$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json) Hash identifier: tiCZkUj8iyUYvsYC/esXOhAGW0imCLaVj2LsvL4Ctpw= Subject key identifier: A6:4A:57:74:7A:01:34:85:05:9E:2C:6D:09:D6:B7:D2:3A:F5:E0:83 Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 0199FD6AFF49094DBE8D1BCC143CE253D1C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft Manifest number: 1433 Signing time: Sun 19 Oct 2025 17:01:11 +0000 Manifest this update: Sun 19 Oct 2025 17:01:11 +0000 Manifest next update: Mon 20 Oct 2025 17:01:11 +0000 Files and hashes: 1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=) 2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: ZgECU/+BAKNLqCfTcAVs69MbNCNmWyqWGaZgAMOYFXo=) 3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=) 4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=) 5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=) 6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=) 7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=) 8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=) 9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=) 10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=) 11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=) 12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=) 13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=) 14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=) 15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=) 16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=) 17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=) 18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=) 19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=) 20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=) 21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=) 22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=) 23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=) 24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=) 25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6a:ff:49:09:4d:be:8d:1b:cc:14:3c:e2:53:d1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Oct 19 17:01:11 2025 GMT Not After : Oct 20 17:01:11 2025 GMT Subject: CN=a64a57747a013485059e2c6d09d6b7d23af5e083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:2c:59:4c:5f:87:e3:e4:15:59:1a:a9:e5: 52:09:55:2b:82:b6:43:34:16:da:89:1d:5b:19:4f: dc:cc:fc:d0:c7:75:13:8e:d2:bb:63:04:e0:46:d3: 62:61:1f:fe:13:db:5d:e7:0f:e3:17:d1:eb:e9:2d: 71:0c:d7:0e:cb:a3:2b:72:71:da:fd:37:87:da:85: aa:14:3f:7c:29:ae:89:bf:28:6d:f1:01:80:f4:79: 02:a7:3a:67:7a:ac:e3:06:3c:10:e4:f0:00:cf:46: 2e:50:ac:9b:63:52:55:59:11:69:7a:af:74:3d:e3: 57:aa:c1:70:2b:1d:56:d8:0b:90:7a:41:f3:18:5d: c1:2b:27:b2:88:b1:c1:51:46:4f:1d:95:6a:87:97: d3:36:d0:e7:87:ec:d7:4d:b3:dd:fd:70:6f:5a:49: b6:c7:99:a5:66:f4:2e:fe:bd:93:d2:b4:e7:a1:f3: ef:fd:88:42:53:8e:be:09:fd:fa:17:e8:d5:c7:74: e0:2e:cb:ba:0d:60:dd:9f:c4:95:f4:60:34:43:37: a4:01:02:3a:cf:ee:dd:dd:9f:e8:a2:e5:cd:9f:ea: d2:77:69:9a:92:68:96:46:f4:19:e4:07:d9:9f:27: c0:cc:3d:41:36:ce:49:4d:a9:ed:ef:37:04:be:cf: 20:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4A:57:74:7A:01:34:85:05:9E:2C:6D:09:D6:B7:D2:3A:F5:E0:83 X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1b:49:0a:75:bf:fa:69:1d:d7:82:5e:28:f6:89:bc:99:33: c3:63:38:2a:ab:83:4e:13:2e:e8:4d:ee:a2:d7:b6:bd:50:c2: 60:63:b8:e8:35:ce:63:3d:98:a3:b2:e5:d2:3f:ea:6c:98:b6: 23:9e:79:e5:75:e4:16:7b:e5:d8:bf:bd:aa:d6:84:6a:41:1c: cd:61:fb:fd:54:fc:5e:a2:5f:85:9b:59:ac:96:a1:4e:cd:31: 30:76:08:c7:b8:4b:2c:c4:c2:5f:61:f1:82:6a:59:01:2e:df: 93:4c:c8:bf:31:64:3b:e0:42:b1:e2:fc:c8:a9:89:bf:48:8e: 23:04:df:de:ec:02:37:df:d9:a8:98:fc:ba:28:43:7a:8d:37: b9:96:4a:a8:bc:46:48:74:a3:ea:38:7d:03:a6:1c:2a:ec:58: 18:73:b4:5a:27:84:6e:41:9b:73:7e:3e:83:53:76:29:e6:59: 50:5c:8b:33:8a:7b:8e:87:bc:c0:45:c3:7d:91:22:68:51:ef: ff:8b:48:45:58:2c:66:2f:f4:11:c8:56:98:3c:be:c8:4a:74: 71:d0:9f:57:d0:12:f7:80:e3:e0:26:53:47:67:40:a0:25:e2: 21:5d:b7:39:c8:a1:64:55:6e:46:5f:55:7a:c4:2f:e9:47:5b: fd:75:7f:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9av9JCU2+jRvMFDziU9HFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjUxMDE5MTcwMTExWhcNMjUxMDIwMTcwMTExWjAzMTEwLwYDVQQD EyhhNjRhNTc3NDdhMDEzNDg1MDU5ZTJjNmQwOWQ2YjdkMjNhZjVlMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeMsWUxfh+PkFVkaqeVSCVUrgrZD NBbaiR1bGU/czPzQx3UTjtK7YwTgRtNiYR/+E9td5w/jF9Hr6S1xDNcOy6MrcnHa /TeH2oWqFD98Ka6Jvyht8QGA9HkCpzpneqzjBjwQ5PAAz0YuUKybY1JVWRFpeq90 PeNXqsFwKx1W2AuQekHzGF3BKyeyiLHBUUZPHZVqh5fTNtDnh+zXTbPd/XBvWkm2 x5mlZvQu/r2T0rTnofPv/YhCU46+Cf36F+jVx3TgLsu6DWDdn8SV9GA0QzekAQI6 z+7d3Z/oouXNn+rSd2makmiWRvQZ5AfZnyfAzD1BNs5JTant7zcEvs8gSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZKV3R6ATSFBZ4sbQnWt9I69eCDMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBtJCnW/ +mkd14JeKPaJvJkzw2M4KquDThMu6E3uote2vVDCYGO46DXOYz2Yo7Ll0j/qbJi2 I5555XXkFnvl2L+9qtaEakEczWH7/VT8XqJfhZtZrJahTs0xMHYIx7hLLMTCX2Hx gmpZAS7fk0zIvzFkO+BCseL8yKmJv0iOIwTf3uwCN9/ZqJj8uihDeo03uZZKqLxG SHSj6jh9A6YcKuxYGHO0WieEbkGbc34+g1N2KeZZUFyLM4p7joe8wEXDfZEiaFHv /4tIRVgsZi/0EchWmDy+yEp0cdCfV9AS94Dj4CZTR2dAoCXiIV23OcihZFVuRl9V esQv6Udb/XV/ew== -----END CERTIFICATE-----Generated at Sun Oct 19 18:30:05 2025 by rpki-client