$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: ewrDY06PqqnJD/shzXvLW23JyrUohgsrxSUco9/H6J4= Subject key identifier: AD:50:46:B5:B9:5F:47:6B:7D:95:34:79:54:82:FB:66:3E:B7:F6:7B Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 0199FEB47C4862411D1CA92F3159AC2042A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 16F2 Signing time: Sun 19 Oct 2025 23:01:05 +0000 Manifest this update: Sun 19 Oct 2025 23:01:05 +0000 Manifest next update: Mon 20 Oct 2025 23:01:05 +0000 Files and hashes: 1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=) 2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=) 3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=) 4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=) 5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=) 6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=) 7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: lh4U3qlD8rAqfDl8ytYleQ2l2P3Y1Frrp6mRZgSBPTk=) 8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=) 9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=) 10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=) 11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:b4:7c:48:62:41:1d:1c:a9:2f:31:59:ac:20:42:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Oct 19 23:01:05 2025 GMT Not After : Oct 20 23:01:05 2025 GMT Subject: CN=ad5046b5b95f476b7d9534795482fb663eb7f67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:45:20:c2:8e:5f:61:1c:93:37:97:e8:2e: db:0c:12:92:20:8a:ec:57:b3:b5:48:43:19:6d:62: 79:2c:8f:90:7c:00:d5:66:dd:05:35:b1:bc:e2:18: 3b:b1:95:ee:0e:27:f1:fe:91:6e:58:0f:08:d4:51: e5:47:eb:69:92:cf:ae:2b:78:e7:f6:bd:a1:67:5d: 14:e0:35:5d:cf:2d:84:68:94:80:17:d2:d3:30:8b: 5a:b1:f0:61:59:5c:f1:4d:bc:ff:33:0a:46:19:00: dc:37:6b:a0:d9:35:d0:73:e9:47:dd:42:a5:d1:71: ad:ea:c7:80:b9:0c:f6:d6:88:e0:78:48:4f:2f:a4: e1:10:f3:4a:44:7d:66:a3:62:5b:cc:45:ee:5e:3d: 28:c3:25:ad:61:37:80:b3:13:9f:04:cf:5d:78:f2: 9b:59:73:70:cb:bb:f7:10:00:7c:15:e9:e1:da:8e: b3:4b:73:38:15:8f:52:f1:5c:63:6a:b4:c0:4b:a2: e7:d0:f4:d8:41:b4:a1:51:f1:bc:16:3a:cc:5b:66: be:03:d5:62:69:4d:61:65:8b:44:d3:f5:e7:b1:6c: 4f:20:40:0d:82:a5:24:2e:16:e3:b0:ea:65:80:81: 7a:c6:b2:08:54:9c:40:63:cd:1e:bf:10:56:59:1a: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:50:46:B5:B9:5F:47:6B:7D:95:34:79:54:82:FB:66:3E:B7:F6:7B X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:37:8f:68:92:5a:be:4d:4a:c2:ec:d6:88:06:32:dc:ac:25: 27:d3:75:8a:a1:27:a6:1c:78:29:ce:51:3d:5e:52:9a:4d:a3: 38:09:82:58:41:b3:ce:2f:0c:4c:c4:b1:d2:72:e3:b6:b0:52: 58:7e:fd:10:c5:79:92:d9:8c:d3:6e:4c:7c:52:9a:1a:f6:a5: 49:2e:ec:75:37:a0:f6:dd:9b:13:bf:96:8f:8f:3f:63:b6:a6: 45:3b:b6:91:86:47:72:fe:c7:c0:1b:25:d2:73:88:43:d8:09: a7:ba:de:de:10:71:b1:1d:67:6a:08:64:28:ad:b1:38:c6:b2: 81:1a:3c:e6:bb:7f:4d:06:b1:19:71:96:f4:80:3f:6e:ff:ee: 7d:b4:62:17:61:8f:73:5b:6c:eb:0f:a5:9d:df:e0:da:3e:36: 30:01:df:89:c5:50:21:e2:9e:bb:03:51:e5:4a:2d:6a:38:56: b0:c0:93:c8:8a:18:c5:ea:63:b5:5e:a5:16:18:95:e3:f8:79: 2e:e8:1c:e7:c9:69:b7:0b:27:24:73:a5:f4:23:4a:90:7b:98: dc:d3:9d:73:c0:f2:33:8b:bf:95:68:95:c9:98:bd:ae:16:3a: 9f:d7:f2:a1:b1:26:72:f5:00:3b:65:d8:89:d4:fe:ed:1a:fb: 33:e4:43:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+tHxIYkEdHKkvMVmsIEKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjUxMDE5MjMwMTA1WhcNMjUxMDIwMjMwMTA1WjAzMTEwLwYDVQQD EyhhZDUwNDZiNWI5NWY0NzZiN2Q5NTM0Nzk1NDgyZmI2NjNlYjdmNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZRFIMKOX2EckzeX6C7bDBKSIIrs V7O1SEMZbWJ5LI+QfADVZt0FNbG84hg7sZXuDifx/pFuWA8I1FHlR+tpks+uK3jn 9r2hZ10U4DVdzy2EaJSAF9LTMItasfBhWVzxTbz/MwpGGQDcN2ug2TXQc+lH3UKl 0XGt6seAuQz21ojgeEhPL6ThEPNKRH1mo2JbzEXuXj0owyWtYTeAsxOfBM9dePKb WXNwy7v3EAB8Fenh2o6zS3M4FY9S8VxjarTAS6Ln0PTYQbShUfG8FjrMW2a+A9Vi aU1hZYtE0/XnsWxPIEANgqUkLhbjsOplgIF6xrIIVJxAY80evxBWWRr32QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1QRrW5X0drfZU0eVSC+2Y+t/Z7MB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDePaJJa vk1KwuzWiAYy3KwlJ9N1iqEnphx4Kc5RPV5Smk2jOAmCWEGzzi8MTMSx0nLjtrBS WH79EMV5ktmM025MfFKaGvalSS7sdTeg9t2bE7+Wj48/Y7amRTu2kYZHcv7HwBsl 0nOIQ9gJp7re3hBxsR1naghkKK2xOMaygRo85rt/TQaxGXGW9IA/bv/ufbRiF2GP c1ts6w+lnd/g2j42MAHficVQIeKeuwNR5UotajhWsMCTyIoYxepjtV6lFhiV4/h5 Lugc58lptwsnJHOl9CNKkHuY3NOdc8DyM4u/lWiVyZi9rhY6n9fyobEmcvUAO2XY idT+7Rr7M+RDJg== -----END CERTIFICATE-----Generated at Mon Oct 20 02:03:01 2025 by rpki-client