$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: XGUq2NiDDAe7B0P1/RZDx0oj4MsJ5o43Y04wY3se1Pg= Subject key identifier: E7:D3:42:E5:C1:63:97:0A:41:8F:F4:26:4D:71:11:1B:6C:EE:24:C7 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 0199FC8F84ECCC40989A8D6470A5D4D239CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 050D Signing time: Sun 19 Oct 2025 13:01:28 +0000 Manifest this update: Sun 19 Oct 2025 13:01:28 +0000 Manifest next update: Mon 20 Oct 2025 13:01:28 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: 8IdsfmUjR9kqW4qDCYTZ3E1LGhmqSVFJdoXOKBPNBso=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:84:ec:cc:40:98:9a:8d:64:70:a5:d4:d2:39:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Oct 19 13:01:28 2025 GMT Not After : Oct 20 13:01:28 2025 GMT Subject: CN=e7d342e5c163970a418ff4264d71111b6cee24c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:87:38:f9:21:81:16:9b:fb:08:bd:70:39: 0d:ef:cc:3a:c4:61:e0:5b:5b:f9:6f:4d:21:34:6f: aa:9c:ae:95:96:05:20:a4:3b:20:13:0f:08:b1:d9: cb:c3:dc:bb:a4:2d:d9:c9:02:6c:4a:30:7e:45:7e: 20:b2:31:87:d9:d1:ab:0d:95:a4:ab:62:65:05:41: e3:96:91:6c:ee:21:7e:02:eb:85:2b:56:1f:af:53: 80:d1:43:02:20:6f:39:f5:ea:c4:5f:01:a0:03:b5: b6:c4:f1:56:cb:61:d5:cc:39:64:db:0b:6e:b4:64: 1f:34:6d:12:84:05:34:d0:39:8e:84:27:e6:12:f9: 7a:77:77:91:fc:7d:1e:95:ab:4e:28:44:06:7b:c2: 1a:b3:ba:ee:4c:47:1f:34:f6:2d:85:96:6b:76:00: 6b:aa:ab:2c:88:62:1f:be:a0:3f:58:48:e3:c6:b5: 88:b5:37:a4:c5:39:33:bc:09:2d:df:0c:e5:3a:07: ec:a0:11:74:f5:ff:2d:78:24:f1:6c:a9:2a:8f:12: f9:dc:cb:ca:47:0f:28:cf:5c:7d:39:bd:0d:30:4a: 78:7a:2b:63:73:0f:7c:ea:84:64:c9:cc:ff:8e:c4: 42:58:69:41:fd:ad:08:75:90:0b:3d:de:97:46:53: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D3:42:E5:C1:63:97:0A:41:8F:F4:26:4D:71:11:1B:6C:EE:24:C7 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b7:e2:63:03:47:4c:c6:0e:e8:05:89:a0:8f:36:53:43:9c: 96:e1:4b:28:93:3d:8e:2d:bc:f8:85:ac:1a:de:e6:41:68:95: 19:b2:aa:73:9d:47:9b:0b:2d:c8:61:25:8c:42:54:23:d0:17: 41:56:ec:f6:5d:fa:5e:3a:f5:90:1c:80:08:1e:9a:ae:57:ff: b7:3e:b6:55:ee:75:6f:00:77:a2:51:79:29:e3:19:23:4e:59: 97:bc:9b:3f:a9:6b:41:99:5b:b0:92:a1:85:00:37:d8:f1:db: 6d:b4:e8:f4:4e:2d:ae:c3:01:7a:5e:2c:01:c5:1a:89:e4:de: 48:94:f1:aa:d8:8f:c1:0a:0a:94:5c:95:fd:78:b2:f1:ec:e7: 66:52:33:11:c8:8f:1b:75:9c:21:05:31:f8:e8:c8:6a:41:76: 29:df:da:c9:d7:f3:63:2d:af:86:f8:e3:b2:79:eb:62:53:16: de:2b:83:61:96:0b:a9:80:da:eb:a2:67:77:e8:f0:41:a8:a5: 05:90:f5:35:09:66:45:d6:ec:8a:54:2b:f3:38:7c:ca:6a:45: 65:23:e3:05:bf:ff:19:e6:82:9a:09:87:c0:0d:45:4e:9d:3d: 02:1a:2f:d8:f7:9f:88:c1:8b:14:8e:75:67:d8:0d:57:f4:aa: ef:1b:7c:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j4TszECYmo1kcKXU0jnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUxMDE5MTMwMTI4WhcNMjUxMDIwMTMwMTI4WjAzMTEwLwYDVQQD EyhlN2QzNDJlNWMxNjM5NzBhNDE4ZmY0MjY0ZDcxMTExYjZjZWUyNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyHOPkhgRab+wi9cDkN78w6xGHg W1v5b00hNG+qnK6VlgUgpDsgEw8IsdnLw9y7pC3ZyQJsSjB+RX4gsjGH2dGrDZWk q2JlBUHjlpFs7iF+AuuFK1Yfr1OA0UMCIG859erEXwGgA7W2xPFWy2HVzDlk2wtu tGQfNG0ShAU00DmOhCfmEvl6d3eR/H0elatOKEQGe8Ias7ruTEcfNPYthZZrdgBr qqssiGIfvqA/WEjjxrWItTekxTkzvAkt3wzlOgfsoBF09f8teCTxbKkqjxL53MvK Rw8oz1x9Ob0NMEp4eitjcw986oRkycz/jsRCWGlB/a0IdZALPd6XRlOynwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfTQuXBY5cKQY/0Jk1xERts7iTHMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrfiYwNH TMYO6AWJoI82U0OcluFLKJM9ji28+IWsGt7mQWiVGbKqc51HmwstyGEljEJUI9AX QVbs9l36Xjr1kByACB6arlf/tz62Ve51bwB3olF5KeMZI05Zl7ybP6lrQZlbsJKh hQA32PHbbbTo9E4trsMBel4sAcUaieTeSJTxqtiPwQoKlFyV/Xiy8eznZlIzEciP G3WcIQUx+OjIakF2Kd/aydfzYy2vhvjjsnnrYlMW3iuDYZYLqYDa66Jnd+jwQail BZD1NQlmRdbsilQr8zh8ympFZSPjBb//GeaCmgmHwA1FTp09Ahov2PefiMGLFI51 Z9gNV/Sq7xt82Q== -----END CERTIFICATE-----Generated at Sun Oct 19 15:11:53 2025 by rpki-client