$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: uYHe+Yvp7yDSMkwygAAElfajExvzsttWIPbrt1pi6y4= Subject key identifier: 53:C6:74:1D:AA:43:D0:10:96:0C:9D:26:6C:4F:55:FC:F9:C4:0C:D0 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019A54F674400AB0077B5D448E0634CFAFDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 12E9 Signing time: Wed 05 Nov 2025 17:00:29 +0000 Manifest this update: Wed 05 Nov 2025 17:00:29 +0000 Manifest next update: Thu 06 Nov 2025 17:00:29 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: AEoJBTXGdbNGEHCG2xrZYkY-m48.roa (hash: wcifUjqJ1L+wv580+2agiHMA4f6pyHuaF1nnabsyT3o=) 3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: V4C0Yqe5wU/XohjyuWw0nT25ww973cwIqrGupGao4zc=) 5: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 6: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 7: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: xXfwL3nXnXFEEVcYcv_dc6Fb5P4.roa (hash: sO38IVaxxxNJ8+o5mB4XNWptxay9N15BzuBDzJ2RLLI=) 13: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:f6:74:40:0a:b0:07:7b:5d:44:8e:06:34:cf:af:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Nov 5 17:00:29 2025 GMT Not After : Nov 6 17:00:29 2025 GMT Subject: CN=53c6741daa43d010960c9d266c4f55fcf9c40cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:19:46:7f:f9:08:a5:6a:85:02:44:8f:3e: 5c:eb:b8:9b:b7:78:a9:ed:e7:88:68:e1:6d:27:96: 92:9a:7f:04:90:7a:fa:31:37:1b:99:b9:02:e5:d4: 85:ee:57:8e:d8:e1:6c:c7:cf:d0:12:af:91:85:77: 56:25:f0:57:f4:95:97:fb:4e:57:66:01:4d:f0:50: c6:c0:96:e7:d0:5e:3c:e9:9b:92:b2:6b:84:c8:c2: f7:ba:29:fb:0b:83:33:60:8a:2b:8e:16:0d:02:4e: f8:cb:52:22:d7:f8:fc:c2:f8:7d:bb:c2:98:ac:9b: 0a:60:4d:31:84:06:b6:95:6e:5e:13:db:e8:a5:80: 40:d9:24:b8:49:c6:2b:b4:8a:9f:7f:34:4f:ff:82: 87:c8:24:85:ce:59:91:23:43:51:2e:7b:03:2a:eb: 76:c9:90:ed:11:4c:d4:ac:27:6b:37:48:4a:64:c4: 3f:bd:48:f9:ed:54:b7:24:6b:fc:ba:b2:de:4e:b6: 84:99:21:a7:66:d4:a0:b4:2e:41:a9:75:5e:02:bc: df:ad:5c:e8:f2:3a:c5:13:5d:80:2e:f6:f2:3a:d9: c6:8c:b9:41:f2:bb:1c:d7:c4:47:95:c6:50:82:23: 54:30:70:9d:7a:6b:dd:43:39:97:34:ae:ca:d8:fa: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C6:74:1D:AA:43:D0:10:96:0C:9D:26:6C:4F:55:FC:F9:C4:0C:D0 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5c:b8:20:31:01:ab:3e:61:bf:c8:75:15:1c:2d:44:40:72: 95:08:6e:a5:10:18:b0:ca:ff:3b:47:90:b9:8a:2c:44:23:11: b6:d3:75:b1:49:f9:d0:54:ab:a3:02:ab:93:0f:a8:d7:db:68: 87:bb:03:1e:ed:f7:d9:2c:2d:a8:65:b7:5e:7e:f9:24:26:76: 5e:b2:29:7f:3b:75:94:10:18:d0:d4:3b:a0:e7:80:ef:74:4b: 29:40:02:fa:5c:90:93:cd:32:47:22:50:e4:9b:49:3a:93:7b: 54:7d:b0:68:38:dc:99:7e:00:43:62:32:70:f8:8b:67:53:13: c4:39:1e:6a:eb:dd:a5:1a:6f:85:f8:c6:cf:9d:7a:df:71:27: c3:b1:d7:28:9c:e3:27:36:8f:75:61:9c:c4:58:68:1e:a4:e2: 8c:9f:52:e8:03:90:16:c7:12:37:30:1a:6b:86:70:ef:e9:5d: d4:12:48:d6:6e:a8:2d:a2:a3:ee:f9:c8:c0:50:8b:81:4c:1c: 90:b1:30:c6:4e:d0:53:cf:7a:08:11:99:ca:15:bf:19:87:a7: 79:1b:ea:09:de:65:35:2a:d8:3d:0d:9b:7b:0b:62:d9:5b:a4: e3:3a:e4:83:3a:32:06:28:c1:d4:d8:5b:59:95:17:bc:5b:49: ef:36:cf:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpU9nRACrAHe11EjgY0z6/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUxMTA1MTcwMDI5WhcNMjUxMTA2MTcwMDI5WjAzMTEwLwYDVQQD Eyg1M2M2NzQxZGFhNDNkMDEwOTYwYzlkMjY2YzRmNTVmY2Y5YzQwY2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlwZRn/5CKVqhQJEjz5c67ibt3ip 7eeIaOFtJ5aSmn8EkHr6MTcbmbkC5dSF7leO2OFsx8/QEq+RhXdWJfBX9JWX+05X ZgFN8FDGwJbn0F486ZuSsmuEyML3uin7C4MzYIorjhYNAk74y1Ii1/j8wvh9u8KY rJsKYE0xhAa2lW5eE9vopYBA2SS4ScYrtIqffzRP/4KHyCSFzlmRI0NRLnsDKut2 yZDtEUzUrCdrN0hKZMQ/vUj57VS3JGv8urLeTraEmSGnZtSgtC5BqXVeArzfrVzo 8jrFE12ALvbyOtnGjLlB8rsc18RHlcZQgiNUMHCdemvdQzmXNK7K2Pp4NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPGdB2qQ9AQlgydJmxPVfz5xAzQMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVy4IDEB qz5hv8h1FRwtREBylQhupRAYsMr/O0eQuYosRCMRttN1sUn50FSrowKrkw+o19to h7sDHu332SwtqGW3Xn75JCZ2XrIpfzt1lBAY0NQ7oOeA73RLKUAC+lyQk80yRyJQ 5JtJOpN7VH2waDjcmX4AQ2IycPiLZ1MTxDkeauvdpRpvhfjGz51633Enw7HXKJzj JzaPdWGcxFhoHqTijJ9S6AOQFscSNzAaa4Zw7+ld1BJI1m6oLaKj7vnIwFCLgUwc kLEwxk7QU896CBGZyhW/GYeneRvqCd5lNSrYPQ2bewti2Vuk4zrkgzoyBijB1Nhb WZUXvFtJ7zbPqA== -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:02 2025 by rpki-client