$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft File: 1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json) Hash identifier: YKItmfsvBbH087X4xQiTWtnScsD3A/fwa47Jf0Wby4c= Subject key identifier: 52:F4:8C:A8:B5:13:82:72:DA:F1:63:E7:8B:D9:35:42:1B:8B:E0:4F Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 0199FEB48F52882140D67C0ACD09D6652810 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft Manifest number: 173F Signing time: Sun 19 Oct 2025 23:01:09 +0000 Manifest this update: Sun 19 Oct 2025 23:01:09 +0000 Manifest next update: Mon 20 Oct 2025 23:01:09 +0000 Files and hashes: 1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: qUhNZhcYNG0cbkwS0KyA+vfoOecZU+PN0hRSiduWAbI=) 2: 3bnDZUsDXnEjZmLC2l6TNlR44q0.roa (hash: wvyAIrwBTPizl931rTr7kAFeltcDxlBFhYT3hCElsC8=) 3: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=) 4: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=) 5: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=) 6: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=) 7: BPwP4_eaRC-ExEMmsEHbE_XcDyk.roa (hash: PuWly/aliHEqwaBp5Lw/IykpWGderMcstp3zqAZSzaU=) 8: DIIPkhIK2GpSY7ZT1zdEaY1N8S4.roa (hash: GZZtKk3KUtgI6t+m4e2aEMnaIKRSut5aw/uHqLEVs54=) 9: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=) 10: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=) 11: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=) 12: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=) 13: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=) 14: RzWktUnWleyuAASpHpH94KSShkY.roa (hash: BoPLXDFgsIgaZzKNJy1XCZ2/akxih7lLoVGkf52tsHE=) 15: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=) 16: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=) 17: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=) 18: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=) 19: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=) 20: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=) 21: trntJUljpyKQ_RbnudcW1AEz8hI.roa (hash: ThfGBtnYJx9e9HpZNJCs79E8qICBYx162pji3AgfT1c=) 22: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=) 23: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=) 24: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=) 25: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:b4:8f:52:88:21:40:d6:7c:0a:cd:09:d6:65:28:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Oct 19 23:01:09 2025 GMT Not After : Oct 20 23:01:09 2025 GMT Subject: CN=52f48ca8b5138272daf163e78bd935421b8be04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:2d:25:c3:fc:fc:e9:d4:f2:76:c7:50:8d: 9b:c9:c1:5c:8e:38:dd:56:5a:df:bf:a2:86:0d:36: 86:00:18:c1:22:8a:b2:82:6a:17:f4:2c:4a:59:d3: 28:a8:9f:3d:89:cb:c8:61:39:9d:1a:e5:fe:a6:9a: e5:10:8c:b3:12:55:fa:f6:4c:75:5c:02:e9:cc:2e: 6f:5c:0d:65:ac:08:0d:a5:e8:a6:85:ca:91:21:a3: da:dc:31:df:f9:62:37:0b:c0:62:00:52:9c:b8:e3: 33:73:66:5f:9d:d7:f1:49:e9:5a:6c:ef:cc:f1:bd: e1:d3:1c:fb:94:54:77:ae:83:80:76:fe:6d:02:1f: cf:8f:d9:14:1c:b8:d6:66:2e:cc:94:45:16:bd:28: 45:41:4e:aa:6a:40:b8:19:0c:e5:63:6b:bc:9a:3f: dc:9b:2e:28:75:93:1d:e8:b2:88:26:24:f0:ce:0e: d2:6f:bf:f1:99:d0:b9:3f:be:5f:e8:bf:77:8e:3a: bb:d1:aa:37:af:c3:06:7d:ce:e8:e3:ff:e8:d6:88: 42:f9:62:7b:0d:63:81:71:cb:b9:d1:05:cb:f6:85: 81:af:60:e7:50:0a:3c:39:51:4d:6b:51:50:66:73: a6:b2:f6:f9:15:31:cf:8a:df:91:d7:7c:b6:eb:66: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F4:8C:A8:B5:13:82:72:DA:F1:63:E7:8B:D9:35:42:1B:8B:E0:4F X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:89:39:61:1a:4e:ca:b8:8e:b5:e1:48:cf:a1:1e:1b:1d:11: bc:4f:9d:3d:33:ee:bc:c2:70:e9:ba:b1:60:01:bd:9c:a1:57: a6:54:fd:73:23:53:6e:32:58:33:ec:dc:68:f3:52:d5:f5:3b: 57:77:cc:d7:bb:ad:bf:5a:d3:11:b6:20:aa:11:29:0d:ab:3b: ef:0f:df:a7:9c:35:30:cb:24:c5:68:80:ee:38:a2:56:20:79: b4:86:f0:f6:96:d6:13:e5:7d:ae:3d:e4:d1:d1:7e:02:e4:18: fa:6d:34:07:35:c7:8c:90:92:fd:e0:56:6c:52:6f:6a:e3:d2: cc:51:5f:25:2e:ad:eb:1e:5d:61:f0:c2:89:6f:31:a4:09:de: e9:e1:d1:2e:ab:71:28:1e:f8:dc:7c:9a:52:e9:9a:2f:aa:9f: c2:0b:7c:1f:9c:cd:44:b1:ff:e0:f2:90:73:f7:05:ca:3b:5f: 23:6d:ff:02:15:2d:d9:c7:70:94:bd:cc:ff:d7:34:32:5c:0b: 00:87:95:c0:16:a7:60:fe:7e:8a:bf:d1:a5:f8:79:7b:78:e2: 54:23:4a:e6:b1:52:53:ba:cc:35:82:89:22:b6:9a:63:e6:69: 55:de:23:5d:f5:56:e1:15:d8:9f:c4:03:52:f5:29:58:21:80: 1f:81:5d:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+tI9SiCFA1nwKzQnWZSgQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjUxMDE5MjMwMTA5WhcNMjUxMDIwMjMwMTA5WjAzMTEwLwYDVQQD Eyg1MmY0OGNhOGI1MTM4MjcyZGFmMTYzZTc4YmQ5MzU0MjFiOGJlMDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovstJcP8/OnU8nbHUI2bycFcjjjd Vlrfv6KGDTaGABjBIoqygmoX9CxKWdMoqJ89icvIYTmdGuX+pprlEIyzElX69kx1 XALpzC5vXA1lrAgNpeimhcqRIaPa3DHf+WI3C8BiAFKcuOMzc2ZfndfxSelabO/M 8b3h0xz7lFR3roOAdv5tAh/Pj9kUHLjWZi7MlEUWvShFQU6qakC4GQzlY2u8mj/c my4odZMd6LKIJiTwzg7Sb7/xmdC5P75f6L93jjq70ao3r8MGfc7o4//o1ohC+WJ7 DWOBccu50QXL9oWBr2DnUAo8OVFNa1FQZnOmsvb5FTHPit+R13y262YKawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFL0jKi1E4Jy2vFj54vZNUIbi+BPMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWok5YRpO yriOteFIz6EeGx0RvE+dPTPuvMJw6bqxYAG9nKFXplT9cyNTbjJYM+zcaPNS1fU7 V3fM17utv1rTEbYgqhEpDas77w/fp5w1MMskxWiA7jiiViB5tIbw9pbWE+V9rj3k 0dF+AuQY+m00BzXHjJCS/eBWbFJvauPSzFFfJS6t6x5dYfDCiW8xpAne6eHRLqtx KB743HyaUumaL6qfwgt8H5zNRLH/4PKQc/cFyjtfI23/AhUt2cdwlL3M/9c0MlwL AIeVwBanYP5+ir/Rpfh5e3jiVCNK5rFSU7rMNYKJIraaY+ZpVd4jXfVW4RXYn8QD UvUpWCGAH4FdEA== -----END CERTIFICATE-----Generated at Mon Oct 20 02:43:07 2025 by rpki-client