$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: EiX6dNuQTlp4JUX7RFQ2XD9YqcllTuFW8u3xfXuRqWw= Subject key identifier: 3C:BE:90:94:4D:EA:AE:96:A7:D8:09:F6:A3:67:93:51:F6:B6:94:06 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 0199FC8F4E72963B482912C3F9E3E890845D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 16F0 Signing time: Sun 19 Oct 2025 13:01:14 +0000 Manifest this update: Sun 19 Oct 2025 13:01:14 +0000 Manifest next update: Mon 20 Oct 2025 13:01:14 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 3: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (hash: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=) 4: K-N36rOGMrajAoKgQRnFws3cYZQ.roa (hash: nuImM5LcJvcHXxZcDwo2uunodGLbKRgkWdkeXxE++0Y=) 5: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 6: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 7: fRZWH_M0OyQ2q7C3l2YZBzviPzY.roa (hash: F07+RgoevJOf1u0ML2Jb2xCzFrPFpbtH07Gxnbmp3Hg=) 8: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: cbW59ZAVu3ZqKnK2r25zgeucxIGFVnZy6CVxOihjVKg=) 10: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 11: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:4e:72:96:3b:48:29:12:c3:f9:e3:e8:90:84:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Oct 19 13:01:14 2025 GMT Not After : Oct 20 13:01:14 2025 GMT Subject: CN=3cbe90944deaae96a7d809f6a3679351f6b69406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:88:e0:90:f8:3e:69:f6:cb:e7:91:f9:37: 92:9c:0e:67:e7:c0:32:59:0f:56:cc:06:2a:a0:52: 29:1b:f0:c6:e6:bb:08:85:97:04:6d:22:59:11:c8: 92:4f:cf:12:b0:19:3d:e1:43:84:b7:4c:61:b6:c9: 7a:56:87:7f:f2:b9:c1:d8:ce:23:a0:b2:de:4f:ed: 21:55:36:d7:3e:cf:97:cd:ff:06:06:b1:2f:5e:43: b4:bd:84:85:cd:b2:d0:45:9c:47:0c:c3:56:6a:ac: a2:21:41:e8:7e:b5:5a:b0:a5:5c:0c:35:0a:f3:d9: 39:7b:bb:48:5f:fd:ef:f2:ff:94:68:f7:6c:7c:64: 34:e2:73:0a:49:75:e7:2c:8a:52:a0:9e:26:f0:96: d3:bd:58:a7:8c:b5:21:db:9f:01:c2:e3:00:d4:eb: 11:be:13:df:00:36:37:b8:11:0e:c7:6c:ff:67:5e: 06:94:1b:d3:61:f0:f5:90:83:ae:f1:9c:50:d4:1c: 2a:e1:17:90:64:d9:69:27:9c:39:17:a1:51:ca:5e: 17:b4:06:89:3b:44:55:95:46:75:eb:f2:69:e4:63: 54:87:3d:02:36:52:97:70:78:d5:8d:eb:74:37:27: 8e:73:7d:ea:ee:be:3d:eb:d2:50:21:60:f4:9a:8d: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BE:90:94:4D:EA:AE:96:A7:D8:09:F6:A3:67:93:51:F6:B6:94:06 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c0:da:24:74:aa:5e:a6:76:bf:31:6f:8e:3c:1b:9a:91:57: bc:70:0b:e5:99:77:bb:75:5b:9c:a9:94:4b:60:f6:38:7d:f3: 5c:c1:45:66:aa:77:54:6e:42:5b:ce:62:ba:ea:06:21:73:de: 60:87:22:7e:46:67:a8:cc:84:b3:0a:98:75:5a:f0:fd:d3:99: fe:27:bf:22:b3:8e:a5:7a:94:fb:81:66:03:8c:e2:40:68:e8: 8f:22:8e:02:c4:7a:bd:a5:31:4c:45:9e:ce:94:10:ff:76:a3: 92:64:6f:be:00:8a:10:55:b1:26:29:cd:21:da:8c:cd:08:aa: af:0f:4c:a5:ec:d4:e6:b1:ed:38:e7:c8:83:de:75:b1:ff:41: dd:a6:3e:f3:fe:b9:1c:c8:57:55:8b:f1:f4:58:24:08:f1:0c: b8:f2:30:2f:ed:fe:ef:29:9b:ac:84:8b:75:65:97:c5:ee:e0: e9:64:0f:ea:2c:c8:ad:f2:9d:fa:a2:76:79:6d:0e:62:bd:c5: d4:99:1f:cd:53:1b:2c:74:73:08:d4:4c:55:89:43:46:6f:9d: 00:4c:2e:cc:d1:b2:11:f9:95:39:4b:c7:9b:1f:19:6d:4b:6b: 8a:81:95:f9:d5:88:15:c4:77:19:49:f0:42:e3:85:0e:52:d2: 8e:80:df:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j05yljtIKRLD+ePokIRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUxMDE5MTMwMTE0WhcNMjUxMDIwMTMwMTE0WjAzMTEwLwYDVQQD EygzY2JlOTA5NDRkZWFhZTk2YTdkODA5ZjZhMzY3OTM1MWY2YjY5NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXiI4JD4Pmn2y+eR+TeSnA5n58Ay WQ9WzAYqoFIpG/DG5rsIhZcEbSJZEciST88SsBk94UOEt0xhtsl6Vod/8rnB2M4j oLLeT+0hVTbXPs+Xzf8GBrEvXkO0vYSFzbLQRZxHDMNWaqyiIUHofrVasKVcDDUK 89k5e7tIX/3v8v+UaPdsfGQ04nMKSXXnLIpSoJ4m8JbTvVinjLUh258BwuMA1OsR vhPfADY3uBEOx2z/Z14GlBvTYfD1kIOu8ZxQ1Bwq4ReQZNlpJ5w5F6FRyl4XtAaJ O0RVlUZ16/Jp5GNUhz0CNlKXcHjVjet0NyeOc33q7r4969JQIWD0mo0gLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDy+kJRN6q6Wp9gJ9qNnk1H2tpQGMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8DaJHSq XqZ2vzFvjjwbmpFXvHAL5Zl3u3VbnKmUS2D2OH3zXMFFZqp3VG5CW85iuuoGIXPe YIcifkZnqMyEswqYdVrw/dOZ/ie/IrOOpXqU+4FmA4ziQGjojyKOAsR6vaUxTEWe zpQQ/3ajkmRvvgCKEFWxJinNIdqMzQiqrw9MpezU5rHtOOfIg951sf9B3aY+8/65 HMhXVYvx9FgkCPEMuPIwL+3+7ymbrISLdWWXxe7g6WQP6izIrfKd+qJ2eW0OYr3F 1JkfzVMbLHRzCNRMVYlDRm+dAEwuzNGyEfmVOUvHmx8ZbUtrioGV+dWIFcR3GUnw QuOFDlLSjoDfIw== -----END CERTIFICATE-----Generated at Sun Oct 19 20:51:57 2025 by rpki-client