$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft File: rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json) Hash identifier: onbOoFLXnpHfIOFqX1W+UaX5mMr2bU0DIttA9GRSuXQ= Subject key identifier: 68:61:4E:5C:62:C9:22:31:38:74:54:C8:44:12:9D:1F:35:72:E8:7F Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 0199FF22CA3985DA763637708DFAD4DF91A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft Manifest number: 1711 Signing time: Mon 20 Oct 2025 01:01:33 +0000 Manifest this update: Mon 20 Oct 2025 01:01:33 +0000 Manifest next update: Tue 21 Oct 2025 01:01:33 +0000 Files and hashes: 1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=) 2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=) 3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=) 4: CrYEjKshkcVwXojHUA2iB3nVrOw.roa (hash: //0WAavd4RI2DQnPnVlZjyvEfdTG3OpsN/1EoBd8PaU=) 5: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=) 6: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=) 7: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=) 8: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=) 9: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=) 10: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=) 11: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (hash: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=) 12: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=) 13: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=) 14: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=) 15: onb3rJiukMEmxTOk_8qYPQ5pFvg.roa (hash: rVertN8iUSrJY5Sj1WLa+FHIXHq3KLU3I9MXMNSNWto=) 16: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=) 17: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=) 18: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: PuqMl4Ir1kP6FxnY3wO2mKYo6NOtMGo3/roeoRbQ4qc=) 19: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=) 20: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=) 21: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:22:ca:39:85:da:76:36:37:70:8d:fa:d4:df:91:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Oct 20 01:01:33 2025 GMT Not After : Oct 21 01:01:33 2025 GMT Subject: CN=68614e5c62c92231387454c844129d1f3572e87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:c5:e7:15:f5:d6:c6:15:90:2e:d8:d0:54: 99:91:84:0d:96:f9:38:22:94:a2:e6:e0:46:ad:1e: f7:18:d4:bf:1e:fe:ac:df:f4:7d:d8:4a:77:b0:4c: 21:fe:f1:e1:09:a9:14:8b:59:8d:06:dd:79:b6:0f: f3:9d:48:77:82:82:a3:c9:7e:10:54:b9:cd:25:66: 96:52:8c:f2:70:d9:92:d4:52:5d:1f:91:35:72:4e: ed:41:ef:34:97:d4:9d:1c:f8:4b:dd:4a:8c:26:9f: bb:a5:28:a0:25:a2:22:70:58:29:7f:97:b5:da:e7: 8c:2c:eb:c9:4b:42:cc:f3:04:17:e9:46:8c:e5:71: 68:76:33:81:66:ca:76:ad:24:3d:53:56:dc:2b:fa: 79:a5:c7:0c:18:a1:b3:c8:e0:42:78:f1:bc:54:c1: 0a:06:40:eb:70:62:1b:ed:7e:09:11:d6:c9:3c:4a: 2d:08:a3:60:5d:c3:20:02:a1:7b:37:56:40:87:62: b9:1f:e1:aa:86:84:4b:3b:42:73:93:79:8a:12:e5: 86:2a:3d:dd:f5:3d:90:aa:ce:e3:ca:1c:a7:0b:a5: 58:a7:35:6b:27:c7:04:b4:a0:8f:70:18:a5:2b:ed: bc:42:37:c2:97:4d:fb:ef:0a:52:19:97:5b:28:67: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:61:4E:5C:62:C9:22:31:38:74:54:C8:44:12:9D:1F:35:72:E8:7F X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1e:b0:74:df:5f:f5:bc:df:9c:35:71:a4:e4:a9:d6:23:0a: df:66:8b:c5:e5:64:11:42:33:17:28:62:4a:6b:bb:c1:61:56: 20:19:59:c0:a4:af:77:e0:b7:84:47:7c:5a:b2:13:47:2b:3a: bd:1a:40:92:d0:5c:ab:c8:c7:7f:b3:7b:d1:1e:06:b8:7d:c8: ff:2a:f8:fa:9c:e1:2a:53:17:28:a5:80:6b:d0:15:d4:7f:19: df:9f:3f:ae:29:aa:01:c3:74:57:e2:3d:1f:36:03:b5:f9:94: 93:30:60:e4:1e:1a:34:ea:5d:70:0d:b1:9c:b8:08:94:80:2d: 69:76:cb:29:4a:c2:2a:d3:c8:b3:4d:30:a8:12:50:5b:99:37: b6:24:c6:90:82:17:2a:18:86:13:33:51:54:f8:23:f7:24:e8: 08:e7:e6:c5:27:d1:5c:65:b5:ea:04:d7:44:44:bd:32:c9:c3: f5:67:57:9c:78:1b:99:f3:90:53:87:71:7c:d6:8d:99:30:d4: 69:e3:51:18:84:56:95:75:17:39:b7:dd:0f:0c:98:e8:2c:a3: 34:44:22:a2:e3:71:3b:e7:3d:ce:67:e3:ea:90:7c:51:44:ba: 6f:34:78:02:4d:4a:2c:d0:66:4f:e2:0f:50:b4:2a:b7:a7:31: 2d:0e:23:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/Iso5hdp2NjdwjfrU35GgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjUxMDIwMDEwMTMzWhcNMjUxMDIxMDEwMTMzWjAzMTEwLwYDVQQD Eyg2ODYxNGU1YzYyYzkyMjMxMzg3NDU0Yzg0NDEyOWQxZjM1NzJlODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSHF5xX11sYVkC7Y0FSZkYQNlvk4 IpSi5uBGrR73GNS/Hv6s3/R92Ep3sEwh/vHhCakUi1mNBt15tg/znUh3goKjyX4Q VLnNJWaWUozycNmS1FJdH5E1ck7tQe80l9SdHPhL3UqMJp+7pSigJaIicFgpf5e1 2ueMLOvJS0LM8wQX6UaM5XFodjOBZsp2rSQ9U1bcK/p5pccMGKGzyOBCePG8VMEK BkDrcGIb7X4JEdbJPEotCKNgXcMgAqF7N1ZAh2K5H+GqhoRLO0Jzk3mKEuWGKj3d 9T2Qqs7jyhynC6VYpzVrJ8cEtKCPcBilK+28QjfCl0377wpSGZdbKGcP5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhhTlxiySIxOHRUyEQSnR81cuh/MB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXx6wdN9f 9bzfnDVxpOSp1iMK32aLxeVkEUIzFyhiSmu7wWFWIBlZwKSvd+C3hEd8WrITRys6 vRpAktBcq8jHf7N70R4GuH3I/yr4+pzhKlMXKKWAa9AV1H8Z358/rimqAcN0V+I9 HzYDtfmUkzBg5B4aNOpdcA2xnLgIlIAtaXbLKUrCKtPIs00wqBJQW5k3tiTGkIIX KhiGEzNRVPgj9yToCOfmxSfRXGW16gTXRES9MsnD9WdXnHgbmfOQU4dxfNaNmTDU aeNRGIRWlXUXObfdDwyY6CyjNEQiouNxO+c9zmfj6pB8UUS6bzR4Ak1KLNBmT+IP ULQqt6cxLQ4jQA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:18:30 2025 by rpki-client