$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: AYCPIFNAMt2j5Eg+U4YXjzkzaHgaE3AkFdlMXp9/BzU= Subject key identifier: 4E:C1:82:F9:1A:92:73:35:CD:1D:48:98:C9:74:F8:CF:D5:BD:7B:AD Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019A4C6130AF22D62395351EB97227CD656C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1730 Signing time: Tue 04 Nov 2025 01:00:29 +0000 Manifest this update: Tue 04 Nov 2025 01:00:29 +0000 Manifest next update: Wed 05 Nov 2025 01:00:29 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 5: DU8r3sc4ossJcNLkYBCHA96dRpA.roa (hash: r1JwJEoiU/JtSYwyekoAXXxNXR1urkakhqMVKFaKbKU=) 6: RwaLZN3D24qbiSCNdxPzEDghRuQ.roa (hash: qOkoBLXEXIyoyxyFGdEFpZ14lfMYf3mog4DQoGo1xtU=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 9: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 10: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 11: VnEAEVAj205N-9TkiWYWJw63OBY.roa (hash: UiAdH3zJCJa1I0z2gapdgCxGzhoMD3wqUBzrxQt0q4k=) 12: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 13: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 14: aKI4K4s2w_a8uyDN7S7H6E1pZk0.roa (hash: FsEPXU+SsEkYqv+c2yVXywYULp4eiT19GoSHc/aS2BA=) 15: fFjYHOwlBy5Glp0QNxrS3eHSmDs.roa (hash: P4yBBJcJBQmjrtoV/buNE0xVxB0wdXG8IXNtAy6RL8Y=) 16: fMzT-5d-H7wm7UzPX4PbBLndjlo.roa (hash: QHxOUGueDky85wAcdSL/hpvn/Djtg29akovspAUAOhU=) 17: fm8_hxutG5R7-Mx8bxRlfwSrl9o.roa (hash: kSoXtSfwPkhI0yioS1Tphp5+T9BGKf4elvsAZqNw9NE=) 18: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 19: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 7pt3itljArY8mQ1AYRXVjmndHumipcj7MPBCO2oi70M=) 20: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 21: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 22: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 23: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 24: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 25: wQA0abh25Jj5mK6DP_9yfPh_Szw.roa (hash: Gxtu2SrKEp09RMrd8FAfjNeoZCr/XklplXKAU3GLc1A=) 26: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 27: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:61:30:af:22:d6:23:95:35:1e:b9:72:27:cd:65:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Nov 4 01:00:29 2025 GMT Not After : Nov 5 01:00:29 2025 GMT Subject: CN=4ec182f91a927335cd1d4898c974f8cfd5bd7bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:5a:ae:7d:10:53:4f:72:43:24:55:1a:12: 2f:ff:c3:d3:6a:c0:4f:de:63:8e:df:0e:16:97:81: e5:33:7e:e0:eb:b6:dc:f5:dc:2a:8a:6c:20:28:22: e0:18:b5:f0:2e:f5:68:39:ed:1c:bb:f5:32:c9:66: 52:8e:35:f4:5e:64:bd:c8:80:82:ed:4b:4a:22:22: b7:0f:55:6c:a0:9b:4a:dc:fd:32:0c:4d:17:d6:8c: ed:e9:82:50:f1:60:4d:98:e0:55:ac:70:5e:40:3f: 82:73:c9:0e:65:f9:34:57:ca:6b:e7:77:df:84:0c: 5d:69:ee:1a:5b:98:21:8f:ac:19:ab:f3:32:6c:85: 6b:9a:c8:f4:7b:66:6a:a2:64:67:08:e5:8c:67:85: c2:94:fe:53:14:c8:8d:b9:72:8a:de:c2:2d:a4:9d: 0a:83:2c:64:06:f4:2a:92:04:28:d4:c2:85:e0:63: 3f:c7:d7:b9:e8:3c:5c:af:d4:8d:4c:e9:c6:0c:b7: 14:6d:59:b9:9a:af:e8:7b:3c:dc:3f:c2:cf:94:a2: d4:2c:d8:aa:c1:e5:ce:4a:f4:32:a6:75:d4:0d:6b: da:c2:c0:f9:12:47:1d:65:17:37:f2:96:36:e8:b5: f5:c1:7a:37:d0:4c:f5:e4:73:d9:ed:c0:62:10:51: 0d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C1:82:F9:1A:92:73:35:CD:1D:48:98:C9:74:F8:CF:D5:BD:7B:AD X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:73:99:28:a9:49:96:07:c8:64:cf:45:df:a1:05:64:f6:44: c4:90:e4:2b:08:0c:07:52:a4:bd:06:6f:98:43:82:05:a6:1a: 71:f1:ad:e1:d4:55:9f:0f:03:9a:aa:47:4f:9f:4c:c6:cf:7a: f8:d0:34:ec:53:97:e2:e3:52:5f:f3:fc:6b:7d:4b:57:24:a8: 5c:94:9c:c0:ae:6d:fe:6c:1f:09:9f:2d:e0:b6:a7:d7:db:9e: b3:3a:df:21:65:8a:ac:36:51:0d:ce:9b:c9:67:34:86:85:7e: 06:d6:27:3d:2b:5b:69:32:32:b0:2c:e6:a7:25:90:b7:d1:92: 51:a9:ba:bc:a8:54:9f:23:45:d4:2d:e3:6e:21:34:70:10:c7: d9:8b:79:e4:20:58:ce:ee:68:0a:45:91:63:85:4d:7d:2e:d2: f2:a1:2a:3a:32:06:30:70:71:71:d7:19:58:2e:2f:45:61:f1: 75:3f:09:a9:d2:d2:14:c9:35:9b:07:95:35:ec:ec:d6:fe:d4: fc:f4:e7:ac:5e:09:8e:68:8c:0d:59:e0:56:23:d9:6e:ab:0b: 13:44:f6:00:53:53:ec:21:9e:a6:0f:eb:78:50:9b:0f:5a:9b: af:23:cf:ef:b2:55:b2:3f:68:10:4d:e6:71:f2:93:ac:de:49: 07:23:f5:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMYTCvItYjlTUeuXInzWVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUxMTA0MDEwMDI5WhcNMjUxMTA1MDEwMDI5WjAzMTEwLwYDVQQD Eyg0ZWMxODJmOTFhOTI3MzM1Y2QxZDQ4OThjOTc0ZjhjZmQ1YmQ3YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk5arn0QU09yQyRVGhIv/8PTasBP 3mOO3w4Wl4HlM37g67bc9dwqimwgKCLgGLXwLvVoOe0cu/UyyWZSjjX0XmS9yICC 7UtKIiK3D1VsoJtK3P0yDE0X1ozt6YJQ8WBNmOBVrHBeQD+Cc8kOZfk0V8pr53ff hAxdae4aW5ghj6wZq/MybIVrmsj0e2ZqomRnCOWMZ4XClP5TFMiNuXKK3sItpJ0K gyxkBvQqkgQo1MKF4GM/x9e56Dxcr9SNTOnGDLcUbVm5mq/oezzcP8LPlKLULNiq weXOSvQypnXUDWvawsD5EkcdZRc38pY26LX1wXo30Ez15HPZ7cBiEFENmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7BgvkaknM1zR1ImMl0+M/VvXutMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHOZKKlJ lgfIZM9F36EFZPZExJDkKwgMB1KkvQZvmEOCBaYacfGt4dRVnw8DmqpHT59Mxs96 +NA07FOX4uNSX/P8a31LVySoXJScwK5t/mwfCZ8t4Lan19ueszrfIWWKrDZRDc6b yWc0hoV+BtYnPStbaTIysCzmpyWQt9GSUam6vKhUnyNF1C3jbiE0cBDH2Yt55CBY zu5oCkWRY4VNfS7S8qEqOjIGMHBxcdcZWC4vRWHxdT8JqdLSFMk1mweVNezs1v7U /PTnrF4JjmiMDVngViPZbqsLE0T2AFNT7CGepg/reFCbD1qbryPP77JVsj9oEE3m cfKTrN5JByP1jA== -----END CERTIFICATE-----Generated at Tue Nov 4 10:50:58 2025 by rpki-client