$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: UN+qlzPxe+dyj+uE80zsnAMC9NGtbftqI7gwgApl4Fo= Subject key identifier: 3C:19:68:12:0B:2D:7D:93:AC:B0:64:F7:59:2F:83:F2:05:E9:B1:F3 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 0199FBEBED71EC6CE4534C0FEEAE2573A95E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 0E5D Signing time: Sun 19 Oct 2025 10:02:46 +0000 Manifest this update: Sun 19 Oct 2025 10:02:46 +0000 Manifest next update: Mon 20 Oct 2025 10:02:46 +0000 Files and hashes: 1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=) 2: 4vux7awz3E36tFDHIazA7-jkwq4.roa (hash: wB2NxL5iO7Z/8XbFdlxXumlf3zZuQEhQW8UuOP6HgoY=) 3: 6sCOzHkQ-muwDrkw5pOHoUfXNBk.roa (hash: 7FwYeaXkfgVbCXFiUge2n1VEhJxyS2ClQiqjC+nu4kY=) 4: COvg2MpN_oheD_zalSdxr-q7gqg.roa (hash: TNZBHXn/rFK8B0FSzij1q86AM+2q2tMbA3NjJuonYNE=) 5: F0suYji7pyda6Pgm_yX79A_qaTE.roa (hash: XG7UorX0bbwleiT45k2X3jyWBSNu43oe/Y2K8gmt6hs=) 6: Jr5Ueq6kDwQSf4OCEjyXWyv4DJM.roa (hash: MSHb++tsJ50vTtX0YOcOx6674SSj9sRa1aeYtEOqqp0=) 7: OM9sp83gq8JLzkuTWdaZtycRFbg.roa (hash: 6zlXFie+AwK2F8W6WJu8AHXI3dxTSD6r6hI+SWEgdaY=) 8: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=) 9: REOoP6Y8-wsgon83LmwFQJMZALc.roa (hash: A4lQGU6MhGm6OdwWVbHE5BG8fr09wGeJM7NnUUCETR0=) 10: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=) 11: UD3JFe8qzAAYF0MGl23bzSXmgIM.roa (hash: 2f6gHnM4fMoGAoqUuW0tbuaDgq4ItUGQxvo9tHrTTOY=) 12: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: ml2UHxuO3AGcE9xp/zeqQJX+lP2ZMuoV7FE0qi1mm6c=) 13: b7gCLwwMzjZjbVS32gLXIFWwbUk.roa (hash: D2c9HayWxHwINiQBbZzPgdJmQPa3/hDkJ/z9pkwYKxE=) 14: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=) 15: fK9EW2umljzRQTYND4AfmE35XCA.roa (hash: 9sqICXJrZxXGs4HmQ6by183Nbrj675bqVnqLvT99NXw=) 16: fzvvk5bzP10N2OQNounBbEQbNsE.roa (hash: RKFAzkj15rOGrQMxeuqq2cZQnvwnI2ibWU1wR/fhdrE=) 17: od1ADzeqOn5bVC20zBnBeUVSNKw.roa (hash: VVSLdqnSFTyWUJsI+ZA3ZZGNebOqLFzR1C2rEUolb/0=) 18: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=) 19: z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa (hash: RiWOkvqrTFK0brETv9UpsQbvKc3QbmQ0OasKxFLAePE=) 20: zLs5eIQla7JvuOsDIVylY_LlW9Y.roa (hash: EWXm1Aj94qBaUfmc96DwvRvWK77ZtmJaOaVeqhh7Bw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:ed:71:ec:6c:e4:53:4c:0f:ee:ae:25:73:a9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Oct 19 10:02:46 2025 GMT Not After : Oct 20 10:02:46 2025 GMT Subject: CN=3c1968120b2d7d93acb064f7592f83f205e9b1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:48:3d:45:92:6d:e6:03:47:b9:c6:22:ee: b7:f6:e0:66:63:1b:da:e6:29:20:7c:ac:b9:4b:a9: 89:c2:b4:9e:7e:05:dd:b5:49:5e:0d:0e:53:9e:33: 8e:27:73:45:39:d3:2c:9c:c9:63:e2:b0:1c:b0:56: 9a:03:93:55:e4:6c:f1:31:f4:03:3e:bf:f0:9a:9b: b7:5d:06:be:b9:69:d8:f3:d1:7e:9e:ae:22:1c:36: 73:89:95:44:26:c6:c4:d8:22:ba:26:a0:f8:2f:6d: 9e:b9:5a:4b:7a:6b:4e:e7:82:36:b7:46:10:57:a2: e7:d4:c5:7e:eb:4f:b8:fa:01:5c:80:0b:50:4a:fb: ec:0f:19:1b:03:65:ea:44:51:5c:da:ed:66:60:55: 9c:89:37:9f:80:e7:0c:36:70:59:66:26:db:39:fe: 22:ce:4b:63:42:e2:4f:1b:d6:b8:53:45:3d:3d:25: c8:d0:7c:e9:c6:be:c8:52:37:a0:a7:0a:ca:33:fe: 8e:af:88:63:69:2f:73:46:3e:d3:16:c8:0f:1e:94: 9d:93:d3:db:12:e5:41:cb:3f:ba:4c:f8:34:26:0d: fa:17:df:65:b8:58:96:5f:22:69:6a:ca:9b:a8:cb: 59:06:d8:5b:93:90:04:63:7a:dd:99:d7:a4:40:44: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:19:68:12:0B:2D:7D:93:AC:B0:64:F7:59:2F:83:F2:05:E9:B1:F3 X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:68:c4:7c:a8:56:27:02:a4:8a:e8:57:6a:9a:6a:e7:dc:c4: 47:ed:76:b3:09:0f:54:5b:c5:46:1d:24:97:48:09:d5:30:0d: 25:d6:88:95:20:01:c3:70:97:f8:93:61:a6:91:80:27:c8:e3: 34:d8:d0:67:c8:e5:a8:f0:0b:16:6c:31:63:c5:98:43:71:a2: 37:17:36:01:25:6f:af:89:e2:a9:8e:34:b9:13:01:61:ad:a7: 48:4a:63:96:32:59:5e:e0:c9:0b:96:86:e5:74:6e:60:1a:7e: 5e:66:1c:d4:12:f1:99:57:dd:17:21:11:02:08:08:e7:7e:90: ff:09:4a:21:87:33:78:03:dc:bd:0b:82:e7:f6:bc:7a:72:07: 6d:6e:52:ce:1d:08:0d:09:fd:9f:8d:6d:a2:22:81:58:ea:1e: 31:b5:bf:e2:35:0f:99:fa:2f:0e:46:d8:8b:c4:7e:5b:92:20: f5:46:29:9d:f4:5c:38:a4:bf:99:f9:af:4f:6c:a5:91:fb:0d: 70:b7:71:b8:f1:a8:42:3e:e6:0a:b1:57:0b:6d:2e:2e:69:88: 50:9a:28:08:58:e4:99:66:e0:14:9a:ae:bb:54:cc:8d:81:0e: 75:ee:12:19:da:c7:87:38:88:a5:98:2d:bb:08:4a:65:e4:91: 63:03:d7:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76+1x7GzkU0wP7q4lc6leMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjUxMDE5MTAwMjQ2WhcNMjUxMDIwMTAwMjQ2WjAzMTEwLwYDVQQD EygzYzE5NjgxMjBiMmQ3ZDkzYWNiMDY0Zjc1OTJmODNmMjA1ZTliMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5ZIPUWSbeYDR7nGIu639uBmYxva 5ikgfKy5S6mJwrSefgXdtUleDQ5TnjOOJ3NFOdMsnMlj4rAcsFaaA5NV5GzxMfQD Pr/wmpu3XQa+uWnY89F+nq4iHDZziZVEJsbE2CK6JqD4L22euVpLemtO54I2t0YQ V6Ln1MV+60+4+gFcgAtQSvvsDxkbA2XqRFFc2u1mYFWciTefgOcMNnBZZibbOf4i zktjQuJPG9a4U0U9PSXI0Hzpxr7IUjegpwrKM/6Or4hjaS9zRj7TFsgPHpSdk9Pb EuVByz+6TPg0Jg36F99luFiWXyJpasqbqMtZBthbk5AEY3rdmdekQERsAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwZaBILLX2TrLBk91kvg/IF6bHzMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmjEfKhW JwKkiuhXappq59zER+12swkPVFvFRh0kl0gJ1TANJdaIlSABw3CX+JNhppGAJ8jj NNjQZ8jlqPALFmwxY8WYQ3GiNxc2ASVvr4niqY40uRMBYa2nSEpjljJZXuDJC5aG 5XRuYBp+XmYc1BLxmVfdFyERAggI536Q/wlKIYczeAPcvQuC5/a8enIHbW5Szh0I DQn9n41toiKBWOoeMbW/4jUPmfovDkbYi8R+W5Ig9UYpnfRcOKS/mfmvT2ylkfsN cLdxuPGoQj7mCrFXC20uLmmIUJooCFjkmWbgFJquu1TMjYEOde4SGdrHhziIpZgt uwhKZeSRYwPXbg== -----END CERTIFICATE-----Generated at Sun Oct 19 12:53:59 2025 by rpki-client