$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: I5wv3oE+9vKMC/w9e/22BlFigUr4/wTBJ1YKZv3z79o= Subject key identifier: DE:24:C7:01:6F:22:01:60:46:E0:C8:F0:22:BF:18:18:8B:14:18:17 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 0199FC8F35006657A1F9188E81EA284D4253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 173F Signing time: Sun 19 Oct 2025 13:01:07 +0000 Manifest this update: Sun 19 Oct 2025 13:01:07 +0000 Manifest next update: Mon 20 Oct 2025 13:01:07 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 4YpVbO9HFvvq74shOPQXNaG5KS0.roa (hash: bVpCtuoPNa1SZMwszxLRHo7H9I6mu3GeU6NgJiv+OkM=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 7: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 8: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 9: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: /RzxUty6X2F0NdnNrBI1sg3oOLbQpTSgCzi82RErlB0=) 11: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 12: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 13: kJYpVxtVyfv4dwbVg4WNh0NM0_w.roa (hash: wZE3vmAhLe9i25qjRpSrq5TNgZ7FBQQ+/m7aI5d1gmY=) 14: lSE1obQ59T94JWyP17qNbBJ8Mi4.roa (hash: //1SxIcij8D7RTJOSo9c6uRC0w9XN7/ELpwWy3gm8m8=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:35:00:66:57:a1:f9:18:8e:81:ea:28:4d:42:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Oct 19 13:01:07 2025 GMT Not After : Oct 20 13:01:07 2025 GMT Subject: CN=de24c7016f22016046e0c8f022bf18188b141817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:ae:8f:92:d1:8f:16:d9:ae:8d:09:cb:c9: a0:32:93:00:f9:bb:eb:68:8a:64:0e:4f:ed:ec:c2: 16:53:06:02:8d:e9:df:69:b2:28:61:5c:bc:5e:63: 85:ed:a6:d6:56:97:13:29:70:bf:b7:de:3d:9b:47: 08:1c:53:f1:19:42:a5:4d:bd:d2:a9:a4:f6:10:ac: c1:74:f2:6f:bd:53:d9:f7:ff:fa:9d:59:e9:01:33: b6:4e:41:c2:4e:25:61:aa:71:44:63:39:be:ed:2b: 31:8f:14:25:4b:f4:32:8f:12:82:3c:b3:31:a6:db: 1c:2f:53:19:14:b7:72:53:11:5a:f1:16:c0:28:68: fe:6e:55:2a:84:7a:d4:99:bb:dc:1b:39:18:39:74: e4:6b:7d:87:d2:b2:89:81:2d:66:0d:6d:38:4e:90: af:bc:1b:d4:9e:76:8b:1c:c4:01:a4:cc:47:23:cf: 20:f5:68:62:b8:2a:39:d1:57:2d:d4:07:6a:5d:a2: 85:98:13:d6:34:04:c8:87:5a:f4:9d:53:67:5c:5f: 74:51:df:88:6d:12:2e:dc:5c:e5:6c:73:31:6c:f0: 2c:b7:b4:52:a9:5c:b3:04:d3:5f:e9:81:c1:61:88: 65:5c:a2:5f:01:82:13:53:cd:cb:3c:82:1d:b3:a3: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:24:C7:01:6F:22:01:60:46:E0:C8:F0:22:BF:18:18:8B:14:18:17 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f0:cb:1c:09:e6:b4:8b:f4:c6:23:7b:c1:8a:9a:a5:fe:1e: fc:88:1d:ee:ba:fd:1f:b9:9d:08:ec:bb:59:87:03:e5:8e:d4: e2:5b:28:b9:bb:93:37:83:dc:70:2b:68:50:ca:34:dd:93:c5: b3:0e:55:55:58:b2:b3:a8:9b:2e:e7:b7:1b:4a:1a:f4:0f:79: ba:39:01:b3:d8:1b:ad:aa:cb:d7:77:34:00:14:8a:40:39:83: 95:58:1e:28:54:8f:fd:35:da:f9:ce:8e:fe:d8:84:33:e3:2c: bf:f3:3b:96:65:d3:d1:e7:c7:bc:59:8e:7a:27:a0:f8:00:cc: 71:eb:36:c1:c1:83:bc:37:64:f6:31:e9:b6:c3:d0:88:2b:61: 70:2d:78:8c:d8:6d:7d:2d:f8:f9:ef:ee:55:8b:5d:ff:03:a2: 7e:d8:c6:47:4b:a0:28:1e:84:46:40:db:0f:68:38:d3:93:74: 5b:67:af:ad:bd:d9:1f:45:04:fb:ce:dd:d1:aa:49:d3:2b:63: cb:b1:40:4f:8f:a9:ad:16:5a:8b:c2:ad:8c:b3:6c:7b:7d:c5: 50:99:04:3d:33:68:04:59:c9:ee:1c:44:3f:c7:f3:1c:f2:7e: 2e:d2:a1:b2:26:6b:07:99:32:37:61:10:de:d2:05:e7:69:01: 37:7f:82:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8jzUAZleh+RiOgeooTUJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUxMDE5MTMwMTA3WhcNMjUxMDIwMTMwMTA3WjAzMTEwLwYDVQQD EyhkZTI0YzcwMTZmMjIwMTYwNDZlMGM4ZjAyMmJmMTgxODhiMTQxODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNuuj5LRjxbZro0Jy8mgMpMA+bvr aIpkDk/t7MIWUwYCjenfabIoYVy8XmOF7abWVpcTKXC/t949m0cIHFPxGUKlTb3S qaT2EKzBdPJvvVPZ9//6nVnpATO2TkHCTiVhqnFEYzm+7SsxjxQlS/QyjxKCPLMx ptscL1MZFLdyUxFa8RbAKGj+blUqhHrUmbvcGzkYOXTka32H0rKJgS1mDW04TpCv vBvUnnaLHMQBpMxHI88g9WhiuCo50Vct1AdqXaKFmBPWNATIh1r0nVNnXF90Ud+I bRIu3FzlbHMxbPAst7RSqVyzBNNf6YHBYYhlXKJfAYITU83LPIIds6PLPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4kxwFvIgFgRuDI8CK/GBiLFBgXMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvDLHAnm tIv0xiN7wYqapf4e/Igd7rr9H7mdCOy7WYcD5Y7U4lsoubuTN4PccCtoUMo03ZPF sw5VVViys6ibLue3G0oa9A95ujkBs9gbrarL13c0ABSKQDmDlVgeKFSP/TXa+c6O /tiEM+Msv/M7lmXT0efHvFmOeieg+ADMces2wcGDvDdk9jHptsPQiCthcC14jNht fS34+e/uVYtd/wOiftjGR0ugKB6ERkDbD2g405N0W2evrb3ZH0UE+87d0apJ0ytj y7FAT4+prRZai8KtjLNse33FUJkEPTNoBFnJ7hxEP8fzHPJ+LtKhsiZrB5kyN2EQ 3tIF52kBN3+C3g== -----END CERTIFICATE-----Generated at Sun Oct 19 15:32:07 2025 by rpki-client