$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft File: crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json) Hash identifier: qK222JrAhu9RqUtVHKItwh4ue1IYbGpmarvUS67v2kA= Subject key identifier: EF:CA:70:22:DE:A9:EE:EF:50:67:7E:FF:D0:9D:2B:A3:2D:BF:FD:71 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 0199FBEBF2437417F46F92E92A4497C2EF4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft Manifest number: 17DB Signing time: Sun 19 Oct 2025 10:02:48 +0000 Manifest this update: Sun 19 Oct 2025 10:02:48 +0000 Manifest next update: Mon 20 Oct 2025 10:02:48 +0000 Files and hashes: 1: 1f-9tUF1QCZIsfJt2ipW4khRx9g.roa (hash: qvsbL3ItSjRr+HrTxGxdX6hRWDpLj1yz143EUSJxB+k=) 2: 47LP3M4DnpAhDBPc8Xe1KqevZ2c.roa (hash: mk2gBXTfAFrg1QI3/EfLEXfTmlSexo0wvcwH/k20wTk=) 3: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=) 4: 6X_azjUCowht92Zwn9TjsJyCJMY.roa (hash: WTfIxq7Gq9hE4i160D7m7hxcHWcEuqUC8ymhLhoENZU=) 5: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=) 6: DfUSjPi2INTZBxoOQDwjln-TPKA.roa (hash: /ysoks/fge7Q4Y/49e0Xa6J+sfHs/2M2DRhW7QPhPZM=) 7: FscYqFjraHvELbE2bDX_GeV2HSM.roa (hash: nEqjDMKGSyCyu7mJaJDlkbmcQx/bLcYMyZ0fzhn9wcE=) 8: Ik6QwSrfDqHUI7Ij7qbG8q-IHQM.roa (hash: sfqW1SHNQD9LIu80Ra3gYUQ7btog4CT5/tG0jAIfAgU=) 9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=) 10: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=) 11: Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa (hash: RVta5cu/zmPSf403glh7WoQpDtLpGKMPuUokA8G+dNU=) 12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=) 13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=) 14: PWojxW9iXS1jgfgbFPdUQeVZND0.roa (hash: YToPlOG2G4JuPFJzGtMhxZmKt4Yh4oO1yAxhQTyQoC8=) 15: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=) 16: Sl1txCYU9DdbNCbQ2vVXAA_9LNU.roa (hash: NNNtBKmCmkesRj5ZlziPlaehQT+qG9xRPKoV7sVJzhk=) 17: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=) 18: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=) 19: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=) 20: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: 6Uh2ATH8qeRZuabeF64sVCZAUmnJ3+CFg6tRyRCf6Gc=) 21: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=) 22: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=) 23: kSYUKc4rBAz8MfIEJ_WMzjzhFA8.roa (hash: irH9QeqTuF37osVFPeokf05FXw+yoOdv4lX5HDy0GLE=) 24: n71o-euCGrkY8O3e0CR7o49iC7c.roa (hash: Ni77nUb9wSBLJDB4hHEr5oyLBifZqJmvnhEXMO3zOwA=) 25: pVdfXUwosJ8KsorkaZco4tqDBa8.roa (hash: Lt1k5lM1qRumIXSyRVec7p+24rwON9jxZ+FAtlLGexw=) 26: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=) 27: tT6ASrHAosYkp4sWCxMRwoxhYS4.roa (hash: iT5+PFN5V9lv2Ui5UEIdkGr/yriWuv+ENg/CnaGzDgo=) 28: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=) 29: uZfvttHeYCpTmwGtvthls2GR6Mk.roa (hash: +oUNgtgeFHW/Ao/Yv6Zmwz+f8VUM2x/qnI4Y2b/e5es=) 30: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=) 31: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=) 32: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=) 33: zLZPib2q4N-wxUBLghJm8S0LpmI.roa (hash: zwKUjOOpiqrym9HQMr4/mJ1TtSF5ArH6j4HJ3LWd0ZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:f2:43:74:17:f4:6f:92:e9:2a:44:97:c2:ef:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Oct 19 10:02:48 2025 GMT Not After : Oct 20 10:02:48 2025 GMT Subject: CN=efca7022dea9eeef50677effd09d2ba32dbffd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:18:49:97:45:dc:0a:1d:d0:43:91:dd:dc: 45:fb:3b:24:bf:4e:bc:65:17:35:52:9e:f0:7d:e1: a3:bf:7e:01:8a:f4:41:33:4c:dc:b6:89:cf:b2:bb: df:48:2d:5f:70:44:47:14:7a:44:bb:14:49:03:be: 47:70:09:84:44:df:aa:74:1a:06:30:87:1e:a3:a4: 1e:70:de:30:19:00:b9:54:19:50:45:ba:71:3b:e5: af:fa:58:31:13:ae:e2:f6:fc:48:47:22:11:0f:17: b3:3e:a8:58:5b:79:8d:db:b4:bc:50:b2:b1:e2:ed: dd:cb:31:41:2d:19:37:9c:94:48:15:4f:22:61:2c: a8:92:55:4b:66:8a:6f:d8:ee:88:54:aa:74:1e:85: 36:c5:a3:fd:40:cd:7e:8f:48:26:6c:b3:8c:e7:30: 0c:28:94:9a:43:db:e8:94:a0:8d:f7:16:ca:a1:34: 30:26:41:f1:8e:d4:12:10:59:3e:2c:a8:22:4a:07: f2:f3:c7:31:dd:b8:6e:98:f1:ec:21:c7:f7:6c:45: 4c:73:56:42:53:3b:1b:79:35:3f:d1:a5:f9:1a:d4: c0:93:ef:1f:0d:11:68:55:00:4d:59:a2:d8:d8:f0: 21:2e:6e:9c:06:f6:8f:b6:74:91:2d:45:ac:a1:c4: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:70:22:DE:A9:EE:EF:50:67:7E:FF:D0:9D:2B:A3:2D:BF:FD:71 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7f:9e:86:bf:f0:13:21:dd:ce:37:c9:b3:68:a3:17:91:4b: 96:6e:4b:d4:63:1f:21:19:06:dd:69:0a:aa:c0:e4:81:8e:74: ab:5c:4b:ed:3d:7b:cd:dc:bc:f2:fe:14:2b:a9:41:85:59:fc: 09:32:ae:65:c7:32:16:32:da:b4:47:a4:49:a4:d3:a7:8d:9a: 19:0a:ba:93:cd:85:db:71:95:59:d5:7f:51:c7:48:b7:a7:90: 47:7c:e2:f9:51:31:a9:34:b1:36:d8:91:e0:99:c6:bc:a8:54: 16:26:d9:3e:45:e7:f6:4a:bb:db:cc:c0:6f:39:b2:ab:37:52: 37:fe:32:ce:2b:cf:f0:39:2e:7a:d5:77:55:8b:c6:36:0f:2e: e0:45:96:06:be:16:f1:90:1c:81:20:b8:f7:20:a1:17:d5:ed: 2f:88:bd:81:47:1b:db:13:dc:97:56:6e:e7:48:e0:53:3b:85: 38:06:6b:5a:44:a9:70:3f:32:2f:c6:14:a5:52:ef:d1:ad:e7: dc:12:f0:11:28:65:11:3e:00:59:a8:fb:d6:db:26:f0:81:e1: e3:58:9e:24:d4:40:1e:4a:18:51:2f:b6:b0:d4:ad:39:de:36: 39:9e:f8:26:41:ef:f6:f9:41:b1:65:29:8f:a6:3f:7a:03:e6: 1d:07:cd:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76/JDdBf0b5LpKkSXwu9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjUxMDE5MTAwMjQ4WhcNMjUxMDIwMTAwMjQ4WjAzMTEwLwYDVQQD EyhlZmNhNzAyMmRlYTllZWVmNTA2NzdlZmZkMDlkMmJhMzJkYmZmZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNgYSZdF3Aod0EOR3dxF+zskv068 ZRc1Up7wfeGjv34BivRBM0zctonPsrvfSC1fcERHFHpEuxRJA75HcAmERN+qdBoG MIceo6QecN4wGQC5VBlQRbpxO+Wv+lgxE67i9vxIRyIRDxezPqhYW3mN27S8ULKx 4u3dyzFBLRk3nJRIFU8iYSyoklVLZopv2O6IVKp0HoU2xaP9QM1+j0gmbLOM5zAM KJSaQ9volKCN9xbKoTQwJkHxjtQSEFk+LKgiSgfy88cx3bhumPHsIcf3bEVMc1ZC UzsbeTU/0aX5GtTAk+8fDRFoVQBNWaLY2PAhLm6cBvaPtnSRLUWsocThfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/KcCLeqe7vUGd+/9CdK6Mtv/1xMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3+ehr/w EyHdzjfJs2ijF5FLlm5L1GMfIRkG3WkKqsDkgY50q1xL7T17zdy88v4UK6lBhVn8 CTKuZccyFjLatEekSaTTp42aGQq6k82F23GVWdV/UcdIt6eQR3zi+VExqTSxNtiR 4JnGvKhUFibZPkXn9kq728zAbzmyqzdSN/4yzivP8DkuetV3VYvGNg8u4EWWBr4W 8ZAcgSC49yChF9XtL4i9gUcb2xPcl1Zu50jgUzuFOAZrWkSpcD8yL8YUpVLv0a3n 3BLwEShlET4AWaj71tsm8IHh41ieJNRAHkoYUS+2sNStOd42OZ74JkHv9vlBsWUp j6Y/egPmHQfN3A== -----END CERTIFICATE-----Generated at Sun Oct 19 15:14:47 2025 by rpki-client