$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json) Hash identifier: 29ieCFWGn6OWbRtXH1HieOQ9tbLuOSXpxpwrij/J2QU= Subject key identifier: 94:7B:BF:7B:07:D5:12:52:31:1F:D8:7C:68:CD:A6:72:7C:D2:5C:58 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 0199FCC64E3E375F991574AF834E5EC81BF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft Manifest number: 172D Signing time: Sun 19 Oct 2025 14:01:18 +0000 Manifest this update: Sun 19 Oct 2025 14:01:18 +0000 Manifest next update: Mon 20 Oct 2025 14:01:18 +0000 Files and hashes: 1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=) 2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=) 3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=) 4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=) 5: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (hash: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=) 6: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=) 7: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=) 8: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=) 9: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=) 10: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=) 11: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=) 12: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=) 13: TH2FjafTPAZL_mWQxJbc1btzyxI.roa (hash: G8YErxusID/p1+2HPMXeLDbOJMfQf8vU1HgRFZ4uzuM=) 14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=) 15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=) 16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=) 17: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=) 18: ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa (hash: A8osarOaXuQWeZx8KQYjMoJwdcPiXJPczE87ARsfRqI=) 19: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: yMHbNYyyb2ynpImAB9OMm4yFZrBIOBRQOMoru9tCXHk=) 20: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=) 21: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=) 22: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=) 23: k1RkiO-oYIsdIxPMb4yp4wi06vw.roa (hash: MCgag/nnrriwvetJZ3hm9uP9KJjRl+UaPWHYQ89ULn8=) 24: pKg9Eulzznq_Xmusn2tCljsUFm0.roa (hash: ZV91D/vMdBvdabbs6xfKbOYCwCqfj4mEA5NzU3QNIzA=) 25: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=) 26: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=) 27: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=) 28: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=) 29: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=) 30: zKmTOViL8l45Fi9xQRzBEWhChMs.roa (hash: i7XHAI01U2jBRys7znRQbgt3haoweJPHe63PN5KXiz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:4e:3e:37:5f:99:15:74:af:83:4e:5e:c8:1b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Oct 19 14:01:18 2025 GMT Not After : Oct 20 14:01:18 2025 GMT Subject: CN=947bbf7b07d51252311fd87c68cda6727cd25c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:be:da:2d:ff:33:b6:e7:1c:53:fb:99:ac: 58:f4:20:4d:0f:a6:2b:c6:84:5e:e2:42:85:bb:61: e8:d3:84:d6:4c:9f:43:df:34:9f:3f:1f:5e:78:e3: 9f:b9:0f:a6:e1:ba:cd:13:6a:eb:c3:84:29:3c:10: 1a:92:e2:3b:aa:a6:fe:68:8d:7d:08:44:5d:6f:9a: 68:ef:2e:ca:7f:46:9f:41:7f:83:f9:22:fc:64:24: cb:fa:a0:68:11:0d:84:9f:ca:2d:55:10:86:ee:14: f2:bf:68:0b:36:01:0b:1a:46:b7:61:47:88:0a:c2: 48:f8:b0:c1:cf:15:9f:3c:78:f6:6b:66:8b:4f:aa: 1c:df:51:3a:58:48:4b:38:0b:ec:57:f2:98:18:a9: 3b:7f:19:bc:73:62:17:e2:3c:5d:74:f6:da:9d:b6: 1c:71:ed:42:d9:7e:14:c5:a1:fe:25:92:e2:92:65: 7c:35:b3:c7:14:f4:52:60:f9:06:a9:f9:3c:e6:02: 9e:1a:db:7c:aa:58:8b:fb:74:be:b3:52:7a:32:8c: d1:99:ae:23:c5:44:0c:e2:05:99:13:7b:50:41:de: d4:a1:34:e1:d0:99:36:a5:4e:09:fe:b9:89:92:d4: 41:19:a2:75:40:65:64:d6:39:02:62:f8:44:e1:c6: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7B:BF:7B:07:D5:12:52:31:1F:D8:7C:68:CD:A6:72:7C:D2:5C:58 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:54:4e:7b:52:3a:95:ac:13:65:5e:d3:5c:ee:d6:d2:16:17: 20:d7:8f:84:c1:20:f9:d9:84:f4:45:21:7d:8a:0c:4a:f0:ae: 46:40:99:4d:a6:4b:db:92:8c:d4:ff:19:aa:72:fa:ca:dd:97: 86:71:9e:a9:66:ae:1c:c2:28:62:91:fe:8e:d5:02:52:f6:07: 08:55:4e:ce:e7:be:9e:72:29:79:4f:13:4d:21:5f:8f:b6:33: 60:e6:01:b6:8b:a7:d6:0b:28:2d:95:c4:74:62:b5:cd:0a:fd: d6:38:25:72:95:8b:bc:f2:20:41:24:a1:3f:2c:30:e1:49:a3: 92:6a:8b:17:67:63:0c:f1:e1:a6:89:40:e6:75:d2:73:57:87: 3b:77:44:0c:a0:49:12:b8:9d:c2:ab:15:6d:c3:a8:c3:fb:d2: 1a:15:f5:05:8c:25:2f:9a:bb:dd:61:05:d8:3a:79:db:3a:e8: 90:46:64:90:2f:c7:4b:57:22:d6:39:13:e7:11:de:a9:d3:b2: be:fb:84:30:7c:93:b6:6e:58:ac:39:d6:d2:23:54:45:26:2b: dd:0f:2c:4f:c4:06:8c:0f:f4:84:9d:23:cf:b9:9f:57:7a:46: 3e:5f:14:18:a1:f6:b2:cd:0f:b4:86:b8:23:07:ae:e4:44:64: 7c:91:5d:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xk4+N1+ZFXSvg05eyBvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUxMDE5MTQwMTE4WhcNMjUxMDIwMTQwMTE4WjAzMTEwLwYDVQQD Eyg5NDdiYmY3YjA3ZDUxMjUyMzExZmQ4N2M2OGNkYTY3MjdjZDI1YzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWS+2i3/M7bnHFP7maxY9CBND6Yr xoRe4kKFu2Ho04TWTJ9D3zSfPx9eeOOfuQ+m4brNE2rrw4QpPBAakuI7qqb+aI19 CERdb5po7y7Kf0afQX+D+SL8ZCTL+qBoEQ2En8otVRCG7hTyv2gLNgELGka3YUeI CsJI+LDBzxWfPHj2a2aLT6oc31E6WEhLOAvsV/KYGKk7fxm8c2IX4jxddPbanbYc ce1C2X4UxaH+JZLikmV8NbPHFPRSYPkGqfk85gKeGtt8qliL+3S+s1J6MozRma4j xUQM4gWZE3tQQd7UoTTh0Jk2pU4J/rmJktRBGaJ1QGVk1jkCYvhE4cYZfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJR7v3sH1RJSMR/YfGjNpnJ80lxYMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1ROe1I6 lawTZV7TXO7W0hYXINePhMEg+dmE9EUhfYoMSvCuRkCZTaZL25KM1P8ZqnL6yt2X hnGeqWauHMIoYpH+jtUCUvYHCFVOzue+nnIpeU8TTSFfj7YzYOYBtoun1gsoLZXE dGK1zQr91jglcpWLvPIgQSShPyww4UmjkmqLF2djDPHhpolA5nXSc1eHO3dEDKBJ EridwqsVbcOow/vSGhX1BYwlL5q73WEF2Dp52zrokEZkkC/HS1ci1jkT5xHeqdOy vvuEMHyTtm5YrDnW0iNURSYr3Q8sT8QGjA/0hJ0jz7mfV3pGPl8UGKH2ss0PtIa4 Iweu5ERkfJFdWQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:32:34 2025 by rpki-client