$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: xoqaEauLKXbz3FPB6LPWuDxIkJxjqIAVhloPsG4jezA= Subject key identifier: BA:E5:02:D0:E1:B8:90:C8:5F:58:9B:E7:5D:A3:2B:EB:F7:82:0A:81 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 0199FBEAFEB4F9C92ADD86E858D29FDAB80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 16EB Signing time: Sun 19 Oct 2025 10:01:45 +0000 Manifest this update: Sun 19 Oct 2025 10:01:45 +0000 Manifest next update: Mon 20 Oct 2025 10:01:45 +0000 Files and hashes: 1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=) 2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=) 3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=) 4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: zive2nOjBMeNa81hYH7ULQkACnG1ud2I10y5FupWYe8=) 5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=) 6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=) 7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=) 8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=) 9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=) 10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=) 11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=) 12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=) 13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=) 14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=) 15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=) 16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=) 17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=) 18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=) 19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=) 20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=) 21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=) 22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ea:fe:b4:f9:c9:2a:dd:86:e8:58:d2:9f:da:b8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Oct 19 10:01:45 2025 GMT Not After : Oct 20 10:01:45 2025 GMT Subject: CN=bae502d0e1b890c85f589be75da32bebf7820a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:d8:80:df:d5:a2:c4:c4:f2:57:9a:0c:cb: 73:0c:d4:5f:e0:f3:0f:00:e5:91:a7:b6:03:ea:ee: 61:06:ce:b1:f8:f9:ef:61:c8:e0:93:d6:fa:32:7a: a1:70:b9:28:ca:b0:3b:7b:8f:c2:96:de:4a:c5:c6: 15:b6:ca:9e:f3:65:b0:7c:8e:90:5a:eb:66:35:b4: b2:35:5f:60:a3:91:7f:4a:11:cf:96:78:1d:52:6a: b5:41:1e:d5:63:6c:f9:d7:db:ac:bf:75:58:31:b4: 61:49:67:ab:0f:8f:50:8e:94:f6:35:42:c0:c1:7f: 14:43:ae:6c:9a:99:d9:61:b6:9b:84:99:7a:1a:02: e2:4f:9d:bf:22:28:1f:70:c5:17:99:44:6f:bf:67: 87:14:a2:44:04:23:bd:84:39:2c:13:60:44:b1:c7: 4f:ee:38:7a:3c:ad:c5:6d:22:ae:6b:02:39:a8:c4: d8:dc:55:48:57:70:8d:af:a2:69:ee:f7:33:37:94: b9:3e:4d:00:a8:b3:e6:61:9a:d8:79:a3:9c:f6:54: b8:e8:17:da:6b:d8:08:e7:b0:3b:d6:b7:66:8a:94: 1a:ed:31:20:14:7d:72:c8:bb:b1:8b:6a:ce:c2:e9: 54:d1:d2:4a:20:2f:21:c9:04:ba:37:0b:b6:bd:c9: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E5:02:D0:E1:B8:90:C8:5F:58:9B:E7:5D:A3:2B:EB:F7:82:0A:81 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7e:48:71:39:7c:6d:4e:7d:58:c4:03:64:1b:60:ed:ac:d1: f8:b7:51:50:67:c3:55:a3:13:d9:46:1c:a7:de:6f:f5:5a:a5: 52:95:6d:5e:5f:3d:ec:7c:e9:62:bb:5f:17:2b:70:37:f0:a4: 73:18:0f:f1:a5:ff:47:5d:9f:f3:a9:42:09:4e:72:45:3f:54: 96:9b:db:c0:01:d2:05:71:28:50:04:10:0a:7e:ca:09:4e:84: f2:a1:07:84:ab:06:5e:e5:29:20:cc:c0:14:2f:c4:04:f8:cc: bb:87:8a:c3:d3:12:de:51:28:21:d8:43:5d:eb:08:83:83:d1: 64:2b:d0:67:00:8b:1b:ed:d1:ec:56:ad:f1:10:c9:08:19:f4: c5:eb:a8:73:ce:c4:0f:f7:fe:77:ff:63:fc:78:0a:2f:7a:6a: d0:67:09:8a:02:6e:5c:f6:d5:99:17:52:c9:e5:10:43:a0:f0: fb:c4:85:e3:99:14:02:d0:8c:31:3b:01:34:ec:29:c6:8e:3d: 31:cc:ef:1e:c2:80:99:2f:df:ad:02:22:b3:ec:b9:3a:41:c7: 54:8b:04:16:b0:4b:0d:21:bc:46:fa:7e:b7:ce:b4:1d:e1:3f: 6a:bd:04:27:73:a4:b8:08:de:37:31:ee:72:6c:56:a7:36:ea: c5:21:4a:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76v60+ckq3YboWNKf2rgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjUxMDE5MTAwMTQ1WhcNMjUxMDIwMTAwMTQ1WjAzMTEwLwYDVQQD EyhiYWU1MDJkMGUxYjg5MGM4NWY1ODliZTc1ZGEzMmJlYmY3ODIwYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsXYgN/VosTE8leaDMtzDNRf4PMP AOWRp7YD6u5hBs6x+PnvYcjgk9b6MnqhcLkoyrA7e4/Clt5KxcYVtsqe82WwfI6Q WutmNbSyNV9go5F/ShHPlngdUmq1QR7VY2z519usv3VYMbRhSWerD49QjpT2NULA wX8UQ65smpnZYbabhJl6GgLiT52/IigfcMUXmURvv2eHFKJEBCO9hDksE2BEscdP 7jh6PK3FbSKuawI5qMTY3FVIV3CNr6Jp7vczN5S5Pk0AqLPmYZrYeaOc9lS46Bfa a9gI57A71rdmipQa7TEgFH1yyLuxi2rOwulU0dJKIC8hyQS6Nwu2vclsvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrlAtDhuJDIX1ib512jK+v3ggqBMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU35IcTl8 bU59WMQDZBtg7azR+LdRUGfDVaMT2UYcp95v9VqlUpVtXl897HzpYrtfFytwN/Ck cxgP8aX/R12f86lCCU5yRT9UlpvbwAHSBXEoUAQQCn7KCU6E8qEHhKsGXuUpIMzA FC/EBPjMu4eKw9MS3lEoIdhDXesIg4PRZCvQZwCLG+3R7Fat8RDJCBn0xeuoc87E D/f+d/9j/HgKL3pq0GcJigJuXPbVmRdSyeUQQ6Dw+8SF45kUAtCMMTsBNOwpxo49 MczvHsKAmS/frQIis+y5OkHHVIsEFrBLDSG8Rvp+t860HeE/ar0EJ3OkuAjeNzHu cmxWpzbqxSFKbA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:07:16 2025 by rpki-client