$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: ARXbhZkh7DQFke0pMQ7ZQZIzf/Psc9itxL7AXv1EHp0= Subject key identifier: 31:C3:DF:44:35:ED:49:86:CD:63:62:F8:15:74:66:22:FA:65:69:70 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019A4E191CE760DA3F959368C586C9D37A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1738 Signing time: Tue 04 Nov 2025 09:00:59 +0000 Manifest this update: Tue 04 Nov 2025 09:00:59 +0000 Manifest next update: Wed 05 Nov 2025 09:00:59 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 7: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 8: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 9: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 10: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 11: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 12: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 13: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: jI2FTDmSt1R7QfisWx2DprnuW8CJxk4FwpEmAsPE3ZY=) 14: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 15: t9cMUxvikbT-puwHblOe9z97QHQ.roa (hash: r/s40Ua5KoUJDVObSaE57ggRULCLKWYn/PjeYW7Wd/k=) 16: w3xxqTiLQnAH3cHQYhrUZxFMWqg.roa (hash: M5jABXYfv3dOr183BC0+Qkk5fkM0jwggytr5ejlAXco=) 17: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 18: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 19: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:19:1c:e7:60:da:3f:95:93:68:c5:86:c9:d3:7a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Nov 4 09:00:59 2025 GMT Not After : Nov 5 09:00:59 2025 GMT Subject: CN=31c3df4435ed4986cd6362f815746622fa656970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:17:9a:13:cb:d0:e2:93:97:c5:0d:e4:51: 51:99:1d:5e:1c:fb:6e:24:3d:2b:3e:2a:e5:84:df: 8b:20:9b:d2:3a:4d:7c:ed:08:7e:3f:dd:f9:45:f4: 29:ef:7a:2d:97:2e:89:45:a2:c5:2e:8f:74:0c:ee: ae:d5:08:ba:e1:d5:c4:08:66:14:71:2c:4a:cb:40: 58:85:46:6b:88:ae:c0:83:05:44:37:b6:b1:37:77: 5c:28:e5:9f:f9:52:8c:17:d1:11:b7:81:24:53:d3: 7e:4e:2e:1e:af:62:1c:09:1a:07:85:96:a7:5a:21: 97:7a:d1:11:bb:ab:c9:73:35:45:50:71:ef:37:80: 69:f7:2e:dd:90:32:d9:47:e8:09:40:41:cb:08:5b: 24:29:2f:58:b0:8f:c3:ed:83:e0:17:17:df:41:47: 99:f6:8e:cc:53:52:0b:79:53:02:38:e0:68:a8:21: 28:67:16:9c:9b:18:a0:9b:f0:97:e3:a0:a9:aa:91: 8e:03:56:7d:c3:da:4c:f1:73:cf:04:78:2f:02:46: 2d:b7:4b:22:ab:ee:80:16:12:fb:94:80:f5:71:92: ab:ae:ca:ed:06:46:0f:14:af:99:a1:d9:5a:6a:cc: e5:3c:7e:d7:cc:73:c4:9d:22:88:b3:c5:5c:e4:03: 95:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C3:DF:44:35:ED:49:86:CD:63:62:F8:15:74:66:22:FA:65:69:70 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bd:cc:27:44:00:7c:b7:50:eb:45:49:c8:74:ad:18:54:a3: 7f:f0:3f:75:38:30:d0:6e:cb:d2:fd:b2:e4:f9:25:8d:65:f5: 6b:e3:3d:7f:11:5e:b4:62:1f:4b:92:ce:cd:82:12:16:01:04: cb:e3:6e:cc:24:3d:ec:2f:ff:b1:d6:23:ee:be:a0:70:e2:ee: cb:cd:fd:46:e0:3e:6c:4e:51:3f:a7:b3:61:93:b3:c5:36:41: 39:c8:07:53:b1:b8:b8:b7:a6:2e:47:5e:8e:00:bf:26:f5:05: da:7d:79:d7:50:da:a2:7e:0e:5a:0b:10:6f:36:aa:03:11:62: 9e:04:21:b4:ea:c1:65:cf:04:0e:05:88:08:cf:d2:2e:51:0f: 82:ad:01:56:eb:26:ae:af:73:90:6d:f4:d1:6c:45:4d:a7:64: 4b:7d:f7:2f:9b:0b:7d:f9:63:a3:c2:85:e9:3f:02:d5:71:d0: 74:be:a1:3d:ea:48:f6:54:98:b7:e6:e8:42:79:63:e5:9c:d6: 3a:c9:86:4a:71:74:30:ba:4d:b7:10:a0:7f:69:d7:a3:0e:67: ad:f2:28:ff:83:51:b1:8c:56:72:66:0e:95:ae:f3:25:a8:5f: 05:27:11:c7:27:c1:b1:99:9a:7c:a2:63:0e:ea:5e:12:67:9c: 59:1e:91:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGRznYNo/lZNoxYbJ03onMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUxMTA0MDkwMDU5WhcNMjUxMTA1MDkwMDU5WjAzMTEwLwYDVQQD EygzMWMzZGY0NDM1ZWQ0OTg2Y2Q2MzYyZjgxNTc0NjYyMmZhNjU2OTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvMXmhPL0OKTl8UN5FFRmR1eHPtu JD0rPirlhN+LIJvSOk187Qh+P935RfQp73otly6JRaLFLo90DO6u1Qi64dXECGYU cSxKy0BYhUZriK7AgwVEN7axN3dcKOWf+VKMF9ERt4EkU9N+Ti4er2IcCRoHhZan WiGXetERu6vJczVFUHHvN4Bp9y7dkDLZR+gJQEHLCFskKS9YsI/D7YPgFxffQUeZ 9o7MU1ILeVMCOOBoqCEoZxacmxigm/CX46CpqpGOA1Z9w9pM8XPPBHgvAkYtt0si q+6AFhL7lID1cZKrrsrtBkYPFK+ZodlaaszlPH7XzHPEnSKIs8Vc5AOVxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHD30Q17UmGzWNi+BV0ZiL6ZWlwMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATL3MJ0QA fLdQ60VJyHStGFSjf/A/dTgw0G7L0v2y5PkljWX1a+M9fxFetGIfS5LOzYISFgEE y+NuzCQ97C//sdYj7r6gcOLuy839RuA+bE5RP6ezYZOzxTZBOcgHU7G4uLemLkde jgC/JvUF2n1511Daon4OWgsQbzaqAxFingQhtOrBZc8EDgWICM/SLlEPgq0BVusm rq9zkG300WxFTadkS333L5sLffljo8KF6T8C1XHQdL6hPepI9lSYt+boQnlj5ZzW OsmGSnF0MLpNtxCgf2nXow5nrfIo/4NRsYxWcmYOla7zJahfBScRxyfBsZmafKJj DupeEmecWR6R+w== -----END CERTIFICATE-----Generated at Tue Nov 4 18:02:04 2025 by rpki-client