$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: xxMmuAMtOFEetEgzqtKaSvULGPssb1x4sRTkx5+QTmM= Subject key identifier: DA:2D:1F:FB:C1:50:0C:B0:9E:A4:73:63:B6:B6:B3:87:40:C7:06:3C Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019A4DE160A2C4B3325717A4973767F6F6C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 171C Signing time: Tue 04 Nov 2025 08:00:06 +0000 Manifest this update: Tue 04 Nov 2025 08:00:06 +0000 Manifest next update: Wed 05 Nov 2025 08:00:06 +0000 Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: f+FdUw9b66gIPnRMHqY/sWwxIzRlb0ERUbu1XGnKuEA=) 2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 3: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=) 4: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 5: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 6: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 8: XfeVybS-JJmUst6aHDqcoct7XK0.roa (hash: nYNNvQT6vs/H7ho6wlD5EX5eXnEUV3YAmuK8qzDOCmA=) 9: fAqAClIqEJU2Z5Ye9QXpUO1Tbkg.roa (hash: YDMyeOOGj2eBmIkqGQ0q84C8FFV9NROwwY19+t/7x2o=) 10: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) 11: gmw7pLwjm6vuBLTk-rK2D36QKkA.roa (hash: COLQkZAyHhSJJDAy86nI3z09V/OufPhY+8kBah7bzeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:60:a2:c4:b3:32:57:17:a4:97:37:67:f6:f6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Nov 4 08:00:06 2025 GMT Not After : Nov 5 08:00:06 2025 GMT Subject: CN=da2d1ffbc1500cb09ea47363b6b6b38740c7063c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:29:62:b4:cd:f4:3b:62:a1:9a:2a:39:07: df:ed:be:ac:22:f6:e8:f6:bf:7c:82:8b:54:5d:57: 1d:f5:47:8e:ee:86:20:70:d8:83:98:d8:a4:f7:9c: 04:e4:d6:ac:7b:8c:2f:14:a4:c6:e4:03:3f:5b:fe: 47:ed:1c:7e:50:47:fc:93:00:26:bf:e4:72:49:6b: ae:10:7a:ff:0c:31:34:66:40:98:10:4d:5d:57:3e: a0:40:06:65:10:20:cd:62:44:48:bc:2f:ef:67:b8: ec:fe:29:a4:5c:bc:ed:19:25:09:99:3d:fc:67:68: 14:eb:8a:9b:ca:ee:46:fb:54:c8:67:fc:0d:76:32: c1:dc:1b:3f:7b:77:10:85:7d:98:6f:6b:53:59:79: 03:0f:dd:66:a4:a8:2a:a5:df:67:19:67:ab:ac:b9: 0a:1a:a0:c6:00:a5:13:23:bf:94:35:74:17:5f:ec: 84:fc:65:9d:61:d6:a1:5a:d1:d0:36:4e:51:7d:f9: f9:5f:7f:38:33:2c:23:3c:37:e0:62:dd:53:cd:d3: e6:13:aa:ca:ac:61:3f:92:50:04:bb:01:9b:fd:0d: e6:53:f6:40:a4:c5:f4:77:c9:77:86:8f:2c:4d:f9: 92:c7:56:46:fd:bb:54:6d:d0:47:f3:dd:ca:16:c1: ae:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2D:1F:FB:C1:50:0C:B0:9E:A4:73:63:B6:B6:B3:87:40:C7:06:3C X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8a:61:99:97:5c:da:4f:d6:dc:3f:f3:78:3b:13:b6:45:25: 0c:07:93:64:52:2f:11:f9:c4:7c:39:58:82:b2:ee:85:23:07: 50:72:22:d7:d7:d1:02:28:c1:83:a8:6d:31:ae:bd:6e:bd:45: dc:8e:3c:c3:ee:ff:85:fc:58:be:a7:e7:4d:95:b3:b8:18:ca: 2b:ac:54:0a:cb:c7:94:ad:75:46:67:11:e1:ec:73:85:2e:d8: ce:31:22:ee:90:27:51:26:04:1f:3e:9a:8a:b4:7d:d1:c6:6f: 08:85:11:fc:79:ec:eb:5b:66:85:d7:d9:bd:cd:61:20:42:43: 4a:52:26:e8:a6:7e:eb:3b:d9:c1:9e:19:31:f2:97:6c:5a:e2: ba:01:9f:97:32:88:b6:19:ca:a9:81:ff:13:e7:90:21:02:ce: 31:5d:09:59:02:c7:74:31:83:4b:6c:6b:49:79:2a:7d:f1:de: 95:02:89:ce:0e:e2:5c:cc:9e:cd:08:ff:47:1e:79:ea:ee:08: 98:45:cd:2b:6e:53:eb:d3:8c:71:5b:d9:1f:cd:1e:d3:bf:ce: 27:3f:1b:2e:85:ee:60:57:92:65:cc:27:e8:5f:21:65:cf:20: 3b:30:23:c4:cb:74:86:67:fc:5b:ce:9b:43:09:4a:c1:5a:09: c6:0c:35:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4WCixLMyVxeklzdn9vbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUxMTA0MDgwMDA2WhcNMjUxMTA1MDgwMDA2WjAzMTEwLwYDVQQD EyhkYTJkMWZmYmMxNTAwY2IwOWVhNDczNjNiNmI2YjM4NzQwYzcwNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5YpYrTN9DtioZoqOQff7b6sIvbo 9r98gotUXVcd9UeO7oYgcNiDmNik95wE5Nase4wvFKTG5AM/W/5H7Rx+UEf8kwAm v+RySWuuEHr/DDE0ZkCYEE1dVz6gQAZlECDNYkRIvC/vZ7js/imkXLztGSUJmT38 Z2gU64qbyu5G+1TIZ/wNdjLB3Bs/e3cQhX2Yb2tTWXkDD91mpKgqpd9nGWerrLkK GqDGAKUTI7+UNXQXX+yE/GWdYdahWtHQNk5Rffn5X384MywjPDfgYt1TzdPmE6rK rGE/klAEuwGb/Q3mU/ZApMX0d8l3ho8sTfmSx1ZG/btUbdBH893KFsGuTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNotH/vBUAywnqRzY7a2s4dAxwY8MB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPophmZdc 2k/W3D/zeDsTtkUlDAeTZFIvEfnEfDlYgrLuhSMHUHIi19fRAijBg6htMa69br1F 3I48w+7/hfxYvqfnTZWzuBjKK6xUCsvHlK11RmcR4exzhS7YzjEi7pAnUSYEHz6a irR90cZvCIUR/Hns61tmhdfZvc1hIEJDSlIm6KZ+6zvZwZ4ZMfKXbFriugGflzKI thnKqYH/E+eQIQLOMV0JWQLHdDGDS2xrSXkqffHelQKJzg7iXMyezQj/Rx556u4I mEXNK25T69OMcVvZH80e07/OJz8bLoXuYFeSZcwn6F8hZc8gOzAjxMt0hmf8W86b QwlKwVoJxgw1tw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:00:32 2025 by rpki-client