$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: bXcs8YFmljc3K4XaiViJcaMgxF1LjYeZ2y6k1txT16M= Subject key identifier: D6:C0:E0:DE:E6:FA:E5:FC:72:12:66:A5:0E:61:06:7A:71:7D:99:F0 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019A1FBF86766DF1AFD89E67CB4B7191B14E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 171A Signing time: Sun 26 Oct 2025 09:00:36 +0000 Manifest this update: Sun 26 Oct 2025 09:00:36 +0000 Manifest next update: Mon 27 Oct 2025 09:00:36 +0000 Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=) 2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=) 3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=) 4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=) 5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=) 6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=) 7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=) 8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=) 9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=) 10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=) 11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=) 12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: iTjJhkCcb1FL53U4dsCYBOzUy2T1zkNJd6R5NIcCOLM=) 13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=) 14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=) 15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=) 16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=) 17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=) 18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=) 19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=) 20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=) 21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=) 22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=) 23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=) 24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=) 25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=) 26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=) 27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=) 28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=) 29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=) 30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 05:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:bf:86:76:6d:f1:af:d8:9e:67:cb:4b:71:91:b1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Oct 26 09:00:36 2025 GMT Not After : Oct 27 09:00:36 2025 GMT Subject: CN=d6c0e0dee6fae5fc721266a50e61067a717d99f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:d8:d2:20:03:03:1b:32:ed:6a:1b:c7:ea: 16:3f:6a:70:12:2b:ff:02:ac:33:58:a9:95:08:a1: 64:55:c3:a8:77:2c:4a:19:c1:70:3d:9e:80:49:17: 65:03:9e:e8:7d:b8:9c:41:4b:5c:2f:fd:86:4e:21: 22:72:db:f4:de:fa:ce:08:6a:e8:dc:35:ea:a8:cc: a6:69:7a:23:82:2b:34:b5:35:04:2b:51:34:2c:29: 62:e5:ec:5b:6e:44:e8:93:d5:90:b9:6d:ea:e9:85: 9e:fc:ee:ec:c9:f1:83:2f:14:fb:ba:75:b2:df:5b: 46:4e:51:de:b9:9e:3d:32:51:f1:03:18:33:bb:c4: 7d:93:ce:9a:9b:63:d5:b0:b0:19:e1:4c:5a:a2:e2: 28:29:6b:98:39:88:cb:9b:8a:07:32:7c:55:f8:a5: 52:94:4e:90:b6:bf:67:c1:0d:f3:67:2c:82:0c:f6: b2:3d:5a:82:d6:ea:51:f1:42:81:59:0f:76:e2:27: 14:b7:a9:18:ac:81:c9:64:f8:24:b5:78:54:33:d6: 66:6b:43:46:bd:ae:66:67:30:53:57:61:a9:1a:97: ac:50:00:99:30:0e:32:c4:e0:3e:aa:70:ee:5f:90: db:d9:ff:02:b5:81:05:fe:90:a2:d1:91:7f:39:23: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:E0:DE:E6:FA:E5:FC:72:12:66:A5:0E:61:06:7A:71:7D:99:F0 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:df:0e:d4:e3:99:1b:e6:07:64:e6:6d:36:31:37:e0:4b:79: 56:63:a8:49:85:f8:23:88:e9:a1:d2:b6:bf:df:dc:e5:8d:70: 67:29:c6:9a:6b:33:ba:5d:43:31:04:8c:ba:55:53:3c:22:59: 50:ba:93:13:2f:e2:8c:43:9f:14:0a:19:dc:70:3b:7a:fa:d9: 67:d2:5e:19:df:0a:99:3f:3b:80:da:3e:0e:fa:f7:b9:94:d6: 63:aa:41:d7:8e:21:af:23:0f:f3:36:ef:56:45:d2:b4:7f:91: 8d:2d:48:bf:01:29:c7:91:b1:60:28:43:c7:c3:32:ed:0f:3a: 40:b5:b7:0f:a6:68:52:7d:43:86:0c:58:14:7d:c1:3a:59:48: dc:c5:2d:6e:b0:84:16:c0:23:5a:24:70:ea:0a:93:d2:17:d4: d4:09:aa:bf:5f:c8:14:e6:a2:8c:b8:bb:c0:09:aa:4c:33:ef: 11:19:97:32:81:4c:bb:1c:9c:9b:89:9c:6f:3b:ce:e2:a6:57: 3a:b9:5b:9d:2c:64:af:a6:17:e7:b1:98:5c:26:ff:06:5b:4c: ed:9c:95:6e:d6:b4:50:d2:da:c5:37:51:5c:9a:f0:2d:0f:e0: 67:32:84:01:b3:b6:85:ad:fa:80:ae:f6:12:28:55:2f:13:25: d4:74:c0:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofv4Z2bfGv2J5ny0txkbFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjUxMDI2MDkwMDM2WhcNMjUxMDI3MDkwMDM2WjAzMTEwLwYDVQQD EyhkNmMwZTBkZWU2ZmFlNWZjNzIxMjY2YTUwZTYxMDY3YTcxN2Q5OWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzTY0iADAxsy7Wobx+oWP2pwEiv/ AqwzWKmVCKFkVcOodyxKGcFwPZ6ASRdlA57ofbicQUtcL/2GTiEictv03vrOCGro 3DXqqMymaXojgis0tTUEK1E0LCli5exbbkTok9WQuW3q6YWe/O7syfGDLxT7unWy 31tGTlHeuZ49MlHxAxgzu8R9k86am2PVsLAZ4UxaouIoKWuYOYjLm4oHMnxV+KVS lE6Qtr9nwQ3zZyyCDPayPVqC1upR8UKBWQ924icUt6kYrIHJZPgktXhUM9Zma0NG va5mZzBTV2GpGpesUACZMA4yxOA+qnDuX5Db2f8CtYEF/pCi0ZF/OSN3GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbA4N7m+uX8chJmpQ5hBnpxfZnwMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd8O1OOZ G+YHZOZtNjE34Et5VmOoSYX4I4jpodK2v9/c5Y1wZynGmmszul1DMQSMulVTPCJZ ULqTEy/ijEOfFAoZ3HA7evrZZ9JeGd8KmT87gNo+Dvr3uZTWY6pB144hryMP8zbv VkXStH+RjS1IvwEpx5GxYChDx8My7Q86QLW3D6ZoUn1DhgxYFH3BOllI3MUtbrCE FsAjWiRw6gqT0hfU1Amqv1/IFOaijLi7wAmqTDPvERmXMoFMuxycm4mcbzvO4qZX OrlbnSxkr6YX57GYXCb/BltM7ZyVbta0UNLaxTdRXJrwLQ/gZzKEAbO2ha36gK72 EihVLxMl1HTAZA== -----END CERTIFICATE-----Generated at Sun Oct 26 13:59:43 2025 by rpki-client