$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: NPveKTXHAVKIS0n5R/8dDiWHg8qY2nsGXt5EEZPceVQ= Subject key identifier: 5A:2D:DC:04:89:16:A2:F0:64:78:20:31:74:BD:E5:27:89:31:EB:8B Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 0199FD348788DCC76B766F5E48DE29774BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 143E Signing time: Sun 19 Oct 2025 16:01:42 +0000 Manifest this update: Sun 19 Oct 2025 16:01:42 +0000 Manifest next update: Mon 20 Oct 2025 16:01:42 +0000 Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 2: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 3: HLAFzpF1dtaNSAOxEl-uHrb_wcg.roa (hash: PtoSILiXlrGyGsA1CVrSehyontCCBay4De7QPXIkVlI=) 4: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=) 5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: t6vRRg8406ZoJvB0A+UFFOP4vkMikFJZvlHnUhs3AME=) 6: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 7: NojFSrrS5JKJQebH50O-Sn9xxis.roa (hash: 99amkQAhCwzYf+SSxz6XlFlKrJhhJL3h7GCB1tqsJIA=) 8: O0dA6ORgAzDqkWmj1R355BHaTrI.roa (hash: 296lT6a3xrMsAitqkt1Jep7cJYB5SeLJP2n68zngwhU=) 9: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 10: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=) 11: bappW0a76vCPpE7es6c1mZAIjsM.roa (hash: cqG7BmBZANbhw2q44YhM+SIY2oACb3Cf8jR7Of0U21w=) 12: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 13: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 14: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 15: yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa (hash: D7e3OOFi7lIh2fyesD48w9fTpDFZydPZVUW+H+QSZ9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:87:88:dc:c7:6b:76:6f:5e:48:de:29:77:4b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Oct 19 16:01:42 2025 GMT Not After : Oct 20 16:01:42 2025 GMT Subject: CN=5a2ddc048916a2f06478203174bde5278931eb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:47:91:37:9e:fc:8e:35:59:51:f4:c9:07: ea:7d:58:64:ab:80:49:6b:28:ba:1c:8c:2e:2e:70: 66:f4:f0:16:6e:23:a8:2c:ec:e7:5a:a4:a7:61:a6: 5a:74:d7:55:0d:93:8a:76:09:d8:fc:7b:f9:1a:9b: 60:13:b6:e1:20:4c:68:ef:bc:6c:78:66:01:dd:d3: 7d:7e:ac:ea:f1:fd:7d:de:81:c2:05:7d:f5:30:73: d6:6c:c2:f5:cb:25:b8:36:aa:b1:46:b6:1d:ce:04: 5b:5d:31:67:18:11:20:6a:ea:70:09:5e:00:25:3b: 42:b2:c5:ec:98:13:0e:f8:b0:71:6e:40:9a:47:ab: 06:32:58:ea:15:a1:5d:b3:0d:34:f4:a1:ac:0c:3d: 1f:c2:0a:fa:8a:36:2b:ef:bd:b0:aa:fb:95:ee:d9: 7c:c4:94:f2:b4:22:2d:60:3b:e2:6d:55:f7:07:cc: cf:f5:7c:1f:c6:6e:38:7a:2b:bc:af:2a:af:e7:6e: cf:a7:78:28:a5:29:18:be:fd:35:01:48:70:f0:e1: 2a:b8:89:03:a4:60:a3:f9:db:ef:88:bc:f0:d0:b9: ca:b2:14:9e:fc:12:99:fb:a1:f5:3c:e6:ab:09:49: a1:c6:91:d1:e6:1c:f6:e3:bc:2a:4a:73:72:b7:b6: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2D:DC:04:89:16:A2:F0:64:78:20:31:74:BD:E5:27:89:31:EB:8B X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:87:67:59:76:78:83:f5:ff:c4:9a:c0:df:bf:1f:03:95:64: 59:94:96:15:d9:d5:27:fa:33:19:8f:b6:ad:5e:f4:5d:40:ed: 0c:21:bb:6f:80:9e:45:1e:60:e5:0f:f6:ac:f4:db:a5:3b:14: b0:30:06:8a:c1:9d:79:e7:e9:65:6a:25:25:20:da:7f:08:03: 78:6d:f5:47:c2:4e:f3:ad:30:d1:96:93:da:8e:97:a0:a7:7a: 6d:57:a8:cf:bc:2c:87:41:12:60:7d:1f:77:1f:80:34:eb:29: f5:fc:fd:fb:c9:a9:fa:69:74:6b:e7:b8:05:e9:ad:e3:14:2c: 53:05:4b:9f:05:4c:3a:98:cd:0c:93:5d:ce:01:f3:9b:9c:9a: 4b:07:c0:3e:50:1d:31:4c:99:b4:b6:d3:49:c6:44:6f:a4:7d: 26:2f:08:1f:14:f5:76:07:94:5d:e7:9b:51:69:b1:7d:47:9c: b6:58:92:8a:9e:04:dc:cb:cf:2e:f6:fd:34:70:5e:d0:5b:57: 51:80:84:07:df:18:46:bf:5f:59:13:4c:24:57:be:51:ca:6d: 92:1b:4b:3b:6f:fb:8c:03:e5:03:3a:c9:e1:f7:90:3a:d7:60: 3e:5a:ba:94:cc:8c:96:47:38:55:d6:fa:3b:40:8c:42:ef:03: f7:c0:a1:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NIeI3Mdrdm9eSN4pd0u3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMDE5MTYwMTQyWhcNMjUxMDIwMTYwMTQyWjAzMTEwLwYDVQQD Eyg1YTJkZGMwNDg5MTZhMmYwNjQ3ODIwMzE3NGJkZTUyNzg5MzFlYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT9HkTee/I41WVH0yQfqfVhkq4BJ ayi6HIwuLnBm9PAWbiOoLOznWqSnYaZadNdVDZOKdgnY/Hv5GptgE7bhIExo77xs eGYB3dN9fqzq8f193oHCBX31MHPWbML1yyW4NqqxRrYdzgRbXTFnGBEgaupwCV4A JTtCssXsmBMO+LBxbkCaR6sGMljqFaFdsw009KGsDD0fwgr6ijYr772wqvuV7tl8 xJTytCItYDvibVX3B8zP9Xwfxm44eiu8ryqv527Pp3gopSkYvv01AUhw8OEquIkD pGCj+dvviLzw0LnKshSe/BKZ+6H1POarCUmhxpHR5hz247wqSnNyt7bx8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFot3ASJFqLwZHggMXS95SeJMeuLMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4dnWXZ4 g/X/xJrA378fA5VkWZSWFdnVJ/ozGY+2rV70XUDtDCG7b4CeRR5g5Q/2rPTbpTsU sDAGisGdeefpZWolJSDafwgDeG31R8JO860w0ZaT2o6XoKd6bVeoz7wsh0ESYH0f dx+ANOsp9fz9+8mp+ml0a+e4Bemt4xQsUwVLnwVMOpjNDJNdzgHzm5yaSwfAPlAd MUyZtLbTScZEb6R9Ji8IHxT1dgeUXeebUWmxfUectliSip4E3MvPLvb9NHBe0FtX UYCEB98YRr9fWRNMJFe+UcptkhtLO2/7jAPlAzrJ4feQOtdgPlq6lMyMlkc4Vdb6 O0CMQu8D98Chqw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:57:08 2025 by rpki-client