$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: XpFLLgdLrXb/LYbQiwUglYiHg8QJ0090rDV3IS8/tQs= Subject key identifier: 9F:32:CE:88:6E:A4:AE:07:FE:61:51:7D:A8:C2:96:F6:81:7E:9B:FB Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 0199FAD7F507BAABC9A761D418D32449E3FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 16E7 Signing time: Sun 19 Oct 2025 05:01:20 +0000 Manifest this update: Sun 19 Oct 2025 05:01:20 +0000 Manifest next update: Mon 20 Oct 2025 05:01:20 +0000 Files and hashes: 1: 6QFd9IdVpCQmItNCPxRFCrp9nKQ.roa (hash: bGmgyU+MRUomnlmMA4u5BiNJcGHkzxHgj+I3pHeo+G0=) 2: 7dsX1_uj3CI2OL3ZR-YysHvbwJk.roa (hash: /UJ2jaPIsh9LABzhutyiOz6tqO3pebNJplX7fsJ15q4=) 3: 9x0cjGr7YULmSfzI3dcYG9w_06I.roa (hash: nZkDj/8oM/37FYrz8May17dhFjnT3DNeVQBgn2oaZf0=) 4: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (hash: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=) 5: GNcbaUuI19-wbs7GLcE1lajDv-k.roa (hash: JkYHzX+XVOiUvpRyMV+wrBz6xce9nKA7hPNlot5aQZ4=) 6: PX0DpkBl9yg1gQzNf2fXaFsswv8.roa (hash: fegY3SzHduBrH8eO5Wo9IcX0cjRfR9p14sX7mhpiZ8U=) 7: SHXtPV4kgZiSMLrfaQNfttE3YEg.roa (hash: vCULHOU0pm0NUpWsnrVNz86sxtEUOZpw65hpej3MIxs=) 8: TEHPMPoZisl9vOiLWV_tB3SmWaI.roa (hash: /q8DB82i9XChVszHx+lvwBEwJCoXbxAKUBSDji6t9Ek=) 9: VAwOmXBu3_hb-94kaLmxAE_i7pI.roa (hash: IZvIAsZ3NFMGzz4y4fdnumBCA9Bj3yp20yIaQmXg3Fo=) 10: YTPIeKA6vN8bBsCmmqzk6w3bpmU.roa (hash: Mo6Tf23Yod2O05O4042OzPfIL4jXB8/HVLdp8MJUwtk=) 11: YrZdH5pglRx66b5p9JGRz_SyZts.roa (hash: mhtrEJveZQw15THeEWaXosd9inWt6asg5tmlg7bP8KA=) 12: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: BbYj5QGQutsDSpMJ5qTieUzoztnROgcLa8i4twzrAHY=) 13: k34T0BOxtuolFGK7D9gfPSVqjyg.roa (hash: zRGBGpZvNTWiV1L4FpZxoKUzkhe3V2xnMgLC1QF7Yns=) 14: p9yFoBCMLxcx2kyLnzIglbUZt8Q.roa (hash: fbxtSkZt340A9KV6V1MZj2gG37RK0K88NQoLtoEEGa0=) 15: rm3UHUFplAChrToLa297UrTCIuo.roa (hash: HHiyje/4Xaq3L0LGhP0VYLYtVuy3S8HWVlC7cJ7pBgA=) 16: yKPpEfXuR3hgVnHrW-SosrWvchI.roa (hash: JRlziFyrSVh96Xmb3+ZOE6HFj6jm/zMUIwmBAAhdoq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:d7:f5:07:ba:ab:c9:a7:61:d4:18:d3:24:49:e3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Oct 19 05:01:20 2025 GMT Not After : Oct 20 05:01:20 2025 GMT Subject: CN=9f32ce886ea4ae07fe61517da8c296f6817e9bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:0e:35:25:88:d7:31:9e:ae:e4:6c:d6:4b: 6c:70:61:9f:4d:6e:f8:69:9d:6f:fb:25:8c:2c:2a: 7d:d9:d2:bf:d9:b7:47:1b:2d:1d:bf:bc:15:e5:ac: 3c:65:a9:d6:1d:e7:c6:1c:a3:e6:cc:14:d5:e2:fa: 8f:a4:85:87:42:7e:5b:92:fb:a0:e6:2e:29:c6:a8: 06:16:5c:cc:8d:e4:85:83:f4:b3:62:12:02:15:cc: 23:1c:5e:51:03:d3:db:eb:15:b4:8d:20:3d:ec:57: 72:5d:70:ae:30:e2:38:c4:b9:25:9c:9b:aa:21:ee: 7f:18:74:1c:69:85:68:4a:4b:ad:38:2e:53:ae:db: d4:54:b7:6b:5b:17:f1:50:38:94:2b:c9:48:67:7b: b4:ab:10:c0:bc:62:f7:a6:b9:2f:ea:68:56:46:e0: 65:03:1e:fe:df:08:76:b2:12:a1:17:0f:3d:9e:cd: 0e:63:8a:54:72:29:1d:68:f4:64:7b:19:65:3a:55: 11:7b:35:50:91:0e:8f:e0:d3:8f:da:48:6f:76:08: 75:05:0d:eb:53:69:22:a0:0b:20:5d:68:92:d9:a2: ba:e1:91:96:cc:7a:b5:b0:a8:22:9c:80:94:91:8a: 43:14:c8:47:7f:2b:d4:b5:a2:a5:5a:60:87:5a:23: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:32:CE:88:6E:A4:AE:07:FE:61:51:7D:A8:C2:96:F6:81:7E:9B:FB X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:93:40:ce:2c:d7:3b:f5:e3:92:3b:2c:14:52:96:70:ff:48: d3:e8:0e:1b:e9:89:a3:b0:b3:46:ab:e3:22:77:39:e6:61:6e: c1:b8:91:d9:75:08:5d:31:90:09:46:d0:97:b0:8d:97:a5:83: d2:e6:3d:bc:a9:6f:65:a7:74:1a:b0:c6:4f:3b:3f:c0:f7:2c: 87:76:8e:14:ad:23:f6:b0:b7:64:50:76:5a:ac:d0:e1:4c:ce: 59:60:19:14:87:d4:c2:bd:ba:37:dd:85:db:fd:7e:0d:47:e3: e9:c8:61:81:a7:26:6c:06:e6:51:56:60:8f:3c:d6:1b:63:79: 41:b1:0b:15:73:d7:e4:7c:55:84:8a:0e:d2:d5:d0:05:fb:c3: c5:60:9a:fa:5b:9c:71:9e:26:fc:a5:29:72:15:e1:f6:64:f5: c7:13:e3:79:fa:1a:2b:63:32:14:c5:f4:0e:0f:a4:54:15:f3: 0d:de:48:e9:8b:ac:23:08:09:f5:fb:19:57:5b:57:ee:2a:e2: 2d:d8:1e:6e:3b:d4:ba:c3:81:c4:95:b1:d3:41:21:05:44:19: b5:4c:79:00:83:98:06:bf:3f:fe:29:2d:27:c9:43:55:0b:09: a4:4f:a0:27:44:d6:38:d7:7c:1f:a2:f4:26:d4:d8:ca:fe:30: 56:0e:45:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn61/UHuqvJp2HUGNMkSeP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjUxMDE5MDUwMTIwWhcNMjUxMDIwMDUwMTIwWjAzMTEwLwYDVQQD Eyg5ZjMyY2U4ODZlYTRhZTA3ZmU2MTUxN2RhOGMyOTZmNjgxN2U5YmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI8ONSWI1zGeruRs1ktscGGfTW74 aZ1v+yWMLCp92dK/2bdHGy0dv7wV5aw8ZanWHefGHKPmzBTV4vqPpIWHQn5bkvug 5i4pxqgGFlzMjeSFg/SzYhICFcwjHF5RA9Pb6xW0jSA97FdyXXCuMOI4xLklnJuq Ie5/GHQcaYVoSkutOC5TrtvUVLdrWxfxUDiUK8lIZ3u0qxDAvGL3prkv6mhWRuBl Ax7+3wh2shKhFw89ns0OY4pUcikdaPRkexllOlURezVQkQ6P4NOP2khvdgh1BQ3r U2kioAsgXWiS2aK64ZGWzHq1sKginICUkYpDFMhHfyvUtaKlWmCHWiPJkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8yzohupK4H/mFRfajClvaBfpv7MB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5NAzizX O/XjkjssFFKWcP9I0+gOG+mJo7CzRqvjInc55mFuwbiR2XUIXTGQCUbQl7CNl6WD 0uY9vKlvZad0GrDGTzs/wPcsh3aOFK0j9rC3ZFB2WqzQ4UzOWWAZFIfUwr26N92F 2/1+DUfj6chhgacmbAbmUVZgjzzWG2N5QbELFXPX5HxVhIoO0tXQBfvDxWCa+luc cZ4m/KUpchXh9mT1xxPjefoaK2MyFMX0Dg+kVBXzDd5I6YusIwgJ9fsZV1tX7iri LdgebjvUusOBxJWx00EhBUQZtUx5AIOYBr8//iktJ8lDVQsJpE+gJ0TWONd8H6L0 JtTYyv4wVg5FgQ== -----END CERTIFICATE-----Generated at Sun Oct 19 13:07:25 2025 by rpki-client