$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft File: RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json) Hash identifier: i2v3hZwjKth1bBsPJ6WbyDq0IpepXWtX4uuPtlJPmhA= Subject key identifier: 8B:9D:56:16:91:2D:6A:A6:F2:0C:61:4D:EF:A9:44:85:2D:9E:1A:9B Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 0199FB0EDD830CE0C5E98F4706EC4198A75D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft Manifest number: 17B7 Signing time: Sun 19 Oct 2025 06:01:19 +0000 Manifest this update: Sun 19 Oct 2025 06:01:19 +0000 Manifest next update: Mon 20 Oct 2025 06:01:19 +0000 Files and hashes: 1: 6ugQ7Op1QlEgpnnjZORYaHyj-n4.roa (hash: da6x8ewYyKy59i5CpZgWQCl1+/GS7ELU/wuWQ0Fl69Q=) 2: 93XoyOBot5Q31NIUzCFTG35eypU.roa (hash: 3DisuqOhct1g6Kl/cifQgLMmcCXnn6jb3AkS/2a6zZU=) 3: 9lb0b8puZUrfHtd0Z5dIrE77_nU.roa (hash: OJTr3zPbOINFegVE0vxgz27hNWHc6eDJ+C9CqzwclrQ=) 4: Ch-PYAhyFagok0fhupPjZ_Lqcbg.roa (hash: MkUDcB5uA+GO6qe6fT2sF+iljffZj0n8p1hLZtz2zP0=) 5: JUyxU9F3JlDU8_kPHaIM7D1fTB4.roa (hash: lVPZY1fXxxj7hHiCvzUwToPcItRxiXJdn4MbDVZ/BIE=) 6: OOKUSdBo719Fy6eQLO8FhLRmb-A.roa (hash: 0lNFdByCLqg9LTuNeACyTh+4cjDobHcCQ2yCIpT7EoU=) 7: ORMfVTwPs1g4XJUABRwPxcI2TlM.roa (hash: 9SsDOeofewDgil5pBAt7LCSquVuRcpzseNGmRukWM3E=) 8: PEiuIrxRAt_nWSHWFCZ-Y1OnDuo.roa (hash: ZSdReMmjCAzPhYFnV9uySINs/4oWCSJNtieIfzwYQ/s=) 9: POIbET2y0PbfSBlBzEywzQzwDZM.roa (hash: c2xoo6jdbzcBQgJLO4NjoS/VTJiuYBB4TzzOCdQY54Y=) 10: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: 6mekp/prhiGadwOVDoh4pFc3my4R8Bv1K2V6WX4e8Ls=) 11: S-jHXkuTv3yEQ2sUq6iz0jvEKR8.roa (hash: tKw9zDphV/qDQspavEJGBoVyfasBPoIBbRoqri6AaYg=) 12: W8pbaE9SITvmp3StMfJ7E--X4M0.roa (hash: uRUesuHnpXbWgYa8xNv9zFt/fxahoQmchuNu9Hzil3c=) 13: ZI6GdsMzohLPUFShGgyzJq1kyik.roa (hash: PrDvAMB+nPO9eaE9jiZQHT0Ok3/0hmxZNq9LGHu2LmY=) 14: ZTNxxf9Sv4EBIpVp27CcJMGatqI.roa (hash: qgnMNoDlY76gADXwHdrnws2enpTow72z+24Q3TkgA6g=) 15: bOCirTuv1rJ7d21sCVfI-ZEZsC0.roa (hash: dYryQSN+J2/I1HVZ6aOA/OKAyzM7xMkAvl6Lj9fmkRc=) 16: doTkTINLFVROWpT2utaeKFTTyfg.roa (hash: JBSOler1D5ArGxteRfH6QxI8GrNqgOUNUjr08yLOppA=) 17: fppOoPtasrtX4ZPzc57YRYYu954.roa (hash: b5+haWAHnyoPiS6Ivn63/MAGZ3E+APtZSJu8to6vL6M=) 18: ijaEBGBM7o1seGP9ZFryQWjDWk4.roa (hash: Pjmjb1/h0AeL+KxQ/QOIKyfX0TnoNPhenlbIfi1Wt9Y=) 19: pI7XDjTTax8lwNnKoyATZH6iINk.roa (hash: KiV42z1Tt5AFA+Qqb4Fmz7NSYrfFKo/28iS+QhxS8xc=) 20: pIq4SZw2Svh3QOShxoTk15XsP8I.roa (hash: 7+fT26kynb0u9jWu0Oa/khgp+953vZ0+uc0j+qVL1gw=) 21: pJLtq0OEiC2n7NLXkBcDtX4LKDI.roa (hash: uNIUZktT2Y68Tva6qi8p96kvm5I4VqlHL5j6Sqmwjo8=) 22: r47m3eotHrMfZKa0-yAY8glxtLY.roa (hash: mRtglxssp+DT8qOyFoRUQ5mLUPm3H45BSG3whqlcJGc=) 23: rznOCTPZyadrsSzyPCChz69ZAxU.roa (hash: 2zkH1SRaKlvMmrIdmVipWy+g7uH2rfqKdzk0RNlqPlA=) 24: sTTymR01F6RDoynC8TSKvkamGWE.roa (hash: Q6Klebt7/VfO16Ve7IU7cVobaORhn/KAvxjY4XLaEeQ=) 25: wJSVIQ5jg_-lv48HD0WKwu2CbdM.roa (hash: oRLIIxFVnadydVwsfyy8jjdbfqtuyuSbLDJWjt8TqWI=) 26: wrl9kLnP1rk7nT8nfaCtICzeH9s.roa (hash: hvWb2rrC33UUwdJUa2tUX3NGj1r9RLGSxKqLlZYr8D4=) 27: xPpE8yilatvrlQqhaODXcuCQMRQ.roa (hash: m1iGFellVqhw09DmfgQAIie/XJNCkARQnPCE/n/F5H4=) 28: ziWOGVzc91RDjHDHhPd1qawwCoQ.roa (hash: MaCT2em34JjV5QJZwshEC6RNemddpDFN1wmBFpOjty8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0e:dd:83:0c:e0:c5:e9:8f:47:06:ec:41:98:a7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Oct 19 06:01:19 2025 GMT Not After : Oct 20 06:01:19 2025 GMT Subject: CN=8b9d5616912d6aa6f20c614defa944852d9e1a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:76:54:99:da:20:52:6a:d7:24:3a:4c:7a: ea:79:3b:ca:ca:ab:2c:22:95:53:ce:54:5b:6f:01: 3b:a5:07:81:db:e8:c4:5c:c5:ab:88:df:0a:32:95: 35:36:64:ef:96:73:3c:78:79:41:a9:e9:b0:fe:73: d1:15:42:c8:6f:04:0d:86:89:d7:36:0f:df:f0:b2: a8:a6:3c:61:af:33:3c:f9:07:ef:ab:e8:45:0d:97: 35:15:1a:39:b6:19:40:7e:f9:75:80:89:ba:77:65: d9:47:34:df:67:c9:10:4b:04:aa:2b:e2:d6:67:14: 81:dc:20:4e:26:c9:09:91:5a:74:1a:b7:93:4c:07: 4a:24:2d:50:eb:9b:7e:b3:69:af:92:9b:0d:6f:aa: e2:dc:a3:5f:e9:3f:e3:17:74:ed:a0:6f:9b:20:fd: 66:74:0e:e5:90:8c:6b:16:42:87:d8:f2:0e:f0:40: 2c:63:34:19:25:65:34:d2:3c:e8:a0:e2:d4:c4:95: 29:9a:98:7b:27:19:48:6f:46:b5:3d:ba:8a:ba:88: ee:4e:c4:d0:46:87:4a:a9:4b:a6:e1:11:1a:a3:fc: 53:2d:5b:e8:61:fa:7a:78:03:d1:83:1f:0f:88:e2: 5b:ce:0f:1e:37:1a:0b:e9:15:cf:9c:4d:86:38:07: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9D:56:16:91:2D:6A:A6:F2:0C:61:4D:EF:A9:44:85:2D:9E:1A:9B X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:27:cf:33:da:78:01:ff:c2:d8:3a:30:99:8c:36:05:5f:93: 53:b4:b0:a9:2d:dd:49:dc:3f:43:d5:2b:e2:f7:e6:70:82:2f: eb:9c:1d:0c:d4:f5:0c:59:6d:d0:41:cc:07:0a:bf:9f:cb:2e: 2c:b9:0c:35:b4:97:90:d3:e6:e4:54:58:95:55:88:70:21:b7: 94:04:c4:9c:3e:05:d3:ec:dc:c2:9c:f8:52:a9:6e:8f:24:1c: 55:00:51:88:fb:5e:74:4c:e7:5e:e4:b9:4d:2f:8e:78:bb:fc: a6:b6:42:01:ee:08:7c:6f:f8:6e:18:0e:d4:88:21:4b:b2:e2: 90:a8:fb:e1:a7:f4:e1:6b:e7:c1:6e:1d:b8:c6:2b:ec:c4:6d: 50:ea:8a:ba:fc:55:aa:05:4e:c3:50:f2:90:71:58:08:a6:d0: a6:16:c3:93:b1:31:ec:f5:e9:26:94:39:36:54:34:35:e1:ce: d1:ed:8f:aa:2d:6c:e5:d4:fe:eb:68:35:eb:ea:06:2c:f0:27: 00:9b:27:72:bb:11:66:fe:92:95:35:56:51:f4:dd:4d:54:5b: 10:0f:4d:b7:67:ae:17:8f:66:b2:2f:4a:92:8c:8f:0f:ec:20: af:b6:91:43:ac:5c:d7:f0:37:7c:fc:d1:30:c0:81:95:0c:6b: 61:d8:5f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7Dt2DDODF6Y9HBuxBmKddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjUxMDE5MDYwMTE5WhcNMjUxMDIwMDYwMTE5WjAzMTEwLwYDVQQD Eyg4YjlkNTYxNjkxMmQ2YWE2ZjIwYzYxNGRlZmE5NDQ4NTJkOWUxYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYF2VJnaIFJq1yQ6THrqeTvKyqss IpVTzlRbbwE7pQeB2+jEXMWriN8KMpU1NmTvlnM8eHlBqemw/nPRFULIbwQNhonX Ng/f8LKopjxhrzM8+Qfvq+hFDZc1FRo5thlAfvl1gIm6d2XZRzTfZ8kQSwSqK+LW ZxSB3CBOJskJkVp0GreTTAdKJC1Q65t+s2mvkpsNb6ri3KNf6T/jF3TtoG+bIP1m dA7lkIxrFkKH2PIO8EAsYzQZJWU00jzooOLUxJUpmph7JxlIb0a1PbqKuojuTsTQ RodKqUum4REao/xTLVvoYfp6eAPRgx8PiOJbzg8eNxoL6RXPnE2GOAe7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIudVhaRLWqm8gxhTe+pRIUtnhqbMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyfPM9p4 Af/C2DowmYw2BV+TU7SwqS3dSdw/Q9Ur4vfmcIIv65wdDNT1DFlt0EHMBwq/n8su LLkMNbSXkNPm5FRYlVWIcCG3lATEnD4F0+zcwpz4UqlujyQcVQBRiPtedEznXuS5 TS+OeLv8prZCAe4IfG/4bhgO1IghS7LikKj74af04WvnwW4duMYr7MRtUOqKuvxV qgVOw1DykHFYCKbQphbDk7Ex7PXpJpQ5NlQ0NeHO0e2Pqi1s5dT+62g16+oGLPAn AJsncrsRZv6SlTVWUfTdTVRbEA9Nt2euF49msi9KkoyPD+wgr7aRQ6xc1/A3fPzR MMCBlQxrYdhfDQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:30:26 2025 by rpki-client