$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: Kn6STWBh95JBdSiF7Xe7wIxMTiOKmMylBOTNZDZkXtc= Subject key identifier: 58:9E:38:9F:FE:71:18:B8:F2:1C:09:95:AE:86:FA:54:5A:FD:68:1E Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 0199FBB36E74DC862FC0AD41855B7D14804D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 0384 Signing time: Sun 19 Oct 2025 09:01:04 +0000 Manifest this update: Sun 19 Oct 2025 09:01:04 +0000 Manifest next update: Mon 20 Oct 2025 09:01:04 +0000 Files and hashes: 1: 2Jpt_1ySpLb9WRqOyyiYnu_PAIA.roa (hash: MdM/wC7dTry3YHnV8Zu6hFD2x4pd0q3/gDiM/ZzZGdU=) 2: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 3: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 4: 3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa (hash: PH0lnE0uN3wnc8tlGu7b2U0ixCX+3/LdiDburPkYelk=) 5: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: E9Jwdio8wX_xqnKuXI9fZ_oHtDc.roa (hash: ECAIS90IaPHlQjI+lVlWinjaB8CNUQFfSBH/sS9eBjs=) 8: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 9: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 10: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 11: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (hash: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: T7lm+Ge1qrIkon/ftpJ4gB835Hueen8MSMa4DfBBots=) 20: lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa (hash: u4qJFUu2v9DMBJmArLe+Y/Q/WiHYmJsHB3rpShxcurw=) 21: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 22: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 23: qGrAC8V0MwPDUhgXopiuZtK9w3k.roa (hash: QGRwQP2ZkVZAbpmeLKIkEFdzvxw0GO536GTjtTQacHA=) 24: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 25: uHsUP9ITNumWBnivSrpnKA1c8sk.roa (hash: RggRwkd0IhdYIM5cTJqQm6e1Y1oQR3G4Ep6Nth1HpWk=) 26: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 27: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:b3:6e:74:dc:86:2f:c0:ad:41:85:5b:7d:14:80:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Oct 19 09:01:04 2025 GMT Not After : Oct 20 09:01:04 2025 GMT Subject: CN=589e389ffe7118b8f21c0995ae86fa545afd681e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:1d:33:e2:43:3e:23:89:57:e4:78:24:6d: 21:eb:8f:f6:9c:82:f1:7a:74:d0:2c:47:08:e2:56: 52:22:65:98:4b:2b:40:ca:08:db:fe:0f:ca:85:13: e8:6e:66:06:e0:bb:07:28:f6:ba:a4:b2:4e:a2:d7: 41:2f:d4:85:1d:10:1a:09:6b:68:d8:9a:a1:4f:10: 27:82:ee:81:95:24:54:c6:75:e3:ba:79:ee:2f:77: 0c:04:7e:5e:fa:d6:fc:36:13:eb:9c:df:e2:6c:3f: 76:35:93:90:99:50:51:a9:d4:e2:f2:2b:a3:b6:50: 87:bc:4f:0c:8c:58:16:3f:d6:24:98:75:bb:db:5f: 8d:91:30:15:7e:47:80:4c:ac:36:85:2c:b4:e4:d5: 64:b4:08:4c:fd:55:ad:9a:db:f7:d9:98:17:86:23: 20:1e:53:ec:a7:3b:a7:39:e5:c4:20:f9:19:e9:6b: 57:ee:2a:86:82:a7:d4:83:4b:b5:3b:c8:87:cd:80: 14:1b:ff:d7:a1:df:8b:4a:74:b2:ee:61:dc:79:76: 8d:3e:68:64:fc:5f:2a:dd:26:15:ca:0e:1d:6f:4b: 41:d0:e2:a5:c3:ae:f8:b9:8c:11:93:c8:e1:ce:36: 48:2f:8e:a7:21:a0:4b:7f:de:37:8f:9c:89:3c:19: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:38:9F:FE:71:18:B8:F2:1C:09:95:AE:86:FA:54:5A:FD:68:1E X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:35:74:41:6a:80:37:d6:d7:7e:17:ee:ad:75:2d:a1:4f:38: 77:af:85:50:6c:36:2c:23:af:b7:0e:e7:3e:2d:0f:75:7c:9b: 31:1b:0a:92:d1:28:ce:33:29:b5:4b:bd:3b:e1:ca:88:cf:96: 20:ba:e7:54:04:18:1d:bf:37:f1:c8:df:82:c4:61:13:a4:af: de:d6:61:ed:e6:c4:b0:ac:21:92:cf:93:08:89:6f:3b:5a:a5: f2:25:ba:b7:3d:2a:06:f6:da:38:f1:df:23:94:4b:0f:24:e0: c7:19:97:e2:e7:0f:1c:2c:0b:36:36:2d:87:d4:e0:41:d2:60: c8:48:b8:62:8f:79:71:d3:a3:6d:79:10:19:64:d3:6a:5c:d4: da:a8:e8:bd:3f:b5:c1:31:26:b9:d5:8a:4d:50:97:17:d0:6d: ca:86:8b:aa:53:9e:ec:7d:05:bb:28:f1:3e:92:66:cf:6c:4a: 30:57:3a:cf:e4:c7:4a:88:48:30:87:df:f2:a1:95:71:77:b0: 20:7e:d0:a8:5b:dd:ca:b2:16:bd:4c:b9:46:a9:83:b3:1d:9f: 5a:68:61:33:22:ff:43:97:39:54:9c:d2:b7:6e:d4:14:c8:16: 53:9c:46:e8:e8:7b:c6:74:81:ef:62:16:a1:c4:7e:ec:bd:54: ae:e0:a6:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7s2503IYvwK1BhVt9FIBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUxMDE5MDkwMTA0WhcNMjUxMDIwMDkwMTA0WjAzMTEwLwYDVQQD Eyg1ODllMzg5ZmZlNzExOGI4ZjIxYzA5OTVhZTg2ZmE1NDVhZmQ2ODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuMdM+JDPiOJV+R4JG0h64/2nILx enTQLEcI4lZSImWYSytAygjb/g/KhRPobmYG4LsHKPa6pLJOotdBL9SFHRAaCWto 2JqhTxAngu6BlSRUxnXjunnuL3cMBH5e+tb8NhPrnN/ibD92NZOQmVBRqdTi8iuj tlCHvE8MjFgWP9YkmHW721+NkTAVfkeATKw2hSy05NVktAhM/VWtmtv32ZgXhiMg HlPspzunOeXEIPkZ6WtX7iqGgqfUg0u1O8iHzYAUG//Xod+LSnSy7mHceXaNPmhk /F8q3SYVyg4db0tB0OKlw674uYwRk8jhzjZIL46nIaBLf943j5yJPBks3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFieOJ/+cRi48hwJla6G+lRa/WgeMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTV0QWqA N9bXfhfurXUtoU84d6+FUGw2LCOvtw7nPi0PdXybMRsKktEozjMptUu9O+HKiM+W ILrnVAQYHb838cjfgsRhE6Sv3tZh7ebEsKwhks+TCIlvO1ql8iW6tz0qBvbaOPHf I5RLDyTgxxmX4ucPHCwLNjYth9TgQdJgyEi4Yo95cdOjbXkQGWTTalzU2qjovT+1 wTEmudWKTVCXF9BtyoaLqlOe7H0FuyjxPpJmz2xKMFc6z+THSohIMIff8qGVcXew IH7QqFvdyrIWvUy5RqmDsx2fWmhhMyL/Q5c5VJzSt27UFMgWU5xG6Oh7xnSB72IW ocR+7L1UruCm0A== -----END CERTIFICATE-----Generated at Sun Oct 19 13:10:12 2025 by rpki-client