$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: 3hHltKd4G6U4TXZ/pperrvEeru8r6RoRk/uxU/Iixyc= Subject key identifier: 8A:29:91:5A:88:60:2A:5F:CA:8D:8C:09:AA:59:48:A0:52:91:8D:D5 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 0199FC21C677B513FF2C4245A187D957531B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 12BB Signing time: Sun 19 Oct 2025 11:01:35 +0000 Manifest this update: Sun 19 Oct 2025 11:01:35 +0000 Manifest next update: Mon 20 Oct 2025 11:01:35 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: AEoJBTXGdbNGEHCG2xrZYkY-m48.roa (hash: wcifUjqJ1L+wv580+2agiHMA4f6pyHuaF1nnabsyT3o=) 3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: lk/c6fXLhgVWbuwNTb9GNzE1uvjltfjmp1ZZB0bKc5c=) 5: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 6: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 7: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: xXfwL3nXnXFEEVcYcv_dc6Fb5P4.roa (hash: sO38IVaxxxNJ8+o5mB4XNWptxay9N15BzuBDzJ2RLLI=) 13: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:c6:77:b5:13:ff:2c:42:45:a1:87:d9:57:53:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Oct 19 11:01:35 2025 GMT Not After : Oct 20 11:01:35 2025 GMT Subject: CN=8a29915a88602a5fca8d8c09aa5948a052918dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:f4:a6:63:8f:fd:fd:63:29:b3:41:60:64: a3:d7:02:7e:68:e2:15:18:6b:f4:6a:34:30:47:4e: 98:55:f5:91:ff:44:94:23:18:08:53:e1:eb:46:44: 80:e1:d7:e2:ff:11:f9:47:3d:a2:7b:6a:db:86:e7: 3a:ab:ae:9b:20:07:09:1b:c4:c7:a0:62:05:4d:15: 1e:d2:4e:76:43:37:5a:3b:10:ad:31:ae:b4:6b:9d: 09:e1:ca:c1:c6:18:1a:48:d9:23:23:7f:ba:22:90: 3a:35:c8:09:ef:75:56:a7:ce:ca:6c:60:96:02:c6: d5:bd:3e:4b:6d:83:44:46:a4:c8:7f:87:b3:a5:10: f0:78:b0:4b:c3:82:95:8f:0c:8b:05:de:4a:7e:fb: 2c:e1:5f:26:ea:b9:8b:ee:dd:0a:b9:7a:1a:a1:69: 57:0d:cb:61:71:87:6c:ce:e7:e5:68:27:27:77:7c: a4:34:62:9d:17:9e:4f:8b:22:1b:0d:da:77:07:f7: 96:73:ce:e2:96:ce:90:ef:32:a5:45:02:15:d3:86: bd:dd:df:af:e9:f7:52:52:a2:b8:76:e3:0f:e9:f8: 59:2f:7a:c1:04:a5:4a:12:18:b2:3d:3e:c1:8c:a5: 6a:17:d1:d2:c7:12:23:17:81:b0:66:06:c3:02:d9: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:91:5A:88:60:2A:5F:CA:8D:8C:09:AA:59:48:A0:52:91:8D:D5 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:22:1d:a0:fd:04:f6:1f:f2:79:8c:93:49:2a:4b:27:7f:7a: 8a:89:c9:43:46:dd:e3:c6:3a:6f:53:da:d0:eb:a1:9c:67:31: 5f:b1:4c:70:ef:33:a0:0f:22:c6:be:37:36:69:78:e2:67:2f: 1c:f7:ed:4a:c5:e4:e7:c5:84:fb:fb:16:00:8d:56:74:d7:8e: 3d:4b:4e:37:fb:e0:07:e4:11:27:b5:1d:09:d3:9f:ca:a8:16: cc:3b:f3:d6:10:06:93:cf:c2:28:43:99:4e:66:c2:9a:1f:dc: db:74:2e:64:2f:b4:2a:38:5d:42:71:a5:73:36:e5:e7:b2:bf: 25:52:5f:c5:19:3d:b0:df:2c:55:7c:c3:10:e7:10:13:bb:0e: 6d:28:a4:c0:24:da:cd:b8:35:0f:e3:c8:dc:79:f3:73:e2:b3: af:a6:49:33:fd:00:f6:d6:b6:52:cd:58:70:40:17:31:e0:10: c6:f9:10:b4:4c:70:bb:aa:b8:fb:cb:90:3b:10:7d:5a:cf:39: 35:13:0c:e7:bb:42:4f:6a:a1:d0:08:d2:54:56:b3:6c:1c:45: 03:09:08:10:be:53:39:c9:14:06:06:aa:55:57:60:94:69:10: 08:69:07:f2:92:d4:a5:98:2f:e3:62:9a:ef:5f:1f:ac:05:78: 68:5d:6d:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IcZ3tRP/LEJFoYfZV1MbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUxMDE5MTEwMTM1WhcNMjUxMDIwMTEwMTM1WjAzMTEwLwYDVQQD Eyg4YTI5OTE1YTg4NjAyYTVmY2E4ZDhjMDlhYTU5NDhhMDUyOTE4ZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwz0pmOP/f1jKbNBYGSj1wJ+aOIV GGv0ajQwR06YVfWR/0SUIxgIU+HrRkSA4dfi/xH5Rz2ie2rbhuc6q66bIAcJG8TH oGIFTRUe0k52QzdaOxCtMa60a50J4crBxhgaSNkjI3+6IpA6NcgJ73VWp87KbGCW AsbVvT5LbYNERqTIf4ezpRDweLBLw4KVjwyLBd5Kfvss4V8m6rmL7t0KuXoaoWlX DcthcYdszuflaCcnd3ykNGKdF55PiyIbDdp3B/eWc87ils6Q7zKlRQIV04a93d+v 6fdSUqK4duMP6fhZL3rBBKVKEhiyPT7BjKVqF9HSxxIjF4GwZgbDAtnFkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIopkVqIYCpfyo2MCapZSKBSkY3VMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiIdoP0E 9h/yeYyTSSpLJ396ionJQ0bd48Y6b1Pa0OuhnGcxX7FMcO8zoA8ixr43Nml44mcv HPftSsXk58WE+/sWAI1WdNeOPUtON/vgB+QRJ7UdCdOfyqgWzDvz1hAGk8/CKEOZ TmbCmh/c23QuZC+0KjhdQnGlczbl57K/JVJfxRk9sN8sVXzDEOcQE7sObSikwCTa zbg1D+PI3Hnzc+Kzr6ZJM/0A9ta2Us1YcEAXMeAQxvkQtExwu6q4+8uQOxB9Ws85 NRMM57tCT2qh0AjSVFazbBxFAwkIEL5TOckUBgaqVVdglGkQCGkH8pLUpZgv42Ka 718frAV4aF1t3A== -----END CERTIFICATE-----Generated at Sun Oct 19 20:49:21 2025 by rpki-client