$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: 8yGgMI/l8Wn0E3Io+xVs2PL4QXIUQS2XetYc8zC0Z0Q= Subject key identifier: A0:82:17:C6:FD:80:AE:ED:4A:6F:B6:6C:C7:78:47:ED:DD:72:52:46 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 0199FD6B61358D3E063188D0BC165F0E268D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 1459 Signing time: Sun 19 Oct 2025 17:01:36 +0000 Manifest this update: Sun 19 Oct 2025 17:01:36 +0000 Manifest next update: Mon 20 Oct 2025 17:01:36 +0000 Files and hashes: 1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=) 2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=) 3: 2P8shKd_220nYdZMZlSUBMfyDxs.roa (hash: DHVwQ61Uemg4pxo94GshwMHSxRxws7x9ytMWEMfUpCA=) 4: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=) 5: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=) 6: 8SguPHIphMGnD7X3CTG_nndU6mE.roa (hash: Of38WddSvMyNlDKwk9utKdII5/SSSiTvKKiNw3Nm+mE=) 7: 9USzYLBawhQVkHZbF2gEbzhvC5s.roa (hash: gAEvHU7vjJHAyOa+y6y8BFG0zaydLqnsUXwSsV0Q83s=) 8: 9X2bVs01Q2tfw1vRsiEx9bwgnng.roa (hash: xUZPkg/6d28gZt22/LQ5MI3h9zeoZfSZKL8cddD08VU=) 9: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=) 10: K8EjZ_3WPjwv0W2aNfotejGzQUI.roa (hash: ZD6jTjKGAi5Tbhse2TYNz3HcAvqRtLDhJzjyCqSgJiE=) 11: LrE2frxOXcAoeq_ZVzCqNTXk33M.roa (hash: mwK8Mh8KOX9KMr5MZyXTGGmMVq9yTgz6tm3vdRw+NkY=) 12: NaTaPKfujJr1Jp0amujqpmQcKM4.roa (hash: D7evRFh9Yxe+0NOmwrrS5eICjJ6z7dDqjSv+6CysBxM=) 13: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=) 14: WhC5y6HpYw6m_MGiQ6XfIsLdv2c.roa (hash: Nv/Imvyk9dKOiF0TKduhR4D3FxweHs4gpbY5BnEHT2A=) 15: _B--CuBhqTjZFsr-jhEXlNZoRk0.roa (hash: jcQpONRIAvkERwo6Ybngiz+/HwyvO0eTzP8ZF+C5RuI=) 16: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=) 17: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=) 18: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=) 19: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=) 20: t65dNvZ6mIPWzEgYcMlAUQutKR4.roa (hash: IJP/pC4d01Se7R3R057e96hfMZC2OpsCJpYV3fv+Wfw=) 21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: STVlLbOiV6fF/GOLCzma5PW3w/wJlw1JyYIMmAEfXpc=) 22: xNLoxQtBTrsDYCoH65tbo0fGdFg.roa (hash: yD4EdHjgdB7qynHghTscrUeU4YcPg+faYfRSy+GnRMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6b:61:35:8d:3e:06:31:88:d0:bc:16:5f:0e:26:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Oct 19 17:01:36 2025 GMT Not After : Oct 20 17:01:36 2025 GMT Subject: CN=a08217c6fd80aeed4a6fb66cc77847eddd725246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:c1:ee:77:4c:ad:84:41:16:22:dd:31:fa: 34:11:68:0e:d8:bd:94:76:26:44:2f:21:db:be:5c: 37:75:de:dd:18:7b:a5:0e:2e:6c:12:95:c3:01:00: d2:9a:9d:c5:e9:d5:3a:1d:47:87:9c:a8:6d:07:f3: 5b:b9:66:72:ab:65:64:24:e7:ad:aa:ae:9b:3b:44: 7a:44:11:25:c3:dc:e3:b6:35:9f:66:a4:b4:9a:cd: 38:a8:0b:0d:7c:49:f4:b9:39:cd:7d:39:68:c0:86: 98:5c:6c:f9:09:86:f7:f9:e7:e7:02:cb:4d:1e:3f: 48:53:49:d0:ef:f2:dc:f9:d5:73:42:cb:71:70:28: f0:8d:d5:e6:36:f7:7f:4c:4b:fe:18:87:3f:ca:af: be:de:bd:7a:73:ae:79:71:ad:a1:35:52:72:46:53: 5e:65:7b:7f:46:97:7e:b6:99:66:a7:cf:48:2d:6a: 15:3f:20:f2:e3:3f:5f:d8:ca:fb:20:fd:42:ad:88: 8e:9f:79:ab:7c:9d:8a:ec:00:fd:3d:04:c8:12:73: 7f:93:21:83:3b:99:30:b1:b8:78:7c:6b:8e:71:29: 1b:2a:e7:21:73:21:f1:b8:dd:ae:30:25:4f:cc:be: 60:87:13:2a:f7:46:3b:77:6b:d6:da:6f:4b:e8:0a: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:82:17:C6:FD:80:AE:ED:4A:6F:B6:6C:C7:78:47:ED:DD:72:52:46 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8b:b4:a4:d9:a3:0b:06:fe:8c:1c:04:7c:cf:47:3b:ec:c3: 59:bf:29:24:bb:ac:fe:13:8d:b2:0f:39:83:a1:60:ed:0f:9f: 59:15:c7:82:3e:83:eb:82:64:08:b4:36:a9:9f:cc:db:e5:4d: 26:a0:bf:38:7a:5a:14:66:d3:00:94:c8:a4:61:a6:a2:21:ec: 79:f0:31:be:3c:fc:f4:7c:e3:df:0b:69:90:1c:37:14:e9:68: b1:dd:dd:78:e9:7f:df:e8:98:ec:1b:a3:99:09:01:06:6f:c4: 6a:86:9f:ff:42:8a:63:ce:d9:43:bd:7b:2a:3f:97:8c:29:da: 4e:fb:f1:e3:87:c4:89:39:7a:7d:73:8b:97:cd:b4:22:0c:08: 07:0a:c7:63:57:89:63:b9:99:b4:bf:10:c2:a0:0b:fe:1c:c4: 8c:fa:bc:f9:a3:d3:c8:bc:a3:ac:20:1d:94:45:a0:3f:b4:65: 0f:9e:7f:de:27:34:37:41:96:ec:4c:7e:6a:5d:73:07:d9:d6: ad:a2:92:bc:d6:4e:01:12:e4:f1:00:c9:11:83:04:db:88:3d: 90:38:7f:2a:7c:74:15:04:a8:43:0d:60:06:0a:e1:ad:e9:41: 6b:5c:35:fb:5c:dd:7b:34:ab:4a:dd:50:29:22:af:21:2e:06: aa:8c:a5:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9a2E1jT4GMYjQvBZfDiaNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUxMDE5MTcwMTM2WhcNMjUxMDIwMTcwMTM2WjAzMTEwLwYDVQQD EyhhMDgyMTdjNmZkODBhZWVkNGE2ZmI2NmNjNzc4NDdlZGRkNzI1MjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVzB7ndMrYRBFiLdMfo0EWgO2L2U diZELyHbvlw3dd7dGHulDi5sEpXDAQDSmp3F6dU6HUeHnKhtB/NbuWZyq2VkJOet qq6bO0R6RBElw9zjtjWfZqS0ms04qAsNfEn0uTnNfTlowIaYXGz5CYb3+efnAstN Hj9IU0nQ7/Lc+dVzQstxcCjwjdXmNvd/TEv+GIc/yq++3r16c655ca2hNVJyRlNe ZXt/Rpd+tplmp89ILWoVPyDy4z9f2Mr7IP1CrYiOn3mrfJ2K7AD9PQTIEnN/kyGD O5kwsbh4fGuOcSkbKuchcyHxuN2uMCVPzL5ghxMq90Y7d2vW2m9L6Aov8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCCF8b9gK7tSm+2bMd4R+3dclJGMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfou0pNmj Cwb+jBwEfM9HO+zDWb8pJLus/hONsg85g6Fg7Q+fWRXHgj6D64JkCLQ2qZ/M2+VN JqC/OHpaFGbTAJTIpGGmoiHsefAxvjz89Hzj3wtpkBw3FOlosd3deOl/3+iY7Buj mQkBBm/Eaoaf/0KKY87ZQ717Kj+XjCnaTvvx44fEiTl6fXOLl820IgwIBwrHY1eJ Y7mZtL8QwqAL/hzEjPq8+aPTyLyjrCAdlEWgP7RlD55/3ic0N0GW7Ex+al1zB9nW raKSvNZOARLk8QDJEYME24g9kDh/Knx0FQSoQw1gBgrhrelBa1w1+1zdezSrSt1Q KSKvIS4GqoylvQ== -----END CERTIFICATE-----Generated at Sun Oct 19 19:57:42 2025 by rpki-client