$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: X9uKCmVyLofnHAnQJ5EOVA66LVEu5mLazl9MUeIH4gQ= Subject key identifier: A3:E6:C1:82:8B:56:4C:68:9A:43:6C:07:C1:DA:7C:A1:B6:8C:E1:7F Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019A4DAAD1C7A1DEB1E1C7C43ECB5F1E2C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 171A Signing time: Tue 04 Nov 2025 07:00:31 +0000 Manifest this update: Tue 04 Nov 2025 07:00:31 +0000 Manifest next update: Wed 05 Nov 2025 07:00:31 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 3: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (hash: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=) 4: K-N36rOGMrajAoKgQRnFws3cYZQ.roa (hash: nuImM5LcJvcHXxZcDwo2uunodGLbKRgkWdkeXxE++0Y=) 5: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 6: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 7: fRZWH_M0OyQ2q7C3l2YZBzviPzY.roa (hash: F07+RgoevJOf1u0ML2Jb2xCzFrPFpbtH07Gxnbmp3Hg=) 8: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: taS776XnLDceopOFun2Np8GFrM4EWiog71qMpPhBTDA=) 10: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 11: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:aa:d1:c7:a1:de:b1:e1:c7:c4:3e:cb:5f:1e:2c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Nov 4 07:00:31 2025 GMT Not After : Nov 5 07:00:31 2025 GMT Subject: CN=a3e6c1828b564c689a436c07c1da7ca1b68ce17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:21:3e:c5:d7:ac:1a:f1:88:27:09:15:2e: a8:cb:c4:67:48:82:47:e6:77:7d:e1:d3:80:de:34: 69:f9:41:7a:1f:41:67:78:ff:15:bc:9c:9c:f9:54: 16:1c:55:a0:00:64:b2:1b:6c:38:bd:66:f6:71:1e: e0:cc:73:b5:b8:bc:c4:aa:8d:38:b3:c2:85:bf:0c: ff:43:c5:b2:01:db:4e:31:00:8b:89:61:59:ee:b2: c0:ff:1e:34:0c:e9:56:b5:b3:10:92:7b:e0:4e:24: ad:6c:26:90:3a:88:7c:4e:71:38:e5:73:0e:f5:9a: 10:f7:6b:26:99:5c:0b:74:97:29:7c:75:6e:82:c7: cd:e5:61:d5:e6:48:e7:79:d9:f5:23:78:39:08:e8: b4:bb:72:10:fb:dc:8a:9e:d0:08:87:0d:40:f9:5e: f3:0f:9b:0d:dd:dc:a7:c1:f1:b2:d9:26:d8:f5:bc: 9a:d6:9a:2a:cc:78:ea:f8:ed:a9:db:8c:7e:73:d7: e3:92:9a:7a:3d:f6:00:ab:97:8a:55:6e:52:9d:59: 1e:37:c3:ea:8a:f6:c8:59:ef:f7:3b:b8:8f:5b:f1: 6b:10:44:40:15:7b:4d:37:b5:ae:0b:3e:82:af:ad: 0f:a2:c1:d4:fa:ec:71:96:31:1e:b4:44:fe:04:db: 3d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E6:C1:82:8B:56:4C:68:9A:43:6C:07:C1:DA:7C:A1:B6:8C:E1:7F X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a2:1a:a8:8e:f3:9c:a1:9f:b7:bb:4f:ca:2c:30:b1:63:fc: d8:6b:83:54:85:f0:57:ea:ae:bf:2f:cc:75:23:d4:b3:ba:1d: a4:21:58:33:d2:2a:e0:1b:56:27:c4:ae:77:d3:1d:af:f6:84: 67:f4:b7:26:4a:37:f0:8d:36:4a:b8:b2:36:17:8a:09:dc:94: 42:1c:da:d2:80:f1:33:fc:54:44:e5:99:85:c2:e7:48:b2:4a: e9:ab:f0:33:65:7f:92:d8:f7:01:ec:0f:a1:0a:6a:52:b4:26: d4:b6:57:4b:e1:19:10:8a:5a:be:68:49:5a:ef:e4:88:e6:85: a4:5a:1c:bc:14:c7:4f:21:c4:9c:8b:4c:e9:a6:4f:85:85:bb: 06:2b:af:5b:4c:f9:8b:15:11:72:d1:17:c0:05:d2:77:08:91: 16:2a:eb:fc:a3:0f:b1:7d:93:e3:c4:9e:25:06:76:8f:28:76: b0:7e:6c:0d:38:1d:c1:e2:7a:84:ee:68:53:ac:85:f9:21:55: a1:00:2e:06:07:11:ea:fc:fc:d8:fd:57:7c:30:20:2c:3f:ae: ec:30:5f:56:87:d1:cf:16:84:9b:c0:09:a1:3d:2b:db:5d:99: 2d:6b:a2:ed:45:c2:72:b3:31:de:8d:3f:4a:77:46:d8:14:70: 07:85:cb:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNqtHHod6x4cfEPstfHiycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUxMTA0MDcwMDMxWhcNMjUxMTA1MDcwMDMxWjAzMTEwLwYDVQQD EyhhM2U2YzE4MjhiNTY0YzY4OWE0MzZjMDdjMWRhN2NhMWI2OGNlMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvkhPsXXrBrxiCcJFS6oy8RnSIJH 5nd94dOA3jRp+UF6H0FneP8VvJyc+VQWHFWgAGSyG2w4vWb2cR7gzHO1uLzEqo04 s8KFvwz/Q8WyAdtOMQCLiWFZ7rLA/x40DOlWtbMQknvgTiStbCaQOoh8TnE45XMO 9ZoQ92smmVwLdJcpfHVugsfN5WHV5kjnedn1I3g5COi0u3IQ+9yKntAIhw1A+V7z D5sN3dynwfGy2SbY9bya1poqzHjq+O2p24x+c9fjkpp6PfYAq5eKVW5SnVkeN8Pq ivbIWe/3O7iPW/FrEERAFXtNN7WuCz6Cr60PosHU+uxxljEetET+BNs97wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPmwYKLVkxomkNsB8HafKG2jOF/MB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6IaqI7z nKGft7tPyiwwsWP82GuDVIXwV+quvy/MdSPUs7odpCFYM9Iq4BtWJ8Sud9Mdr/aE Z/S3Jko38I02SriyNheKCdyUQhza0oDxM/xUROWZhcLnSLJK6avwM2V/ktj3AewP oQpqUrQm1LZXS+EZEIpavmhJWu/kiOaFpFocvBTHTyHEnItM6aZPhYW7BiuvW0z5 ixURctEXwAXSdwiRFirr/KMPsX2T48SeJQZ2jyh2sH5sDTgdweJ6hO5oU6yF+SFV oQAuBgcR6vz82P1XfDAgLD+u7DBfVofRzxaEm8AJoT0r212ZLWui7UXCcrMx3o0/ SndG2BRwB4XLnQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:52:15 2025 by rpki-client