$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: EqiNrdXjoJOjp1qxlA6HZ2zXN0NFfFY39sxoBa3TFtw= Subject key identifier: FE:8B:33:70:E5:61:17:48:3D:8F:80:60:B8:C5:76:22:51:1C:E0:A4 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 0199FCC66EDFCFFEB966AB001C7E9755F962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 1736 Signing time: Sun 19 Oct 2025 14:01:26 +0000 Manifest this update: Sun 19 Oct 2025 14:01:26 +0000 Manifest next update: Mon 20 Oct 2025 14:01:26 +0000 Files and hashes: 1: 3rSRd0RZU7FekSH23KpB4AjQvCA.roa (hash: dHJ5VK5jy4AG5zWMS9JzXCYfEPP9KtWlYIJ17BPZ8p4=) 2: 79SKiAPGItgSBiSdHsbiPNmxzdA.roa (hash: bp4Hzk1UysrE74qZJaWtC8IolTv/126MWUfJ4dgAP+w=) 3: 8CD_BDNohDu7BFPue0FAVtqeSKE.roa (hash: MBbBcYx0OZxz+xXv93fCUqPEHeogAGDOWRTI0SELjnU=) 4: DLGzg4PXXfMLLz9uU9Jb8GzjTYQ.roa (hash: UyDgyJqrwARZHVBt5A9PQUxwD+TJu3qnXyFQy1aEp9I=) 5: FmNEfzs-SRSfbomfiiNIeqQS1sk.roa (hash: DZqchwYxSvfrNSJm9BmQA3cTvM8eHMT7t5woC6TuhyE=) 6: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (hash: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=) 7: U3lA_e0y8319DjoZ7X8Ks2r2M7w.roa (hash: fqverKbNHsV3jVuR9y0WWha056JePZs0l3+H4zjSxfA=) 8: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (hash: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=) 9: XWgY9IE5WPWEYKpZb_DdJSKgmNk.roa (hash: RjaBA1nT0ZNCp2uF/Bf1faWMk5+nUdGucIKvPd+4FJg=) 10: afCUdciEL8e1tl5gYWrtb0HNTsk.roa (hash: 5NoCDBuBZUGC39cg06n8OGy1uzMRcXZWmjT1H17s8qs=) 11: eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (hash: Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=) 12: ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (hash: o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=) 13: jEkIkDjyHf0Y5CHlkh_SAYrLMi8.roa (hash: nK+7va5r0DKn11vhjaj1KeeLmtO5MjFetghK5DI3nyo=) 14: k1o7H-5eEgCdvmr2Au7FXonmUIc.roa (hash: cPZnlWd1NF/fLPFMgOLyjHXmXf8GfrHrU0SBnmHDHvY=) 15: lSOxZN--Nv76VTwU3O8Fys07u2M.roa (hash: KF0YUVuZrHgrWuxvGjcknBz1cOoRQsrm28h1CM9VPOI=) 16: oRojqrF2upd4qpGF9qwuvKkB85M.roa (hash: rI1ZvEDD5nBz4EJV2sl7C1HlZDCYTwKf5IAxKcbibxk=) 17: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: b/yecyYZwyesJ0oL59MaSWJMLXpIn4qQuNwaDHvGAr8=) 18: rbJzreDbHp60Zc3UJ6AODADth8g.roa (hash: BpjTDuP8RPY+luxryeSysWVMte9pS4i/E17bDx01jBk=) 19: rq4z53nTY235oXOYEJGf8J9hSBk.roa (hash: ALoDf8xPedv7a4y1Cobi6nNzEhORdIhw3weFRomPawE=) 20: wWbDK40S4dgNgIeoUbg-t_w6Qx0.roa (hash: SQUX4nOmlr/84KlBRvNtQfHH9k/9TOfWpMlz56zCIZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:6e:df:cf:fe:b9:66:ab:00:1c:7e:97:55:f9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Oct 19 14:01:26 2025 GMT Not After : Oct 20 14:01:26 2025 GMT Subject: CN=fe8b3370e56117483d8f8060b8c57622511ce0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e2:bb:7e:3c:3b:8c:27:ae:39:b7:27:bd:37: b7:13:56:ec:ab:71:31:85:48:6f:4c:e7:1b:2f:67: f3:27:b2:03:f5:e8:25:41:8f:af:d6:9e:75:ab:f1: 24:55:73:53:59:a5:66:7b:df:6d:be:ee:be:2a:f2: 77:8a:a0:37:eb:7c:f5:cd:ed:7f:bb:e9:c2:b3:7c: b3:9e:d6:c0:e4:8e:f4:21:6a:04:fb:2c:34:48:be: 40:26:6f:26:05:a8:d5:cd:f3:e0:13:8f:d7:4b:76: 17:61:5b:01:44:8f:11:95:35:4a:ca:d5:a5:57:73: 31:66:24:2f:e7:de:5d:42:46:e6:e7:61:0b:e5:17: 66:c1:85:b9:07:06:c8:cc:1c:fa:8b:8a:7c:9f:e8: 64:5d:2e:a7:8a:a6:98:79:8c:4f:1c:27:d3:82:7c: 4f:ab:8b:d6:78:e9:08:02:ba:ab:25:71:81:e3:63: b1:e7:2a:b4:f2:21:44:ad:e0:bb:f8:0a:3e:e6:db: 85:94:85:b5:42:37:ec:34:c5:92:d8:59:5b:d4:e5: ca:54:2b:30:d1:49:06:0c:7a:58:f4:c4:d0:65:e6: 40:62:f7:33:8c:4e:b7:48:3f:83:50:85:d9:f5:e0: b1:6c:1d:44:c4:a9:99:31:82:03:f9:12:7d:26:92: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8B:33:70:E5:61:17:48:3D:8F:80:60:B8:C5:76:22:51:1C:E0:A4 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e9:3a:35:5d:b3:37:c5:68:46:80:23:0b:42:ce:23:91:ca: ca:07:39:67:89:e5:d9:e0:3b:69:77:b0:4f:af:e3:79:33:66: fb:6c:2c:b7:9a:8d:36:00:1c:d9:e2:d8:32:44:02:64:02:b8: 0f:75:f4:4a:36:1b:fb:3f:c1:73:a9:02:52:0c:6b:36:e3:6f: 3b:03:1e:4c:fc:ee:b5:b5:2b:03:1e:8d:c2:1d:7e:fa:b3:a0: e4:e4:f3:80:ea:42:b5:90:64:3b:86:3b:a3:a3:77:a9:cc:db: 2c:82:d1:b3:f9:ca:1c:c4:bb:b6:9d:a0:91:f6:b9:b6:0b:d7: d3:ce:82:a9:b8:17:5e:6d:54:53:f7:cf:4f:43:da:7a:ce:89: b6:0b:ad:ef:9f:77:03:b8:2f:21:af:3d:87:89:51:85:d9:77: 0e:56:b5:91:71:fb:cb:d8:c6:89:25:4d:5e:d6:75:4e:d9:34: bd:9a:b2:22:4c:bf:01:bf:2b:78:10:ed:63:6c:a5:cb:3f:0c: e5:be:89:5e:89:65:df:63:12:d6:dc:b6:16:4f:6b:c0:82:b7: bf:6c:bf:da:69:c6:25:2d:cd:52:1c:7d:d0:8d:5b:77:52:f9: e5:87:e1:a1:ba:e9:f3:67:ab:00:1c:02:f8:cc:ee:62:61:02: 8c:e6:12:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xm7fz/65ZqsAHH6XVfliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjUxMDE5MTQwMTI2WhcNMjUxMDIwMTQwMTI2WjAzMTEwLwYDVQQD EyhmZThiMzM3MGU1NjExNzQ4M2Q4ZjgwNjBiOGM1NzYyMjUxMWNlMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuK7fjw7jCeuObcnvTe3E1bsq3Ex hUhvTOcbL2fzJ7ID9eglQY+v1p51q/EkVXNTWaVme99tvu6+KvJ3iqA363z1ze1/ u+nCs3yzntbA5I70IWoE+yw0SL5AJm8mBajVzfPgE4/XS3YXYVsBRI8RlTVKytWl V3MxZiQv595dQkbm52EL5RdmwYW5BwbIzBz6i4p8n+hkXS6niqaYeYxPHCfTgnxP q4vWeOkIArqrJXGB42Ox5yq08iFEreC7+Ao+5tuFlIW1QjfsNMWS2Flb1OXKVCsw 0UkGDHpY9MTQZeZAYvczjE63SD+DUIXZ9eCxbB1ExKmZMYID+RJ9JpJRZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6LM3DlYRdIPY+AYLjFdiJRHOCkMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuk6NV2z N8VoRoAjC0LOI5HKygc5Z4nl2eA7aXewT6/jeTNm+2wst5qNNgAc2eLYMkQCZAK4 D3X0SjYb+z/Bc6kCUgxrNuNvOwMeTPzutbUrAx6Nwh1++rOg5OTzgOpCtZBkO4Y7 o6N3qczbLILRs/nKHMS7tp2gkfa5tgvX086CqbgXXm1UU/fPT0Paes6Jtgut7593 A7gvIa89h4lRhdl3Dla1kXH7y9jGiSVNXtZ1Ttk0vZqyIky/Ab8reBDtY2ylyz8M 5b6JXoll32MS1ty2Fk9rwIK3v2y/2mnGJS3NUhx90I1bd1L55Yfhobrp82erABwC +MzuYmECjOYSug== -----END CERTIFICATE-----Generated at Sun Oct 19 15:40:16 2025 by rpki-client