$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: sB0zeuUVjjcYweq6vwdak3XHMcIu6NpxTv64bJ/0/kA= Subject key identifier: 0D:E1:1D:98:74:68:DF:16:D0:2F:D9:67:FF:0E:BB:28:CB:5F:EC:78 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 0199FCFD3EA3516C9FD2945A183185B7C05A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 124A Signing time: Sun 19 Oct 2025 15:01:19 +0000 Manifest this update: Sun 19 Oct 2025 15:01:19 +0000 Manifest next update: Mon 20 Oct 2025 15:01:19 +0000 Files and hashes: 1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=) 2: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=) 3: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=) 4: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=) 5: DthOD_kxSHI_yAmMQURpyHdQPX8.roa (hash: 8Uu1LNAmsaRUJ+QbM5XSgI4iAjEHIEeippuJeVtKzew=) 6: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: PdiQxSUob55vTpYa1KNin9xNb4PuxyJfmki1HNSCXIc=) 7: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=) 8: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=) 9: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=) 10: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=) 11: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=) 12: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=) 13: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=) 14: _2Z2DCyP8AoFTrwYYnrTE8duSKk.roa (hash: 9BjH2YLT3BThs3wwk+jwBx3zqx+MMwKVuJzuVbVoQIE=) 15: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=) 16: hqAa-HGl9YYSVOAZse-mATGGJYM.roa (hash: KOeloEwv9QnlDfRaZ27Ece4epTiFo9JQL3WkmnmhezQ=) 17: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=) 18: zBCnMJFWnMXKgz_j_g57vjHzFUk.roa (hash: 4csBVOwSYwoxyrDsoROei21hUJZS/HdqdCvpTaBSh6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:3e:a3:51:6c:9f:d2:94:5a:18:31:85:b7:c0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Oct 19 15:01:19 2025 GMT Not After : Oct 20 15:01:19 2025 GMT Subject: CN=0de11d987468df16d02fd967ff0ebb28cb5fec78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:64:6d:dc:71:84:70:03:0b:0b:a3:34:cb: 97:30:35:a1:ea:02:30:80:cd:6a:74:a5:ff:34:74: 1e:33:d6:d6:77:65:2d:a2:5b:e7:2c:31:83:1c:d3: 7c:19:0e:ec:40:fa:7f:67:ed:cc:2e:cb:cc:6a:35: 2a:79:69:b2:30:e5:13:39:31:71:99:07:92:fa:ef: bb:3f:c2:6a:a9:07:f5:53:63:cc:59:20:04:88:c8: b1:95:da:33:f5:6f:53:9b:b7:2c:59:c4:32:00:62: 4b:c3:3c:b7:81:f9:7d:be:2a:b1:23:ce:9f:ec:18: 13:87:af:2b:b1:10:f6:d9:f1:2f:02:89:86:1e:ba: 8d:41:c7:19:bc:e6:1a:ae:78:15:cf:2d:44:bd:15: f4:be:bb:61:45:10:6f:7b:7d:a0:3d:83:6f:8d:92: db:e5:f6:e4:ea:8a:7e:f1:ba:fa:17:1f:7a:b4:fb: ab:ff:b6:ef:d9:b0:8b:d5:a1:75:72:b2:51:4f:8d: e0:ae:fd:58:21:e2:f9:29:66:fb:f2:8d:7c:0f:32: 10:e1:65:c0:7c:de:fd:fd:91:a0:e7:c5:9e:a4:77: 42:78:02:34:7d:61:79:71:8b:7b:c6:5b:bd:d6:70: 55:f4:d8:bd:43:33:24:fd:d8:d0:5e:2b:90:31:82: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E1:1D:98:74:68:DF:16:D0:2F:D9:67:FF:0E:BB:28:CB:5F:EC:78 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ac:a1:18:b1:2d:73:52:d6:89:7d:14:df:86:01:05:84:11: e3:89:4e:76:b7:38:bf:0d:01:de:60:79:9f:7b:00:92:81:39: e5:84:03:94:b0:e1:83:47:7e:c5:d6:1c:d6:eb:ff:37:a4:b8: 42:a2:ab:be:06:81:d9:53:69:54:73:1e:c8:e9:a0:7d:43:e7: a2:67:ab:c7:28:1f:e3:07:16:e9:f9:3e:46:3a:ea:c3:b9:75: 72:1b:95:49:0d:aa:64:1b:6c:59:ac:97:de:08:97:07:a7:e2: 9a:48:ce:94:cb:d8:83:fe:ba:c5:48:f0:1f:bc:bc:0a:83:4b: 77:9b:eb:67:5c:8b:24:53:10:5d:e4:7c:61:c2:ea:1d:c5:c7: 48:e3:24:e1:8e:7c:7b:b2:2b:b9:63:f3:4a:5e:3e:05:28:b1: 0a:c2:20:85:31:a7:ec:33:a0:1f:85:af:11:8c:f9:1f:0a:7d: 51:80:24:f7:b7:e7:02:d9:fb:81:20:8e:69:1d:e5:d6:de:54: 4a:fb:10:06:64:67:a7:50:8c:28:76:a8:a5:59:64:95:87:c0: ae:27:62:28:09:96:1d:63:73:24:2f:df:15:87:b1:99:b9:19: 2b:63:c7:cf:8a:1e:ea:a7:bf:60:b6:fb:8e:90:6a:3f:36:f1: e4:2c:b2:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/T6jUWyf0pRaGDGFt8BaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjUxMDE5MTUwMTE5WhcNMjUxMDIwMTUwMTE5WjAzMTEwLwYDVQQD EygwZGUxMWQ5ODc0NjhkZjE2ZDAyZmQ5NjdmZjBlYmIyOGNiNWZlYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvVkbdxxhHADCwujNMuXMDWh6gIw gM1qdKX/NHQeM9bWd2UtolvnLDGDHNN8GQ7sQPp/Z+3MLsvMajUqeWmyMOUTOTFx mQeS+u+7P8JqqQf1U2PMWSAEiMixldoz9W9Tm7csWcQyAGJLwzy3gfl9viqxI86f 7BgTh68rsRD22fEvAomGHrqNQccZvOYarngVzy1EvRX0vrthRRBve32gPYNvjZLb 5fbk6op+8br6Fx96tPur/7bv2bCL1aF1crJRT43grv1YIeL5KWb78o18DzIQ4WXA fN79/ZGg58WepHdCeAI0fWF5cYt7xlu91nBV9Ni9QzMk/djQXiuQMYIjTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3hHZh0aN8W0C/ZZ/8OuyjLX+x4MB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6yhGLEt c1LWiX0U34YBBYQR44lOdrc4vw0B3mB5n3sAkoE55YQDlLDhg0d+xdYc1uv/N6S4 QqKrvgaB2VNpVHMeyOmgfUPnomerxygf4wcW6fk+Rjrqw7l1chuVSQ2qZBtsWayX 3giXB6fimkjOlMvYg/66xUjwH7y8CoNLd5vrZ1yLJFMQXeR8YcLqHcXHSOMk4Y58 e7IruWPzSl4+BSixCsIghTGn7DOgH4WvEYz5Hwp9UYAk97fnAtn7gSCOaR3l1t5U SvsQBmRnp1CMKHaopVlklYfAridiKAmWHWNzJC/fFYexmbkZK2PHz4oe6qe/YLb7 jpBqPzbx5CyyXA== -----END CERTIFICATE-----Generated at Sun Oct 19 18:06:57 2025 by rpki-client