$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: eRDtU7SRdX0gdXaIm22At+5cZIwjoED4aAR7DCb+A10= Subject key identifier: 72:3B:57:A8:93:92:78:25:96:FC:D3:3A:9F:4B:87:68:A0:4A:97:C5 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019A299DF910FBC59168CAAC1AC2207E5692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 171E Signing time: Tue 28 Oct 2025 07:00:09 +0000 Manifest this update: Tue 28 Oct 2025 07:00:09 +0000 Manifest next update: Wed 29 Oct 2025 07:00:09 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 5: DU8r3sc4ossJcNLkYBCHA96dRpA.roa (hash: r1JwJEoiU/JtSYwyekoAXXxNXR1urkakhqMVKFaKbKU=) 6: RwaLZN3D24qbiSCNdxPzEDghRuQ.roa (hash: qOkoBLXEXIyoyxyFGdEFpZ14lfMYf3mog4DQoGo1xtU=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 9: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 10: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 11: VnEAEVAj205N-9TkiWYWJw63OBY.roa (hash: UiAdH3zJCJa1I0z2gapdgCxGzhoMD3wqUBzrxQt0q4k=) 12: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 13: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 14: aKI4K4s2w_a8uyDN7S7H6E1pZk0.roa (hash: FsEPXU+SsEkYqv+c2yVXywYULp4eiT19GoSHc/aS2BA=) 15: fFjYHOwlBy5Glp0QNxrS3eHSmDs.roa (hash: P4yBBJcJBQmjrtoV/buNE0xVxB0wdXG8IXNtAy6RL8Y=) 16: fMzT-5d-H7wm7UzPX4PbBLndjlo.roa (hash: QHxOUGueDky85wAcdSL/hpvn/Djtg29akovspAUAOhU=) 17: fm8_hxutG5R7-Mx8bxRlfwSrl9o.roa (hash: kSoXtSfwPkhI0yioS1Tphp5+T9BGKf4elvsAZqNw9NE=) 18: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 19: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: dVyyMkSFRFWAaSSUixQMxlE/mks0yfwGCbayVWt/RKE=) 20: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 21: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 22: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 23: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 24: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 25: wQA0abh25Jj5mK6DP_9yfPh_Szw.roa (hash: Gxtu2SrKEp09RMrd8FAfjNeoZCr/XklplXKAU3GLc1A=) 26: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 27: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:29:9d:f9:10:fb:c5:91:68:ca:ac:1a:c2:20:7e:56:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Oct 28 07:00:09 2025 GMT Not After : Oct 29 07:00:09 2025 GMT Subject: CN=723b57a89392782596fcd33a9f4b8768a04a97c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:52:0d:b5:1d:ba:46:14:03:aa:a5:43:70:e0: f2:06:27:b9:c3:c2:99:64:84:67:3e:ae:03:48:86: 1c:37:81:bd:63:53:c5:6b:ab:35:42:53:0e:a8:7c: 12:8b:cc:be:46:fb:cd:07:be:cb:b1:8c:88:c0:bb: 83:e6:cc:11:0f:f3:93:43:5f:a8:66:7a:06:b7:b6: f2:96:71:5d:8c:2d:13:40:ca:46:39:74:a6:f1:35: 81:5c:25:b1:70:85:b1:de:9e:a0:39:a6:c6:e6:1b: 6a:f2:75:48:77:d6:0d:98:ba:01:89:e1:97:ac:c6: 85:4e:c1:df:ce:df:3f:19:d9:a1:7a:5a:53:33:a3: 25:0a:81:db:fc:22:63:81:d0:d7:da:75:bb:ba:6a: 60:cc:22:b1:9e:50:17:8a:c7:35:79:0b:a0:64:44: 73:49:5d:98:ad:5f:e1:bb:bd:19:74:72:7b:a6:76: 3c:98:8e:cc:11:0b:1c:02:f0:d6:36:4f:66:c1:6b: c2:1a:1b:55:f7:36:63:8c:0f:f0:aa:7c:73:2e:2c: 48:a8:ec:58:89:bb:b0:21:f5:94:e3:de:3b:54:73: 23:65:95:c3:c0:14:a1:8f:7e:5d:6f:8e:0a:cd:9d: 08:b1:d7:3f:bd:6e:3f:61:6d:23:a2:c8:1d:66:ed: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3B:57:A8:93:92:78:25:96:FC:D3:3A:9F:4B:87:68:A0:4A:97:C5 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a7:0e:9e:83:48:a3:8d:1e:94:d7:4c:4a:60:08:e0:82:12: c5:10:92:2d:d8:71:87:84:39:23:1b:66:b2:00:21:20:16:22: 00:ec:09:60:c4:70:8e:e8:cf:aa:55:1a:c4:ac:cc:3d:ec:d2: 0d:4a:00:17:3b:7d:0f:ce:9f:6b:13:ad:13:cc:1c:67:d3:a6: 35:d3:09:a1:6a:8f:fa:81:be:7d:b0:99:20:5e:07:a9:1f:58: e1:69:52:1f:b4:90:6c:23:2b:10:36:3b:ad:25:98:dd:2f:e6: 42:41:29:93:7d:d0:20:30:ff:61:9f:9a:06:17:8e:04:76:6f: 80:05:7c:2b:00:a4:ff:1a:8d:da:f4:b0:ce:b7:61:3a:ce:4d: 72:b3:c1:61:2b:bc:ec:39:99:01:d3:b8:77:6c:47:00:df:1e: 38:d0:a5:01:39:c2:0b:87:94:76:68:7e:c9:ca:a7:d8:b0:b8: 20:86:36:68:8a:d5:4d:22:ca:ca:84:d2:fb:b1:ac:4b:2d:d3: 68:7f:78:dc:33:3e:a0:42:3f:9d:98:c5:63:97:d1:d8:fa:de: 7d:8a:2a:d5:b8:57:81:08:af:64:4b:3a:2e:d3:09:df:91:69: 75:ed:09:b8:5e:76:60:86:93:98:27:e8:ba:57:7b:e6:9f:02: a2:1c:ac:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZopnfkQ+8WRaMqsGsIgflaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUxMDI4MDcwMDA5WhcNMjUxMDI5MDcwMDA5WjAzMTEwLwYDVQQD Eyg3MjNiNTdhODkzOTI3ODI1OTZmY2QzM2E5ZjRiODc2OGEwNGE5N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71INtR26RhQDqqVDcODyBie5w8KZ ZIRnPq4DSIYcN4G9Y1PFa6s1QlMOqHwSi8y+RvvNB77LsYyIwLuD5swRD/OTQ1+o ZnoGt7bylnFdjC0TQMpGOXSm8TWBXCWxcIWx3p6gOabG5htq8nVId9YNmLoBieGX rMaFTsHfzt8/GdmhelpTM6MlCoHb/CJjgdDX2nW7umpgzCKxnlAXisc1eQugZERz SV2YrV/hu70ZdHJ7pnY8mI7MEQscAvDWNk9mwWvCGhtV9zZjjA/wqnxzLixIqOxY ibuwIfWU4947VHMjZZXDwBShj35db44KzZ0Isdc/vW4/YW0josgdZu0IOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHI7V6iTkngllvzTOp9Lh2igSpfFMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKcOnoNI o40elNdMSmAI4IISxRCSLdhxh4Q5IxtmsgAhIBYiAOwJYMRwjujPqlUaxKzMPezS DUoAFzt9D86faxOtE8wcZ9OmNdMJoWqP+oG+fbCZIF4HqR9Y4WlSH7SQbCMrEDY7 rSWY3S/mQkEpk33QIDD/YZ+aBheOBHZvgAV8KwCk/xqN2vSwzrdhOs5NcrPBYSu8 7DmZAdO4d2xHAN8eONClATnCC4eUdmh+ycqn2LC4IIY2aIrVTSLKyoTS+7GsSy3T aH943DM+oEI/nZjFY5fR2PrefYoq1bhXgQivZEs6LtMJ35Fpde0JuF52YIaTmCfo uld75p8CohysGA== -----END CERTIFICATE-----Generated at Tue Oct 28 10:16:50 2025 by rpki-client