$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: uyhOo+YxCNlqP7Qqcv15byLVl+NkbQwvbZk8V+0Q4hU= Subject key identifier: 85:A9:14:8B:14:62:6A:FB:A5:36:9E:B0:18:52:62:2C:02:5E:33:C2 Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 0199589ED62120197A62758C29792B536FF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 169C Signing time: Wed 17 Sep 2025 17:00:28 +0000 Manifest this update: Wed 17 Sep 2025 17:00:28 +0000 Manifest next update: Thu 18 Sep 2025 17:00:28 +0000 Files and hashes: 1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=) 2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=) 3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=) 4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=) 5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=) 6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=) 7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: CyGBM/noDIw4iNsTLqiuQMJqrAop/3mnSjNX5g85DIM=) 8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=) 9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=) 10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=) 11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Sep 2025 17:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:58:9e:d6:21:20:19:7a:62:75:8c:29:79:2b:53:6f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Sep 17 17:00:28 2025 GMT Not After : Sep 18 17:00:28 2025 GMT Subject: CN=85a9148b14626afba5369eb01852622c025e33c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:95:b0:fe:9a:a3:8f:bf:59:70:9a:8f:e9: 5f:ed:f1:15:4d:23:2e:ab:20:10:17:3c:bf:62:e1: f8:6f:64:57:6d:da:90:b2:c7:81:d1:e4:49:10:54: cc:b8:c5:25:a6:f9:27:3a:a7:d3:22:c6:bc:25:bf: 00:9f:67:fb:ac:cb:41:18:ad:74:39:a4:f1:e3:4d: 09:de:99:9f:8a:0c:13:2e:e5:77:49:49:a0:43:4f: ca:d9:1f:20:a1:ae:74:af:1a:1d:1a:ec:c4:11:95: 0b:91:dc:f6:a6:25:14:94:a8:5d:a6:ab:e6:e6:df: 2d:2f:f0:4a:50:e2:55:2a:36:af:2e:cc:96:7e:db: 75:bc:84:74:34:37:bb:d9:e5:7d:e5:12:3c:39:e8: 4b:35:09:6c:67:a9:8a:13:4a:c2:ec:ec:83:34:39: ac:5d:6b:44:56:4c:f2:05:b9:c2:92:7c:14:b4:e5: 42:12:65:2b:80:ee:9f:a1:30:cf:24:31:6f:07:3c: a5:08:09:f2:13:a2:3e:93:55:a7:2e:41:ec:53:9d: 2b:7d:25:3f:14:8f:ff:3c:0a:b5:f2:2d:1e:cf:5d: b7:ff:1a:e3:54:ba:eb:71:50:b5:f5:22:d8:ef:2f: 62:3f:0b:55:40:53:b0:8d:75:eb:23:fa:b9:64:8f: f1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A9:14:8B:14:62:6A:FB:A5:36:9E:B0:18:52:62:2C:02:5E:33:C2 X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ff:79:f6:3c:71:c7:73:4b:87:31:30:91:66:e5:3f:b2:58: 8b:74:9a:79:ae:8e:24:e2:68:fa:9c:0f:37:51:94:90:70:85: bc:84:8c:35:f4:11:6a:d7:b7:0c:3a:e5:34:5a:8e:ed:40:a3: bf:ac:e4:a0:3e:25:e4:25:92:bb:a3:72:39:27:74:c3:17:62: ea:37:48:d7:ae:5a:54:43:b3:56:e1:10:e0:bd:f7:72:02:16: 86:1e:55:73:e3:c8:0b:1c:db:0c:06:42:41:1f:3f:3b:73:cf: 2e:4d:12:ea:dd:fb:00:4a:05:09:20:09:1a:0a:36:e9:4c:31: d7:71:47:27:cd:05:c8:e9:16:51:e5:69:18:89:76:eb:a2:8f: d4:15:5c:a5:e8:34:cd:b7:40:7a:d7:fe:a5:14:c0:44:ab:0e: 5e:d8:f0:5e:7f:83:ab:d2:53:0c:7d:5d:79:c8:11:c5:c3:90: 97:fc:c0:21:7b:21:41:21:d5:44:16:02:7b:61:0c:7e:ac:17: 30:c2:79:36:d1:ec:dd:25:87:a1:fb:b7:91:d2:6b:ba:9c:80: 8d:45:8f:96:e3:7e:55:9f:f3:31:b3:97:38:07:b0:d4:ec:33: d6:48:05:01:15:c4:f7:bf:98:a9:da:fd:94:8f:55:b0:e3:3e: 63:09:1d:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlYntYhIBl6YnWMKXkrU2/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjUwOTE3MTcwMDI4WhcNMjUwOTE4MTcwMDI4WjAzMTEwLwYDVQQD Eyg4NWE5MTQ4YjE0NjI2YWZiYTUzNjllYjAxODUyNjIyYzAyNWUzM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9+VsP6ao4+/WXCaj+lf7fEVTSMu qyAQFzy/YuH4b2RXbdqQsseB0eRJEFTMuMUlpvknOqfTIsa8Jb8An2f7rMtBGK10 OaTx400J3pmfigwTLuV3SUmgQ0/K2R8goa50rxodGuzEEZULkdz2piUUlKhdpqvm 5t8tL/BKUOJVKjavLsyWftt1vIR0NDe72eV95RI8OehLNQlsZ6mKE0rC7OyDNDms XWtEVkzyBbnCknwUtOVCEmUrgO6foTDPJDFvBzylCAnyE6I+k1WnLkHsU50rfSU/ FI//PAq18i0ez123/xrjVLrrcVC19SLY7y9iPwtVQFOwjXXrI/q5ZI/xaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWpFIsUYmr7pTaesBhSYiwCXjPCMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv959jxx x3NLhzEwkWblP7JYi3Saea6OJOJo+pwPN1GUkHCFvISMNfQRate3DDrlNFqO7UCj v6zkoD4l5CWSu6NyOSd0wxdi6jdI165aVEOzVuEQ4L33cgIWhh5Vc+PICxzbDAZC QR8/O3PPLk0S6t37AEoFCSAJGgo26Uwx13FHJ80FyOkWUeVpGIl266KP1BVcpeg0 zbdAetf+pRTARKsOXtjwXn+Dq9JTDH1decgRxcOQl/zAIXshQSHVRBYCe2EMfqwX MMJ5NtHs3SWHofu3kdJrupyAjUWPluN+VZ/zMbOXOAew1Owz1kgFARXE97+Yqdr9 lI9VsOM+YwkdWA== -----END CERTIFICATE-----Generated at Thu Sep 18 02:23:58 2025 by rpki-client