$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft File: 4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json) Hash identifier: R05+kf4I7PBNuNNyJ5tA/xe+dHegU3K53RDt9EWR7ws= Subject key identifier: FD:14:41:15:93:C2:E9:68:F5:B8:40:B7:F8:77:71:65:29:3E:E4:9F Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 0199FD343F79CBEDC65CFEB08FD179065718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft Manifest number: 13D9 Signing time: Sun 19 Oct 2025 16:01:23 +0000 Manifest this update: Sun 19 Oct 2025 16:01:23 +0000 Manifest next update: Mon 20 Oct 2025 16:01:23 +0000 Files and hashes: 1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=) 2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=) 3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=) 4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=) 5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: jUrOxqTMdI1CMa2l/JzPQs8Cm5+VaBPhn89ka5zxmac=) 6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=) 7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=) 8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=) 9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=) 10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=) 11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=) 12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=) 13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=) 14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=) 15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=) 16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=) 17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=) 18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=) 19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=) 20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:3f:79:cb:ed:c6:5c:fe:b0:8f:d1:79:06:57:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Oct 19 16:01:23 2025 GMT Not After : Oct 20 16:01:23 2025 GMT Subject: CN=fd14411593c2e968f5b840b7f8777165293ee49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:71:29:79:47:2e:6e:82:c8:b0:b3:1f:c6:f1: b6:5e:e4:58:66:0a:c4:14:3a:17:84:a3:94:53:74: 50:de:78:6e:74:ee:d4:81:f2:d2:3b:3f:bc:fc:82: 41:19:a2:76:0a:d2:59:27:4c:63:54:a1:95:1d:89: 15:7b:57:4b:ca:ae:b7:46:c6:82:b9:33:09:08:ee: b2:96:6c:63:34:84:b7:2b:c1:96:2b:75:47:94:52: 16:62:52:6a:b2:c4:01:43:8b:6c:26:f2:74:e3:5e: 4d:1c:71:38:1a:21:f8:b3:84:7a:7a:0f:4e:c1:21: 2c:af:33:fc:73:ce:b0:b4:69:ee:e4:07:8e:6b:ff: 4b:0c:da:36:56:e9:65:b4:80:8c:aa:47:ee:eb:6c: fa:c7:fa:8b:25:92:11:7a:44:26:27:31:3a:01:74: 8e:06:5b:a6:94:de:e8:31:c0:af:3c:db:cd:13:43: fa:aa:28:4b:3a:33:48:41:46:a9:62:41:a7:df:5e: 80:f9:fc:9d:b3:b1:91:76:2d:63:3c:7d:e4:15:c3: 0f:34:ed:b5:9c:12:8a:c2:5e:f4:91:53:cb:bb:ba: c9:4e:04:06:d3:32:cf:b2:80:1b:dc:37:08:01:3c: a3:9d:75:40:0b:b5:a1:ed:8c:ea:42:e9:17:70:65: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:14:41:15:93:C2:E9:68:F5:B8:40:B7:F8:77:71:65:29:3E:E4:9F X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0c:65:f5:de:30:1a:97:30:41:db:39:a0:78:86:5d:dc:84: c8:74:8d:1c:4f:f1:7f:87:4f:18:6c:e3:23:9a:ba:f2:14:b0: 4e:ed:d6:e1:31:b4:e7:0e:2e:fa:dd:7e:3e:2f:f8:bb:21:f2: 7d:ca:c0:3f:fb:6c:37:f8:0c:0e:fe:e6:c3:8d:28:ad:f7:fd: 3c:0d:43:d5:d6:13:18:2f:0e:8a:8b:2d:37:02:06:fe:48:7c: c7:d6:85:95:70:25:60:aa:95:3a:87:f4:39:9d:bb:af:97:6a: 3d:d8:0d:02:61:48:23:44:64:6c:9f:96:13:09:7f:02:6d:c3: 26:cd:3b:18:dd:56:c4:63:c6:cc:bf:5d:62:71:94:bf:9f:04: f4:6b:3f:e6:a9:9a:bf:ef:ee:0d:7f:79:19:21:62:52:c0:80: 89:5b:90:ec:1e:56:15:ad:b7:cb:bf:d0:46:0f:6b:72:f4:79: a1:1f:c0:cd:57:57:f4:7f:ed:64:bf:67:c0:f7:35:45:8b:f6: 45:53:e3:73:85:00:45:ed:54:ca:10:fd:30:e0:6b:2d:32:c6: 2e:94:cd:e7:a1:49:fe:61:91:44:a4:81:6b:b5:5a:a5:72:3d: 33:d0:41:42:43:fd:b3:fe:2a:c6:bc:05:53:e7:f8:90:1b:37: 05:c0:8c:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9ND95y+3GXP6wj9F5BlcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjUxMDE5MTYwMTIzWhcNMjUxMDIwMTYwMTIzWjAzMTEwLwYDVQQD EyhmZDE0NDExNTkzYzJlOTY4ZjViODQwYjdmODc3NzE2NTI5M2VlNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHEpeUcuboLIsLMfxvG2XuRYZgrE FDoXhKOUU3RQ3nhudO7UgfLSOz+8/IJBGaJ2CtJZJ0xjVKGVHYkVe1dLyq63RsaC uTMJCO6ylmxjNIS3K8GWK3VHlFIWYlJqssQBQ4tsJvJ0415NHHE4GiH4s4R6eg9O wSEsrzP8c86wtGnu5AeOa/9LDNo2VulltICMqkfu62z6x/qLJZIRekQmJzE6AXSO BlumlN7oMcCvPNvNE0P6qihLOjNIQUapYkGn316A+fyds7GRdi1jPH3kFcMPNO21 nBKKwl70kVPLu7rJTgQG0zLPsoAb3DcIATyjnXVAC7Wh7YzqQukXcGV/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0UQRWTwulo9bhAt/h3cWUpPuSfMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgxl9d4w GpcwQds5oHiGXdyEyHSNHE/xf4dPGGzjI5q68hSwTu3W4TG05w4u+t1+Pi/4uyHy fcrAP/tsN/gMDv7mw40orff9PA1D1dYTGC8OiostNwIG/kh8x9aFlXAlYKqVOof0 OZ27r5dqPdgNAmFII0RkbJ+WEwl/Am3DJs07GN1WxGPGzL9dYnGUv58E9Gs/5qma v+/uDX95GSFiUsCAiVuQ7B5WFa23y7/QRg9rcvR5oR/AzVdX9H/tZL9nwPc1RYv2 RVPjc4UARe1UyhD9MOBrLTLGLpTN56FJ/mGRRKSBa7VapXI9M9BBQkP9s/4qxrwF U+f4kBs3BcCMIg== -----END CERTIFICATE-----Generated at Mon Oct 20 00:10:56 2025 by rpki-client