$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: G0j3XLfdTDICoN5HrWss6PDIGrSemG5g5tCcgdvWUEk= Subject key identifier: A8:7F:6B:ED:EA:D7:4D:07:D4:1A:46:45:D4:4C:8D:A6:73:44:03:3C Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 0199FEEBF24277346EA98EF85CB4C4A4FD6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 1709 Signing time: Mon 20 Oct 2025 00:01:39 +0000 Manifest this update: Mon 20 Oct 2025 00:01:39 +0000 Manifest next update: Tue 21 Oct 2025 00:01:39 +0000 Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=) 2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=) 3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=) 4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=) 5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=) 6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=) 7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=) 8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=) 9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=) 10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=) 11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=) 12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: W3ZxAp3iEfagWLnaG6LiZTMqUFqK7R01NbGeKFBMR5E=) 13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=) 14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=) 15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=) 16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=) 17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=) 18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=) 19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=) 20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=) 21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=) 22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=) 23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=) 24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=) 25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=) 26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=) 27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=) 28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=) 29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=) 30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:f2:42:77:34:6e:a9:8e:f8:5c:b4:c4:a4:fd:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Oct 20 00:01:39 2025 GMT Not After : Oct 21 00:01:39 2025 GMT Subject: CN=a87f6bedead74d07d41a4645d44c8da67344033c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:29:71:db:5b:da:1a:f3:79:bc:39:0e:33: 8a:bb:bb:3e:35:22:0c:d1:52:20:67:08:d8:4c:16: 07:21:14:56:c3:b4:5f:de:38:30:75:7e:76:03:05: ad:96:8e:36:68:a8:c3:ff:b6:ad:82:14:bf:48:ac: 4c:14:fa:e9:ca:93:e2:6f:4c:03:1a:e3:20:36:73: a9:2a:7f:f9:45:d3:a0:46:1f:e8:0c:cd:a5:ae:b1: 35:3b:34:ba:d2:b1:06:d0:35:0d:ea:15:55:e2:3d: 67:89:a2:11:37:97:36:74:26:37:91:c6:b0:c5:7f: a2:c5:0b:97:35:cc:72:af:1b:cd:41:73:a6:06:49: 8f:7e:75:34:4c:cd:dd:bc:b0:7d:41:96:79:fb:45: 29:6c:44:68:7c:19:56:6d:a8:4f:67:9e:07:e8:cd: 99:b4:3c:46:8c:1e:86:97:37:c4:b8:73:09:e2:d9: 5f:ca:76:17:55:5f:96:ab:b2:70:ea:04:f0:c0:40: 44:46:ca:c1:67:c9:a5:59:b1:0f:6d:79:72:bc:a5: 52:50:03:29:57:d2:8b:50:ad:ce:b4:69:39:4c:78: e6:c0:b6:5f:fb:81:8e:6b:a8:97:4c:22:3d:58:99: 48:34:27:c1:0d:b2:74:5e:ed:fd:12:0f:ff:c3:9f: 1c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7F:6B:ED:EA:D7:4D:07:D4:1A:46:45:D4:4C:8D:A6:73:44:03:3C X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:37:48:c4:f9:47:f3:70:17:a4:71:62:d0:f4:86:fe:f3:0e: 0a:24:39:21:fb:63:84:5b:b0:b3:9f:8f:88:05:46:a0:95:e2: 5f:78:17:87:69:58:c7:a1:84:ec:1e:40:9d:b9:ee:bb:af:ef: 23:6d:d5:94:b0:d1:18:ec:3d:1c:b2:f6:71:e1:1b:7a:06:9c: a0:de:85:4b:c6:84:75:21:23:ea:d0:20:9d:85:2d:3d:29:e5: 40:85:8d:36:6e:83:a3:b9:95:b2:a9:70:99:c6:d0:16:bb:12: 76:e8:e4:d0:53:40:4d:17:0a:df:02:2d:61:bc:77:a9:16:36: ec:c3:41:bc:6d:f5:0e:3e:58:af:96:c9:26:f7:53:43:f0:65: fb:4f:c7:9d:39:82:7f:b7:7f:fb:9f:0e:26:12:f9:8e:23:9d: be:80:19:8f:9b:08:19:5d:90:27:4d:7e:b5:ce:ee:1a:19:29: 68:82:a0:42:20:79:f2:89:84:35:6c:96:a9:60:dc:25:15:8f: 72:fd:32:54:e6:4d:78:af:0f:1f:fc:28:bf:14:a2:99:2a:be: 04:cb:1d:30:64:a1:c2:b1:8d:22:4c:a4:da:6e:70:65:67:0e: e6:7d:9b:f9:9e:d2:ea:5c:1c:5f:92:e6:40:16:69:88:ee:ed: 49:26:ca:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+6/JCdzRuqY74XLTEpP1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjUxMDIwMDAwMTM5WhcNMjUxMDIxMDAwMTM5WjAzMTEwLwYDVQQD EyhhODdmNmJlZGVhZDc0ZDA3ZDQxYTQ2NDVkNDRjOGRhNjczNDQwMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Qpcdtb2hrzebw5DjOKu7s+NSIM 0VIgZwjYTBYHIRRWw7Rf3jgwdX52AwWtlo42aKjD/7atghS/SKxMFPrpypPib0wD GuMgNnOpKn/5RdOgRh/oDM2lrrE1OzS60rEG0DUN6hVV4j1niaIRN5c2dCY3kcaw xX+ixQuXNcxyrxvNQXOmBkmPfnU0TM3dvLB9QZZ5+0UpbERofBlWbahPZ54H6M2Z tDxGjB6GlzfEuHMJ4tlfynYXVV+Wq7Jw6gTwwEBERsrBZ8mlWbEPbXlyvKVSUAMp V9KLUK3OtGk5THjmwLZf+4GOa6iXTCI9WJlINCfBDbJ0Xu39Eg//w58cgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKh/a+3q100H1BpGRdRMjaZzRAM8MB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTdIxPlH 83AXpHFi0PSG/vMOCiQ5IftjhFuws5+PiAVGoJXiX3gXh2lYx6GE7B5Anbnuu6/v I23VlLDRGOw9HLL2ceEbegacoN6FS8aEdSEj6tAgnYUtPSnlQIWNNm6Do7mVsqlw mcbQFrsSdujk0FNATRcK3wItYbx3qRY27MNBvG31Dj5Yr5bJJvdTQ/Bl+0/HnTmC f7d/+58OJhL5jiOdvoAZj5sIGV2QJ01+tc7uGhkpaIKgQiB58omENWyWqWDcJRWP cv0yVOZNeK8PH/wovxSimSq+BMsdMGShwrGNIkyk2m5wZWcO5n2b+Z7S6lwcX5Lm QBZpiO7tSSbK0A== -----END CERTIFICATE-----Generated at Mon Oct 20 03:17:32 2025 by rpki-client