$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json) Hash identifier: jsOA53Rg4m2svqRtkUtYWCm4qbieGFJCLGsQibN4v7k= Subject key identifier: 8B:45:2B:22:E8:8C:2C:06:00:0E:11:62:89:28:28:52:91:14:DA:C6 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 0199FC218106DDCE643D092D67C7852AD4F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft Manifest number: 16EC Signing time: Sun 19 Oct 2025 11:01:17 +0000 Manifest this update: Sun 19 Oct 2025 11:01:17 +0000 Manifest next update: Mon 20 Oct 2025 11:01:17 +0000 Files and hashes: 1: 5AXDwMNDZZJ0p2E5YCI5vVZD8a4.roa (hash: FFW/pHdY/n3mzgFNkaOSLkOhdoLgzZsHvl8kfEiEWu8=) 2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: rypLypkoxRF4xR6NWEMuaG42JFiIfxUtUZmFF1o6gDM=) 3: J0xQ_1w-gFpYF0LKQsYsfk-VGSQ.roa (hash: BG3PKtX8/a+ywGlKRJT/ICLStEzmSbRCf01OUsYWJWQ=) 4: JqGjYzJUHlyPRNKT7Gdae1GdJUA.roa (hash: /ZlOeq2y9fIyqYcQI5TRRc+qHPMMjEQDsJbQfMP47Os=) 5: KP1-R8Ozo5sN8i5g7eaE07K0eTQ.roa (hash: mLvAtndHxWdPvRVZIiOq/nwf/VdytfBFv0z3meNar9k=) 6: Qx2_RHRctf32pDo6Ld_wrMI7fd8.roa (hash: hDrMyW+0exQk+cf4mu6FMV+aN0cWstWHfqosAD9dRy0=) 7: Rlb2tOHsLeLyjP1RSURryd9jvec.roa (hash: jecxIoKlBvw6gWyoJ8u8/wuvD6cFE1AGV7OziEZZTXs=) 8: W08HMn4p6kVqze5MDixmPqgVV3Q.roa (hash: jlOVPZJCuEAwn3iEzzJNLFkpo/PRQpHf+dW9CA2qsug=) 9: ZaM9jNyw62egtMMXYnGxszrNY3k.roa (hash: IjXCT+wQnlaMHMU5neUWgppwJ+IMB7wimw7ZMxVicdg=) 10: _zKodDelYzkycuOaCvmIVNehVaU.roa (hash: 06Jd/JDGW6Xe4+7xG76Qs6GUdZwHdMuLomnrIM9Qkbg=) 11: cf3WHfeWDYu7TWnELnXzycteCaY.roa (hash: TcxuwVKWwTiShtI0Unrv/gZ/YwHGK8T1H3ocBzBxMZk=) 12: fuo8dYdaswIRyEIz4oPsApWqGJc.roa (hash: TgHuzsK6LNwJZxHjJiXaEYIfR/pJeI5Px7YOwniHSmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:81:06:dd:ce:64:3d:09:2d:67:c7:85:2a:d4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Oct 19 11:01:17 2025 GMT Not After : Oct 20 11:01:17 2025 GMT Subject: CN=8b452b22e88c2c06000e1162892828529114dac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:ba:c4:b2:b4:69:51:7b:01:9e:a0:3d:5d: ff:fe:39:ef:03:a7:9c:b9:c9:c0:f6:13:31:34:82: e4:99:21:0e:df:ff:b3:f0:06:a4:b7:05:a1:25:12: bf:ea:f2:e5:9e:ea:50:23:57:9d:ca:d9:d4:e5:d5: 4b:99:78:ba:c3:05:e0:53:01:4e:7c:05:4e:7c:a4: fe:ee:64:aa:ec:5e:24:8b:f1:ce:eb:77:b0:3e:bb: af:74:bd:01:b7:60:be:e1:5e:80:8b:4c:95:b0:48: 49:d0:a5:9d:02:3c:0e:94:cc:08:d4:8f:3f:04:52: 46:c1:26:2b:1e:88:da:4d:b4:04:0c:cd:01:c5:44: 47:a6:e4:9d:09:86:b1:fa:71:e4:5c:3d:e2:74:d7: a0:36:b2:3b:e4:de:93:7c:c5:2d:7c:3e:b2:ef:7b: ac:0d:5f:22:2f:3d:de:f4:5c:8d:69:9a:7a:1f:f9: f7:19:65:4e:88:a7:b5:1e:3b:e5:d4:00:ab:61:0a: da:02:02:b1:e7:46:48:32:df:e4:af:86:1a:14:86: 97:ee:5e:e9:42:e7:80:9f:f1:0f:1a:25:07:b6:24: 26:76:47:88:b7:49:e1:57:af:37:05:e4:a8:11:02: 56:58:43:61:85:66:33:65:15:ec:dd:e5:76:db:4f: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:45:2B:22:E8:8C:2C:06:00:0E:11:62:89:28:28:52:91:14:DA:C6 X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e3:bb:3b:b3:3a:19:3f:90:7e:5a:bb:cd:30:3c:74:7d:f9: bb:40:f7:c9:d5:e2:30:b7:df:39:b7:74:b7:ef:9f:b5:5b:03: 4b:62:1d:81:34:08:cf:b6:7e:7b:79:d2:e7:ad:cc:df:d8:00: f2:04:e0:8a:89:74:15:8d:a0:0e:bd:ee:fb:b9:0e:30:5b:e5: 4d:5d:83:6e:ff:ea:5f:9b:8f:bf:d5:8e:e1:6c:50:c4:c7:c4: 23:06:1c:7e:a4:81:65:e8:91:ae:1e:a6:9c:4c:c0:d9:58:cf: 95:ab:15:29:32:46:73:e7:81:c1:91:55:cb:46:ee:fb:97:e5: 49:c2:a3:55:08:6f:49:4b:ed:7d:13:e6:00:f3:9f:7b:e0:7d: fe:59:71:6e:7c:37:a5:d9:d1:e7:52:cb:24:9b:37:d3:79:2a: 6d:0b:f9:ad:c6:29:20:80:04:c0:3f:54:e7:39:e8:82:c0:6f: 7f:ad:d2:3c:a1:8f:ff:70:3e:fc:5f:3a:75:8f:8d:82:5d:cb: 0a:64:97:8a:d7:83:35:9c:22:3c:50:a1:7e:f0:18:c9:ed:c9: fb:83:b1:77:7c:5b:fe:4a:a8:00:c9:36:5d:56:41:44:9a:9b: c6:0f:ec:5c:41:90:da:6e:c9:27:97:0b:50:71:fd:a3:91:43: 2c:49:69:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IYEG3c5kPQktZ8eFKtT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjUxMDE5MTEwMTE3WhcNMjUxMDIwMTEwMTE3WjAzMTEwLwYDVQQD Eyg4YjQ1MmIyMmU4OGMyYzA2MDAwZTExNjI4OTI4Mjg1MjkxMTRkYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxy6xLK0aVF7AZ6gPV3//jnvA6ec ucnA9hMxNILkmSEO3/+z8AaktwWhJRK/6vLlnupQI1edytnU5dVLmXi6wwXgUwFO fAVOfKT+7mSq7F4ki/HO63ewPruvdL0Bt2C+4V6Ai0yVsEhJ0KWdAjwOlMwI1I8/ BFJGwSYrHojaTbQEDM0BxURHpuSdCYax+nHkXD3idNegNrI75N6TfMUtfD6y73us DV8iLz3e9FyNaZp6H/n3GWVOiKe1Hjvl1ACrYQraAgKx50ZIMt/kr4YaFIaX7l7p QueAn/EPGiUHtiQmdkeIt0nhV683BeSoEQJWWENhhWYzZRXs3eV220+O8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItFKyLojCwGAA4RYokoKFKRFNrGMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeO7O7M6 GT+Qflq7zTA8dH35u0D3ydXiMLffObd0t++ftVsDS2IdgTQIz7Z+e3nS563M39gA 8gTgiol0FY2gDr3u+7kOMFvlTV2Dbv/qX5uPv9WO4WxQxMfEIwYcfqSBZeiRrh6m nEzA2VjPlasVKTJGc+eBwZFVy0bu+5flScKjVQhvSUvtfRPmAPOfe+B9/llxbnw3 pdnR51LLJJs303kqbQv5rcYpIIAEwD9U5znogsBvf63SPKGP/3A+/F86dY+Ngl3L CmSXiteDNZwiPFChfvAYye3J+4Oxd3xb/kqoAMk2XVZBRJqbxg/sXEGQ2m7JJ5cL UHH9o5FDLElpKg== -----END CERTIFICATE-----Generated at Sun Oct 19 15:21:42 2025 by rpki-client