$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: SeAWXXas1UH8CtWdFZc3Q+C1/0gUj8gnqmAzsskVpe0= Subject key identifier: 4F:13:CB:0B:5F:41:5B:1D:F3:68:1F:37:51:57:90:55:21:2C:4F:B6 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019A00D9FDA8BBDB3E691ADC7F8F766E3F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 09EF Signing time: Mon 20 Oct 2025 09:01:17 +0000 Manifest this update: Mon 20 Oct 2025 09:01:17 +0000 Manifest next update: Tue 21 Oct 2025 09:01:17 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: W1ZMyD+n/ybWxiamvkjQ3MpmauLOfoPW1esLvjNR8wE=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: xSgK9fLOFfBtEQ1GwOtLlJ5fFSc.roa (hash: 21NNCvjDiYlOHMOd6bhzk9x3nNYhc0a1y7zhHVR1Jbg=) 18: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:d9:fd:a8:bb:db:3e:69:1a:dc:7f:8f:76:6e:3f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Oct 20 09:01:17 2025 GMT Not After : Oct 21 09:01:17 2025 GMT Subject: CN=4f13cb0b5f415b1df3681f3751579055212c4fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:c6:5a:05:54:a5:c6:32:35:61:45:14:57: 64:aa:ef:04:dd:17:e0:1f:e3:39:cf:16:3f:d1:d3: d5:20:a3:10:c9:e8:6f:50:34:59:b0:0b:f2:7e:4b: 76:94:61:55:3b:df:69:df:41:69:d7:6f:42:cd:16: cd:a4:fe:64:9e:51:91:86:31:0d:e0:82:80:6f:18: af:f0:12:48:d5:2b:4e:bf:73:1b:85:a6:fa:44:63: 56:46:f7:ba:b0:0f:89:a1:cb:91:8b:74:85:ae:85: 45:c0:90:82:19:38:30:82:4c:d6:5b:aa:4a:64:40: 2d:53:04:e8:73:ec:da:20:d0:33:a9:de:1d:22:50: ff:ec:48:65:de:0e:04:c8:b9:a8:ca:6b:3e:ed:14: 50:96:e0:78:fe:95:27:fb:eb:0d:2f:59:3d:8c:7e: 4f:5b:ec:fd:b3:5c:ee:3b:f7:2e:48:5f:37:c6:47: 2d:81:8e:9f:65:19:c9:a6:a8:19:2d:57:37:65:dc: 8d:04:e0:b1:6f:22:eb:dd:f0:3d:c9:ad:7a:4d:e5: a7:a5:52:b7:01:35:db:83:52:84:e7:3a:19:ed:fb: 13:73:75:90:03:5f:3e:b3:7a:78:ce:8c:2a:79:dc: 64:db:54:cb:de:df:66:df:9e:2d:4d:65:4b:46:8d: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:13:CB:0B:5F:41:5B:1D:F3:68:1F:37:51:57:90:55:21:2C:4F:B6 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:95:55:84:99:23:d8:19:cb:4a:eb:48:71:ff:bb:73:bd:9c: 31:f2:4c:73:c2:bd:be:5a:e7:dc:ae:72:a2:9a:54:91:b9:22: 05:2c:8e:b0:bd:f4:e0:c2:e9:b9:09:ac:9c:fd:fe:e7:31:00: 28:fc:f7:40:c1:7e:45:34:bc:fb:85:ea:c9:f4:05:dd:0e:7a: 96:f3:3f:af:87:58:3b:f5:e8:d8:3b:16:a6:51:5d:a5:fe:39: f0:44:dd:c5:94:05:3c:5e:e4:38:ac:e2:e1:f5:c4:15:89:e5: b8:c9:99:af:a4:cc:5b:7a:30:fb:ce:b6:6e:3d:cb:73:ce:91: c5:4d:ee:44:c0:bf:f5:5d:4a:2f:b1:bf:ca:4a:bd:2d:42:e5: 19:6d:a6:83:19:2d:f1:46:10:93:30:58:88:c8:c1:47:b5:96: 23:42:53:30:79:ce:68:72:e3:02:f0:80:d2:7c:79:f7:61:bb: 4b:b0:4d:f5:a7:b5:ac:d4:ef:39:70:c0:18:ec:1d:4f:5e:cf: 74:7d:c6:64:29:29:51:9a:de:9c:0a:d6:c2:1d:e0:4b:c4:64: d5:99:8b:38:45:94:29:d1:c0:f7:eb:4f:b3:79:c8:95:2c:dd: 55:e0:3f:59:e6:48:a8:60:c3:a0:21:2a:ce:5f:43:5a:22:22: 0d:5d:3a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoA2f2ou9s+aRrcf492bj94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUxMDIwMDkwMTE3WhcNMjUxMDIxMDkwMTE3WjAzMTEwLwYDVQQD Eyg0ZjEzY2IwYjVmNDE1YjFkZjM2ODFmMzc1MTU3OTA1NTIxMmM0ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRnGWgVUpcYyNWFFFFdkqu8E3Rfg H+M5zxY/0dPVIKMQyehvUDRZsAvyfkt2lGFVO99p30Fp129CzRbNpP5knlGRhjEN 4IKAbxiv8BJI1StOv3Mbhab6RGNWRve6sA+JocuRi3SFroVFwJCCGTgwgkzWW6pK ZEAtUwToc+zaINAzqd4dIlD/7Ehl3g4EyLmoyms+7RRQluB4/pUn++sNL1k9jH5P W+z9s1zuO/cuSF83xkctgY6fZRnJpqgZLVc3ZdyNBOCxbyLr3fA9ya16TeWnpVK3 ATXbg1KE5zoZ7fsTc3WQA18+s3p4zowqedxk21TL3t9m354tTWVLRo0NFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8TywtfQVsd82gfN1FXkFUhLE+2MB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpVVhJkj 2BnLSutIcf+7c72cMfJMc8K9vlrn3K5yoppUkbkiBSyOsL304MLpuQmsnP3+5zEA KPz3QMF+RTS8+4XqyfQF3Q56lvM/r4dYO/Xo2DsWplFdpf458ETdxZQFPF7kOKzi 4fXEFYnluMmZr6TMW3ow+862bj3Lc86RxU3uRMC/9V1KL7G/ykq9LULlGW2mgxkt 8UYQkzBYiMjBR7WWI0JTMHnOaHLjAvCA0nx592G7S7BN9ae1rNTvOXDAGOwdT17P dH3GZCkpUZrenArWwh3gS8Rk1ZmLOEWUKdHA9+tPs3nIlSzdVeA/WeZIqGDDoCEq zl9DWiIiDV06dw== -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:24 2025 by rpki-client