$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json) Hash identifier: nC9zW2goTaP0j6FyQ6DgA9lTiIhwe5vUEnyqXYVu8bY= Subject key identifier: 77:9A:E3:12:11:CE:3B:29:EC:A3:2B:2A:0C:BE:F5:E2:04:25:C4:AB Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019921E769E4284578C5027785DA077507B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft Manifest number: 1680 Signing time: Sun 07 Sep 2025 02:00:38 +0000 Manifest this update: Sun 07 Sep 2025 02:00:38 +0000 Manifest next update: Mon 08 Sep 2025 02:00:38 +0000 Files and hashes: 1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=) 2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=) 3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=) 4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=) 5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=) 6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: Q1e+o9/zuZ9Onb7fOqtV3cUgE27O8MZnJEhX+jkpsUI=) 7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=) 8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=) 9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=) 10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=) 11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=) 12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=) 13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=) 14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=) 15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=) 16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=) 17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=) 18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=) 19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=) 20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:21:e7:69:e4:28:45:78:c5:02:77:85:da:07:75:07:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Sep 7 02:00:38 2025 GMT Not After : Sep 8 02:00:38 2025 GMT Subject: CN=779ae31211ce3b29eca32b2a0cbef5e20425c4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:ed:a9:6b:f4:a5:15:51:70:ca:96:f7:77: 67:70:ac:48:5e:5f:7b:98:ee:bf:59:f7:36:a8:12: 61:9b:92:53:95:9a:55:f9:ee:56:ff:f0:ff:11:58: 80:1f:23:19:20:ef:0f:24:8e:5d:ad:f6:05:23:3a: 77:df:2c:81:d3:0c:30:58:ce:d7:17:d8:8e:4f:30: 6d:65:df:0a:c3:fc:15:b0:14:be:ca:bf:4e:ca:cc: 87:cc:47:ef:3a:b7:84:b0:2d:fd:3c:24:c8:5b:6f: 7c:e9:d5:80:21:7a:ff:25:69:df:73:27:61:43:1a: 8a:af:1e:0b:c5:f3:f4:05:0b:cb:35:84:1e:36:93: 39:1b:4e:b7:ce:81:7e:62:75:6b:c7:54:ca:f4:e1: a1:88:3f:5e:da:78:5a:41:93:17:3c:d4:0c:99:43: f5:d1:4f:ca:cb:d9:1b:99:78:ee:d6:23:f2:9d:d1: 22:d4:41:bf:18:f3:6a:d6:a3:8e:4a:92:39:d1:46: 8e:8d:61:42:3b:49:43:9b:63:90:e7:14:10:4a:2d: 71:6e:16:25:37:a2:df:19:75:aa:ee:22:fd:50:05: 3c:aa:36:f6:eb:2b:22:d5:3f:3c:4d:58:fb:7f:a5: 3f:1a:7a:bd:f1:0a:7d:b6:77:31:39:a9:22:0c:69: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:E3:12:11:CE:3B:29:EC:A3:2B:2A:0C:BE:F5:E2:04:25:C4:AB X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:7f:80:1a:52:74:85:d4:95:4f:45:fb:ef:4d:e9:80:fe: 13:a8:ba:b4:f0:44:9a:ba:2a:11:ef:04:f5:db:58:aa:46:57: 4f:70:03:6c:37:91:01:a7:a6:a4:74:0f:eb:28:19:98:a7:d0: bf:2c:60:31:12:c2:88:7c:3d:fd:e4:99:fd:54:34:9c:c7:cf: 53:72:ce:d7:c0:a3:86:1b:b2:e2:9c:83:1d:ac:23:20:65:87: 63:f2:42:e3:65:81:9d:89:e1:a0:8a:b8:00:d9:e5:7a:f7:85: 94:23:23:46:64:b0:ba:83:cb:5e:73:d8:32:98:01:07:c0:12: ff:41:cd:c1:bc:10:cf:cb:b4:b1:c1:10:be:b3:dc:78:ee:7e: d2:3f:32:98:d6:d4:75:32:2c:92:e9:80:4d:91:4a:8b:90:eb: ef:10:1e:13:07:95:2b:32:a6:e9:4e:19:99:22:73:bd:7f:7d: ed:1b:b8:3b:8e:ff:be:a5:38:32:47:6e:fe:12:9c:7a:88:a7: 06:1d:a9:02:4b:2a:14:91:f2:e5:f3:03:fe:b4:4b:d7:ae:c9: 5e:88:ef:9e:b9:6d:53:ef:92:81:39:f0:55:8a:16:42:57:3d: 43:8e:2b:82:8e:8b:be:81:6c:9d:f4:8f:db:54:0b:b2:aa:1a: 16:0a:73:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkh52nkKEV4xQJ3hdoHdQewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjUwOTA3MDIwMDM4WhcNMjUwOTA4MDIwMDM4WjAzMTEwLwYDVQQD Eyg3NzlhZTMxMjExY2UzYjI5ZWNhMzJiMmEwY2JlZjVlMjA0MjVjNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymHtqWv0pRVRcMqW93dncKxIXl97 mO6/Wfc2qBJhm5JTlZpV+e5W//D/EViAHyMZIO8PJI5drfYFIzp33yyB0wwwWM7X F9iOTzBtZd8Kw/wVsBS+yr9OysyHzEfvOreEsC39PCTIW2986dWAIXr/JWnfcydh QxqKrx4LxfP0BQvLNYQeNpM5G063zoF+YnVrx1TK9OGhiD9e2nhaQZMXPNQMmUP1 0U/Ky9kbmXju1iPyndEi1EG/GPNq1qOOSpI50UaOjWFCO0lDm2OQ5xQQSi1xbhYl N6LfGXWq7iL9UAU8qjb26ysi1T88TVj7f6U/Gnq98Qp9tncxOakiDGlwtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHea4xIRzjsp7KMrKgy+9eIEJcSrMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFY9/gBpS dIXUlU9F++9N6YD+E6i6tPBEmroqEe8E9dtYqkZXT3ADbDeRAaempHQP6ygZmKfQ vyxgMRLCiHw9/eSZ/VQ0nMfPU3LO18Cjhhuy4pyDHawjIGWHY/JC42WBnYnhoIq4 ANnleveFlCMjRmSwuoPLXnPYMpgBB8AS/0HNwbwQz8u0scEQvrPceO5+0j8ymNbU dTIskumATZFKi5Dr7xAeEweVKzKm6U4ZmSJzvX997Ru4O47/vqU4Mkdu/hKceoin Bh2pAksqFJHy5fMD/rRL167JXojvnrltU++SgTnwVYoWQlc9Q44rgo6LvoFsnfSP 21QLsqoaFgpzRQ== -----END CERTIFICATE-----Generated at Sun Sep 7 11:21:23 2025 by rpki-client