$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: zoH2z5o5Si2SLay8rKSF1sJ/cLH0hTj0y+pLy8pikMo= Subject key identifier: 9E:21:4A:B9:71:00:20:12:AA:CF:02:D6:38:6A:EE:B1:63:34:8B:E6 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 0199FF9021A8FBC6E50CCC1D0BEBC13AE337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 17BB Signing time: Mon 20 Oct 2025 03:00:59 +0000 Manifest this update: Mon 20 Oct 2025 03:00:59 +0000 Manifest next update: Tue 21 Oct 2025 03:00:59 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=) 6: 9576YYlhoP7f2pSzcYlCJOH8MSo.roa (hash: 8ylOR07mWV1t96DQR+NXsOjeZN13g3RKILzsyJYBK2E=) 7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=) 8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 12: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=) 13: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 14: Q8a1d3JDYnlpHCeBJ-ilEaaN7uI.roa (hash: Ott4lu7y1mmRSijCCygPfZ0PWm281dG6wYxdj7K5J+Q=) 15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 16: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=) 17: UhKvXl_m9nZBE-_rxYy3N0dwSmQ.roa (hash: MTKTbfYtfwy4jMu3+6j7vVJcG2UaV+0Ha/vAze0SZ3c=) 18: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 19: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 20: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 21: gOur9f5G5_TsmAlnK3ja7lGjuYI.roa (hash: VbaOkcXfs2hbyLhB93vkkjUKgWJ53FBk2752UP4mSQo=) 22: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 23: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: /rHmxEBpf94KwXsntdBe0dVpB4OhwWN6NPqo5kdpZMM=) 24: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 26: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=) 27: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=) 28: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 29: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 30: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 31: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 32: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 33: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 34: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:90:21:a8:fb:c6:e5:0c:cc:1d:0b:eb:c1:3a:e3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Oct 20 03:00:59 2025 GMT Not After : Oct 21 03:00:59 2025 GMT Subject: CN=9e214ab971002012aacf02d6386aeeb163348be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:42:f2:7f:be:3b:38:ed:0b:97:af:c3:63: 30:34:67:45:b6:e8:39:aa:72:df:39:d3:7a:76:ec: aa:34:89:f3:57:c9:fb:00:62:4c:44:f4:cf:56:65: 91:38:e4:9b:33:cc:c7:66:3b:83:dd:79:59:57:7d: b2:38:b9:99:c0:6f:01:4a:81:b1:9c:89:70:64:1d: fd:15:a2:af:6d:b4:0f:a9:8d:a0:36:5b:f1:13:fa: a5:72:8f:32:1d:c1:23:89:31:39:50:81:f2:4c:f5: 3a:1a:51:68:92:6b:fa:18:c5:e0:09:b0:0a:38:ce: 98:ae:ab:08:83:f3:bf:33:b6:30:ba:9a:5a:25:01: b3:70:1a:a8:f2:88:ff:e5:0d:4d:d2:8a:e4:6b:22: 62:a4:3a:2e:d8:3e:8e:09:c7:94:17:4d:58:16:14: 08:e3:2b:c7:09:01:a3:e8:90:c1:b0:ad:62:ab:6f: 42:a7:03:29:27:b9:b9:44:4d:ab:d4:2b:9a:ca:b5: 3b:3f:a9:c9:ce:b8:d0:10:1d:0a:9a:b4:15:f3:bd: 0e:a2:2c:22:f4:ef:8c:3b:ff:1b:c2:2c:da:06:14: 71:09:98:e3:35:3b:e5:2b:2c:ff:44:e5:3a:32:54: 6d:d1:08:63:13:18:5b:e5:63:6b:b1:de:69:23:b6: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:4A:B9:71:00:20:12:AA:CF:02:D6:38:6A:EE:B1:63:34:8B:E6 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1f:4e:8c:bb:13:b7:1c:e3:ab:89:a3:fb:de:9b:75:99:e8: 15:82:12:07:f2:6b:64:3b:18:fb:ba:dc:e1:99:fd:93:c2:01: 6b:9f:29:ca:96:ab:1a:ff:c8:4c:eb:d9:5a:c8:bb:f0:17:e4: 6c:c8:99:30:b2:72:4a:92:17:a8:99:4e:ac:e3:f4:93:5b:6f: 37:01:d9:22:87:3e:0b:42:d9:99:b0:d3:27:83:54:7e:c7:76: ff:a6:8f:76:1a:6a:27:3e:8c:c9:96:3f:b9:71:4c:1f:d6:72: ef:b7:40:e7:b9:13:b7:71:19:38:dc:1b:d3:5f:a6:89:2f:7a: 47:94:86:22:e6:82:85:26:bb:17:c8:7a:2c:d8:9f:f3:6a:34: e2:46:47:6e:9a:ba:c4:af:24:d3:48:7b:11:c4:42:df:29:00: d1:22:f3:5a:52:a4:c2:97:4e:92:dc:24:88:d5:dd:e6:8d:ed: ad:0c:99:43:aa:49:d5:c4:45:d3:b6:62:e3:ab:12:ce:7c:23: cd:7b:86:f9:3b:24:4a:41:9d:99:b2:31:ca:27:6c:63:99:62: db:ba:ce:87:f5:56:b1:22:34:2f:10:1d:63:c1:d4:b9:0d:c7: 16:47:2f:6c:ab:14:d2:51:c5:9a:7d:f8:65:4b:37:56:42:61: b5:9e:79:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/kCGo+8blDMwdC+vBOuM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMDIwMDMwMDU5WhcNMjUxMDIxMDMwMDU5WjAzMTEwLwYDVQQD Eyg5ZTIxNGFiOTcxMDAyMDEyYWFjZjAyZDYzODZhZWViMTYzMzQ4YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl5C8n++OzjtC5evw2MwNGdFtug5 qnLfOdN6duyqNInzV8n7AGJMRPTPVmWROOSbM8zHZjuD3XlZV32yOLmZwG8BSoGx nIlwZB39FaKvbbQPqY2gNlvxE/qlco8yHcEjiTE5UIHyTPU6GlFokmv6GMXgCbAK OM6YrqsIg/O/M7YwuppaJQGzcBqo8oj/5Q1N0orkayJipDou2D6OCceUF01YFhQI 4yvHCQGj6JDBsK1iq29CpwMpJ7m5RE2r1CuayrU7P6nJzrjQEB0KmrQV870Ooiwi 9O+MO/8bwizaBhRxCZjjNTvlKyz/ROU6MlRt0QhjExhb5WNrsd5pI7YsQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4hSrlxACASqs8C1jhq7rFjNIvmMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB9OjLsT txzjq4mj+96bdZnoFYISB/JrZDsY+7rc4Zn9k8IBa58pyparGv/ITOvZWsi78Bfk bMiZMLJySpIXqJlOrOP0k1tvNwHZIoc+C0LZmbDTJ4NUfsd2/6aPdhpqJz6MyZY/ uXFMH9Zy77dA57kTt3EZONwb01+miS96R5SGIuaChSa7F8h6LNif82o04kZHbpq6 xK8k00h7EcRC3ykA0SLzWlKkwpdOktwkiNXd5o3trQyZQ6pJ1cRF07Zi46sSznwj zXuG+TskSkGdmbIxyidsY5li27rOh/VWsSI0LxAdY8HUuQ3HFkcvbKsU0lHFmn34 ZUs3VkJhtZ55Vw== -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:36 2025 by rpki-client