$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: C/dC5jd2ueR2hC5dBo9uhFmIvBddc3IvaMDuErVrkvA= Subject key identifier: 73:3E:69:2C:27:CF:49:F6:BA:1B:48:55:A3:47:2D:B4:03:95:EA:6B Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 0199FBEAC8F9959631294CC16FB845B24A21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 16E6 Signing time: Sun 19 Oct 2025 10:01:32 +0000 Manifest this update: Sun 19 Oct 2025 10:01:32 +0000 Manifest next update: Mon 20 Oct 2025 10:01:32 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: H7+TfzY8WuijhRiuz6U3O1D4FbCn+ZiM3Hztxs/bsDY=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ea:c8:f9:95:96:31:29:4c:c1:6f:b8:45:b2:4a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Oct 19 10:01:32 2025 GMT Not After : Oct 20 10:01:32 2025 GMT Subject: CN=733e692c27cf49f6ba1b4855a3472db40395ea6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:f3:d1:c6:10:3d:d7:16:01:df:d6:56:27: 01:6b:b8:b8:99:8b:9f:c2:4a:e4:19:78:2d:54:a3: c9:88:a4:2e:3e:17:2f:f0:b4:f8:2b:e1:71:9f:69: f9:28:1d:f5:b7:91:eb:54:8d:68:12:ee:94:c8:76: 00:16:1c:6b:5b:98:9b:de:c3:b9:41:bc:cd:f9:ca: fc:23:4a:b1:c1:6a:0a:8f:37:06:7e:37:5d:f8:6b: d0:a7:8f:3b:c4:2b:b0:eb:db:58:8e:63:1a:fa:6e: 35:1a:70:ca:92:a7:3d:0c:87:c4:9a:32:5f:7c:51: 0f:4f:aa:ae:cb:35:a4:2d:d6:e3:47:f6:27:2b:00: d7:72:8b:fa:71:42:e7:a7:d2:0e:9d:14:ad:ae:67: 28:d0:65:26:e4:9c:d3:c2:cd:c8:c8:a6:52:e2:5e: 4f:d4:d7:b0:ba:af:f3:14:98:c8:ee:f2:f1:13:7e: f6:c9:af:86:d2:3b:e7:70:25:10:f1:1e:7b:5c:3a: ff:b1:f0:ff:a6:80:1e:b5:5d:c3:44:e5:a6:a8:52: a8:93:7a:22:75:7f:fb:c3:93:fa:8d:ac:67:ab:3c: 4e:8d:be:53:09:bf:90:f6:9a:d3:1b:e3:36:e9:c3: d2:ca:a8:da:fa:e6:ca:23:df:e5:cb:5c:a2:21:eb: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3E:69:2C:27:CF:49:F6:BA:1B:48:55:A3:47:2D:B4:03:95:EA:6B X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:27:8b:c8:8f:bf:24:dc:4b:5d:55:f1:0d:d5:60:29:61:c1: 1f:93:3a:8f:29:18:22:c5:bc:78:68:46:9b:d6:02:2f:19:43: 0a:9f:ff:6d:3f:63:fc:10:b7:41:02:e6:57:38:fc:73:3d:cc: 4f:c0:bb:26:78:fe:d7:e5:47:8b:5e:ee:48:f1:7b:31:2e:5c: fe:f9:32:28:19:eb:53:0c:7f:33:0d:c5:98:20:46:b3:76:2d: d8:2a:73:a0:d3:d1:f0:0c:49:b7:dd:05:45:72:54:1f:8a:c5: 87:fa:bb:1d:7d:ce:42:7a:d7:4a:ca:f0:e1:0d:6b:23:4c:9a: 0d:db:aa:47:c3:96:59:d2:4d:16:5b:6e:07:73:31:17:b1:f8: cf:cc:91:e6:2a:29:ce:16:7f:fc:db:be:3b:99:55:19:b7:69: 29:8f:43:3c:21:70:90:36:37:d6:ed:28:4d:12:0c:fc:07:b9: 1c:2c:ac:f1:a0:39:ab:3b:a6:b9:56:5b:3a:ea:bd:1d:71:fc: a8:47:11:7f:25:55:23:16:fb:33:b9:c9:67:2d:b6:c5:52:9d: 1d:a9:a9:e1:ef:d7:0c:96:a0:9c:8e:43:1e:aa:08:35:19:da: 42:23:34:b9:2e:92:8a:9b:15:4b:99:de:da:dd:1e:36:d6:12: a2:83:e2:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76sj5lZYxKUzBb7hFskohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUxMDE5MTAwMTMyWhcNMjUxMDIwMTAwMTMyWjAzMTEwLwYDVQQD Eyg3MzNlNjkyYzI3Y2Y0OWY2YmExYjQ4NTVhMzQ3MmRiNDAzOTVlYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBfz0cYQPdcWAd/WVicBa7i4mYuf wkrkGXgtVKPJiKQuPhcv8LT4K+Fxn2n5KB31t5HrVI1oEu6UyHYAFhxrW5ib3sO5 QbzN+cr8I0qxwWoKjzcGfjdd+GvQp487xCuw69tYjmMa+m41GnDKkqc9DIfEmjJf fFEPT6quyzWkLdbjR/YnKwDXcov6cULnp9IOnRStrmco0GUm5JzTws3IyKZS4l5P 1Newuq/zFJjI7vLxE372ya+G0jvncCUQ8R57XDr/sfD/poAetV3DROWmqFKok3oi dX/7w5P6jaxnqzxOjb5TCb+Q9prTG+M26cPSyqja+ubKI9/ly1yiIeuLCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM+aSwnz0n2uhtIVaNHLbQDleprMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGieLyI+/ JNxLXVXxDdVgKWHBH5M6jykYIsW8eGhGm9YCLxlDCp//bT9j/BC3QQLmVzj8cz3M T8C7Jnj+1+VHi17uSPF7MS5c/vkyKBnrUwx/Mw3FmCBGs3Yt2CpzoNPR8AxJt90F RXJUH4rFh/q7HX3OQnrXSsrw4Q1rI0yaDduqR8OWWdJNFltuB3MxF7H4z8yR5iop zhZ//Nu+O5lVGbdpKY9DPCFwkDY31u0oTRIM/Ae5HCys8aA5qzumuVZbOuq9HXH8 qEcRfyVVIxb7M7nJZy22xVKdHamp4e/XDJagnI5DHqoINRnaQiM0uS6SipsVS5ne 2t0eNtYSooPitA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:40:40 2025 by rpki-client