$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft File: 1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json) Hash identifier: I1j03j3D55sfKUBpx0wtmEruOyIJZfBlCbHjd1GwO4o= Subject key identifier: 13:73:9C:A9:B9:AD:DB:74:BD:C9:F8:7E:84:60:AF:85:22:60:63:3F Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 0199FDD8EC5616B96C181628E7DBF2CE2114 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft Manifest number: 064C Signing time: Sun 19 Oct 2025 19:01:15 +0000 Manifest this update: Sun 19 Oct 2025 19:01:15 +0000 Manifest next update: Mon 20 Oct 2025 19:01:15 +0000 Files and hashes: 1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: XKzddklJFnbrOqcdY8lv+u41DACLsPQDD7B8yES4yU4=) 2: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=) 3: 9B7naTDbTfBC3f0Su46QWyrhOAU.roa (hash: EuLTR97eLUOnyJBm+T95P0s0ZZVOErLTXd4saTTHgqg=) 4: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=) 5: F3TFrLyovb8XvAopBK7JOYa2mwI.roa (hash: pEvX4onxvm1t0Llqu8JqybLkNG3FnmVsK+ePV2bdtbk=) 6: LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa (hash: I7tPfrwHzB0UAJOseFDltlGuyXCQ69zHCcehJNGrXZI=) 7: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=) 8: OEVx3wt-afSCjQoq4CCBGEYZ0-0.roa (hash: RZxMVkxGx/ioX0a/f6t/tDg0YGbR5g3ZOXjOM4aJF6g=) 9: TN5asrP-O_svuOzye5lJGogWzMo.roa (hash: rh9STD4IRIWTtIYMAcynIA4v5v5kpJ3eCDcSGZQerzs=) 10: V0NyGBzeNeiAwnkgDdus_1vA7a8.roa (hash: RKgBfoEec6XrdZ6UCnyyORQQ1M5776wgDHM2EvtO4bU=) 11: VEzRmKCthg0N9znr0nEC6lBX2SE.roa (hash: uFDhugUUw1ANaPXsl+IH/rhPDlcZVp0gQ5Plq/UIw9k=) 12: XnSGdaCJ3eKb4i-6Nu6dhvAlrx4.roa (hash: wQcutn0UQG9+UbR3j8U6CVNcG7YhBuHIXfvYXpQN+ao=) 13: YZ34ohn7UHU7vWLuHkxIWGq6VME.roa (hash: 0GMkUY1h4araSisikiq5dkNU327B8IVoamMuZRli6ao=) 14: Yw1DL4n3FWC67KL8P9tumDcnyZE.roa (hash: kPAh3h9z93w4ldeG3DZ18aXthzPwd8/sa1w8KSR09RU=) 15: krwPzjnTtCEOQgP9EXp1WO-kgx0.roa (hash: Jq2f8YMj3fJWLcxBtjZ9CHuZ6W1PxUoBmS3CD2sax2Q=) 16: rZ3f2ghlIlMmEeLut9WQeMpv_SI.roa (hash: /O3dwETcjlHRpfy4ApMsXsWCRk5nnssK+ipGTgIqiqA=) 17: uJPBnwCQe4pWBPSakttM1tJFVcw.roa (hash: SlkGHJE+y8/3ykMchDghQk+vAt9Ko0/kJI2Pi7OwLbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d8:ec:56:16:b9:6c:18:16:28:e7:db:f2:ce:21:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Oct 19 19:01:15 2025 GMT Not After : Oct 20 19:01:15 2025 GMT Subject: CN=13739ca9b9addb74bdc9f87e8460af852260633f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:f2:bc:05:79:cb:54:e2:bb:3a:01:84:89: 0a:2e:e2:37:d4:ad:41:5c:f4:31:cc:7f:3c:84:76: ec:38:9c:5e:bf:ed:ee:a5:49:7d:ac:2f:97:9d:3c: 34:a5:a7:67:26:ed:90:64:e6:b4:40:a6:87:7d:3b: 5c:55:5a:dd:ca:3c:af:57:b0:0c:f1:9d:d5:98:2e: 78:a1:e8:dd:6f:6c:da:63:dc:7f:7c:6a:8f:79:9f: d4:b0:15:20:80:88:53:90:de:5e:8e:60:31:53:b3: 97:ec:66:55:ea:56:eb:9e:92:27:17:38:5b:11:1d: f1:f3:68:dc:6e:cc:20:fd:28:f5:24:a9:bb:8f:c4: f0:12:9b:5a:20:be:f3:d3:ab:8c:9a:b6:7e:eb:82: b9:14:1d:3a:1e:94:17:43:17:71:83:55:27:97:16: d9:be:8a:f0:7b:f6:88:34:90:03:5d:eb:64:9c:28: ab:7d:11:61:10:4d:dc:41:cd:f0:db:5e:37:d5:a3: 9c:7d:7b:c6:88:e7:48:a0:e5:5f:b2:f9:be:56:56: a2:7f:ca:65:86:2a:73:7b:19:fe:05:aa:55:e1:df: 9c:6c:03:c3:3b:ff:d1:86:4a:e1:ac:cd:11:cb:2a: b9:3b:05:08:9a:a2:75:4d:0f:14:11:4c:b0:e9:9a: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:73:9C:A9:B9:AD:DB:74:BD:C9:F8:7E:84:60:AF:85:22:60:63:3F X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fd:57:78:4e:c8:91:97:d1:9a:e6:97:32:61:d5:e0:2a:02: e0:4d:ac:02:f2:e9:f4:c3:bf:db:b3:4e:81:eb:04:96:ec:09: f8:e4:6b:fb:91:19:e0:c8:7d:24:a2:78:17:c1:4d:62:9c:88: a9:a5:df:4b:63:99:06:92:29:dd:37:5a:73:6b:16:26:2a:67: 75:a8:57:28:d7:3e:e3:2a:b8:aa:41:af:37:85:81:8f:2a:56: 19:6b:cf:2d:d7:29:77:b8:e2:a0:be:20:93:c4:e3:62:90:7e: 13:12:95:3a:f4:ec:fd:89:be:f9:79:7c:c0:04:ca:6d:bb:fd: c4:29:f7:57:61:5c:3c:e7:e8:15:99:dc:be:99:b3:21:35:82: 74:73:5b:ff:0b:54:dd:89:d9:07:af:7d:2b:48:fc:85:94:95: be:59:21:fc:b5:84:8f:02:9d:a0:68:ed:92:cd:5f:66:49:63: 13:49:03:47:2b:9c:57:e4:df:ef:bf:32:96:a0:e6:e9:16:3b: 4f:bc:0f:be:31:55:32:4a:36:0f:0a:0c:82:f0:82:d6:c0:d1: f7:7c:10:ba:6a:c6:20:3b:55:22:fd:5f:68:a5:8e:27:34:a0: c3:c3:0d:45:e7:e7:0b:de:6b:17:92:b8:63:a8:2e:93:55:01: 8c:99:dc:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92OxWFrlsGBYo59vyziEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjUxMDE5MTkwMTE1WhcNMjUxMDIwMTkwMTE1WjAzMTEwLwYDVQQD EygxMzczOWNhOWI5YWRkYjc0YmRjOWY4N2U4NDYwYWY4NTIyNjA2MzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshnyvAV5y1TiuzoBhIkKLuI31K1B XPQxzH88hHbsOJxev+3upUl9rC+XnTw0padnJu2QZOa0QKaHfTtcVVrdyjyvV7AM 8Z3VmC54oejdb2zaY9x/fGqPeZ/UsBUggIhTkN5ejmAxU7OX7GZV6lbrnpInFzhb ER3x82jcbswg/Sj1JKm7j8TwEptaIL7z06uMmrZ+64K5FB06HpQXQxdxg1UnlxbZ vorwe/aINJADXetknCirfRFhEE3cQc3w21431aOcfXvGiOdIoOVfsvm+Vlaif8pl hipzexn+BapV4d+cbAPDO//RhkrhrM0Ryyq5OwUImqJ1TQ8UEUyw6ZrofwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNznKm5rdt0vcn4foRgr4UiYGM/MB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmv1XeE7I kZfRmuaXMmHV4CoC4E2sAvLp9MO/27NOgesEluwJ+ORr+5EZ4Mh9JKJ4F8FNYpyI qaXfS2OZBpIp3Tdac2sWJipndahXKNc+4yq4qkGvN4WBjypWGWvPLdcpd7jioL4g k8TjYpB+ExKVOvTs/Ym++Xl8wATKbbv9xCn3V2FcPOfoFZncvpmzITWCdHNb/wtU 3YnZB699K0j8hZSVvlkh/LWEjwKdoGjtks1fZkljE0kDRyucV+Tf778ylqDm6RY7 T7wPvjFVMko2DwoMgvCC1sDR93wQumrGIDtVIv1faKWOJzSgw8MNRefnC95rF5K4 Y6guk1UBjJnc6w== -----END CERTIFICATE-----Generated at Sun Oct 19 20:54:32 2025 by rpki-client