$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json) Hash identifier: 5PG/MOMbCOQSYRKWBtIulwpd1Kk+QZatQTBoya00YOc= Subject key identifier: 01:5D:D4:53:B1:D8:28:B3:11:2D:C0:D5:9B:96:2F:09:7C:30:93:5D Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 0199FEEBD5ED344FFBEC4CEC5BE1C7245955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft Manifest number: 0998 Signing time: Mon 20 Oct 2025 00:01:32 +0000 Manifest this update: Mon 20 Oct 2025 00:01:32 +0000 Manifest next update: Tue 21 Oct 2025 00:01:32 +0000 Files and hashes: 1: 3lIHjKuigd-8wnJOYmIpykPGwEE.roa (hash: RbhnGqyFBszn7eUWI0qn8+G1e8ScDlyeFe7EddnRngY=) 2: 7RN5SRH01vnVuwmId81dIIGGm8U.roa (hash: 1/C/E5eYkrY6D/S5+koDYApbhvcMTNf0kx5arKlMVwM=) 3: CwxwigW-yHA-vYKKZaAl1IxpzAA.roa (hash: rW7hw/nZ3SfsJ2xESW9df5rJCWkAlL57M/KGPQGcJMI=) 4: Cyn89nSP-A380xB9jFU-SvGwOLk.roa (hash: 55NLzajp924cjij1HdQXLRUI6O4Sv4/7fK+uH+Ovruw=) 5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: bkAqA73iz6bNgrCsXc9/1UmgiwUtrDtAiUJiX8xKQUk=) 6: GYViSX4l2vjHhmFNhomqHFqkpSc.roa (hash: 3CgVrq2niOAF6athi7j5otFEVOSff0VY2syy7+cJym4=) 7: JXgg0_l5GaO7jP1zJeiTZnzRqjE.roa (hash: 4YX6bHKXPEIoYDxsMxDe1UOLGJ38lDkQmJub7lQqJ88=) 8: QhKGhq9RVjLUPSCejjoRE221C7U.roa (hash: 0khB5n2A42sHpAsF0tPwxAXTpxJUh3W1WQBMyyOav6Y=) 9: RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa (hash: vXTbGxFCLWqp0CNvIIccpXNG33skDlTQkxc0RSBrijk=) 10: TU10gdUCxQBjCnIZW9U6VNshcy8.roa (hash: LBXY7Mu4+F2Stbby6TE9MpekUANg9/WfPHUHl5054wI=) 11: WOeiegJydkxVE1vjiwGx6ATuFEY.roa (hash: QQ0/7N7W7DkOMFKnzycHP6yPRCFiGEALp7b0CpA3RZ0=) 12: XaybEw_MkTY28IquFGQbHrSpM7k.roa (hash: TwRW1DKYPixpCJP4Q5rOfw8R+B/zkE9LC0Lipg8NmYQ=) 13: fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa (hash: 3FK6PbiJEFCVQCpQogIU0uOqOIRz4gHsO2agb5Bk1QM=) 14: vLlnIbM4IzjjaW5_ksMl5w3Mdyo.roa (hash: qNTbjySkAkE6BruFWTSoo36zWMNK/1N9V7FWTBB9+Gc=) 15: zB69TVx0sEbC1RySFuzqMAIu3a0.roa (hash: usN4D5QBcD6XXA42H1Ot8IvkjdBuShhuURXZHjJ1m3k=) 16: zhgXsJzHOSwZ2vW5K0nW1lO6VOU.roa (hash: Yt6DAu9pUe7VspoY5/vTE3HMguhU3RqgQubcaVH+tIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:d5:ed:34:4f:fb:ec:4c:ec:5b:e1:c7:24:59:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Oct 20 00:01:32 2025 GMT Not After : Oct 21 00:01:32 2025 GMT Subject: CN=015dd453b1d828b3112dc0d59b962f097c30935d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:43:56:85:3e:08:42:04:13:3b:ab:99:42: b7:c9:f6:55:b0:5a:fb:ae:1d:f9:91:3a:21:35:87: 1f:3b:f0:49:82:d2:19:bb:9f:96:a7:83:51:b4:a2: f8:a5:8c:ce:5a:8e:05:a9:f9:f3:16:57:f7:6d:21: dc:d2:5e:d6:02:b5:57:99:50:ba:52:d7:fe:33:07: a7:2c:43:bf:b7:ed:8c:c2:96:72:9b:86:fd:c4:5c: c2:9c:6d:43:83:7b:f2:d7:cb:f1:b5:41:1b:51:37: 2d:b3:b4:12:29:a5:7b:1d:58:80:e0:74:50:47:7b: 10:b2:d7:b6:68:80:05:64:a0:87:da:4c:a2:52:fb: e5:7f:7b:a8:32:46:ff:25:37:7f:8e:70:cf:ea:0a: 15:37:71:40:14:3c:92:1c:43:dc:05:33:11:72:a5: c6:df:35:31:1d:b1:07:2b:a2:31:48:fb:72:ef:00: 6f:4c:e4:fc:a3:f7:30:c9:88:fd:7e:19:ff:be:02: da:b7:98:59:a7:8c:3e:fd:44:f0:e6:da:2d:cc:8d: 78:25:e4:f7:a2:f9:a2:4f:ad:cd:c8:0f:9d:8d:fa: f6:10:29:60:58:0c:55:f5:62:34:36:31:1c:0e:cf: ac:f4:9b:d9:db:4d:b2:9f:da:91:80:bc:ca:3c:5e: 02:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5D:D4:53:B1:D8:28:B3:11:2D:C0:D5:9B:96:2F:09:7C:30:93:5D X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7f:a1:86:a4:e2:66:f1:df:64:1d:7f:02:19:65:56:82:6a: c1:10:03:7f:6c:56:57:cc:f4:e9:6f:01:9c:9b:34:9d:54:00: 03:54:04:9d:72:56:93:8d:9f:9a:25:a8:01:95:20:db:f0:af: 26:ba:0a:c8:4a:0c:72:a4:96:68:4c:06:1f:0d:5f:5b:01:6d: b2:1f:59:53:d9:a0:ea:5c:fd:22:35:5e:9b:c9:76:69:dc:20: ee:d9:e6:ab:4f:31:f6:b1:eb:2a:06:74:1b:c2:a5:12:72:fa: fb:67:11:c3:d7:73:a2:55:6d:c2:95:a3:de:e3:e8:8b:7a:de: ad:ba:d2:ad:bb:52:6a:0f:d7:d0:8a:5c:d5:13:05:b0:a4:d4: cc:b6:dc:94:b4:a5:77:f5:5e:e4:25:73:e6:11:9c:e5:b8:5b: f9:bb:7b:09:0d:5d:61:7f:2e:99:45:3e:02:3d:9d:93:f9:6c: 74:72:18:6f:e3:8b:9a:15:21:6d:cc:b4:af:db:bc:05:4e:ce: a8:1f:22:c0:8c:87:e9:39:47:25:9b:89:46:96:dc:47:f6:89: c8:5b:17:32:10:33:b2:9b:f9:32:5d:fe:30:8a:fd:30:e8:8f: 11:f8:b7:7f:96:e9:97:4e:b1:aa:46:df:c5:ad:97:2f:91:80: ab:6c:95:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+69XtNE/77EzsW+HHJFlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjUxMDIwMDAwMTMyWhcNMjUxMDIxMDAwMTMyWjAzMTEwLwYDVQQD EygwMTVkZDQ1M2IxZDgyOGIzMTEyZGMwZDU5Yjk2MmYwOTdjMzA5MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaFDVoU+CEIEEzurmUK3yfZVsFr7 rh35kTohNYcfO/BJgtIZu5+Wp4NRtKL4pYzOWo4FqfnzFlf3bSHc0l7WArVXmVC6 Utf+MwenLEO/t+2MwpZym4b9xFzCnG1Dg3vy18vxtUEbUTcts7QSKaV7HViA4HRQ R3sQste2aIAFZKCH2kyiUvvlf3uoMkb/JTd/jnDP6goVN3FAFDySHEPcBTMRcqXG 3zUxHbEHK6IxSPty7wBvTOT8o/cwyYj9fhn/vgLat5hZp4w+/UTw5totzI14JeT3 ovmiT63NyA+djfr2EClgWAxV9WI0NjEcDs+s9JvZ202yn9qRgLzKPF4CaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFd1FOx2CizES3A1ZuWLwl8MJNdMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn+hhqTi ZvHfZB1/AhllVoJqwRADf2xWV8z06W8BnJs0nVQAA1QEnXJWk42fmiWoAZUg2/Cv JroKyEoMcqSWaEwGHw1fWwFtsh9ZU9mg6lz9IjVem8l2adwg7tnmq08x9rHrKgZ0 G8KlEnL6+2cRw9dzolVtwpWj3uPoi3rerbrSrbtSag/X0Ipc1RMFsKTUzLbclLSl d/Ve5CVz5hGc5bhb+bt7CQ1dYX8umUU+Aj2dk/lsdHIYb+OLmhUhbcy0r9u8BU7O qB8iwIyH6TlHJZuJRpbcR/aJyFsXMhAzspv5Ml3+MIr9MOiPEfi3f5bpl06xqkbf xa2XL5GAq2yV5g== -----END CERTIFICATE-----Generated at Mon Oct 20 02:45:43 2025 by rpki-client