$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json) Hash identifier: L8gxEdFJfqdg00rpKHffjsJ2wXGLVBGpfzsC/bWwG5c= Subject key identifier: 9D:43:C4:71:80:DA:98:8A:71:DE:0C:A3:B5:C9:B1:A1:F8:5C:02:6B Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 0199FE4784B6E8AC9A92321DB70374F2FDD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft Manifest number: 1710 Signing time: Sun 19 Oct 2025 21:02:03 +0000 Manifest this update: Sun 19 Oct 2025 21:02:03 +0000 Manifest next update: Mon 20 Oct 2025 21:02:03 +0000 Files and hashes: 1: 1-fKXBjqiTeM90rh_YcnHRZImMf4.roa (hash: XviyK9gZCSyNGe87uM1BJ71gLbA2w08qEYd7JArw4Hs=) 2: 21b6ntDP_41WHw4JgmJy5QMFjgw.roa (hash: OyGhDdjF1Bm2rSEG2L631phdq3gbyPG0iQYpMEVeFPo=) 3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: S4lFQiY7zZqnteoM/rl45qrib5u6UnYizJjz8NIUyGY=) 4: 6bKmElTtCrApAY9rRgCE9VG2_VI.roa (hash: jkL7mJyzNc2SlG01Dl3hctC0mLi0oOg8Cg2cItdFmp8=) 5: 7p384sXqxwddixUy_mYYBxF3awU.roa (hash: shaUQH6DkAjCcH24QCvbbVnJZikn1zAyihmMsgzPJcI=) 6: EswWK13u7UJf1Xm-aJ2Imfit29g.roa (hash: /9v79+ATF8QEQ4eYOKWEhH/1P4aQ0PCUgp7hFThavBs=) 7: Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa (hash: 1XCrVW6+X9DVjbzilln6lF+f4s4n32v5jZAfIBU7Z40=) 8: G-l8_nIjGXR2g3ie6C0b-DsumJM.roa (hash: qSX4dXaWMvoaO0z2I0BRCaHWI2LO9UgLxYp55tHYyDI=) 9: NZS2Ipchg2nhjy9FYCa-tr7edgc.roa (hash: J91+10sEZiq3a/L3jz4R1QTQGfsCXE1VL5KiBPRPpK8=) 10: Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa (hash: F0xmcjBp6hsmjep+VgSkib2PdKQQGRbjWEcgD1QBtbM=) 11: Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa (hash: gYB3OVnzjXyPr9Qm/lycd3gdpJQ/+Cl0X5zNJIEQ9rQ=) 12: Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa (hash: 48l45O6og6BZyLVhyyu0j9BEA4j1BgnxIO+JWZUTc30=) 13: WXqBRwyxEDgQK5OlFrSMIaFpyVU.roa (hash: IpP8TaM5Wwj7+VayyaCIeA2tv6VLqBIorB1uda3TPMs=) 14: XSbgubujJJ9FZpTPfifgq3AkiU8.roa (hash: QttXfkZolFdSxkPkwsYt6vSDl8DXa766XeZMDQS4Mtw=) 15: clZIrkLG6qMnhbwEIW_pAKHru3U.roa (hash: h9NEDzPBspMO8P2mwx1nUeUnaVh8FCZbKTMitP3Kq70=) 16: dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa (hash: onCp8InwxVqnOmHcxw1M4XVSgwg1eg4cDcncJgrt2EU=) 17: dp8pvQa4vbHOUBRQq7A88UhSl18.roa (hash: 3Lmekz/0Q0BYHatiLmy2hW/4qKq+J2XWsl9s9mwNmF0=) 18: kQOaGpW4jD-8xGlNbkC3aZmZ2oA.roa (hash: nAfr6WTUGifpmHx8/uBqTFl3/GkMakZU6HzPC4BRKRc=) 19: nqNpqxiiesheCCeqK53xQj3S098.roa (hash: 2DtLb2ES6JjRgW8bn+Qbl4U1xhy1QrUbg+jAVJ9BH7A=) 20: qg9H3rvWINznh7UPHplQbVY73BM.roa (hash: Nx2IWHCLZcluhgcIHU0CznQVLHn9XdJ3ef9jXTt3p68=) 21: uMSALwCFCjHgfXY8GtxojOClYFk.roa (hash: kBut8kDkT5GFXnvjVfuze1IARhQ7/X9J0rwdlLP0FyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:47:84:b6:e8:ac:9a:92:32:1d:b7:03:74:f2:fd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Oct 19 21:02:03 2025 GMT Not After : Oct 20 21:02:03 2025 GMT Subject: CN=9d43c47180da988a71de0ca3b5c9b1a1f85c026b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:85:ce:10:29:3d:98:80:f4:ab:37:57:96: 45:6c:28:3b:5a:0c:a4:44:90:7e:f0:37:90:7d:b1: f3:ce:72:de:0d:f9:27:1e:7b:55:cd:8f:e7:28:a9: 8d:29:f9:96:d4:9f:a8:9e:65:49:a8:98:34:34:71: 4f:c6:94:70:d8:10:c8:92:42:6b:a3:7e:7e:0c:84: 8d:78:39:e2:8b:43:87:ce:a8:1a:fd:86:8c:bd:7e: 36:5a:20:81:0a:08:9c:d5:c7:5c:d2:95:be:3f:6e: 35:08:4a:1e:fa:6f:9e:72:58:e3:32:03:b9:b6:25: d2:fd:2a:11:2a:ce:a4:54:60:e9:df:a7:97:b4:e2: 89:05:d3:2e:00:29:e7:35:5d:a0:b8:bc:03:1d:f5: 7c:9b:e1:e2:88:ea:a1:c4:72:e8:3f:43:df:71:17: 0a:1b:40:2b:95:dc:33:3f:43:7e:90:0f:65:61:9b: 6e:8d:c9:20:fe:19:8c:1c:77:4a:20:fc:d7:62:88: 4c:05:3b:8d:70:52:a5:b6:94:30:6b:c1:8d:4c:7c: 13:ec:24:cc:57:ad:6e:d4:32:38:84:3d:06:5e:a1: a0:c1:1b:31:28:2b:4c:c2:20:e0:5a:94:d3:0c:94: 28:c2:0d:28:35:65:16:93:83:8f:41:90:8f:a6:bd: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:43:C4:71:80:DA:98:8A:71:DE:0C:A3:B5:C9:B1:A1:F8:5C:02:6B X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:51:04:58:73:80:86:b6:ce:1a:c1:88:5d:58:7a:d2:26: 9a:00:18:d0:db:13:4d:74:84:03:ac:3d:3a:c4:75:33:17:23: d1:ea:bb:59:4d:b1:d9:f1:13:fc:6b:6e:82:c1:68:ff:9c:02: 51:79:f8:8d:54:a6:a8:b5:9b:b9:b0:57:6d:13:cb:74:9f:28: ad:af:59:ab:e8:9c:73:3f:88:1b:9f:68:b0:89:94:e3:47:a7: 51:17:fc:12:7b:1e:ae:ec:f1:ec:62:a0:00:97:ae:2b:d5:50: e7:59:63:b3:36:4b:c9:dc:45:46:97:fb:8b:1b:9f:f3:fd:90: dd:a9:d4:25:34:9e:ca:64:ed:f7:20:20:c5:01:5f:3c:38:1c: 65:5b:97:3d:01:12:59:9d:f7:f2:00:ce:83:56:4f:37:c4:19: 5b:14:72:62:61:a1:ac:5a:cb:37:83:9e:c8:3d:47:77:aa:65: dd:59:1e:1e:58:53:c2:b5:ea:ad:54:74:dc:02:27:76:8f:98: f2:a3:22:8b:b1:5f:39:44:f5:44:42:af:a1:97:ee:9e:dd:ab: 46:32:00:0a:93:98:1b:d9:2d:51:5c:c8:8c:5a:e4:e0:a3:e9: 4f:68:e3:14:4e:ae:0d:74:0e:68:b9:48:1f:08:f9:28:5f:c4: ee:ec:b8:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+R4S26KyakjIdtwN08v3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjUxMDE5MjEwMjAzWhcNMjUxMDIwMjEwMjAzWjAzMTEwLwYDVQQD Eyg5ZDQzYzQ3MTgwZGE5ODhhNzFkZTBjYTNiNWM5YjFhMWY4NWMwMjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU+FzhApPZiA9Ks3V5ZFbCg7Wgyk RJB+8DeQfbHzznLeDfknHntVzY/nKKmNKfmW1J+onmVJqJg0NHFPxpRw2BDIkkJr o35+DISNeDnii0OHzqga/YaMvX42WiCBCgic1cdc0pW+P241CEoe+m+ecljjMgO5 tiXS/SoRKs6kVGDp36eXtOKJBdMuACnnNV2guLwDHfV8m+HiiOqhxHLoP0PfcRcK G0ArldwzP0N+kA9lYZtujckg/hmMHHdKIPzXYohMBTuNcFKltpQwa8GNTHwT7CTM V61u1DI4hD0GXqGgwRsxKCtMwiDgWpTTDJQowg0oNWUWk4OPQZCPpr2CbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1DxHGA2piKcd4Mo7XJsaH4XAJrMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZJRBFhz gIa2zhrBiF1YetImmgAY0NsTTXSEA6w9OsR1Mxcj0eq7WU2x2fET/GtugsFo/5wC UXn4jVSmqLWbubBXbRPLdJ8ora9Zq+iccz+IG59osImU40enURf8Enseruzx7GKg AJeuK9VQ51ljszZLydxFRpf7ixuf8/2Q3anUJTSeymTt9yAgxQFfPDgcZVuXPQES WZ338gDOg1ZPN8QZWxRyYmGhrFrLN4OeyD1Hd6pl3VkeHlhTwrXqrVR03AIndo+Y 8qMii7FfOUT1REKvoZfunt2rRjIACpOYG9ktUVzIjFrk4KPpT2jjFE6uDXQOaLlI Hwj5KF/E7uy4Ow== -----END CERTIFICATE-----Generated at Sun Oct 19 23:07:04 2025 by rpki-client