$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: GyaMrs3mmTVt/MAZ6p8Xk9mmRmmzikY90pi/+aw6qb4= Subject key identifier: 08:EA:27:A7:18:B6:B2:F2:5E:26:E6:42:09:AE:D4:BD:47:B9:5A:3C Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019A1CBF8BD78876277DB5782899959345FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 125E Signing time: Sat 25 Oct 2025 19:01:46 +0000 Manifest this update: Sat 25 Oct 2025 19:01:46 +0000 Manifest next update: Sun 26 Oct 2025 19:01:46 +0000 Files and hashes: 1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=) 2: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=) 3: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=) 4: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=) 5: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: 2MiDy9tfIjVobrpB/nTW1MHWf37MF5ApxaNFj/qTHPg=) 6: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=) 7: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=) 8: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=) 9: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=) 10: SGXEhyIKPmMOen6I1PkB3pLeCvY.roa (hash: 9EH2IzLvB2rKmrGF7xG6OifEC/3ZYYgbCersKE1ntGs=) 11: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=) 12: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=) 13: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=) 14: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=) 15: _CI5_4aNxKaEPWYHOcyZKAbyObU.roa (hash: X5MyuI8Ww88wubWEkkjHn57GLRoFZnT3Qc6Lwjl782U=) 16: cHMExnQg_NgXj9RSngWJiE0Ry9w.roa (hash: ccksNIEDmgp05yf3K+8vErJuvCl+xg8f85HZISEiov8=) 17: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1c:bf:8b:d7:88:76:27:7d:b5:78:28:99:95:93:45:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Oct 25 19:01:46 2025 GMT Not After : Oct 26 19:01:46 2025 GMT Subject: CN=08ea27a718b6b2f25e26e64209aed4bd47b95a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:41:d8:54:32:9f:7b:13:7e:64:d5:59:a9: b7:a3:ad:cf:1a:7a:9b:00:7e:f6:30:d1:4d:a3:43: 23:bb:7d:bf:e8:b0:94:b1:d9:4d:c1:67:a4:83:d6: 0b:69:15:d5:31:79:a7:5b:9b:3d:1c:15:c5:9c:f6: 81:5b:ab:5e:f3:dd:0a:2d:45:e3:49:6f:7b:d4:30: fa:3d:22:56:c0:76:0d:d1:87:ec:7d:b0:ff:a0:a2: d7:ea:f1:04:19:0e:d0:86:42:1f:69:7e:a6:96:3a: ea:96:ba:95:94:79:7c:68:34:52:55:d6:c7:c8:fd: 02:7c:1d:bd:dc:75:47:d8:ee:34:8f:a5:8c:18:9a: 96:61:63:c5:f6:e4:29:04:55:da:21:fa:c8:f4:18: e5:fb:b6:1e:40:7b:3d:2d:8a:49:6b:69:99:b0:21: 10:63:75:18:c0:1c:0a:8e:43:e8:21:f6:00:32:f2: e7:fa:27:b5:c8:1b:6d:cb:cd:33:fa:1c:9b:72:69: 84:5c:7f:23:d6:90:3c:ba:b1:2d:42:b9:a2:f2:c1: 16:35:a1:59:85:7f:fa:07:69:a4:81:63:3e:16:03: 59:d2:69:dd:0f:61:20:ac:ac:02:5a:04:74:1a:f8: 43:16:21:32:8c:65:74:5f:c7:67:6a:ec:41:2a:f5: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EA:27:A7:18:B6:B2:F2:5E:26:E6:42:09:AE:D4:BD:47:B9:5A:3C X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:de:cb:93:f1:c8:72:c4:06:f1:4a:13:da:fc:5a:05:e3:e2: 76:10:52:16:31:2f:65:29:b1:98:fe:41:ca:c8:3b:7b:50:dc: 47:28:9b:d0:40:27:ac:a1:1e:6d:6f:6a:67:7b:8f:af:3c:5a: c1:d3:a8:93:96:f2:38:86:84:2d:2c:f5:03:8f:c8:97:50:6c: 69:95:73:0e:cf:82:a6:e5:75:96:cd:65:d9:2f:38:b4:e0:49: 5a:9d:02:04:1a:26:ab:e1:e5:b5:fc:a0:04:f9:c7:cd:bd:74: 02:fc:a0:37:b9:f2:b0:20:7b:45:59:73:17:d9:df:1f:fb:58: 0c:6a:62:66:7f:e5:de:d0:28:dc:54:fe:6b:6d:84:79:93:2c: 7f:bf:77:20:d9:77:87:c5:bc:d7:78:dc:76:74:99:41:ff:6a: b9:b4:70:5c:79:b7:83:4d:6d:60:44:be:44:1b:50:2a:b6:25: d2:23:a9:be:0f:d2:48:ec:4c:e6:b3:f9:2d:50:38:d8:b6:96: fc:53:77:bd:0b:4e:61:72:0c:97:97:f6:42:98:1f:41:40:b3: 4c:6b:59:0a:9c:3a:37:70:65:22:bb:6f:da:4d:bc:71:09:86: ab:b4:89:a1:6c:d1:55:f3:df:70:ab:a2:4a:6c:5d:73:a1:c2: ea:8c:db:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZocv4vXiHYnfbV4KJmVk0X8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjUxMDI1MTkwMTQ2WhcNMjUxMDI2MTkwMTQ2WjAzMTEwLwYDVQQD EygwOGVhMjdhNzE4YjZiMmYyNWUyNmU2NDIwOWFlZDRiZDQ3Yjk1YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmClB2FQyn3sTfmTVWam3o63PGnqb AH72MNFNo0Mju32/6LCUsdlNwWekg9YLaRXVMXmnW5s9HBXFnPaBW6te890KLUXj SW971DD6PSJWwHYN0YfsfbD/oKLX6vEEGQ7QhkIfaX6mljrqlrqVlHl8aDRSVdbH yP0CfB293HVH2O40j6WMGJqWYWPF9uQpBFXaIfrI9Bjl+7YeQHs9LYpJa2mZsCEQ Y3UYwBwKjkPoIfYAMvLn+ie1yBtty80z+hybcmmEXH8j1pA8urEtQrmi8sEWNaFZ hX/6B2mkgWM+FgNZ0mndD2EgrKwCWgR0GvhDFiEyjGV0X8dnauxBKvWe4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjqJ6cYtrLyXibmQgmu1L1HuVo8MB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcd7Lk/HI csQG8UoT2vxaBePidhBSFjEvZSmxmP5Bysg7e1DcRyib0EAnrKEebW9qZ3uPrzxa wdOok5byOIaELSz1A4/Il1BsaZVzDs+CpuV1ls1l2S84tOBJWp0CBBomq+Hltfyg BPnHzb10AvygN7nysCB7RVlzF9nfH/tYDGpiZn/l3tAo3FT+a22EeZMsf793INl3 h8W813jcdnSZQf9qubRwXHm3g01tYES+RBtQKrYl0iOpvg/SSOxM5rP5LVA42LaW /FN3vQtOYXIMl5f2QpgfQUCzTGtZCpw6N3BlIrtv2k28cQmGq7SJoWzRVfPfcKui Smxdc6HC6ozbMA== -----END CERTIFICATE-----Generated at Sun Oct 26 00:06:42 2025 by rpki-client