$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: mnEc43GWrau4qxexahN5FUvE2prhXWTWb7XKG7XA5/I= Subject key identifier: C4:90:6F:F0:CE:AA:A4:AE:BC:C6:19:72:B1:EF:9B:ED:24:48:46:EA Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019A281D9E289A118AF52FEC317815083C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 039B Signing time: Tue 28 Oct 2025 00:00:20 +0000 Manifest this update: Tue 28 Oct 2025 00:00:20 +0000 Manifest next update: Wed 29 Oct 2025 00:00:20 +0000 Files and hashes: 1: 2Jpt_1ySpLb9WRqOyyiYnu_PAIA.roa (hash: MdM/wC7dTry3YHnV8Zu6hFD2x4pd0q3/gDiM/ZzZGdU=) 2: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 3: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 4: 3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa (hash: PH0lnE0uN3wnc8tlGu7b2U0ixCX+3/LdiDburPkYelk=) 5: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: E9Jwdio8wX_xqnKuXI9fZ_oHtDc.roa (hash: ECAIS90IaPHlQjI+lVlWinjaB8CNUQFfSBH/sS9eBjs=) 8: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 9: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 10: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 11: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (hash: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: qvBTdBHOsvrlGtjn2Ck3y5IxHV1lcuIAdZTDjfX5G6c=) 20: lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa (hash: u4qJFUu2v9DMBJmArLe+Y/Q/WiHYmJsHB3rpShxcurw=) 21: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 22: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 23: qGrAC8V0MwPDUhgXopiuZtK9w3k.roa (hash: QGRwQP2ZkVZAbpmeLKIkEFdzvxw0GO536GTjtTQacHA=) 24: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 25: uHsUP9ITNumWBnivSrpnKA1c8sk.roa (hash: RggRwkd0IhdYIM5cTJqQm6e1Y1oQR3G4Ep6Nth1HpWk=) 26: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 27: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:28:1d:9e:28:9a:11:8a:f5:2f:ec:31:78:15:08:3c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Oct 28 00:00:20 2025 GMT Not After : Oct 29 00:00:20 2025 GMT Subject: CN=c4906ff0ceaaa4aebcc61972b1ef9bed244846ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:ca:a6:be:bb:b7:d3:d2:77:e0:3c:d5:ac: 3c:0b:fb:e7:51:72:1c:cd:db:08:f6:b4:29:b3:41: 14:6d:f8:bd:81:36:b3:b1:1a:9f:00:be:98:29:08: ba:10:c1:2d:1c:1e:24:33:24:58:08:78:33:66:85: b5:85:93:07:24:a9:7e:8a:80:7d:8f:74:67:36:de: 81:0e:51:b6:de:6d:90:40:f4:54:78:c8:36:79:a3: ac:09:17:42:80:85:3f:31:4b:2b:9d:1b:63:9c:1a: 7c:9d:e3:bd:a6:1f:da:27:5e:2d:47:b9:ea:7a:87: 40:b3:07:e9:eb:d5:76:d5:0a:2d:6c:86:9f:13:03: c1:69:31:8f:e2:df:05:ce:34:26:b5:3d:63:71:ef: 4c:fb:45:88:99:7e:be:fc:fa:b9:7c:d4:d6:bc:01: 96:93:11:08:f8:ec:ef:d4:8c:bd:35:34:17:22:99: 30:9a:16:1e:f0:f2:55:e5:9a:a7:c9:20:07:3f:06: 98:af:86:64:f3:52:de:75:e0:90:b5:79:aa:78:5e: 55:d4:94:60:d4:11:69:8a:11:14:aa:00:0e:ba:62: 0e:81:5f:cc:2b:9b:ec:d2:ed:9d:46:d6:26:23:53: 85:6b:cc:25:6a:08:82:27:ea:0a:a2:ad:8e:6f:ae: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:90:6F:F0:CE:AA:A4:AE:BC:C6:19:72:B1:EF:9B:ED:24:48:46:EA X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fb:c3:21:47:61:97:a3:ee:1a:a3:6a:8a:52:81:1b:9d:7f: a4:7d:5d:e7:00:26:9f:87:38:3b:b0:0f:2d:9d:9b:97:1d:c4: 3c:6a:de:a0:0a:5a:39:33:a2:6d:9d:56:b1:50:f5:9b:e4:8a: 7e:0c:53:0a:49:d5:5b:6b:8c:75:27:17:a3:f5:71:ee:77:2c: b6:d5:15:f8:6c:1f:09:e4:84:b5:7b:27:43:34:f7:64:3f:43: bc:c8:d3:09:ad:9d:ae:9d:24:1e:2c:65:b0:ec:47:3f:9c:93: de:3c:43:db:2a:1b:b5:fc:07:a9:2e:3e:0d:68:07:0d:d6:f1: a5:cc:1a:05:b9:00:26:cd:cf:71:92:63:74:ce:3e:76:11:6b: c0:59:42:4d:b7:2b:ac:6f:2c:0b:fe:47:c0:f0:63:6f:24:04: 51:74:ad:9b:6c:d5:23:3c:4f:46:fa:7c:e4:12:71:a7:e7:56: 16:35:32:5f:2d:e6:c8:5a:bc:0a:e4:d8:99:24:6d:37:c9:fa: 69:e1:da:87:2e:3a:85:6b:e6:be:9d:1c:4b:5b:59:32:03:42: 83:07:b3:bb:68:0b:8b:f8:12:ff:f8:93:21:9a:8e:07:bc:16: de:c6:3f:fc:ef:be:23:a6:45:90:e1:ff:e5:77:c7:97:d6:6b: f0:e6:96:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZooHZ4omhGK9S/sMXgVCDwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUxMDI4MDAwMDIwWhcNMjUxMDI5MDAwMDIwWjAzMTEwLwYDVQQD EyhjNDkwNmZmMGNlYWFhNGFlYmNjNjE5NzJiMWVmOWJlZDI0NDg0NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPnKpr67t9PSd+A81aw8C/vnUXIc zdsI9rQps0EUbfi9gTazsRqfAL6YKQi6EMEtHB4kMyRYCHgzZoW1hZMHJKl+ioB9 j3RnNt6BDlG23m2QQPRUeMg2eaOsCRdCgIU/MUsrnRtjnBp8neO9ph/aJ14tR7nq eodAswfp69V21QotbIafEwPBaTGP4t8FzjQmtT1jce9M+0WImX6+/Pq5fNTWvAGW kxEI+Ozv1Iy9NTQXIpkwmhYe8PJV5ZqnySAHPwaYr4Zk81LedeCQtXmqeF5V1JRg 1BFpihEUqgAOumIOgV/MK5vs0u2dRtYmI1OFa8wlagiCJ+oKoq2Ob65UeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSQb/DOqqSuvMYZcrHvm+0kSEbqMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvvDIUdh l6PuGqNqilKBG51/pH1d5wAmn4c4O7APLZ2blx3EPGreoApaOTOibZ1WsVD1m+SK fgxTCknVW2uMdScXo/Vx7ncsttUV+GwfCeSEtXsnQzT3ZD9DvMjTCa2drp0kHixl sOxHP5yT3jxD2yobtfwHqS4+DWgHDdbxpcwaBbkAJs3PcZJjdM4+dhFrwFlCTbcr rG8sC/5HwPBjbyQEUXStm2zVIzxPRvp85BJxp+dWFjUyXy3myFq8CuTYmSRtN8n6 aeHahy46hWvmvp0cS1tZMgNCgwezu2gLi/gS//iTIZqOB7wW3sY//O++I6ZFkOH/ 5XfHl9Zr8OaWpg== -----END CERTIFICATE-----Generated at Tue Oct 28 10:56:33 2025 by rpki-client