$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: UqL4WyfWImTB4Z1GyHF4selD0e3w/IKI4P85mCFVfFE= Subject key identifier: 1E:70:DF:91:90:08:D6:72:F8:1E:A6:A8:B4:63:63:04:8B:EA:51:DD Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 0199FD3433D65F344A2D081558EC4B2C907C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 0F65 Signing time: Sun 19 Oct 2025 16:01:20 +0000 Manifest this update: Sun 19 Oct 2025 16:01:20 +0000 Manifest next update: Mon 20 Oct 2025 16:01:20 +0000 Files and hashes: 1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=) 2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=) 3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=) 4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=) 5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=) 6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=) 7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=) 8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=) 9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=) 10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=) 11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=) 12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=) 13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=) 14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=) 15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=) 16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=) 17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=) 18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=) 19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=) 20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=) 21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=) 22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=) 23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=) 24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=) 25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=) 26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=) 27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=) 28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=) 29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: 9yEEVeVqag/9l4M0j4aszmmexqOTH0rJEoQG7nd3Md4=) 30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=) 31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=) 32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=) 33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=) 34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=) 35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=) 36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:33:d6:5f:34:4a:2d:08:15:58:ec:4b:2c:90:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Oct 19 16:01:20 2025 GMT Not After : Oct 20 16:01:20 2025 GMT Subject: CN=1e70df919008d672f81ea6a8b46363048bea51dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:61:e9:c1:e9:d8:8c:54:19:40:e5:d7:91: 62:b4:da:f9:e9:7c:3b:9d:e6:6c:de:96:8b:93:a7: fd:77:a3:35:89:05:92:f0:dc:78:2e:ce:ff:df:e2: c6:de:5b:82:ca:39:d8:fc:02:84:63:d3:03:b3:e6: 7d:ef:24:9d:3d:53:b9:77:e0:db:f1:49:32:d2:ab: 35:5d:8d:91:11:61:30:8d:c5:72:d4:8e:90:9b:5a: c7:73:02:47:b8:d7:b5:22:e2:d1:29:72:72:c7:6a: 6a:3b:c9:70:a6:7d:30:45:bc:d1:6c:b0:e8:31:a8: 42:94:6a:af:6d:35:4f:6f:d2:09:d7:e5:fd:97:d8: 80:8f:98:3a:ce:95:ba:e8:a3:0d:0d:42:99:ff:22: ff:f1:bf:98:67:54:68:db:f9:14:99:ae:eb:af:81: 4c:26:28:b8:f7:5e:bd:f9:2a:19:7a:1d:9f:20:e4: 66:d1:b4:e8:8d:45:1d:e6:30:93:1d:af:39:d0:2b: 2c:19:c5:8c:1a:9b:77:b9:56:bd:d3:3a:cb:c7:f0: 82:07:5e:ca:b6:29:4a:a4:1c:bb:53:d5:0e:77:8d: ee:32:e7:1a:70:17:e4:ef:13:8b:cb:67:63:ac:58: d8:dd:b2:59:9f:f2:ac:5b:de:29:64:38:a5:79:fd: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:70:DF:91:90:08:D6:72:F8:1E:A6:A8:B4:63:63:04:8B:EA:51:DD X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a4:b8:8a:64:62:23:6b:63:87:f5:0d:aa:bb:1f:0b:b4:30: 62:9b:b2:c7:b9:24:f5:c9:c1:4f:3e:26:b1:34:7d:90:5d:32: ae:49:57:8d:61:90:b2:1a:13:a8:2d:e6:e0:c8:db:75:db:c5: b2:93:64:04:d3:c8:9b:26:2e:de:02:43:e0:bc:62:c3:a5:7a: f4:eb:a2:5f:7b:89:82:0e:60:7c:24:be:18:18:85:2a:d9:4b: d3:80:d8:e7:33:04:fd:2f:cb:35:c1:de:6c:69:d9:c1:70:ac: c5:02:30:b9:16:e3:de:e4:7d:f4:15:d9:51:ec:3a:aa:fa:cc: 3a:ac:79:df:57:7b:db:01:75:21:bd:64:0d:af:cb:3f:53:cf: 44:5c:7f:07:a9:45:ba:2f:60:eb:71:23:64:c1:a7:11:07:08: b8:d7:8d:84:be:42:28:c2:ff:4f:91:09:a3:e0:06:7b:97:cb: 6b:77:16:e4:2e:4f:6a:f6:06:fe:a3:f5:70:90:df:59:4a:e3: 89:d3:b8:3e:9d:e7:75:26:2d:2a:f4:a0:88:75:58:b9:ab:9e: a4:83:8e:c1:a3:5d:fa:dd:9a:8e:e1:31:74:18:0c:8e:eb:b6: bf:5e:2d:0e:b3:50:74:1f:16:01:3d:16:08:1e:b3:27:7b:73: 97:52:73:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NDPWXzRKLQgVWOxLLJB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjUxMDE5MTYwMTIwWhcNMjUxMDIwMTYwMTIwWjAzMTEwLwYDVQQD EygxZTcwZGY5MTkwMDhkNjcyZjgxZWE2YThiNDYzNjMwNDhiZWE1MWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzydh6cHp2IxUGUDl15FitNr56Xw7 neZs3paLk6f9d6M1iQWS8Nx4Ls7/3+LG3luCyjnY/AKEY9MDs+Z97ySdPVO5d+Db 8Uky0qs1XY2REWEwjcVy1I6Qm1rHcwJHuNe1IuLRKXJyx2pqO8lwpn0wRbzRbLDo MahClGqvbTVPb9IJ1+X9l9iAj5g6zpW66KMNDUKZ/yL/8b+YZ1Ro2/kUma7rr4FM Jii49169+SoZeh2fIORm0bTojUUd5jCTHa850CssGcWMGpt3uVa90zrLx/CCB17K tilKpBy7U9UOd43uMucacBfk7xOLy2djrFjY3bJZn/KsW94pZDilef0VowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5w35GQCNZy+B6mqLRjYwSL6lHdMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaS4imRi I2tjh/UNqrsfC7QwYpuyx7kk9cnBTz4msTR9kF0yrklXjWGQshoTqC3m4MjbddvF spNkBNPImyYu3gJD4Lxiw6V69OuiX3uJgg5gfCS+GBiFKtlL04DY5zME/S/LNcHe bGnZwXCsxQIwuRbj3uR99BXZUew6qvrMOqx531d72wF1Ib1kDa/LP1PPRFx/B6lF ui9g63EjZMGnEQcIuNeNhL5CKML/T5EJo+AGe5fLa3cW5C5PavYG/qP1cJDfWUrj idO4Pp3ndSYtKvSgiHVYuauepIOOwaNd+t2ajuExdBgMjuu2v14tDrNQdB8WAT0W CB6zJ3tzl1Jz1g== -----END CERTIFICATE-----Generated at Sun Oct 19 20:38:36 2025 by rpki-client