$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: QtV0cjDcABM6zKa6nZXBwxxVe9pG6TbbNi5ZJGjXt34= Subject key identifier: 2E:E9:9B:75:F8:FF:30:A2:F6:9B:B0:15:F3:CC:5B:07:88:BE:6B:F1 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 0199FB7C8DED2983DF54DFF2D172FE0E85B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0C70 Signing time: Sun 19 Oct 2025 08:01:07 +0000 Manifest this update: Sun 19 Oct 2025 08:01:07 +0000 Manifest next update: Mon 20 Oct 2025 08:01:07 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 5Xz9E7C6BAcx16iIMjwvM4HlgAw.roa (hash: O79+vzMdI2uDnbGewEwtLl1GFqHouBivbXJnQ4WHjFs=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: HIBKVvtinhweoi9ybbfYokGtkjg.roa (hash: khv1qHXammr1ZO8qVWulyea62D34wTqiuoPZd9ngssM=) 7: JjM1scO0M1VRz2BqKO1r_ZLa970.roa (hash: jE4M6onTNWLyp2LT8jDW1lcK5SlJ5FLJoUcPkAM9kEQ=) 8: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 9: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 10: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 11: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 12: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 13: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (hash: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=) 14: gwSC7EAy3C72kqaOxsQmMkrjxyA.roa (hash: oVgyYlrKyPjekvA+50Kp0/QR+pQendS8nmEKcr8YBXw=) 15: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: Xe+gchhakkx/B4LOWdKXvAGXlhGsGD5UkV7BYIgfLGg=) 16: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 17: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 18: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 19: tUIacj6VOPH10m5Y6XUJyWIow6U.roa (hash: 9uc/yuqmiqky5HfjpLsVrt/99q8zfLW5nmttPUpS6nU=) 20: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) 21: yvaGOInzvs_4CAqNb3HGPxfbkeM.roa (hash: 72X78jrEd3P7Wm2iZrDHAJIx0Gy7kHeFqupGxzOk0BE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:8d:ed:29:83:df:54:df:f2:d1:72:fe:0e:85:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Oct 19 08:01:07 2025 GMT Not After : Oct 20 08:01:07 2025 GMT Subject: CN=2ee99b75f8ff30a2f69bb015f3cc5b0788be6bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:52:9a:40:6b:3c:54:96:88:43:51:54:f7: 7b:a2:58:96:89:e9:8f:2f:99:e3:79:05:ea:d9:2b: 4d:10:b4:01:92:fa:d8:c5:8e:62:56:3d:ad:45:8e: 12:0b:73:c8:72:22:c1:33:cf:1e:56:fd:19:b8:2c: 2e:b5:33:50:ad:34:f6:6a:7d:81:c4:cb:41:9f:47: eb:e5:ed:37:00:69:14:26:c7:3d:23:a6:a6:18:c7: 14:e7:48:80:3b:00:e7:ba:81:73:86:79:09:4a:ff: db:43:93:fe:30:f0:06:23:07:e2:de:60:a0:eb:7b: d7:8c:e6:ff:bc:ca:77:81:7f:76:9f:ae:45:56:8a: 4e:43:43:4c:b2:08:a8:13:17:58:45:7e:20:98:b3: 52:a3:64:86:ab:e7:9d:a2:b8:01:9f:01:53:d9:dc: 90:62:6b:2c:48:0d:81:80:76:b7:20:16:a7:73:86: 65:b9:bd:9d:eb:81:37:66:dc:4c:a8:92:32:7a:ae: 40:d3:c8:03:f4:09:0d:ea:41:10:e6:f1:17:4a:4e: bd:06:96:44:a3:09:36:81:06:0f:b7:57:92:7e:55: 34:09:6c:92:6b:2a:ca:e7:1d:41:5f:1d:42:7b:ae: 00:27:89:5f:ea:26:76:ec:58:01:ec:6e:ed:63:78: d0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:9B:75:F8:FF:30:A2:F6:9B:B0:15:F3:CC:5B:07:88:BE:6B:F1 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6f:e4:aa:92:c6:1d:c8:75:5f:40:a9:98:3b:07:f9:1f:af: 33:9a:e2:8d:48:5b:11:8d:73:62:08:a2:4b:46:77:7c:43:bb: ab:c3:b7:ff:ed:73:ee:0a:82:2b:1b:41:af:a3:ef:26:59:34: de:20:8d:67:62:c2:37:b0:b4:e2:b5:70:6f:93:6b:af:e4:93: c6:6f:82:9c:41:10:8f:33:9e:ab:5b:22:de:3b:04:28:0c:b2: e5:1c:4e:e1:05:f2:c7:b5:fb:11:7d:25:2b:8f:c9:2a:70:00: 0c:cf:97:83:6e:29:ca:d0:7e:b7:65:66:96:16:ee:44:7c:2c: cc:ea:76:2d:92:29:3b:d4:c4:3a:ee:aa:fc:6f:40:0e:58:59: 81:1a:de:1b:4f:46:5f:c2:5c:eb:6c:89:0f:c8:9b:50:33:0c: bb:a6:90:8e:10:6f:47:70:c0:6e:da:b5:73:7c:7e:6f:4f:dc: 44:e4:6d:ee:fd:ee:00:0c:0d:c3:5a:93:df:a6:fa:83:bc:25: d7:21:87:89:d3:7f:66:a8:d5:21:0d:1a:87:e8:0b:18:a5:3f: fd:60:b9:b7:fe:ae:73:06:48:34:84:54:6b:1b:7a:06:1f:3a: e3:55:81:f5:91:1d:6c:5a:a3:88:e3:4d:03:1b:1b:56:16:fd: a1:43:03:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fI3tKYPfVN/y0XL+DoW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUxMDE5MDgwMTA3WhcNMjUxMDIwMDgwMTA3WjAzMTEwLwYDVQQD EygyZWU5OWI3NWY4ZmYzMGEyZjY5YmIwMTVmM2NjNWIwNzg4YmU2YmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL9SmkBrPFSWiENRVPd7oliWiemP L5njeQXq2StNELQBkvrYxY5iVj2tRY4SC3PIciLBM88eVv0ZuCwutTNQrTT2an2B xMtBn0fr5e03AGkUJsc9I6amGMcU50iAOwDnuoFzhnkJSv/bQ5P+MPAGIwfi3mCg 63vXjOb/vMp3gX92n65FVopOQ0NMsgioExdYRX4gmLNSo2SGq+edorgBnwFT2dyQ YmssSA2BgHa3IBanc4Zlub2d64E3ZtxMqJIyeq5A08gD9AkN6kEQ5vEXSk69BpZE owk2gQYPt1eSflU0CWySayrK5x1BXx1Ce64AJ4lf6iZ27FgB7G7tY3jQFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7pm3X4/zCi9puwFfPMWweIvmvxMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADm/kqpLG Hch1X0CpmDsH+R+vM5rijUhbEY1zYgiiS0Z3fEO7q8O3/+1z7gqCKxtBr6PvJlk0 3iCNZ2LCN7C04rVwb5Nrr+STxm+CnEEQjzOeq1si3jsEKAyy5RxO4QXyx7X7EX0l K4/JKnAADM+Xg24pytB+t2VmlhbuRHwszOp2LZIpO9TEOu6q/G9ADlhZgRreG09G X8Jc62yJD8ibUDMMu6aQjhBvR3DAbtq1c3x+b0/cRORt7v3uAAwNw1qT36b6g7wl 1yGHidN/ZqjVIQ0ah+gLGKU//WC5t/6ucwZINIRUaxt6Bh8641WB9ZEdbFqjiONN AxsbVhb9oUMDDQ== -----END CERTIFICATE-----Generated at Sun Oct 19 17:27:06 2025 by rpki-client