$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: XENrs/KznB8K9JtzMEsf5fvtQEtXE8XnnFFXisTKRDo= Subject key identifier: D3:C8:44:DC:E6:DE:E4:B4:CC:4C:C3:FD:E4:40:37:3E:3F:9F:6A:E8 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019A50AB6F96BE8C8D8274530DFEE3D97A12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 03B0 Signing time: Tue 04 Nov 2025 21:00:03 +0000 Manifest this update: Tue 04 Nov 2025 21:00:03 +0000 Manifest next update: Wed 05 Nov 2025 21:00:03 +0000 Files and hashes: 1: 2Jpt_1ySpLb9WRqOyyiYnu_PAIA.roa (hash: MdM/wC7dTry3YHnV8Zu6hFD2x4pd0q3/gDiM/ZzZGdU=) 2: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 3: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 4: 3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa (hash: PH0lnE0uN3wnc8tlGu7b2U0ixCX+3/LdiDburPkYelk=) 5: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: E9Jwdio8wX_xqnKuXI9fZ_oHtDc.roa (hash: ECAIS90IaPHlQjI+lVlWinjaB8CNUQFfSBH/sS9eBjs=) 8: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 9: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 10: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 11: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (hash: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: Vi0IsmI3/dP/vCNRnwYJ/dq7YUq/wPgdbfLceO7sZNA=) 20: lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa (hash: u4qJFUu2v9DMBJmArLe+Y/Q/WiHYmJsHB3rpShxcurw=) 21: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 22: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 23: qGrAC8V0MwPDUhgXopiuZtK9w3k.roa (hash: QGRwQP2ZkVZAbpmeLKIkEFdzvxw0GO536GTjtTQacHA=) 24: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 25: uHsUP9ITNumWBnivSrpnKA1c8sk.roa (hash: RggRwkd0IhdYIM5cTJqQm6e1Y1oQR3G4Ep6Nth1HpWk=) 26: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 27: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:ab:6f:96:be:8c:8d:82:74:53:0d:fe:e3:d9:7a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Nov 4 21:00:03 2025 GMT Not After : Nov 5 21:00:03 2025 GMT Subject: CN=d3c844dce6dee4b4cc4cc3fde440373e3f9f6ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:71:e7:d7:99:08:ee:8e:ce:ef:55:5a:89: 54:c6:42:38:d7:b0:48:1f:60:86:28:a6:6a:af:95: e3:70:1c:90:4c:c3:f1:80:19:e2:64:09:c0:44:ad: 3e:da:95:68:a5:5a:4a:ee:50:fe:f4:09:f7:72:07: 83:ec:9c:a1:b0:e6:1d:8d:b0:f0:e5:74:fd:2e:41: a6:17:42:ce:b0:8e:16:08:d4:d4:f2:86:fd:a7:e3: 49:de:30:cb:98:08:a2:08:d3:7d:ff:96:6b:2c:35: be:66:3b:20:46:e9:c7:c9:84:60:a4:3b:78:6f:6a: 82:12:0d:05:2a:99:95:7d:0d:c6:e6:64:9f:d4:5b: e5:15:13:78:84:87:56:79:aa:d4:09:18:22:87:a0: 10:46:de:d1:c5:40:26:2d:82:bc:41:02:a0:7e:d7: 28:b0:73:7a:da:54:85:9c:72:61:49:9d:e1:21:7a: 35:06:9a:6b:ef:bd:d6:ed:99:92:e7:6f:e9:ff:70: 10:44:1a:7a:c9:84:5d:38:19:df:81:6b:85:ff:84: 0f:0d:eb:a9:24:7c:24:7a:5c:fd:17:6e:a1:09:4f: 13:22:2b:0a:0f:ee:ed:c9:57:2b:3e:91:17:66:3a: 4c:ab:f1:ab:26:55:42:69:7b:68:59:38:3f:a1:b1: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:44:DC:E6:DE:E4:B4:CC:4C:C3:FD:E4:40:37:3E:3F:9F:6A:E8 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:97:5b:d6:ad:73:f3:7c:a4:b7:2c:b2:dc:e4:59:6a:df:e2: 8f:50:ee:cb:9a:8c:41:4c:03:de:7d:b7:90:db:5d:68:d7:5c: 50:98:e2:f4:83:5b:7f:d3:fa:bb:c1:47:70:f5:fa:0c:92:74: f5:04:44:51:be:e5:3f:b5:42:2d:2c:88:f2:66:7c:79:eb:92: ec:2d:81:00:fa:96:8e:c8:35:89:4d:00:fc:73:76:44:c4:9f: 26:24:80:ee:20:0f:9e:29:1a:ad:49:97:fe:4c:08:17:10:7b: 66:54:7c:ae:5c:e9:25:62:40:eb:d2:48:f2:aa:20:6c:19:82: 36:5b:7c:a2:67:ed:2a:5e:44:57:dd:15:73:c4:e9:49:87:3a: d6:b8:fc:68:57:6f:7a:f1:c3:6e:8b:27:ca:d9:71:d2:76:47: 5b:c6:8f:1b:e8:14:6a:e7:f6:e5:64:fc:d8:2c:91:33:7b:bc: 55:2d:33:23:81:2d:ce:1e:05:1a:cf:e6:e6:26:b0:93:07:89: 41:42:4a:48:87:f6:3a:a8:fa:15:0b:68:a1:c7:eb:f2:8f:ed: af:21:50:8d:ca:d4:c5:e8:3d:a6:d4:e8:88:b2:e0:1d:af:7f: fe:e3:5b:c9:14:f4:43:f0:b7:20:34:db:c1:2b:90:c4:88:0c: b7:f1:31:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQq2+WvoyNgnRTDf7j2XoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUxMTA0MjEwMDAzWhcNMjUxMTA1MjEwMDAzWjAzMTEwLwYDVQQD EyhkM2M4NDRkY2U2ZGVlNGI0Y2M0Y2MzZmRlNDQwMzczZTNmOWY2YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriVx59eZCO6Ozu9VWolUxkI417BI H2CGKKZqr5XjcByQTMPxgBniZAnARK0+2pVopVpK7lD+9An3cgeD7JyhsOYdjbDw 5XT9LkGmF0LOsI4WCNTU8ob9p+NJ3jDLmAiiCNN9/5ZrLDW+ZjsgRunHyYRgpDt4 b2qCEg0FKpmVfQ3G5mSf1FvlFRN4hIdWearUCRgih6AQRt7RxUAmLYK8QQKgftco sHN62lSFnHJhSZ3hIXo1Bppr773W7ZmS52/p/3AQRBp6yYRdOBnfgWuF/4QPDeup JHwkelz9F26hCU8TIisKD+7tyVcrPpEXZjpMq/GrJlVCaXtoWTg/obGyLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPIRNzm3uS0zEzD/eRANz4/n2roMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJdb1q1z 83yktyyy3ORZat/ij1Duy5qMQUwD3n23kNtdaNdcUJji9INbf9P6u8FHcPX6DJJ0 9QREUb7lP7VCLSyI8mZ8eeuS7C2BAPqWjsg1iU0A/HN2RMSfJiSA7iAPnikarUmX /kwIFxB7ZlR8rlzpJWJA69JI8qogbBmCNlt8omftKl5EV90Vc8TpSYc61rj8aFdv evHDbosnytlx0nZHW8aPG+gUauf25WT82CyRM3u8VS0zI4Etzh4FGs/m5iawkweJ QUJKSIf2Oqj6FQtoocfr8o/tryFQjcrUxeg9ptToiLLgHa9//uNbyRT0Q/C3IDTb wSuQxIgMt/ExoQ== -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:44 2025 by rpki-client