$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: nCNjpxgBaNgEjN2u5nCYOBdVSTqz6Lm0WuY10VYbAJ4= Subject key identifier: E9:E4:96:20:DB:D1:27:F4:DA:8D:94:22:1B:E1:BA:D8:B3:B9:31:67 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019A5006E933137D8A1CA3A9E5BA9D5B5FC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 16FD Signing time: Tue 04 Nov 2025 18:00:21 +0000 Manifest this update: Tue 04 Nov 2025 18:00:21 +0000 Manifest next update: Wed 05 Nov 2025 18:00:21 +0000 Files and hashes: 1: 5WLg_OQ77v-fOT9qxALPiv6xIJU.roa (hash: Of5ILIgkLOFeAYv4HvRO9bh/m8O2gTiP63LRrjsXyCc=) 2: AbKOh9gpXgwFSloJdXfaWSLCFyg.roa (hash: Q+kVnk5rKEmbqNEXqZoiJZUiyaqs6rvEUwmrzWgFMQI=) 3: JyckXigwYGV__68AUCYD52rnXo0.roa (hash: SbkH6tPWhWrW/o78zmYE9oC7rLfxWmyocNFH2s//I5E=) 4: LZXNMAIh5rxJ27RzY3-HOC44ze8.roa (hash: a//LkQjUfY/J/vByRTwCkOeaTuhCCphW4WYvKNJGdac=) 5: NCM3clu2kUX1FywCV-rdbSiyAwg.roa (hash: lqUVwqTm2F0EVVgAq9uFKVlQ5ZkdzUvkJ/HuRhL+GWA=) 6: dJyo5maMFYG06CB60KewP8-LNEc.roa (hash: LO26kgSXxCz0IxFKcAaH1ZYq5V5rRxtBlLjShWu3YvU=) 7: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: wANcIA48nkHXhdWnCmay698EK5hjY8hSBU2i0lpnZFQ=) 8: kALeFOqdoUlsrrEA4gEeCsqdb7U.roa (hash: CGGNVlWIfGNVOdkVdR2nL+rohybhJ6hPwgX68rdZVTI=) 9: kGDG-UIYc6E6yuKmUj9Iy9r4a6I.roa (hash: 1OvwxxMvp2ezbTpQpiEO0qvhRS4iGyD5k7iDnUXEkCY=) 10: q9-vuUKVR4izeN3aoSM_0PGlTLE.roa (hash: 7uTxuawjanQAcGsc+vt8tq396KLmeaMaL6YYUmFethI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:06:e9:33:13:7d:8a:1c:a3:a9:e5:ba:9d:5b:5f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Nov 4 18:00:21 2025 GMT Not After : Nov 5 18:00:21 2025 GMT Subject: CN=e9e49620dbd127f4da8d94221be1bad8b3b93167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:e0:b3:32:b6:f7:2c:36:5b:65:b3:10:4e: e9:d3:1b:b2:cf:ff:a7:53:6d:ff:f4:31:35:ba:16: d0:61:2d:a3:d3:cb:e5:a1:2d:a1:3d:22:46:c2:4f: 71:73:4d:27:06:48:d7:0b:3e:e4:15:95:a3:e5:29: 3d:40:e4:d2:91:30:76:e1:b4:1f:5e:ef:27:1f:d4: 24:87:bd:88:b6:db:4b:13:f7:37:0e:83:e3:07:68: c1:d6:6f:a7:5a:ab:01:f4:15:1f:29:31:aa:e4:6f: 09:a4:23:58:67:4a:1b:74:a6:5e:ec:83:a7:0a:36: da:3c:40:1d:1d:70:b4:f9:a6:37:5c:c1:0c:80:bf: ce:a6:ff:7c:bc:d7:99:ab:08:34:93:11:df:c3:3e: 20:fe:74:1d:de:af:92:15:03:eb:ce:b5:82:b1:b2: d7:87:68:88:90:0c:2c:fc:8c:f6:96:df:a9:c6:20: 94:5a:b5:89:c7:de:b0:c5:9a:81:84:6a:ff:ff:08: 8d:7a:a7:b1:07:b4:20:e1:32:2a:6a:9f:7d:69:d0: 06:68:64:1f:75:af:1e:65:5c:24:2c:fe:de:80:97: 1f:78:26:8a:e7:71:ed:91:61:e8:16:e5:fd:2d:af: 1a:b0:a2:40:cf:63:08:66:42:b7:18:40:46:60:ba: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E4:96:20:DB:D1:27:F4:DA:8D:94:22:1B:E1:BA:D8:B3:B9:31:67 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:80:12:65:78:43:46:73:bb:ac:32:9c:35:4b:2f:a8:08:71: 72:ec:48:c6:fe:55:83:4a:98:f2:48:e8:94:b2:89:f8:06:bf: e8:84:96:77:a0:83:5f:d2:05:4d:df:be:c1:a7:8a:19:d6:32: 92:43:25:01:80:6b:3a:e2:48:8d:c6:c6:b6:e9:41:f9:e6:c3: 4e:76:47:ac:1e:ba:2b:55:8f:c3:63:24:41:e4:bc:57:dd:38: 18:1a:bc:03:6c:dd:3c:94:e1:97:da:87:59:2c:08:c3:43:84: 4a:64:d7:06:43:02:90:a6:fe:87:f5:02:78:ca:71:a3:b3:d6: 61:6d:fe:db:6d:2b:e1:07:5e:85:48:58:7b:50:b4:68:43:85: 68:63:82:6b:a4:f4:7a:00:c8:ca:12:85:90:c9:f5:18:ba:7e: a1:7c:f6:59:f2:79:76:e5:96:dd:f0:32:0f:82:41:75:79:ef: 5d:97:79:3c:a3:dc:6b:79:82:ae:8b:75:d1:d4:56:23:89:70: 5a:78:8c:87:08:fd:c2:b0:37:fe:9c:76:d5:65:b6:20:42:82: 98:15:85:32:83:cc:a0:3f:72:ce:2d:c8:5b:c4:3a:05:3b:b1: eb:fa:03:16:3f:26:45:6a:97:e6:8f:2f:d2:dc:65:a7:d2:3c: 9b:8b:5c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQBukzE32KHKOp5bqdW1/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjUxMTA0MTgwMDIxWhcNMjUxMTA1MTgwMDIxWjAzMTEwLwYDVQQD EyhlOWU0OTYyMGRiZDEyN2Y0ZGE4ZDk0MjIxYmUxYmFkOGIzYjkzMTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0zgszK29yw2W2WzEE7p0xuyz/+n U23/9DE1uhbQYS2j08vloS2hPSJGwk9xc00nBkjXCz7kFZWj5Sk9QOTSkTB24bQf Xu8nH9Qkh72ItttLE/c3DoPjB2jB1m+nWqsB9BUfKTGq5G8JpCNYZ0obdKZe7IOn CjbaPEAdHXC0+aY3XMEMgL/Opv98vNeZqwg0kxHfwz4g/nQd3q+SFQPrzrWCsbLX h2iIkAws/Iz2lt+pxiCUWrWJx96wxZqBhGr//wiNeqexB7Qg4TIqap99adAGaGQf da8eZVwkLP7egJcfeCaK53HtkWHoFuX9La8asKJAz2MIZkK3GEBGYLqyHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnkliDb0Sf02o2UIhvhutizuTFnMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4ASZXhD RnO7rDKcNUsvqAhxcuxIxv5Vg0qY8kjolLKJ+Aa/6ISWd6CDX9IFTd++waeKGdYy kkMlAYBrOuJIjcbGtulB+ebDTnZHrB66K1WPw2MkQeS8V904GBq8A2zdPJThl9qH WSwIw0OESmTXBkMCkKb+h/UCeMpxo7PWYW3+220r4QdehUhYe1C0aEOFaGOCa6T0 egDIyhKFkMn1GLp+oXz2WfJ5duWW3fAyD4JBdXnvXZd5PKPca3mCrot10dRWI4lw WniMhwj9wrA3/px21WW2IEKCmBWFMoPMoD9yzi3IW8Q6BTux6/oDFj8mRWqX5o8v 0txlp9I8m4tc9Q== -----END CERTIFICATE-----Generated at Wed Nov 5 00:11:13 2025 by rpki-client