$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json) Hash identifier: 6bnOjBVW+DA27hoQSIj6q9HuvVMi4vwpmqqTjePgeek= Subject key identifier: DE:BA:95:3B:46:35:95:AD:57:40:D5:1B:D7:8C:98:DB:AE:8A:27:2F Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019A5119CA3F577A3AD10425FBC71AB7C96E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft Manifest number: 171D Signing time: Tue 04 Nov 2025 23:00:35 +0000 Manifest this update: Tue 04 Nov 2025 23:00:35 +0000 Manifest next update: Wed 05 Nov 2025 23:00:35 +0000 Files and hashes: 1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=) 2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=) 3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=) 4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=) 5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=) 6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: /S5G1XD3CcDaO6HDwVNDhgHTLU37HuLxcrLFQqwUaCs=) 7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=) 8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=) 9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=) 10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=) 11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=) 12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=) 13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=) 14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=) 15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=) 16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=) 17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=) 18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=) 19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=) 20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:19:ca:3f:57:7a:3a:d1:04:25:fb:c7:1a:b7:c9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Nov 4 23:00:35 2025 GMT Not After : Nov 5 23:00:35 2025 GMT Subject: CN=deba953b463595ad5740d51bd78c98dbae8a272f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:eb:fc:cb:9a:b1:71:95:28:e6:d1:c8:9b:5e: b4:1c:7f:57:d0:26:4f:7e:47:81:91:c2:09:33:e2: 10:e0:e0:63:c7:aa:87:2c:4e:f2:3b:ed:bf:47:2d: 9b:6a:c5:d0:73:00:0f:18:b3:f4:98:8f:e8:fd:3a: ec:fa:95:b8:82:a6:69:38:d8:3b:ec:0f:76:06:ff: 6c:21:b8:d3:67:e4:54:dd:3c:20:ae:05:6e:23:9a: dd:d4:2e:42:48:ad:7b:89:52:f5:ef:02:3e:f5:80: d4:4d:2a:17:80:e0:39:37:3b:d5:24:af:0b:1f:0e: 5e:9a:18:86:ad:13:16:7a:06:c2:ed:54:8f:ac:67: 76:5e:7a:0d:d7:f9:c1:ed:2a:d5:15:05:4c:9e:97: 85:68:10:b4:cc:f9:68:92:02:c6:2e:9a:3d:77:c3: 4e:fc:1c:4c:fd:b0:2a:02:3a:1c:dc:53:7c:bd:da: f7:54:18:3e:7e:33:59:3a:99:c8:17:fc:63:bf:8c: 4e:b2:a8:0f:61:16:85:12:32:48:b3:96:15:22:ed: 8b:86:ab:13:0b:60:c6:81:42:5b:0b:24:e0:28:89: a0:a7:f9:9a:73:1a:22:c4:97:65:1a:46:bf:6d:9a: 6d:6f:4a:0f:b8:a7:c7:fa:ea:6b:09:88:ac:90:fb: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BA:95:3B:46:35:95:AD:57:40:D5:1B:D7:8C:98:DB:AE:8A:27:2F X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:95:4a:8d:de:81:6f:fd:05:d8:c5:93:0a:6e:8b:2f:2d:58: d7:70:64:a2:48:e9:86:a0:83:3c:61:17:c0:9b:7b:b0:d3:9d: 7b:e4:8c:b6:ec:df:ee:85:01:5f:49:9d:b6:c7:a8:12:bb:e6: dd:8b:2b:1f:aa:d0:02:7b:9d:ad:f7:21:c9:4a:5f:eb:a6:ba: b9:f2:33:60:05:46:7e:bf:3d:d0:0a:b4:7c:14:bd:28:ec:50: 7a:0c:40:de:89:02:f0:fd:bb:9c:9d:45:cd:86:e5:b6:fc:4f: 89:39:01:7e:1e:c2:11:39:33:d4:69:d4:cd:17:6d:5e:5d:36: c5:2d:c3:7f:b2:b9:93:82:02:35:db:fb:c2:d5:25:3b:2c:0c: 6e:a0:5c:eb:f0:ac:da:5a:89:34:41:6e:12:3e:1a:08:a8:d9: 51:11:9a:13:ba:b9:c5:0c:19:dd:bb:35:19:d4:ad:74:84:33: d9:4c:2c:28:c7:b3:7a:4d:ec:56:6a:2f:6d:ab:ae:65:74:50: b3:49:4d:cf:8a:8b:b6:ac:b0:55:db:92:b9:7b:9c:80:f1:ab: b8:6e:8e:91:bc:c6:e5:86:99:bf:46:d6:0c:b0:16:bc:ec:19: 8d:2c:34:bc:c1:54:8b:2a:f2:ee:34:ba:71:2b:a5:84:d3:e5: f0:3b:b1:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRGco/V3o60QQl+8cat8luMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjUxMTA0MjMwMDM1WhcNMjUxMTA1MjMwMDM1WjAzMTEwLwYDVQQD EyhkZWJhOTUzYjQ2MzU5NWFkNTc0MGQ1MWJkNzhjOThkYmFlOGEyNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnev8y5qxcZUo5tHIm160HH9X0CZP fkeBkcIJM+IQ4OBjx6qHLE7yO+2/Ry2basXQcwAPGLP0mI/o/Trs+pW4gqZpONg7 7A92Bv9sIbjTZ+RU3TwgrgVuI5rd1C5CSK17iVL17wI+9YDUTSoXgOA5NzvVJK8L Hw5emhiGrRMWegbC7VSPrGd2XnoN1/nB7SrVFQVMnpeFaBC0zPlokgLGLpo9d8NO /BxM/bAqAjoc3FN8vdr3VBg+fjNZOpnIF/xjv4xOsqgPYRaFEjJIs5YVIu2LhqsT C2DGgUJbCyTgKImgp/macxoixJdlGka/bZptb0oPuKfH+uprCYiskPvr/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN66lTtGNZWtV0DVG9eMmNuuiicvMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZVKjd6B b/0F2MWTCm6LLy1Y13BkokjphqCDPGEXwJt7sNOde+SMtuzf7oUBX0mdtseoErvm 3YsrH6rQAnudrfchyUpf66a6ufIzYAVGfr890Aq0fBS9KOxQegxA3okC8P27nJ1F zYbltvxPiTkBfh7CETkz1GnUzRdtXl02xS3Df7K5k4ICNdv7wtUlOywMbqBc6/Cs 2lqJNEFuEj4aCKjZURGaE7q5xQwZ3bs1GdStdIQz2UwsKMezek3sVmovbauuZXRQ s0lNz4qLtqywVduSuXucgPGruG6OkbzG5YaZv0bWDLAWvOwZjSw0vMFUiyry7jS6 cSulhNPl8Dux1w== -----END CERTIFICATE-----Generated at Wed Nov 5 07:23:12 2025 by rpki-client