$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: ydk3cdwWTtZulyAF0ntfl6GBKZFJB1uu3l6oTITo/2s= Subject key identifier: 20:D9:54:DD:CF:D8:8C:75:A9:EA:14:3C:82:70:84:9B:03:39:81:5C Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019A0147FCB5085D7C573CB2D7F339BEA8FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 16F4 Signing time: Mon 20 Oct 2025 11:01:26 +0000 Manifest this update: Mon 20 Oct 2025 11:01:26 +0000 Manifest next update: Tue 21 Oct 2025 11:01:26 +0000 Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: tP5ZPPeEwZp6ln9A8+9MmT2n8RplJrp1fyCW936Ao6g=) 2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 3: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=) 4: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 5: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (hash: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=) 6: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 7: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 8: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 9: XfeVybS-JJmUst6aHDqcoct7XK0.roa (hash: nYNNvQT6vs/H7ho6wlD5EX5eXnEUV3YAmuK8qzDOCmA=) 10: fAqAClIqEJU2Z5Ye9QXpUO1Tbkg.roa (hash: YDMyeOOGj2eBmIkqGQ0q84C8FFV9NROwwY19+t/7x2o=) 11: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:01:47:fc:b5:08:5d:7c:57:3c:b2:d7:f3:39:be:a8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Oct 20 11:01:26 2025 GMT Not After : Oct 21 11:01:26 2025 GMT Subject: CN=20d954ddcfd88c75a9ea143c8270849b0339815c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:5d:ec:fc:a8:ed:b3:f5:c8:b2:a6:d0:5f: 89:b1:44:e0:d6:15:69:80:cd:5b:93:dc:56:82:5b: f5:3d:9f:91:ee:66:60:9c:b4:55:98:40:f8:35:9f: 78:cf:2c:3a:5d:c5:a9:e9:f7:ac:b0:a1:44:ad:2d: 3a:56:26:d4:27:03:ef:d6:d2:c8:1f:39:fd:3e:26: c3:d8:33:9a:17:15:dc:ca:74:62:36:06:41:57:b1: 21:8a:d0:6e:cf:22:61:d2:b3:40:40:33:47:16:7a: d9:63:a9:af:93:1c:75:e5:20:aa:67:3e:19:a8:6a: a6:25:4f:f4:b5:ae:d5:fe:bf:c1:53:a1:20:7f:44: 9f:25:c7:db:79:86:bc:d4:a0:59:34:53:a2:3c:c5: ec:ca:ae:41:6b:6e:0d:c1:10:32:63:63:da:9f:26: d5:8c:77:34:cf:87:d2:9a:21:fe:d8:ce:16:0f:24: 33:59:e8:ac:6b:50:6f:f8:1b:04:0b:9f:55:be:f3: ef:45:6e:6c:8c:6a:00:a1:86:85:85:59:f3:f1:e0: 0a:1e:00:31:0c:80:82:d9:89:ba:35:82:f0:2a:2f: 6c:a4:73:b4:45:4d:e1:08:8a:6b:19:a5:24:ac:86: 7f:7e:55:48:7a:1b:18:3f:08:b6:5d:80:28:37:03: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D9:54:DD:CF:D8:8C:75:A9:EA:14:3C:82:70:84:9B:03:39:81:5C X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e0:78:86:50:fc:f9:5f:94:98:65:a5:9d:b3:d5:cd:9b:93: 48:2e:d1:ea:b3:5d:cb:8f:5e:46:ff:fb:fd:5b:c9:4c:0d:1b: 08:03:50:09:8a:fb:29:32:33:70:0e:12:8b:c2:3e:4a:54:3b: 71:67:54:9c:6a:95:cf:aa:01:11:33:1d:7f:50:87:12:b3:5c: 18:36:62:44:71:1e:5f:cd:48:9e:96:c7:ca:11:ab:6b:35:8e: 3c:53:ac:ac:54:10:53:0a:41:b5:bf:7c:12:68:53:44:2c:75: 63:12:93:9b:84:35:9d:9e:dd:a3:20:25:91:11:42:d4:33:04: cf:de:8c:2b:ff:d4:ba:68:a8:64:a9:ab:67:b9:5a:48:4e:93: df:16:b1:a1:b1:c9:c6:ea:c8:cc:89:cf:a6:3b:56:1b:80:8b: ba:bf:a8:e8:bd:32:c0:a6:d6:7e:5d:2b:c1:2d:91:7e:ee:e8: 3b:00:77:99:c3:6e:06:c1:8d:9d:1e:12:e1:cf:18:3a:89:34: a7:c4:39:b6:63:50:39:60:87:e4:ed:5a:fb:de:d6:7b:99:d9: 52:4e:7f:3b:c2:ae:6a:0f:ee:20:58:04:86:e7:4c:c3:52:ee: c0:7b:08:c9:64:44:8e:c4:c8:95:0c:e0:73:73:a9:33:6e:91: 00:93:f8:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoBR/y1CF18Vzyy1/M5vqj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUxMDIwMTEwMTI2WhcNMjUxMDIxMTEwMTI2WjAzMTEwLwYDVQQD EygyMGQ5NTRkZGNmZDg4Yzc1YTllYTE0M2M4MjcwODQ5YjAzMzk4MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQVd7Pyo7bP1yLKm0F+JsUTg1hVp gM1bk9xWglv1PZ+R7mZgnLRVmED4NZ94zyw6XcWp6fessKFErS06VibUJwPv1tLI Hzn9PibD2DOaFxXcynRiNgZBV7EhitBuzyJh0rNAQDNHFnrZY6mvkxx15SCqZz4Z qGqmJU/0ta7V/r/BU6Egf0SfJcfbeYa81KBZNFOiPMXsyq5Ba24NwRAyY2PanybV jHc0z4fSmiH+2M4WDyQzWeisa1Bv+BsEC59VvvPvRW5sjGoAoYaFhVnz8eAKHgAx DICC2Ym6NYLwKi9spHO0RU3hCIprGaUkrIZ/flVIehsYPwi2XYAoNwOsEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDZVN3P2Ix1qeoUPIJwhJsDOYFcMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuB4hlD8 +V+UmGWlnbPVzZuTSC7R6rNdy49eRv/7/VvJTA0bCANQCYr7KTIzcA4Si8I+SlQ7 cWdUnGqVz6oBETMdf1CHErNcGDZiRHEeX81InpbHyhGrazWOPFOsrFQQUwpBtb98 EmhTRCx1YxKTm4Q1nZ7doyAlkRFC1DMEz96MK//UumioZKmrZ7laSE6T3xaxobHJ xurIzInPpjtWG4CLur+o6L0ywKbWfl0rwS2Rfu7oOwB3mcNuBsGNnR4S4c8YOok0 p8Q5tmNQOWCH5O1a+97We5nZUk5/O8Kuag/uIFgEhudMw1LuwHsIyWREjsTIlQzg c3OpM26RAJP4pQ== -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:59 2025 by rpki-client