$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: OteXXrZxQsFrgFed3S7xv7UHHRn5e+lRkZpsM/bTf8Y= Subject key identifier: 38:D8:EF:F1:98:CC:DF:93:4B:EF:1E:0E:58:0A:B6:4B:20:EF:09:B7 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019A0F70B12473D1099D1BFB18A09BCCFE52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 12C5 Signing time: Thu 23 Oct 2025 05:00:34 +0000 Manifest this update: Thu 23 Oct 2025 05:00:34 +0000 Manifest next update: Fri 24 Oct 2025 05:00:34 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: AEoJBTXGdbNGEHCG2xrZYkY-m48.roa (hash: wcifUjqJ1L+wv580+2agiHMA4f6pyHuaF1nnabsyT3o=) 3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: 9HmxOW035MPJuLjMCZN80uBEpW2uxuRc11FqMV0SR9o=) 5: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 6: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 7: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: xXfwL3nXnXFEEVcYcv_dc6Fb5P4.roa (hash: sO38IVaxxxNJ8+o5mB4XNWptxay9N15BzuBDzJ2RLLI=) 13: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0f:70:b1:24:73:d1:09:9d:1b:fb:18:a0:9b:cc:fe:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Oct 23 05:00:34 2025 GMT Not After : Oct 24 05:00:34 2025 GMT Subject: CN=38d8eff198ccdf934bef1e0e580ab64b20ef09b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:b5:ae:a0:b5:f4:44:9c:18:a7:f4:2f:7b: a8:e4:00:34:a6:e2:46:c2:bc:90:8d:02:46:22:3b: ce:bb:cc:10:f1:a7:67:dc:a1:3b:e0:bd:b2:65:9f: 28:59:5d:03:50:07:6e:bf:84:14:26:bd:e8:8b:d0: eb:c1:6d:76:4a:df:d1:44:a6:f9:a1:4d:6c:d2:71: 3f:f2:79:21:7e:44:2d:59:9e:a8:c0:91:9f:47:c8: 6b:65:40:c8:e4:24:98:eb:1b:3d:cb:1d:7f:b0:5a: 99:5f:ac:a0:44:92:16:49:31:b9:8f:1b:db:bd:4a: d7:d0:2c:9a:d4:0c:64:5d:f7:a5:a0:3b:94:8a:f2: 01:c0:62:5d:d2:d8:4e:cf:a9:e6:9b:68:c2:f4:a9: 21:7c:87:4d:3f:f1:5b:84:23:fc:df:f5:15:93:3f: 6f:b5:fe:60:44:ad:6c:dd:34:51:68:ed:6a:82:91: fb:97:15:f7:cf:bf:25:8e:c9:46:bc:25:34:dc:c0: 6c:9c:e2:90:f2:dd:09:39:2b:8b:5b:bf:dc:41:3a: de:94:cd:3b:12:f6:19:72:72:e0:17:89:ca:cb:80: 0e:cb:55:de:d8:40:75:9a:c5:f1:de:86:7a:e8:57: a9:9c:d9:29:f0:6e:93:4c:b8:d2:ca:8c:d5:b6:8c: 87:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:EF:F1:98:CC:DF:93:4B:EF:1E:0E:58:0A:B6:4B:20:EF:09:B7 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:56:fa:d7:30:8f:57:d1:3b:42:4b:74:6d:d2:8c:68:7c:5b: 31:75:0c:52:a4:c2:ad:d5:e0:12:07:e5:58:60:4f:db:b4:38: 74:a8:85:21:55:df:9d:55:a0:06:83:c5:34:47:2f:9b:a6:5a: 27:b7:ff:3b:8a:10:40:f6:7c:cb:ee:15:75:85:8b:39:eb:f5: 4e:20:54:49:9d:fe:e0:8c:57:1c:37:57:3b:66:43:ad:c0:b0: 4c:23:71:b7:7b:d9:54:e0:1b:28:03:04:c4:24:15:5a:c6:40: cd:01:0e:0b:ae:2d:c0:17:42:f2:eb:e6:c4:60:22:01:d5:5b: 64:9c:02:58:ac:e9:50:bc:db:89:98:bd:b8:4f:f8:30:e1:6c: e7:f3:50:af:72:cc:d2:cc:44:63:6d:e0:a5:98:83:af:4c:5b: 67:bc:bc:b1:57:d3:60:e4:75:04:c4:8a:a3:e4:dc:72:0a:25: 54:3f:3d:b6:9f:01:f8:c3:38:5d:58:43:35:65:dd:b4:87:d8: 1f:c0:eb:96:74:0b:22:6a:a2:08:93:6c:08:1b:df:12:20:01: 25:36:64:e5:8a:bf:6d:8b:fe:46:05:fc:6d:74:c7:74:4d:77: 55:36:9d:24:b5:cf:19:d4:f5:4b:48:97:b4:5b:22:1d:16:76: fb:08:ca:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoPcLEkc9EJnRv7GKCbzP5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUxMDIzMDUwMDM0WhcNMjUxMDI0MDUwMDM0WjAzMTEwLwYDVQQD EygzOGQ4ZWZmMTk4Y2NkZjkzNGJlZjFlMGU1ODBhYjY0YjIwZWYwOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOu1rqC19EScGKf0L3uo5AA0puJG wryQjQJGIjvOu8wQ8adn3KE74L2yZZ8oWV0DUAduv4QUJr3oi9DrwW12St/RRKb5 oU1s0nE/8nkhfkQtWZ6owJGfR8hrZUDI5CSY6xs9yx1/sFqZX6ygRJIWSTG5jxvb vUrX0Cya1AxkXfeloDuUivIBwGJd0thOz6nmm2jC9KkhfIdNP/FbhCP83/UVkz9v tf5gRK1s3TRRaO1qgpH7lxX3z78ljslGvCU03MBsnOKQ8t0JOSuLW7/cQTrelM07 EvYZcnLgF4nKy4AOy1Xe2EB1msXx3oZ66FepnNkp8G6TTLjSyozVtoyH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjY7/GYzN+TS+8eDlgKtksg7wm3MB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFb61zCP V9E7Qkt0bdKMaHxbMXUMUqTCrdXgEgflWGBP27Q4dKiFIVXfnVWgBoPFNEcvm6Za J7f/O4oQQPZ8y+4VdYWLOev1TiBUSZ3+4IxXHDdXO2ZDrcCwTCNxt3vZVOAbKAME xCQVWsZAzQEOC64twBdC8uvmxGAiAdVbZJwCWKzpULzbiZi9uE/4MOFs5/NQr3LM 0sxEY23gpZiDr0xbZ7y8sVfTYOR1BMSKo+TccgolVD89tp8B+MM4XVhDNWXdtIfY H8DrlnQLImqiCJNsCBvfEiABJTZk5Yq/bYv+RgX8bXTHdE13VTadJLXPGdT1S0iX tFsiHRZ2+wjKkA== -----END CERTIFICATE-----Generated at Thu Oct 23 15:51:52 2025 by rpki-client