:69:82:9c:fc:e0:87:3e: 78:05:7a:d7:95:d0:ae:e6:57:49:6e:d1:06:73:b3: 35:9b:a9:d2:94:67:dc:7a:ca:21:ec:a1:be:74:a3: 33:07:fa:3b:a5:b8:b6:2c:90:f2:91:44:01:99:9a: 9c:a5:42:c7:ab:c0:f2:a8:bc:1e:58:89:6d:4f:a1: a8:29:f4:8f:2e:ed:f6:4c:7c:93:35:b9:ab:e2:76: d5:5a:f8:59:18:58:dc:96:bc:8b:03:31:43:d9:ab: 3c:5e:69:80:e7:93:5d:bd:bd:03:34:fd:cc:23:10: 73:d9:59:f1:84:7b:12:0b:e8:a9:5e:2c:2f:e6:e2: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C8:02:76:19:39:A6:66:9F:7D:A3:1E:0B:42:AC:55:B2:CC:E5:F5 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:71:a6:c9:66:ea:19:93:e3:ae:44:82:31:8d:ab:33:ba:8b: b7:2b:1c:19:90:0f:24:f2:21:cc:be:d0:7d:8c:d3:15:ce:43: 68:27:91:43:98:ce:72:94:d7:b2:59:20:84:3b:bc:1d:a6:71: 3b:68:b3:83:3c:98:03:6c:19:31:1c:a0:37:59:35:6a:50:ee: a7:a0:d2:18:9b:04:02:0c:89:7b:fd:16:d3:3e:65:30:d3:6e: ce:e0:07:ba:01:8c:b3:e4:c4:79:7d:e0:22:3c:09:dd:1f:83: 75:12:16:cf:98:f5:15:a2:11:d2:a9:30:34:cf:c8:e6:8a:17: 14:80:a8:f3:77:b2:01:54:47:f5:fc:12:18:f7:ed:9d:20:d6: 0b:ab:60:98:e9:75:20:68:96:ad:8d:e5:ea:db:a7:bd:1b:22: 00:28:69:e8:09:ad:31:f9:1c:ab:56:7d:5b:52:89:bd:0d:60: 27:f9:bc:0d:ce:9d:d0:56:f4:0f:65:94:94:87:e5:90:d6:68: 97:2c:7d:cb:e6:6e:d5:81:dd:24:8e:3d:e7:1b:3b:a4:57:17: a7:ac:d8:2c:4f:b2:21:4b:1a:79:29:5a:a0:95:ad:10:7c:ca: 4b:54:4f:cb:9d:6a:d4:46:35:4b:56:b3:fd:8d:4c:2b:8c:3f: d8:c1:e6:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/X4P/tUHjTOphcWABnDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjUxMDE5MTUwMTM1WhcNMjUxMDIwMTUwMTM1WjAzMTEwLwYDVQQD EygxYmM4MDI3NjE5MzlhNjY2OWY3ZGEzMWUwYjQyYWM1NWIyY2NlNWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SBqHjt7/k1QgyVFVivqtlVpAHrO HsAUa9kUMhcOZYD+dS44kUI4fzT2ZToEkjmhuPtOC8/rj0v4LyRJGt4EOPKXrJBg c/61GPuCTNsbrQN0x770GeWru3xZ5Hja0h9qVLcN37k5Bk0mxuXqFG7Ik1ngdWAr Qw+niZ1RWAeim2mCnPzghz54BXrXldCu5ldJbtEGc7M1m6nSlGfcesoh7KG+dKMz B/o7pbi2LJDykUQBmZqcpULHq8DyqLweWIltT6GoKfSPLu32THyTNbmr4nbVWvhZ GFjclryLAzFD2as8XmmA55Ndvb0DNP3MIxBz2VnxhHsSC+ipXiwv5uIiswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvIAnYZOaZmn32jHgtCrFWyzOX1MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3GmyWbq GZPjrkSCMY2rM7qLtyscGZAPJPIhzL7QfYzTFc5DaCeRQ5jOcpTXslkghDu8HaZx O2izgzyYA2wZMRygN1k1alDup6DSGJsEAgyJe/0W0z5lMNNuzuAHugGMs+TEeX3g IjwJ3R+DdRIWz5j1FaIR0qkwNM/I5ooXFICo83eyAVRH9fwSGPftnSDWC6tgmOl1 IGiWrY3l6tunvRsiAChp6AmtMfkcq1Z9W1KJvQ1gJ/m8Dc6d0Fb0D2WUlIflkNZo lyx9y+Zu1YHdJI495xs7pFcXp6zYLE+yIUsaeSlaoJWtEHzKS1RPy51q1EY1S1az /Y1MK4w/2MHmkg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:06:22 2025 by rpki-client