$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: xxiZrd8bQUS1g3jQwb7rI40/oBFKY0oJ9aaXzX1p6j0= Subject key identifier: F8:5C:21:E1:AC:BA:CA:2D:9C:14:95:65:27:D8:DA:5E:B7:F6:0C:93 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019A017E8723D9D6606AAAADB4E0098E420E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 17BC Signing time: Mon 20 Oct 2025 12:01:00 +0000 Manifest this update: Mon 20 Oct 2025 12:01:00 +0000 Manifest next update: Tue 21 Oct 2025 12:01:00 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: 9576YYlhoP7f2pSzcYlCJOH8MSo.roa (hash: 8ylOR07mWV1t96DQR+NXsOjeZN13g3RKILzsyJYBK2E=) 7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=) 8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 12: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=) 13: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 14: Q8a1d3JDYnlpHCeBJ-ilEaaN7uI.roa (hash: Ott4lu7y1mmRSijCCygPfZ0PWm281dG6wYxdj7K5J+Q=) 15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 16: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 17: UhKvXl_m9nZBE-_rxYy3N0dwSmQ.roa (hash: MTKTbfYtfwy4jMu3+6j7vVJcG2UaV+0Ha/vAze0SZ3c=) 18: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 19: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 20: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 21: gOur9f5G5_TsmAlnK3ja7lGjuYI.roa (hash: VbaOkcXfs2hbyLhB93vkkjUKgWJ53FBk2752UP4mSQo=) 22: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 23: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: 5xDf5Dantc2TNDfZpFR4Enz5d/DYmu6IU5Q9XTX4AIU=) 24: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 26: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=) 27: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=) 28: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 29: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 30: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 31: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 32: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 33: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 34: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:01:7e:87:23:d9:d6:60:6a:aa:ad:b4:e0:09:8e:42:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Oct 20 12:01:00 2025 GMT Not After : Oct 21 12:01:00 2025 GMT Subject: CN=f85c21e1acbaca2d9c14956527d8da5eb7f60c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:d3:eb:16:71:9d:30:8d:90:31:dd:53:95: a7:85:24:38:4e:10:51:6a:35:49:cf:9f:4e:56:55: 5f:b3:23:4a:39:f1:b5:36:00:ac:52:a4:b1:35:6a: 54:e6:4b:f4:10:15:0e:34:b6:cc:f2:a4:18:ad:f3: 01:d7:23:51:00:51:03:b6:81:90:23:d2:b3:b7:1f: ab:76:d7:6b:ab:f3:72:89:cf:4f:b3:8b:3b:5e:0d: fb:2b:11:4c:98:f1:88:2b:f3:19:7f:f8:bb:93:83: f6:53:ba:72:92:94:fc:e7:f0:82:d0:a3:08:a6:3e: aa:c3:c7:5f:27:b9:1b:4a:e4:7d:cc:19:5b:b1:e3: 38:e1:a5:d3:f6:b6:cf:3f:43:ce:92:9b:09:64:57: da:90:43:e4:b8:2c:de:d4:41:c0:37:ba:1f:e2:84: 1f:3c:01:68:64:33:d7:fc:4e:33:3d:66:e3:6f:13: 76:d4:09:c5:4b:d6:07:4e:b7:c5:47:f3:f6:2c:b5: 3c:7b:dc:f2:a5:6f:ee:31:72:77:94:7d:07:d4:c9: cf:6f:9d:2b:6a:26:a0:bf:f2:1b:e7:76:db:0b:7b: e1:64:8b:59:f2:bc:16:02:c6:3a:13:f8:c0:f9:4b: 7c:66:7e:3e:17:4a:0f:2f:c9:12:ae:72:7a:75:9a: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5C:21:E1:AC:BA:CA:2D:9C:14:95:65:27:D8:DA:5E:B7:F6:0C:93 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:12:07:26:78:20:b1:68:57:7d:41:c6:f6:e3:98:8e:af:35: fb:de:06:41:cc:fd:62:ae:50:72:6c:92:78:ed:08:82:5d:84: 4d:eb:a3:52:b7:15:3c:4b:45:6d:fd:9e:35:a2:73:6e:22:fe: 2f:97:c5:7a:9f:be:3b:dd:c4:cb:9f:a9:ce:1a:f5:82:12:cd: b5:51:ac:8b:37:a7:80:da:16:db:c0:ff:90:11:3b:56:4e:ea: 9f:fd:92:86:10:0b:89:50:21:17:08:03:fb:11:3e:6d:1d:8b: 88:fa:d5:ee:6c:ca:a3:92:b8:92:ab:67:f9:d6:0e:b2:93:56: 21:7c:68:57:b5:b9:c4:47:b2:45:c4:db:9c:eb:98:f5:e4:db: 48:00:25:d5:7d:fe:fb:e1:0d:7b:c7:82:50:27:14:2d:ce:6c: 06:5c:a9:57:66:1c:52:45:b8:17:6a:95:10:a7:af:d4:55:d8: 2c:5f:07:a5:47:b0:53:3b:a2:86:90:7a:4e:36:db:6a:e7:3c: a6:3a:43:1a:b7:51:ed:8c:21:11:d8:cb:e4:53:f4:2a:90:57: da:fb:54:49:d5:ca:a9:65:34:a5:6f:76:4b:78:27:6e:93:59: 44:98:ab:af:bd:f0:46:ae:88:fd:77:ad:82:5c:88:5d:4e:be: ca:f2:6c:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoBfocj2dZgaqqttOAJjkIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMDIwMTIwMTAwWhcNMjUxMDIxMTIwMTAwWjAzMTEwLwYDVQQD EyhmODVjMjFlMWFjYmFjYTJkOWMxNDk1NjUyN2Q4ZGE1ZWI3ZjYwYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprfT6xZxnTCNkDHdU5WnhSQ4ThBR ajVJz59OVlVfsyNKOfG1NgCsUqSxNWpU5kv0EBUONLbM8qQYrfMB1yNRAFEDtoGQ I9Kztx+rdtdrq/Nyic9Ps4s7Xg37KxFMmPGIK/MZf/i7k4P2U7pykpT85/CC0KMI pj6qw8dfJ7kbSuR9zBlbseM44aXT9rbPP0POkpsJZFfakEPkuCze1EHAN7of4oQf PAFoZDPX/E4zPWbjbxN21AnFS9YHTrfFR/P2LLU8e9zypW/uMXJ3lH0H1MnPb50r aiagv/Ib53bbC3vhZItZ8rwWAsY6E/jA+Ut8Zn4+F0oPL8kSrnJ6dZozkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhcIeGsusotnBSVZSfY2l639gyTMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxIHJngg sWhXfUHG9uOYjq81+94GQcz9Yq5QcmySeO0Igl2ETeujUrcVPEtFbf2eNaJzbiL+ L5fFep++O93Ey5+pzhr1ghLNtVGsizengNoW28D/kBE7Vk7qn/2ShhALiVAhFwgD +xE+bR2LiPrV7mzKo5K4kqtn+dYOspNWIXxoV7W5xEeyRcTbnOuY9eTbSAAl1X3+ ++ENe8eCUCcULc5sBlypV2YcUkW4F2qVEKev1FXYLF8HpUewUzuihpB6Tjbbauc8 pjpDGrdR7YwhEdjL5FP0KpBX2vtUSdXKqWU0pW92S3gnbpNZRJirr73wRq6I/Xet glyIXU6+yvJsbQ== -----END CERTIFICATE-----Generated at Mon Oct 20 18:15:32 2025 by rpki-client