$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: 0gc/jVoyOOTVh6qj8OilTjqxzDftnhdl9kAtGkMA3Is= Subject key identifier: BC:7E:72:57:4A:E5:ED:AC:67:FF:D9:04:67:A4:E3:98:DC:7D:70:C7 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019A5299EB0488746C5F123260E0AB2A2EF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 03B1 Signing time: Wed 05 Nov 2025 06:00:09 +0000 Manifest this update: Wed 05 Nov 2025 06:00:09 +0000 Manifest next update: Thu 06 Nov 2025 06:00:09 +0000 Files and hashes: 1: 2Jpt_1ySpLb9WRqOyyiYnu_PAIA.roa (hash: MdM/wC7dTry3YHnV8Zu6hFD2x4pd0q3/gDiM/ZzZGdU=) 2: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 3: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 4: 3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa (hash: PH0lnE0uN3wnc8tlGu7b2U0ixCX+3/LdiDburPkYelk=) 5: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: E9Jwdio8wX_xqnKuXI9fZ_oHtDc.roa (hash: ECAIS90IaPHlQjI+lVlWinjaB8CNUQFfSBH/sS9eBjs=) 8: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 9: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 10: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 11: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (hash: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: UqXK6x8Dt3tDvevETGKopG2DaX9iYHoBTvIiAfL96hk=) 20: lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa (hash: u4qJFUu2v9DMBJmArLe+Y/Q/WiHYmJsHB3rpShxcurw=) 21: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 22: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 23: qGrAC8V0MwPDUhgXopiuZtK9w3k.roa (hash: QGRwQP2ZkVZAbpmeLKIkEFdzvxw0GO536GTjtTQacHA=) 24: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 25: uHsUP9ITNumWBnivSrpnKA1c8sk.roa (hash: RggRwkd0IhdYIM5cTJqQm6e1Y1oQR3G4Ep6Nth1HpWk=) 26: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 27: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:99:eb:04:88:74:6c:5f:12:32:60:e0:ab:2a:2e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Nov 5 06:00:09 2025 GMT Not After : Nov 6 06:00:09 2025 GMT Subject: CN=bc7e72574ae5edac67ffd90467a4e398dc7d70c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:ff:40:b2:d5:ca:7e:2f:f8:67:93:42:94: 0a:fa:83:59:9a:b0:0b:f4:58:0a:3c:49:67:a4:66: 02:d7:da:08:19:5d:52:37:f6:aa:6b:d2:08:0a:21: 95:7e:23:f6:b1:a3:ca:42:70:13:f8:ea:73:7a:79: 54:ad:b1:87:4b:49:8f:51:6c:6f:e9:e8:b0:fd:95: 27:a8:03:9a:94:d0:42:3a:42:78:74:6f:9a:83:01: b2:e7:a0:c4:27:86:6a:cd:1c:e3:3e:4a:13:a0:e6: a1:c2:26:56:36:0d:0b:d6:6c:1a:83:40:89:a6:2c: dd:a0:e7:6a:0d:f6:83:23:7a:f4:de:fd:e6:10:f5: f2:f6:be:bb:e0:4d:8c:d4:99:47:ed:d6:65:fd:2d: b6:89:07:79:e3:57:91:22:cb:f4:a8:a8:52:b1:42: ec:dc:93:7a:01:72:82:a3:51:e6:e0:0c:4b:83:8c: 20:20:51:29:56:f3:56:2e:e4:e0:9c:60:3e:f9:e0: ea:1d:2a:38:c0:81:e6:94:1f:e7:3f:9f:b1:63:b4: 93:c2:bd:0d:59:f8:3e:51:3e:e4:69:46:f2:66:9d: a1:6d:9f:4f:29:c0:b5:b4:b2:f4:98:be:c1:88:f4: 23:05:48:86:11:11:5a:67:5a:fb:aa:2c:71:0e:85: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7E:72:57:4A:E5:ED:AC:67:FF:D9:04:67:A4:E3:98:DC:7D:70:C7 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c2:eb:2f:b4:f4:0b:53:ca:7d:92:7a:a8:41:2a:9b:41:ab: 02:f7:ab:23:5f:79:6e:20:43:49:fa:14:a7:e5:f6:4d:26:b9: b4:8f:37:79:1a:08:94:5f:ef:0f:60:98:6a:2b:14:c0:7c:2f: bc:d4:e1:d1:4d:ad:f1:61:d8:28:81:a4:e2:85:06:ec:73:64: 58:d8:ef:dd:11:b1:1b:bf:ef:89:3c:e3:95:da:11:11:57:5d: c9:6a:a5:71:5c:39:15:20:38:88:3a:45:75:14:b5:9c:57:71: 5f:53:83:5e:41:28:f5:94:ea:23:d1:08:b8:d9:04:34:e3:e1: 98:c6:1a:dd:22:19:67:ba:dd:27:a9:3d:93:e4:65:5b:b1:c4: c7:52:1a:a0:61:d3:a2:a0:d6:f8:8a:d2:4e:a5:e6:75:5c:85: 1c:5a:23:32:e7:55:24:4a:a4:99:41:cc:6f:19:1f:e4:09:cf: af:72:4d:7c:ce:ca:2b:41:ec:ab:00:ee:c3:37:89:11:fb:ed: c7:ac:f3:8a:bb:f2:f4:c4:c5:73:8e:81:bb:76:d1:f6:e0:dd: 90:2c:27:1e:d1:f4:c3:76:ac:1c:72:8e:05:cc:67:fe:c0:75: 3c:26:09:37:29:95:55:da:64:61:4c:83:20:cf:0c:60:e6:b0: 2a:01:75:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpSmesEiHRsXxIyYOCrKi71MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUxMTA1MDYwMDA5WhcNMjUxMTA2MDYwMDA5WjAzMTEwLwYDVQQD EyhiYzdlNzI1NzRhZTVlZGFjNjdmZmQ5MDQ2N2E0ZTM5OGRjN2Q3MGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRj/QLLVyn4v+GeTQpQK+oNZmrAL 9FgKPElnpGYC19oIGV1SN/aqa9IICiGVfiP2saPKQnAT+OpzenlUrbGHS0mPUWxv 6eiw/ZUnqAOalNBCOkJ4dG+agwGy56DEJ4ZqzRzjPkoToOahwiZWNg0L1mwag0CJ pizdoOdqDfaDI3r03v3mEPXy9r674E2M1JlH7dZl/S22iQd541eRIsv0qKhSsULs 3JN6AXKCo1Hm4AxLg4wgIFEpVvNWLuTgnGA++eDqHSo4wIHmlB/nP5+xY7STwr0N Wfg+UT7kaUbyZp2hbZ9PKcC1tLL0mL7BiPQjBUiGERFaZ1r7qixxDoWQRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx+cldK5e2sZ//ZBGek45jcfXDHMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsLrL7T0 C1PKfZJ6qEEqm0GrAverI195biBDSfoUp+X2TSa5tI83eRoIlF/vD2CYaisUwHwv vNTh0U2t8WHYKIGk4oUG7HNkWNjv3RGxG7/viTzjldoREVddyWqlcVw5FSA4iDpF dRS1nFdxX1ODXkEo9ZTqI9EIuNkENOPhmMYa3SIZZ7rdJ6k9k+RlW7HEx1IaoGHT oqDW+IrSTqXmdVyFHFojMudVJEqkmUHMbxkf5AnPr3JNfM7KK0HsqwDuwzeJEfvt x6zzirvy9MTFc46Bu3bR9uDdkCwnHtH0w3asHHKOBcxn/sB1PCYJNymVVdpkYUyD IM8MYOawKgF1dw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:40 2025 by rpki-client