$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: HqBdWrKwrirU/xUE3FtyG063hxnIeIu2K6HQgF4KoSQ= Subject key identifier: F2:F5:3E:E6:5E:6A:1B:25:CE:5C:16:6F:1D:7E:E0:3E:DA:FA:15:6E Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019934C92B0E61F507F722CF468301E30E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 031C Signing time: Wed 10 Sep 2025 18:00:22 +0000 Manifest this update: Wed 10 Sep 2025 18:00:22 +0000 Manifest next update: Thu 11 Sep 2025 18:00:22 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa (hash: PH0lnE0uN3wnc8tlGu7b2U0ixCX+3/LdiDburPkYelk=) 4: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 5: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 11: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 12: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 13: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 14: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 15: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 16: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 17: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (hash: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=) 18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: FTFGVWXCz7J1QDvAIjc9jF7bCzq9InB8ASFlbwEXFII=) 19: lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa (hash: u4qJFUu2v9DMBJmArLe+Y/Q/WiHYmJsHB3rpShxcurw=) 20: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 21: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 22: qGrAC8V0MwPDUhgXopiuZtK9w3k.roa (hash: QGRwQP2ZkVZAbpmeLKIkEFdzvxw0GO536GTjtTQacHA=) 23: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 24: uHsUP9ITNumWBnivSrpnKA1c8sk.roa (hash: RggRwkd0IhdYIM5cTJqQm6e1Y1oQR3G4Ep6Nth1HpWk=) 25: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 26: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:34:c9:2b:0e:61:f5:07:f7:22:cf:46:83:01:e3:0e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Sep 10 18:00:22 2025 GMT Not After : Sep 11 18:00:22 2025 GMT Subject: CN=f2f53ee65e6a1b25ce5c166f1d7ee03edafa156e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:01:5e:d0:80:77:c8:27:3e:4a:99:7b:a8: 82:51:26:2b:72:38:b3:3c:5e:b0:2e:30:f8:48:cf: dd:0c:9a:19:66:ee:06:ac:70:9e:07:69:90:49:76: 5a:74:6f:b1:d6:14:94:c8:98:9e:d7:43:61:13:6c: 37:6d:f0:34:f2:6b:87:0c:4e:af:3d:bd:64:ba:ad: ae:4b:9d:41:69:1d:73:cd:73:4e:69:9c:35:b7:54: c2:72:ed:24:a9:fd:62:ba:d7:d9:47:4e:41:78:2a: 7c:37:ad:db:41:e2:3d:f5:ad:f8:25:1c:9a:bb:b6: fa:4c:e4:57:3a:5e:c9:ea:86:b4:54:d2:ae:86:71: 66:b0:ce:36:29:c0:63:c3:92:c5:73:f4:49:94:86: 87:c3:1b:ca:c4:46:0d:b2:9f:e9:b2:78:ec:24:a7: f8:66:cc:9d:05:10:c6:33:a1:3d:0d:6e:dc:fd:80: c2:b3:e3:b8:a0:89:c8:76:76:7d:f5:85:94:c4:83: eb:0d:fe:93:fc:53:fd:a0:dc:b5:d5:6a:89:50:aa: e9:cf:e3:c4:cf:67:11:79:a6:9c:8e:63:78:50:57: 32:78:61:cf:12:7b:65:66:a6:51:36:eb:1c:ca:45: 23:a6:fe:d2:ec:39:8a:9b:af:d0:de:b7:41:1f:96: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F5:3E:E6:5E:6A:1B:25:CE:5C:16:6F:1D:7E:E0:3E:DA:FA:15:6E X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b7:66:9c:e4:55:e7:06:88:62:51:b8:28:c9:f3:b5:a0:e8: 96:dc:0d:09:b0:b6:17:d3:55:b3:bd:6e:8d:3c:1b:96:b4:6b: d4:8d:15:e5:e4:02:2e:12:7e:3b:8a:6b:00:22:50:ae:e8:59: bb:2a:03:99:c5:17:11:7c:dd:52:9f:4e:e2:71:2f:20:28:75: 5f:19:ae:1f:9b:6c:63:c7:c7:56:4f:56:b9:92:bd:07:c0:36: 95:69:ba:73:5f:0b:94:04:5e:7d:25:34:a5:68:a0:76:76:db: c8:b6:b1:2f:c9:84:ed:0c:42:b7:68:1f:cf:6d:a6:da:56:8e: b2:b3:a7:43:17:a5:4d:19:6d:b0:53:4a:77:88:ab:f8:05:97: 31:ff:55:87:9d:66:e1:86:90:a7:44:d9:cb:19:94:68:e9:1b: 76:45:b3:20:37:e1:da:28:74:37:fe:1f:6a:b5:3e:b8:30:0e: ae:6f:e0:80:f4:3d:4b:d9:14:7c:71:7d:cf:e3:36:a0:8f:3b: e3:10:86:62:06:29:15:19:23:f1:b8:27:a0:b8:d5:88:83:b2: 5f:6c:0c:28:59:a7:80:2a:8f:58:00:c0:28:b0:7b:4e:d5:06: ba:53:27:2f:ec:5a:92:87:fe:3d:b8:bf:e7:03:1a:61:e6:e7: ac:29:c3:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk0ySsOYfUH9yLPRoMB4w5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwOTEwMTgwMDIyWhcNMjUwOTExMTgwMDIyWjAzMTEwLwYDVQQD EyhmMmY1M2VlNjVlNmExYjI1Y2U1YzE2NmYxZDdlZTAzZWRhZmExNTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCsBXtCAd8gnPkqZe6iCUSYrcjiz PF6wLjD4SM/dDJoZZu4GrHCeB2mQSXZadG+x1hSUyJie10NhE2w3bfA08muHDE6v Pb1kuq2uS51BaR1zzXNOaZw1t1TCcu0kqf1iutfZR05BeCp8N63bQeI99a34JRya u7b6TORXOl7J6oa0VNKuhnFmsM42KcBjw5LFc/RJlIaHwxvKxEYNsp/psnjsJKf4 ZsydBRDGM6E9DW7c/YDCs+O4oInIdnZ99YWUxIPrDf6T/FP9oNy11WqJUKrpz+PE z2cReaacjmN4UFcyeGHPEntlZqZRNuscykUjpv7S7DmKm6/Q3rdBH5acwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL1PuZeahslzlwWbx1+4D7a+hVuMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrdmnORV 5waIYlG4KMnztaDoltwNCbC2F9NVs71ujTwblrRr1I0V5eQCLhJ+O4prACJQruhZ uyoDmcUXEXzdUp9O4nEvICh1XxmuH5tsY8fHVk9WuZK9B8A2lWm6c18LlARefSU0 pWigdnbbyLaxL8mE7QxCt2gfz22m2laOsrOnQxelTRltsFNKd4ir+AWXMf9Vh51m 4YaQp0TZyxmUaOkbdkWzIDfh2ih0N/4farU+uDAOrm/ggPQ9S9kUfHF9z+M2oI87 4xCGYgYpFRkj8bgnoLjViIOyX2wMKFmngCqPWADAKLB7TtUGulMnL+xakof+Pbi/ 5wMaYebnrCnDUg== -----END CERTIFICATE-----Generated at Wed Sep 10 20:33:08 2025 by rpki-client