$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: jWpvKmjSsZOD3hIL9Hq27IrWNhaJ+Hzi9hmG2tsJVe8= Subject key identifier: B2:16:4D:64:61:68:BC:EA:75:91:DD:47:40:D1:81:5B:03:61:B8:D9 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 0199FF22F13628156D9915E78F59AF9E2EAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 13DA Signing time: Mon 20 Oct 2025 01:01:43 +0000 Manifest this update: Mon 20 Oct 2025 01:01:43 +0000 Manifest next update: Tue 21 Oct 2025 01:01:43 +0000 Files and hashes: 1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=) 2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=) 3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=) 4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=) 5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: Mnxit5GK6Dkm1gd5pea9GAi5FWH4lvC0OptNzy6ISFM=) 6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=) 7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=) 8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=) 9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=) 10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=) 11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=) 12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=) 13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=) 14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=) 15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=) 16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=) 17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=) 18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=) 19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=) 20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:22:f1:36:28:15:6d:99:15:e7:8f:59:af:9e:2e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Oct 20 01:01:43 2025 GMT Not After : Oct 21 01:01:43 2025 GMT Subject: CN=b2164d646168bcea7591dd4740d1815b0361b8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:50:26:cf:03:7a:d9:cc:af:a5:db:25:2f: 69:ee:14:2a:49:9a:34:bf:1b:65:b3:39:a6:df:9a: ee:da:ed:8c:53:90:50:8e:7a:7c:7b:ec:9b:ad:ba: 2c:3f:8d:ef:22:7b:57:73:b1:ab:ec:0e:15:df:af: b6:83:24:cb:2c:9b:a4:99:4d:37:47:e9:28:e1:80: f4:b1:0e:73:02:5e:13:4c:6c:08:25:79:32:45:fd: 17:a8:7b:44:78:4c:0a:34:6a:70:0b:57:37:bf:a8: c4:8e:40:25:8b:92:eb:a2:01:9f:8b:01:34:89:63: 15:a8:bd:ac:36:32:44:7d:d1:b6:7e:61:2d:36:f9: 44:40:f3:4f:9f:6b:7a:19:d8:e0:49:de:b8:1c:51: 46:36:42:6b:7c:a2:57:b1:57:2f:20:c9:89:d3:d4: 79:94:45:b3:cf:39:68:7e:7d:3b:44:14:4a:9d:ed: af:f1:77:d9:56:dd:a8:83:54:a4:45:72:6d:e0:e8: be:b9:cd:1d:74:30:0a:5d:a5:58:9f:4d:53:09:00: 45:82:fd:db:d6:f7:75:97:44:aa:91:40:85:f4:f2: 28:70:6a:1d:b6:3f:2b:a4:53:32:38:82:13:95:5e: d5:df:66:db:51:e1:eb:0b:8b:44:ba:cb:6c:e9:0a: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:16:4D:64:61:68:BC:EA:75:91:DD:47:40:D1:81:5B:03:61:B8:D9 X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:12:4d:82:37:67:a7:b0:34:88:2c:f3:bf:a9:02:8b:27:1d: ea:31:6c:50:f4:79:3b:2c:3f:38:34:28:83:a2:dd:be:89:59: 5c:a7:37:ad:19:f1:f1:eb:2a:d3:11:5f:6f:49:b3:35:b4:47: b3:0f:58:e9:25:07:e8:f1:2a:6e:36:1c:15:03:ca:87:81:e8: 33:38:16:c0:b7:bc:5d:18:a9:3e:36:df:97:81:8b:79:ce:92: 9a:8a:f5:a3:56:8a:77:5a:43:21:90:1b:71:57:c9:5c:16:a5: da:a1:1c:bb:bf:27:ca:8e:1b:98:0b:d8:9b:02:90:7e:a6:e7: 01:b3:8e:89:90:30:bc:90:9e:0b:86:6c:58:b8:d4:33:7b:ea: 0d:cc:4f:28:45:04:9c:72:0f:bc:93:61:38:c0:bd:de:12:cf: c1:48:08:ea:61:1b:44:1b:dd:4e:61:c0:e8:26:26:90:9b:49: a3:1b:92:d9:a9:34:ab:19:a0:eb:8d:11:ee:a8:1f:85:02:29: 32:15:b8:9b:dd:8b:0f:d7:2b:ef:b8:0d:38:e1:33:f3:d0:32: 75:cb:bc:56:52:b3:14:e5:69:f7:d9:ec:9d:70:85:97:ab:d2: 2c:9b:87:8e:d3:df:04:2b:c8:77:8d:35:31:63:bb:1b:fc:83: 8a:81:65:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/IvE2KBVtmRXnj1mvni6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUxMDIwMDEwMTQzWhcNMjUxMDIxMDEwMTQzWjAzMTEwLwYDVQQD EyhiMjE2NGQ2NDYxNjhiY2VhNzU5MWRkNDc0MGQxODE1YjAzNjFiOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDxQJs8DetnMr6XbJS9p7hQqSZo0 vxtlszmm35ru2u2MU5BQjnp8e+ybrbosP43vIntXc7Gr7A4V36+2gyTLLJukmU03 R+ko4YD0sQ5zAl4TTGwIJXkyRf0XqHtEeEwKNGpwC1c3v6jEjkAli5LrogGfiwE0 iWMVqL2sNjJEfdG2fmEtNvlEQPNPn2t6GdjgSd64HFFGNkJrfKJXsVcvIMmJ09R5 lEWzzzlofn07RBRKne2v8XfZVt2og1SkRXJt4Oi+uc0ddDAKXaVYn01TCQBFgv3b 1vd1l0SqkUCF9PIocGodtj8rpFMyOIITlV7V32bbUeHrC4tEusts6Qo5bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIWTWRhaLzqdZHdR0DRgVsDYbjZMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxJNgjdn p7A0iCzzv6kCiycd6jFsUPR5Oyw/ODQog6LdvolZXKc3rRnx8esq0xFfb0mzNbRH sw9Y6SUH6PEqbjYcFQPKh4HoMzgWwLe8XRipPjbfl4GLec6Smor1o1aKd1pDIZAb cVfJXBal2qEcu78nyo4bmAvYmwKQfqbnAbOOiZAwvJCeC4ZsWLjUM3vqDcxPKEUE nHIPvJNhOMC93hLPwUgI6mEbRBvdTmHA6CYmkJtJoxuS2ak0qxmg640R7qgfhQIp MhW4m92LD9cr77gNOOEz89Aydcu8VlKzFOVp99nsnXCFl6vSLJuHjtPfBCvId401 MWO7G/yDioFl6g== -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:14 2025 by rpki-client