$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft File: oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json) Hash identifier: 4JgS44l7ew5ksQ8hpuBWZGROiMaPI3HtsFvucJFbHKc= Subject key identifier: ED:76:E4:11:2F:9C:FF:A8:D0:38:1B:9B:5C:3F:B8:AC:10:7D:EA:5F Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 0199FE7DA8E73783F19D86F8F74EC6DD93A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft Manifest number: 17B2 Signing time: Sun 19 Oct 2025 22:01:12 +0000 Manifest this update: Sun 19 Oct 2025 22:01:12 +0000 Manifest next update: Mon 20 Oct 2025 22:01:12 +0000 Files and hashes: 1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=) 2: 2smUB5D8W7tuf_xW5EH9jWoz4DM.roa (hash: rTDJvm0oMNC8IUj5+JS+3prpnZefKwYKD4MK14dTYOE=) 3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=) 4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=) 5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=) 6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=) 7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=) 8: FCOv2wASvqJQtZIKiccAO2bxvnc.roa (hash: B9ypN+FqEfvSTJg5rp5zO4aGYGOKJguLQr8AmroSDF8=) 9: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=) 10: IStNe4e6LhEN0WqF0khMmbBnvEQ.roa (hash: SucxZMcCMGO/p9cXrgX+1VRtuUi5NI2PuW6+EwcCJx8=) 11: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=) 12: Khdam5ye6nHBc4YW_yrjL25Chls.roa (hash: zu0nJg15zErx3dxZklgiK5ZzU5CwLzliF0MMLUaHiLs=) 13: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=) 14: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=) 15: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=) 16: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=) 17: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=) 18: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=) 19: VV3pVQmA3jL8s0bmbKamtZwlCt0.roa (hash: vCwn19zgG2GXQkWTrwcbkBf3n2pPD744DQga4uWIovg=) 20: VXguZ1IP4OPQ2wSfFG2Zt-8rRmU.roa (hash: FYCub9tLigFfu6QRGXOsYxtNUaq1jqWty883jSxTd34=) 21: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=) 22: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=) 23: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=) 24: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=) 25: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=) 26: fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa (hash: Aef8TeyLWHEX0HhoAhmS5O45O1FHLWTrY+cesMIs6t4=) 27: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=) 28: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=) 29: mygN9EXv15Mv_R2x5EM_di5X8p4.roa (hash: +hnEnqUqGPQ5/+etnnWXKfILgh8ttS98q0vUC8Q5rns=) 30: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: 02XeoYKoDYbDkbZQXVzVBfQCI0pitUBdB39gc4UOFuA=) 31: q-kzFzWdHxYVd9BrFrKLJ4d0RIQ.roa (hash: GMAkDMrzsWCnVos+xh1WbimGMP/CqMUvIS+tRaFTcOw=) 32: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=) 33: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=) 34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=) 35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:7d:a8:e7:37:83:f1:9d:86:f8:f7:4e:c6:dd:93:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Oct 19 22:01:12 2025 GMT Not After : Oct 20 22:01:12 2025 GMT Subject: CN=ed76e4112f9cffa8d0381b9b5c3fb8ac107dea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:bf:89:51:6a:df:f3:a3:27:8c:54:b2:f8: fb:a7:94:57:90:9d:f9:a3:ad:5a:5e:eb:fd:7a:1f: 5e:d7:b6:75:46:37:ac:43:b1:a6:bf:fc:4f:e6:44: 17:fb:8a:a4:4e:f0:91:c2:40:5e:43:6f:9d:c1:f5: b5:7c:1e:81:77:50:2d:ba:9e:94:38:2a:f8:17:65: e2:e0:13:b4:b8:0f:35:8c:13:24:1c:a7:ef:ce:38: cf:05:d0:a7:60:6f:f9:6d:2d:82:8d:b4:02:e0:a7: 2f:5b:b8:b1:c9:cf:b0:95:1a:d2:80:63:0f:73:51: ae:f8:ce:f2:79:80:3e:9b:3f:2e:7e:6b:97:b2:8f: 9b:e5:3b:f0:7f:91:14:59:d8:f1:29:aa:3e:7b:06: 0b:f4:71:79:cd:2b:d5:01:f6:ac:dc:e4:51:5b:3a: 99:5d:ba:3a:bb:45:75:a4:38:f0:24:47:1c:05:1e: cc:89:aa:85:c5:14:c9:85:78:4d:de:8f:f1:67:19: 7e:6a:0f:27:e3:1b:49:bb:1c:59:b2:f5:2a:ca:6b: 7c:76:60:e2:88:79:bd:d1:07:d4:e1:21:48:59:a0: 9d:b7:1c:ed:75:28:1b:f4:9f:33:b7:71:9c:d6:21: a0:11:b6:eb:13:1a:ac:3f:d5:c5:1a:72:a3:44:36: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:76:E4:11:2F:9C:FF:A8:D0:38:1B:9B:5C:3F:B8:AC:10:7D:EA:5F X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b3:b6:01:e6:cb:79:86:3a:63:a0:09:8b:ea:ce:c0:f1:8b: d7:ef:92:1c:80:76:c2:9a:ed:4e:48:f8:16:a4:67:b6:a7:77: 14:18:ec:df:06:45:40:71:55:49:50:8b:f6:08:9d:35:93:7b: 4d:fd:aa:7d:2d:33:28:b8:ec:f2:ba:b7:51:2c:62:07:50:3d: 8e:9b:4d:b6:d5:f6:3e:87:61:11:17:a5:c7:05:b4:7c:e7:e2: d4:15:f3:34:d9:73:7e:1a:c8:81:f3:cc:07:8c:67:48:08:26: 90:5f:84:53:6a:2d:dd:0c:b1:96:0c:df:79:0c:78:0a:5e:61: 1d:fc:36:ad:0b:33:cd:03:62:e0:ad:0a:19:e2:45:4e:0a:2c: e5:8b:95:bf:9b:b0:b0:e7:72:99:f9:11:97:df:d5:39:17:8f: 69:90:56:7a:b0:89:fd:09:5a:14:d0:aa:c6:3a:50:22:fb:05: c6:b4:c4:a5:c0:d3:9e:73:d0:dd:14:46:45:24:17:a1:fc:e7: 27:42:af:3b:b8:d0:62:b4:14:b3:4e:07:f5:a6:42:8f:93:5a: cf:b2:22:b4:70:af:bd:fc:22:0e:8f:d8:be:a7:9c:fd:4c:d7: 91:0e:06:89:b5:37:f7:a9:4b:9c:15:f0:83:59:5d:48:e7:b3: e6:98:15:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+fajnN4PxnYb4907G3ZOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjUxMDE5MjIwMTEyWhcNMjUxMDIwMjIwMTEyWjAzMTEwLwYDVQQD EyhlZDc2ZTQxMTJmOWNmZmE4ZDAzODFiOWI1YzNmYjhhYzEwN2RlYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDK/iVFq3/OjJ4xUsvj7p5RXkJ35 o61aXuv9eh9e17Z1RjesQ7Gmv/xP5kQX+4qkTvCRwkBeQ2+dwfW1fB6Bd1Atup6U OCr4F2Xi4BO0uA81jBMkHKfvzjjPBdCnYG/5bS2CjbQC4KcvW7ixyc+wlRrSgGMP c1Gu+M7yeYA+mz8ufmuXso+b5Tvwf5EUWdjxKao+ewYL9HF5zSvVAfas3ORRWzqZ Xbo6u0V1pDjwJEccBR7MiaqFxRTJhXhN3o/xZxl+ag8n4xtJuxxZsvUqymt8dmDi iHm90QfU4SFIWaCdtxztdSgb9J8zt3Gc1iGgEbbrExqsP9XFGnKjRDbBmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO125BEvnP+o0Dgbm1w/uKwQfepfMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebO2AebL eYY6Y6AJi+rOwPGL1++SHIB2wprtTkj4FqRntqd3FBjs3wZFQHFVSVCL9gidNZN7 Tf2qfS0zKLjs8rq3USxiB1A9jptNttX2PodhERelxwW0fOfi1BXzNNlzfhrIgfPM B4xnSAgmkF+EU2ot3QyxlgzfeQx4Cl5hHfw2rQszzQNi4K0KGeJFTgos5YuVv5uw sOdymfkRl9/VORePaZBWerCJ/QlaFNCqxjpQIvsFxrTEpcDTnnPQ3RRGRSQXofzn J0KvO7jQYrQUs04H9aZCj5Naz7IitHCvvfwiDo/Yvqec/UzXkQ4GibU396lLnBXw g1ldSOez5pgVGw== -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:39 2025 by rpki-client