$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json) Hash identifier: 1oNZ8w4Llars5QlW83X6cSmoZ6ZbhWOVh1OCLdinE38= Subject key identifier: 6C:DD:95:35:50:35:4D:59:AC:3B:38:66:8E:E0:46:A6:28:E4:65:36 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 0199FC21BD17B056D187C43C2CAE22F72695 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft Manifest number: 17FE Signing time: Sun 19 Oct 2025 11:01:33 +0000 Manifest this update: Sun 19 Oct 2025 11:01:33 +0000 Manifest next update: Mon 20 Oct 2025 11:01:33 +0000 Files and hashes: 1: 1eUzZitDZ013U4KoMXhLsZt-Ouw.roa (hash: onauJHUcj3/Gk42IQtCwNxPA1GwGcTPdZF4tzNU5Cic=) 2: 3eUT08I9fAP3Rh0UE9FbfxsG1bc.roa (hash: akr8fvq3b1MRJAZxmdxssOux5X/sXZanMRkztgAfzHg=) 3: 6kvBNM7QxzqNFUQY6UJAUSlEXG0.roa (hash: VzytZI3MZIGD76NTvtSVMrgwhYYU4KZfB6J50PMrkLQ=) 4: 7vYSmlk2u5zvZg_3ArmbDEY_sNU.roa (hash: Jq4Qzcnido1Bc85YICom1I+PBuMze7LAU9Wcp1OqdNY=) 5: 9CecUJWAhyUbD-JEeW3t7Q_bT3I.roa (hash: Ql1G0HHXMA7dM1rPg1JGzT0qhMxhyvoFIN+xbPIAbQE=) 6: 9TOpmOFT85FoIQt7VW00tnNSDyc.roa (hash: SCLGJPJrvLPHM3t4jGt50TpAdXlieT/PBKVM3GuTOz8=) 7: D9kReuUfnqK0y7nk-I74tRESYYU.roa (hash: onEFa0+ErZ1aSjQk8E05b4+s3hg4ZO35purvDEgyF2w=) 8: F4LyibxUyKDWiTWokbR8Nu9dwFg.roa (hash: ls3OOX8CUo2Fe8GCCqRqasL5CwSJNwzKwm1rIE9s2yA=) 9: GAOT9zYxLw8oZDIwUIGywpBcjB4.roa (hash: hUanzkdOKXITITs1YgDbKjXXABKxTMzchE87QAQ0bYE=) 10: GS2XVRqZpeDdiCx3T0QMEG4okfQ.roa (hash: c+r+fHHe/APmANIkQRbs62jauEl4PzEDrWx2I+B9cis=) 11: GeTD2FnRC1JSiACi7Zc6xwpLCFA.roa (hash: VeVaUKTcdEDW2fRzvPABtIyMQZZZ9rNn6xJNVY7+2r0=) 12: GvXRVawHzzCi7pgsF39SYGKOL1c.roa (hash: IOKiIV1qdEfGlMmS/WoO8wBdPAZPaBqF8Ff8rokjp5c=) 13: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: mZId1UobY6t+qP4qKvfPVTYg15AyYTF8gedh2I3ri3U=) 14: KKuykAsgSlfU2_ah3gPApjpa_bY.roa (hash: lDZxYhBz6e/2Gw3mx1uSU5ra67aA2s9x9ASpcPzvb6k=) 15: Md7YZ-d1Y1XheM9ry7B9sgz4YA4.roa (hash: Ih78eioWDLIJh2FdRhV0xY7L6/wFxYgEtTJFDLMZDFU=) 16: NHulc4Xr5UTDZcaKywtBQBKjze4.roa (hash: XJgO5TSUWtITNdkmTiFR6yAsuz/yfG1PVcms5HB/rmg=) 17: SI6JcMkAdXeahj7NGt32DCzk_N4.roa (hash: XmnPzPSkO2n35usGEIRF1Qz4ke4WyZ//abuJ7KDgxxQ=) 18: SbU6Wu3VYL_xJUdthJTMBSanghY.roa (hash: 0SfBRTqaFb3y7K9XYOO4Yq/M+ASPHTLlHQOS0a7mCG8=) 19: TthjPRR5wXxsEh-6VCqYJXzgbKE.roa (hash: qNNifR39ahZ3yfEWA6+o5w3ku4jFU0k6pJdFlQXCAdc=) 20: Vbp_L2hdFxTdfzdKLSX_zbLl_mk.roa (hash: 4m7gesb3gkf55hVL1cOVKzNKguAUApHfmA6sJrKWwxA=) 21: W7QzaER1vR-s3Pj4KyrMCvE0NVo.roa (hash: ZgPuCeX9vl95FC5nGpWcD3MQhmHO62QrHuHCGcZ3dQ0=) 22: WRheQN0amA9-_VCQME57u4bK-ks.roa (hash: blzydWxPl2ahI62ziLjMaHt088mTMKIJq9ZUkNAzqD0=) 23: YZm_xLtmsH08Bas2THq1RxLz81g.roa (hash: qHMBbTPBGSfjxU8aJsAB/XiYXwHHASUN+b5Hn+g/xts=) 24: _mea20OFuYFsi2iTbTW6kjzayQ8.roa (hash: 15vxvAMXVj8o1NZa+nAjbC1U25nrqGTHLYeckcnvDkE=) 25: bjGyoAnqbJlTY8yxoW8Vw9QTKXY.roa (hash: KkR9uPlQKsAZ2pDuHous5MwgFIvneEVZmAg7v37TsdA=) 26: ghdkEXOYieGGhOcxGRo9LY6w5LY.roa (hash: 4cdu+XE7YUzkOZIE2VvcRY1Ie1MDvn7w+dAFcHrze/w=) 27: mj2OAmJUi5jIu6OzIZj_chzGMRs.roa (hash: SEcfnRqzOGjQd0DDejfCGeWITrOOWxcKkDUAEkUlPOU=) 28: oGAN-qdYZCv1jnbn30aPOHF3XnY.roa (hash: AwnPvaCiq2S1Iw7Y9tew2bDgRzQqA5x8pF/iVdnfXyw=) 29: p45g5foq91zKggpm9xOru9V5Ta8.roa (hash: aescxVeG95+vLWeERAq4yBUOFPEiqWqdLL4rR3/2YL0=) 30: rGkstG6DmG4B7cdYh3EO2voHOpA.roa (hash: SmsIhLLPmjYgcUx7ha4qQmd2o5KZk8x1FvvtQ8LvAQs=) 31: sPN4MQOyS-s_riyCy93fzpeT-34.roa (hash: yENIXfYPwcHSIXCDZ9TP6nlOKTHnb7yHcks9QDKcNxs=) 32: sbm57hbO9DMhZVoyKG3SdA-duFk.roa (hash: 6anRwGUA22JIE2yI5cX9sKlVcBQWgTcUOS+5xTEbTcw=) 33: uFxKkTJ2FS-YadWkkiFDxhg46zw.roa (hash: CKurhe6gxcartqAcpNhLJ0w752vEmApcJaVpSiuG5Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:bd:17:b0:56:d1:87:c4:3c:2c:ae:22:f7:26:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Oct 19 11:01:33 2025 GMT Not After : Oct 20 11:01:33 2025 GMT Subject: CN=6cdd953550354d59ac3b38668ee046a628e46536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5c:c2:95:af:9b:28:c4:ea:ff:fa:6b:cb:4e: 21:ef:70:62:36:10:ff:f2:09:8b:8e:9b:58:ad:bb: 8e:13:eb:d0:1d:1d:a0:e9:38:d5:a1:8c:8f:96:72: e5:ae:e5:1e:c3:c1:7c:60:77:16:2a:40:a8:4c:5e: 14:cf:c2:11:38:52:c6:64:c5:41:24:a4:b7:e4:42: e6:d3:a9:d7:17:bd:57:c6:13:ae:e9:f1:04:14:0e: 82:58:26:fc:27:69:1c:f2:b1:7b:98:ae:98:dc:67: b0:69:23:1c:c0:db:39:3e:04:cb:a9:02:89:79:ea: 2a:c2:a6:e4:64:59:e4:22:ea:0d:7c:b9:15:bd:fa: bb:33:f5:8e:ad:5c:51:ba:fb:32:10:0c:eb:aa:35: fe:a6:80:7d:0f:61:d3:f8:49:e7:b9:70:d9:9c:3d: 77:9e:e2:ae:52:9f:90:93:a6:b3:5e:4e:d0:42:80: 0e:a1:2e:86:38:02:0f:5d:f6:2b:e4:f5:bb:7e:10: b6:7a:80:40:aa:24:15:17:73:79:ee:bd:39:f0:49: c4:fc:2c:4a:86:cc:fa:94:c1:99:03:ba:f3:4b:b5: 69:e9:49:c8:07:99:3b:51:04:39:5b:ea:cf:de:3e: c5:8d:61:8e:b7:03:f2:f3:3e:c3:00:7c:29:cf:19: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DD:95:35:50:35:4D:59:AC:3B:38:66:8E:E0:46:A6:28:E4:65:36 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:60:41:6b:0d:82:c8:67:e8:d8:47:89:a5:8f:de:1f:92:35: 4e:b4:15:74:37:9f:9d:bc:59:f8:bd:2b:58:df:d1:38:84:00: 5f:44:c2:84:b6:b8:1e:38:bb:a9:23:ad:12:c3:43:9b:60:ae: b8:ee:35:18:ef:92:2b:0b:b3:cc:77:20:e1:fe:ee:aa:02:f4: 65:b5:31:1c:e4:5a:5a:59:c6:e8:ab:0b:90:b1:38:78:ab:da: a8:6f:29:21:58:12:81:f9:af:be:17:ee:04:1d:d2:1c:5e:af: 16:22:33:10:47:8b:b5:a4:f9:2d:dc:4b:0c:e2:c6:33:82:9c: c0:05:50:4c:b2:3c:ce:4c:c6:16:38:6e:63:ab:24:b1:8e:92: 1f:b3:0e:7c:15:45:1f:1b:29:15:9b:44:e1:3a:50:50:ef:b2: f8:7f:50:ce:1b:0e:7f:c0:74:5d:b6:8c:92:45:d6:73:00:56: 7f:63:f8:53:60:2e:a9:f4:ea:cc:07:34:f9:a8:cb:29:64:89: d8:5e:8d:3e:1e:78:49:71:01:34:12:be:14:c5:e7:83:67:b0: 6d:05:fa:85:a2:16:38:05:e1:31:45:ef:3e:25:a6:a9:e3:af: 82:7d:cd:45:23:b0:ac:55:74:11:76:cb:4c:e0:a1:f8:cf:66: 43:ad:f8:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8Ib0XsFbRh8Q8LK4i9yaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjUxMDE5MTEwMTMzWhcNMjUxMDIwMTEwMTMzWjAzMTEwLwYDVQQD Eyg2Y2RkOTUzNTUwMzU0ZDU5YWMzYjM4NjY4ZWUwNDZhNjI4ZTQ2NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VzCla+bKMTq//pry04h73BiNhD/ 8gmLjptYrbuOE+vQHR2g6TjVoYyPlnLlruUew8F8YHcWKkCoTF4Uz8IROFLGZMVB JKS35ELm06nXF71XxhOu6fEEFA6CWCb8J2kc8rF7mK6Y3GewaSMcwNs5PgTLqQKJ eeoqwqbkZFnkIuoNfLkVvfq7M/WOrVxRuvsyEAzrqjX+poB9D2HT+EnnuXDZnD13 nuKuUp+Qk6azXk7QQoAOoS6GOAIPXfYr5PW7fhC2eoBAqiQVF3N57r058EnE/CxK hsz6lMGZA7rzS7Vp6UnIB5k7UQQ5W+rP3j7FjWGOtwPy8z7DAHwpzxmebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzdlTVQNU1ZrDs4Zo7gRqYo5GU2MB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemBBaw2C yGfo2EeJpY/eH5I1TrQVdDefnbxZ+L0rWN/ROIQAX0TChLa4Hji7qSOtEsNDm2Cu uO41GO+SKwuzzHcg4f7uqgL0ZbUxHORaWlnG6KsLkLE4eKvaqG8pIVgSgfmvvhfu BB3SHF6vFiIzEEeLtaT5LdxLDOLGM4KcwAVQTLI8zkzGFjhuY6sksY6SH7MOfBVF HxspFZtE4TpQUO+y+H9QzhsOf8B0XbaMkkXWcwBWf2P4U2AuqfTqzAc0+ajLKWSJ 2F6NPh54SXEBNBK+FMXng2ewbQX6haIWOAXhMUXvPiWmqeOvgn3NRSOwrFV0EXbL TOCh+M9mQ634mg== -----END CERTIFICATE-----Generated at Sun Oct 19 15:34:25 2025 by rpki-client