$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json) Hash identifier: +q1ynRI4n4kptoPTqDNn41hvMQrsFC0LzvN0xA7DWoE= Subject key identifier: 57:7B:3D:6A:42:D7:16:5D:E5:A4:78:5B:5C:BE:EE:50:B2:61:28:17 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019A5308337E9FF736B571DADFE47284AFB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft Manifest number: 171E Signing time: Wed 05 Nov 2025 08:00:37 +0000 Manifest this update: Wed 05 Nov 2025 08:00:37 +0000 Manifest next update: Thu 06 Nov 2025 08:00:37 +0000 Files and hashes: 1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=) 2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=) 3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=) 4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=) 5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=) 6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: EIj2sjVcSaR2zMtdCoEQpPKxPYkHn+ese6mmSh7R80Y=) 7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=) 8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=) 9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=) 10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=) 11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=) 12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=) 13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=) 14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=) 15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=) 16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=) 17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=) 18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=) 19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=) 20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:08:33:7e:9f:f7:36:b5:71:da:df:e4:72:84:af:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Nov 5 08:00:37 2025 GMT Not After : Nov 6 08:00:37 2025 GMT Subject: CN=577b3d6a42d7165de5a4785b5cbeee50b2612817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:66:a2:8e:99:a6:d5:f6:ee:73:94:8d:bf:e9: 57:43:80:47:48:fb:76:d3:e1:a5:4f:f8:6d:75:6e: 3c:73:e9:8b:14:66:57:7e:6e:99:d0:cc:d3:ac:4a: eb:f3:64:88:56:d2:0b:82:5c:ca:00:d7:8f:c7:a4: da:56:76:f2:e2:86:1b:b5:9c:f1:ee:f9:03:8c:b9: 1f:47:e5:18:76:4c:d3:20:6f:67:1e:d9:c9:b6:4c: e3:e4:7f:6b:9c:9c:80:f4:64:ed:cc:39:88:e6:ba: fa:62:da:97:d1:7c:1d:c4:8a:8b:8f:d2:92:19:d3: 17:fd:f4:3a:55:34:00:b8:1d:f0:3d:e9:8c:47:ec: f3:ce:31:26:2f:ed:27:7e:73:f0:c8:58:dd:19:b4: 73:43:a3:a1:f0:51:1e:cc:b1:d8:78:da:e5:84:7b: 50:59:ee:d3:ff:c4:72:f1:49:74:a3:16:68:aa:e5: 4f:84:66:d1:71:97:84:95:ff:11:2b:72:ee:32:69: 72:80:b4:df:19:87:07:59:fc:12:b9:f7:45:46:2d: f2:56:3c:aa:18:6d:b7:40:d3:71:15:08:30:b2:04: 98:5b:c1:0a:f3:0f:db:66:1b:5d:21:a5:1c:c5:92: 15:44:67:1e:fb:5b:bc:71:38:ff:0a:3d:e8:92:10: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7B:3D:6A:42:D7:16:5D:E5:A4:78:5B:5C:BE:EE:50:B2:61:28:17 X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:dd:17:ad:9c:35:69:3f:0b:ff:99:7f:a9:d3:39:41:03:ec: 06:c3:d7:0f:3c:54:41:4a:98:02:73:fb:60:6d:49:d6:90:88: 39:ce:5a:3e:68:76:7b:07:18:de:e8:8b:df:b2:77:38:79:76: 91:63:fa:70:21:5f:9c:89:ba:73:80:ff:e8:58:f6:0a:65:aa: dc:c4:d1:b1:26:a0:93:d9:1e:e6:ec:a7:78:4c:d5:a7:40:f0: a3:90:18:db:fb:3f:86:75:81:74:4b:30:97:55:0e:b7:3d:2d: be:3b:d3:8d:6a:55:3a:0e:af:23:aa:c6:6e:7a:b3:4f:b0:8b: 47:44:2a:94:0d:3d:50:26:7f:4e:6d:4c:b9:ce:48:6a:fa:82: fd:ce:5b:39:d3:47:7f:4c:af:41:c5:29:de:db:35:97:6f:12: 04:67:ee:d4:8a:7a:dc:14:ee:48:cd:ac:f0:16:bd:25:b6:4f: c7:a0:92:b5:1b:68:ce:79:de:b5:ec:ec:25:83:23:22:ad:a4: d9:b6:72:f2:fb:a1:f8:d2:d3:50:26:5d:32:8f:53:7a:3d:4a: cc:10:45:ed:46:4f:69:92:e9:19:e2:56:52:df:24:8c:22:14: 58:6d:e3:c2:18:bf:e9:e6:7b:ca:f8:ec:73:78:89:79:df:83: cf:d1:39:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpTCDN+n/c2tXHa3+RyhK+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjUxMTA1MDgwMDM3WhcNMjUxMTA2MDgwMDM3WjAzMTEwLwYDVQQD Eyg1NzdiM2Q2YTQyZDcxNjVkZTVhNDc4NWI1Y2JlZWU1MGIyNjEyODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4maijpmm1fbuc5SNv+lXQ4BHSPt2 0+GlT/htdW48c+mLFGZXfm6Z0MzTrErr82SIVtILglzKANePx6TaVnby4oYbtZzx 7vkDjLkfR+UYdkzTIG9nHtnJtkzj5H9rnJyA9GTtzDmI5rr6YtqX0XwdxIqLj9KS GdMX/fQ6VTQAuB3wPemMR+zzzjEmL+0nfnPwyFjdGbRzQ6Oh8FEezLHYeNrlhHtQ We7T/8Ry8Ul0oxZoquVPhGbRcZeElf8RK3LuMmlygLTfGYcHWfwSufdFRi3yVjyq GG23QNNxFQgwsgSYW8EK8w/bZhtdIaUcxZIVRGce+1u8cTj/Cj3okhA8sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFd7PWpC1xZd5aR4W1y+7lCyYSgXMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD90XrZw1 aT8L/5l/qdM5QQPsBsPXDzxUQUqYAnP7YG1J1pCIOc5aPmh2ewcY3uiL37J3OHl2 kWP6cCFfnIm6c4D/6Fj2CmWq3MTRsSagk9ke5uyneEzVp0Dwo5AY2/s/hnWBdEsw l1UOtz0tvjvTjWpVOg6vI6rGbnqzT7CLR0QqlA09UCZ/Tm1Muc5IavqC/c5bOdNH f0yvQcUp3ts1l28SBGfu1Ip63BTuSM2s8Ba9JbZPx6CStRtoznnetezsJYMjIq2k 2bZy8vuh+NLTUCZdMo9Tej1KzBBF7UZPaZLpGeJWUt8kjCIUWG3jwhi/6eZ7yvjs c3iJed+Dz9E5mw== -----END CERTIFICATE-----Generated at Wed Nov 5 16:11:27 2025 by rpki-client