$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json) Hash identifier: TMm46M55xeK7s5x7hJ/8Moz5UtNzOqbO7DT2TTpsvJE= Subject key identifier: AA:35:FD:E9:22:D0:00:D6:2A:6F:9D:84:EA:71:4A:29:D5:F0:C8:82 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 0199FEEBF717CEAB92C04D7957233E3E821D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft Manifest number: 16FE Signing time: Mon 20 Oct 2025 00:01:41 +0000 Manifest this update: Mon 20 Oct 2025 00:01:41 +0000 Manifest next update: Tue 21 Oct 2025 00:01:41 +0000 Files and hashes: 1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=) 2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=) 3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=) 4: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=) 5: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=) 6: LfLe7YKoxpINUdoXGyuAfXYrniQ.roa (hash: Dgetk7NQsymcClj7R3CjDeNB27bpcwbabN1XuUrEiuk=) 7: N_xX4hN6_pU0YZzxQfLsLMWzEow.roa (hash: 8N5cQN3Y95rVz2dOazHhhTq6wdALbmwxrTIIMBIgqro=) 8: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=) 9: TcREFaat3BLntw04ypyL63blPnc.roa (hash: ujFrwypXV/leJfWI8GP1wwYG1eD9LOp8Gpc7lvuU/io=) 10: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=) 11: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=) 12: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=) 13: c058vaKW2q2SEgN7MTDBlii74TU.roa (hash: qkSWGzegQ9qv/uY6suBAC1ezFokcpt8Kro9INhY4sGc=) 14: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=) 15: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: EceU30bnjQpnlPk/ieQ8s0VooPur+dyjPdZpREDRwDQ=) 16: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=) 17: qD_HB0o7DOWSBWXI-Nl6im58bqg.roa (hash: udEbzIJxZzFM7igXdgsMuUn0o4EJ+tU5RB+FQKdp76Y=) 18: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:f7:17:ce:ab:92:c0:4d:79:57:23:3e:3e:82:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Oct 20 00:01:41 2025 GMT Not After : Oct 21 00:01:41 2025 GMT Subject: CN=aa35fde922d000d62a6f9d84ea714a29d5f0c882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:b0:2b:1b:29:1f:74:93:c0:82:b9:d2:9a: ba:7e:8e:6c:88:cb:b5:0e:a9:d8:7e:37:27:de:20: 2d:1e:ae:ae:01:e5:4b:31:82:16:41:f6:b8:7b:68: c2:c2:d4:55:83:01:54:97:f4:9f:02:cd:56:b6:d8: d2:9a:30:39:33:06:33:82:94:1e:c4:d8:06:19:4c: c6:d0:5d:14:5f:b5:6a:f5:90:6b:ba:af:cb:ea:9e: c3:e7:17:a0:db:7c:c5:8c:b4:7a:01:b2:bd:c5:c2: ee:d7:a6:5c:97:54:90:a9:8b:23:1d:ee:85:b9:c0: 59:fd:b7:1f:e1:68:8e:77:e9:2f:12:e1:44:dd:a1: 61:09:4e:dd:8d:b2:86:d8:b4:a5:36:4b:f5:ab:16: 50:7c:fc:67:be:b7:5c:de:27:d6:1d:4c:8a:fb:37: b7:e4:fb:75:68:0d:8c:cd:ed:57:b4:93:23:82:b8: 43:2c:44:13:c3:49:fa:00:86:44:98:c1:99:32:a1: 29:90:b6:41:c7:53:ff:52:ec:c8:e6:bf:07:a0:52: ef:f1:f5:e8:40:e7:bc:f0:4d:ed:36:29:f9:d5:e0: 33:f3:03:cb:a4:90:eb:f1:99:63:66:62:81:9c:fe: 83:84:91:c9:be:0d:28:38:08:76:18:65:4a:e6:17: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:35:FD:E9:22:D0:00:D6:2A:6F:9D:84:EA:71:4A:29:D5:F0:C8:82 X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fa:eb:ed:4a:8c:7e:a6:30:49:4a:78:9f:4d:f0:5d:6d:9c: 4e:47:23:4e:63:8b:41:42:ab:8c:26:31:61:d9:8a:c4:97:c8: d3:62:ec:37:7b:b1:2a:ac:cc:13:46:1a:02:83:e0:56:77:88: 93:5f:94:18:9d:56:10:30:b9:d2:53:bd:3b:aa:1d:8f:c7:58: b9:72:71:85:38:bf:3d:0c:bc:d5:29:f3:8b:78:28:e5:d6:21: 21:47:40:1e:36:07:e1:7d:01:e1:8f:22:a9:34:d1:07:22:d2: f6:df:30:6c:15:48:17:49:c2:8b:e2:8a:34:c8:c2:a0:89:72: 8b:e9:65:d7:de:2e:99:de:3a:68:41:a8:9e:5c:60:ec:91:91: 4b:99:ed:e3:59:2e:5f:3d:89:bd:f7:ba:d8:11:b2:e4:d0:b4: da:53:a1:0c:86:b7:fb:f9:ff:8f:bb:d0:cc:2b:a7:63:d3:d8: 5e:7b:b2:46:ad:1a:2b:e4:60:eb:53:c6:23:29:fd:d6:48:5e: a7:ff:51:46:7b:d6:2d:8e:fb:02:3d:07:df:3c:b7:fb:bc:0c: f7:46:4d:36:da:97:df:26:c7:38:34:ca:4f:bd:af:5a:0e:27: 0d:23:a5:69:7e:df:f1:fc:ca:31:77:10:f0:fd:d6:c8:ad:55: 26:4c:13:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+6/cXzquSwE15VyM+PoIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjUxMDIwMDAwMTQxWhcNMjUxMDIxMDAwMTQxWjAzMTEwLwYDVQQD EyhhYTM1ZmRlOTIyZDAwMGQ2MmE2ZjlkODRlYTcxNGEyOWQ1ZjBjODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3CwKxspH3STwIK50pq6fo5siMu1 DqnYfjcn3iAtHq6uAeVLMYIWQfa4e2jCwtRVgwFUl/SfAs1WttjSmjA5MwYzgpQe xNgGGUzG0F0UX7Vq9ZBruq/L6p7D5xeg23zFjLR6AbK9xcLu16Zcl1SQqYsjHe6F ucBZ/bcf4WiOd+kvEuFE3aFhCU7djbKG2LSlNkv1qxZQfPxnvrdc3ifWHUyK+ze3 5Pt1aA2Mze1XtJMjgrhDLEQTw0n6AIZEmMGZMqEpkLZBx1P/UuzI5r8HoFLv8fXo QOe88E3tNin51eAz8wPLpJDr8ZljZmKBnP6DhJHJvg0oOAh2GGVK5hevOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo1/eki0ADWKm+dhOpxSinV8MiCMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvrr7UqM fqYwSUp4n03wXW2cTkcjTmOLQUKrjCYxYdmKxJfI02LsN3uxKqzME0YaAoPgVneI k1+UGJ1WEDC50lO9O6odj8dYuXJxhTi/PQy81Snzi3go5dYhIUdAHjYH4X0B4Y8i qTTRByLS9t8wbBVIF0nCi+KKNMjCoIlyi+ll194umd46aEGonlxg7JGRS5nt41ku Xz2Jvfe62BGy5NC02lOhDIa3+/n/j7vQzCunY9PYXnuyRq0aK+Rg61PGIyn91khe p/9RRnvWLY77Aj0H3zy3+7wM90ZNNtqX3ybHODTKT72vWg4nDSOlaX7f8fzKMXcQ 8P3WyK1VJkwTBA== -----END CERTIFICATE-----Generated at Mon Oct 20 05:24:30 2025 by rpki-client