$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: Groj5XHQqRjk9BL2h3pHD3YI2f80naNsTA0KmersXL4= Subject key identifier: A7:18:83:AF:72:60:EC:F8:BD:44:D3:15:64:10:67:34:8A:03:1C:72 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 0199FDDA5DF53626399628128529816B56B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 144F Signing time: Sun 19 Oct 2025 19:02:50 +0000 Manifest this update: Sun 19 Oct 2025 19:02:50 +0000 Manifest next update: Mon 20 Oct 2025 19:02:50 +0000 Files and hashes: 1: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 2: 3Q5YOz_BI10ve__t3IetYuqaGUA.roa (hash: ZILL1qGL3E11+bnE750yzGJ+LQfFTIO6h5xfluweBiQ=) 3: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 4: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 5: ONBLhs2q3EPNBcKzjuUXI9NfDXk.roa (hash: 02TEqjTXH1kKdBwPOe/Fj5S0NZ7Hp7pCF4TDcYi4oGk=) 6: WW6N0nsC2pVQw7M3pHrlWJbBGXw.roa (hash: XS90Xu8sWkUM1Fcl71wR/SDIDYfHwCcW1jjcYUuog9M=) 7: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 8: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 9: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: 6XL4WuBSnwaiONtHx2VLusQPkYnE6TlRUeJ7DThLcz0=) 10: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 11: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 12: hEZZKQJ28Km_5UhH3cpxvYkLLZU.roa (hash: +vaYxbzQEi6M9mf3DyKNxFAOI6eLzddsZf7cVFe2WCE=) 13: hUM0lQ0ODj8Qil7w4D2sZvQVB4w.roa (hash: 8bKnMQhqygeFZmPwESYE+kESImBLAc2qmeTscpnWZ2s=) 14: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 15: lUA4Psv--QayOhT_SsZZvDZxilM.roa (hash: YGf2R2IX409XBgVvc7ca6dAQRj+o7jLte4H3tVm4ZpY=) 16: nPdGgeG-9wHMZBn1oHFY2TrIyd4.roa (hash: ixNDdEbsReVkHb4nZt1NyyQNAMSP0+ayTT4IyJE76/4=) 17: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 18: obCoVAm0hvxcip-w22N9REpmREE.roa (hash: vGwldn+RYwwVCdhqcXFmCabgvTD/eyh/8OG4WUPwxXM=) 19: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:da:5d:f5:36:26:39:96:28:12:85:29:81:6b:56:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Oct 19 19:02:50 2025 GMT Not After : Oct 20 19:02:50 2025 GMT Subject: CN=a71883af7260ecf8bd44d315641067348a031c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:92:73:a8:17:e7:ba:5e:27:c2:b4:a8:90: 91:7b:4e:00:2c:11:8d:67:20:12:4b:3b:1d:45:8f: 85:e3:c4:97:6e:6e:c4:72:a8:51:9c:05:20:7f:a9: b1:c8:17:b5:84:79:91:1c:b9:33:5f:96:56:29:34: 77:ef:c0:73:69:dd:8c:a3:c6:cf:58:d7:e6:86:57: d0:2e:85:71:22:53:ec:56:4d:51:68:17:db:01:f6: f4:1b:34:d1:d4:01:12:f9:00:a1:a3:24:78:fc:bb: dd:cc:26:30:f3:5b:53:e2:d0:7f:5e:1d:0d:3c:ae: 61:4f:0f:53:e1:cb:5d:a5:d6:06:7f:3d:51:b1:43: 86:d3:c9:79:ac:22:d1:57:4e:67:07:b6:3b:1e:8e: a1:51:63:2e:35:35:49:1c:16:09:bd:ac:94:ba:76: 5c:fc:10:49:bc:24:e6:b6:6d:d1:33:a2:b0:67:44: 39:6a:96:90:6f:47:4a:97:51:a0:ae:14:a4:8b:a3: 8a:7a:97:e5:1b:bb:37:8b:ed:d3:bf:f5:9d:6c:41: 48:26:0f:bd:09:fd:88:e0:33:44:53:71:c9:b2:5c: af:f0:98:aa:78:f6:5d:69:d4:b2:41:6f:d0:c4:e1: a1:56:c3:d4:18:9a:3d:75:a5:7c:f3:d8:81:bb:bb: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:18:83:AF:72:60:EC:F8:BD:44:D3:15:64:10:67:34:8A:03:1C:72 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c0:c6:f3:d0:56:9e:f8:e8:84:a7:45:fc:7e:7e:cb:11:e0: f4:6a:2c:ac:e7:33:81:19:b4:d2:f4:8d:17:1a:a1:ea:19:7e: bc:ae:ec:e8:c9:ee:0f:4a:ad:14:1b:01:42:4f:ff:bb:12:5d: e2:e6:69:1e:ea:7b:4a:9a:69:41:12:85:9f:2d:e9:9c:7f:7a: 20:7c:22:de:2a:43:98:d8:39:71:84:57:9c:c0:8d:7a:ae:ab: 21:50:0e:7c:04:a7:3f:5c:e2:a8:90:5f:f7:5c:69:7f:20:03: ab:a3:1f:ef:22:5c:f1:df:25:04:78:42:b0:35:74:f6:e9:48: cd:56:f8:3d:b6:7e:4b:19:47:87:c9:95:f3:a8:8b:35:bd:ad: 2b:bb:5b:b8:4f:7a:af:1d:5b:28:a3:f8:be:1a:51:b9:7e:9d: 60:d1:85:17:97:31:3e:09:6b:2e:dd:b1:b6:6e:c9:2e:31:c2: 99:43:93:2e:5b:71:c2:04:40:e7:04:df:52:c3:6b:81:40:73: 19:eb:70:29:39:e4:9c:b9:37:ba:94:c0:c5:3c:fb:c5:5e:d4: fd:db:e3:b0:75:35:93:19:65:f7:b0:4f:c2:40:28:77:53:75: e9:b7:23:bf:0d:e4:3f:c8:b5:b3:c2:b1:ca:27:29:74:6e:46: fa:8c:c2:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92l31NiY5ligShSmBa1awMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUxMDE5MTkwMjUwWhcNMjUxMDIwMTkwMjUwWjAzMTEwLwYDVQQD EyhhNzE4ODNhZjcyNjBlY2Y4YmQ0NGQzMTU2NDEwNjczNDhhMDMxYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/eSc6gX57peJ8K0qJCRe04ALBGN ZyASSzsdRY+F48SXbm7EcqhRnAUgf6mxyBe1hHmRHLkzX5ZWKTR378Bzad2Mo8bP WNfmhlfQLoVxIlPsVk1RaBfbAfb0GzTR1AES+QChoyR4/LvdzCYw81tT4tB/Xh0N PK5hTw9T4ctdpdYGfz1RsUOG08l5rCLRV05nB7Y7Ho6hUWMuNTVJHBYJvayUunZc /BBJvCTmtm3RM6KwZ0Q5apaQb0dKl1GgrhSki6OKepflG7s3i+3Tv/WdbEFIJg+9 Cf2I4DNEU3HJslyv8JiqePZdadSyQW/QxOGhVsPUGJo9daV889iBu7ttoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcYg69yYOz4vUTTFWQQZzSKAxxyMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8DG89BW nvjohKdF/H5+yxHg9GosrOczgRm00vSNFxqh6hl+vK7s6MnuD0qtFBsBQk//uxJd 4uZpHup7SpppQRKFny3pnH96IHwi3ipDmNg5cYRXnMCNeq6rIVAOfASnP1ziqJBf 91xpfyADq6Mf7yJc8d8lBHhCsDV09ulIzVb4PbZ+SxlHh8mV86iLNb2tK7tbuE96 rx1bKKP4vhpRuX6dYNGFF5cxPglrLt2xtm7JLjHCmUOTLltxwgRA5wTfUsNrgUBz GetwKTnknLk3upTAxTz7xV7U/dvjsHU1kxll97BPwkAod1N16bcjvw3kP8i1s8Kx yicpdG5G+ozCHQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:36:59 2025 by rpki-client