$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: mHLEKFPZcF8yusnGndBt33u5N5TFluQkcEEKnP7OGQc= Subject key identifier: D6:6E:93:31:E5:CF:6F:C2:11:70:D9:7B:FA:D4:5A:D6:A6:1E:EE:EE Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 0199FD34129AE0F21BB4FA4C78BA5CCB1BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0AB9 Signing time: Sun 19 Oct 2025 16:01:12 +0000 Manifest this update: Sun 19 Oct 2025 16:01:12 +0000 Manifest next update: Mon 20 Oct 2025 16:01:12 +0000 Files and hashes: 1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=) 2: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=) 3: 3_vCPXMxLInxH4KSM9i76JRc3wI.roa (hash: KQnR/Rw1eBymAhNe+aNyzbKPfZJwc7vaoArCKIxxfkQ=) 4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=) 5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=) 6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=) 7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=) 8: CIRls3stTp9BOjHce35suioz25Y.crl (hash: bedbCM9nWsrlXgz0k8vTuS6AC9DquU/MAlrva9/I85k=) 9: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=) 10: E41iAo-YhWo417aVu3UFCXW5I0U.roa (hash: FPYq7/mqqnQsvVNvJMzlmLszXu5+IG0MN3SMAMVazpQ=) 11: FmMgP7ha8iX2FfDMIFk9KP0qkts.roa (hash: Ro1xRk0724SJQafKJQzEcvMjFfbM36IbDNwvGX/5JdQ=) 12: Gg2fBgym98lzpgGOw525Psta200.roa (hash: ITzizygNHqGF0ltRY0tg7IiIoexFvZtpbGrKT1PyRcQ=) 13: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=) 14: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=) 15: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=) 16: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=) 17: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (hash: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=) 18: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=) 19: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=) 20: Uj8njsPYdgRZYjZt_ospB351jos.roa (hash: LYqRDwSI7zwNyZiE9YMTNwUElSgWURvGf1f5eOoJElY=) 21: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=) 22: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=) 23: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=) 24: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=) 25: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=) 26: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=) 27: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:12:9a:e0:f2:1b:b4:fa:4c:78:ba:5c:cb:1b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Oct 19 16:01:12 2025 GMT Not After : Oct 20 16:01:12 2025 GMT Subject: CN=d66e9331e5cf6fc21170d97bfad45ad6a61eeeee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a4:16:d1:8b:0a:b8:ab:f2:a4:c9:5b:42:04: b9:94:cf:9c:7c:06:60:d7:67:21:75:8a:69:a8:48: 70:d0:1d:14:1c:14:9a:c8:85:65:21:89:03:6a:9b: d2:05:5c:ab:47:6f:2e:85:d6:98:a4:04:75:07:a3: 8d:0b:b0:4f:ae:6f:0e:31:93:27:56:e5:16:ca:2c: ee:8c:1f:2e:d1:e9:64:51:65:0a:b6:b2:77:58:0e: 4f:f0:72:32:3c:bb:96:2b:af:bd:7a:8c:f3:4a:3c: 9a:30:4a:34:28:cd:c0:23:10:ae:2d:64:f6:d1:1c: 80:ab:8f:ff:12:51:58:56:79:02:43:10:25:7c:84: 17:54:4d:fe:69:11:86:90:f6:7e:a0:f4:35:f2:4b: 57:3f:87:f6:d8:37:77:48:78:9d:4c:59:02:73:17: 3e:34:13:4c:a9:40:03:14:1b:af:6d:78:02:69:ce: 74:39:a2:ab:4b:a8:f9:f9:53:4f:7e:9d:54:f6:3d: 86:a9:77:95:95:52:1c:50:7f:1e:ca:b0:34:fb:8d: 88:48:d6:96:e0:bd:52:5a:17:1b:fb:8f:9e:a5:3c: f2:fc:54:0c:9c:0f:91:f2:07:96:44:89:ab:9b:4f: 9f:8a:8c:74:20:5c:6e:7d:e5:93:d8:34:fe:4f:2d: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6E:93:31:E5:CF:6F:C2:11:70:D9:7B:FA:D4:5A:D6:A6:1E:EE:EE X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9d:30:c9:95:04:bb:64:89:1d:a4:22:ad:b4:f6:35:35:20: 5a:3b:47:de:5b:08:41:e3:fa:3b:31:53:22:e2:fe:66:b8:3d: 64:ff:d9:12:89:f4:43:d6:a6:8d:67:aa:c4:1e:94:cc:23:da: 02:54:49:89:93:30:20:6a:19:af:a7:f6:73:66:6f:a9:52:24: bc:01:9a:5f:c3:60:51:42:96:76:c8:5c:e3:0f:71:f2:5c:a8: 9a:e2:7a:d5:77:f2:06:e3:f6:2d:f5:96:9b:18:5a:69:88:d7: 9d:9d:42:ae:46:92:38:7f:80:7b:a5:aa:aa:61:1f:61:44:fd: 1a:1c:a8:9c:a8:9b:0f:9c:53:92:0b:6d:87:b6:2a:0b:46:da: 0a:06:2f:48:4f:5c:18:28:16:7b:52:de:05:dd:91:de:2e:6e: 0e:c7:56:61:59:6c:36:0f:7f:9c:57:87:c2:87:ab:ce:c1:f0: 85:b6:82:8c:4a:09:30:97:2b:f6:c4:9b:d9:a1:fc:ca:36:0b: 01:f0:6f:9f:ad:c6:a0:11:88:17:f7:05:61:0e:e5:f2:60:a8: 00:86:45:f9:3b:44:b4:60:1a:16:5a:35:44:3b:80:c7:2b:8b: 57:c1:0d:6d:91:75:86:55:06:8b:b5:8d:12:a6:e9:55:8b:14: e5:e1:20:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NBKa4PIbtPpMeLpcyxvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMDE5MTYwMTEyWhcNMjUxMDIwMTYwMTEyWjAzMTEwLwYDVQQD EyhkNjZlOTMzMWU1Y2Y2ZmMyMTE3MGQ5N2JmYWQ0NWFkNmE2MWVlZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+aQW0YsKuKvypMlbQgS5lM+cfAZg 12chdYppqEhw0B0UHBSayIVlIYkDapvSBVyrR28uhdaYpAR1B6ONC7BPrm8OMZMn VuUWyizujB8u0elkUWUKtrJ3WA5P8HIyPLuWK6+9eozzSjyaMEo0KM3AIxCuLWT2 0RyAq4//ElFYVnkCQxAlfIQXVE3+aRGGkPZ+oPQ18ktXP4f22Dd3SHidTFkCcxc+ NBNMqUADFBuvbXgCac50OaKrS6j5+VNPfp1U9j2GqXeVlVIcUH8eyrA0+42ISNaW 4L1SWhcb+4+epTzy/FQMnA+R8geWRImrm0+fiox0IFxufeWT2DT+Ty3jEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZukzHlz2/CEXDZe/rUWtamHu7uMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ0wyZUE u2SJHaQirbT2NTUgWjtH3lsIQeP6OzFTIuL+Zrg9ZP/ZEon0Q9amjWeqxB6UzCPa AlRJiZMwIGoZr6f2c2ZvqVIkvAGaX8NgUUKWdshc4w9x8lyomuJ61XfyBuP2LfWW mxhaaYjXnZ1CrkaSOH+Ae6WqqmEfYUT9GhyonKibD5xTkgtth7YqC0baCgYvSE9c GCgWe1LeBd2R3i5uDsdWYVlsNg9/nFeHwoerzsHwhbaCjEoJMJcr9sSb2aH8yjYL AfBvn63GoBGIF/cFYQ7l8mCoAIZF+TtEtGAaFlo1RDuAxyuLV8ENbZF1hlUGi7WN EqbpVYsU5eEg3w== -----END CERTIFICATE-----Generated at Sun Oct 19 17:33:26 2025 by rpki-client