$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: Ob+Tk2ZHMu8awIVFyHbbzoGRjhgUAB4XezWIJfwdTps= Subject key identifier: 89:88:87:01:5E:11:57:05:73:BD:7F:5F:6B:E1:E6:CC:64:04:D1:05 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019A36B4C21CFE5F7B1F7539C76E8B73829C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1710 Signing time: Thu 30 Oct 2025 20:00:06 +0000 Manifest this update: Thu 30 Oct 2025 20:00:06 +0000 Manifest next update: Fri 31 Oct 2025 20:00:06 +0000 Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 8nmFXwMiXrqCLxOALQeCTwuCSsHOmBz9e0oc/s1/0xk=) 2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 3: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=) 4: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 5: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 6: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 8: XfeVybS-JJmUst6aHDqcoct7XK0.roa (hash: nYNNvQT6vs/H7ho6wlD5EX5eXnEUV3YAmuK8qzDOCmA=) 9: fAqAClIqEJU2Z5Ye9QXpUO1Tbkg.roa (hash: YDMyeOOGj2eBmIkqGQ0q84C8FFV9NROwwY19+t/7x2o=) 10: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) 11: gmw7pLwjm6vuBLTk-rK2D36QKkA.roa (hash: COLQkZAyHhSJJDAy86nI3z09V/OufPhY+8kBah7bzeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 31 Oct 2025 19:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:36:b4:c2:1c:fe:5f:7b:1f:75:39:c7:6e:8b:73:82:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Oct 30 20:00:06 2025 GMT Not After : Oct 31 20:00:06 2025 GMT Subject: CN=898887015e11570573bd7f5f6be1e6cc6404d105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9e:73:59:51:0f:d5:a0:53:5c:80:08:84:d0: 40:60:67:2e:4c:29:44:c4:3f:27:48:96:b8:57:52: a1:df:45:63:f0:d8:b6:7e:2e:df:9e:de:7c:18:f3: b3:6f:c4:4d:3e:ad:a8:4e:8c:7d:66:a9:cb:6b:1b: 82:6e:e6:92:f8:1f:43:7b:69:47:da:41:90:ae:8e: 99:32:f5:2a:29:0f:8a:03:8a:95:5a:97:7f:2a:6e: 05:59:f7:41:0f:20:e9:12:b8:70:50:bd:f7:46:f4: f1:26:00:58:80:c7:ee:97:4f:7c:24:58:31:68:0e: 29:fa:67:36:b9:e0:05:85:f5:c5:31:fa:4d:b8:b1: f3:79:7d:4a:9a:d9:9f:37:e7:d7:22:98:05:73:ee: 85:7a:a6:0c:38:3b:64:a8:76:02:9e:9a:af:5f:36: 80:d8:95:db:c2:c9:42:0d:bf:2b:49:24:2a:fd:b1: af:21:f6:0c:6b:89:87:e7:78:9c:96:64:0e:b7:3e: 54:be:5a:ee:4f:20:f1:3f:bb:fe:d9:34:ae:7e:4b: 3a:30:e4:b5:e3:4a:3d:4f:9e:72:09:a7:8f:d0:06: 0d:7d:0c:f6:33:b7:e0:7c:c5:fb:23:4c:bb:2b:cb: 2c:17:ac:e0:eb:c3:b1:35:26:58:74:fa:60:28:c3: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:88:87:01:5E:11:57:05:73:BD:7F:5F:6B:E1:E6:CC:64:04:D1:05 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:73:79:0f:97:88:32:b9:4d:b2:e7:be:f4:60:bc:e3:57:5b: 16:2e:d7:dc:67:b1:3c:9f:b0:d8:e5:a9:23:22:1c:77:65:4a: c8:a3:75:3d:d3:8d:7d:5d:2d:bf:f3:a2:fe:8c:27:05:50:3a: c5:db:22:3c:3a:aa:b1:9c:ce:b0:85:e7:b6:cc:48:a6:ba:18: c4:3d:f8:8d:49:b2:a9:bc:4f:21:0a:b5:b2:57:3a:3d:7a:f8: 02:a2:2b:ed:4c:7d:c0:1f:c9:32:bc:e3:a2:2c:b0:19:32:67: 49:80:d8:06:ad:7a:24:8a:99:25:ad:f3:26:00:f9:4f:45:5a: 97:f3:e0:f8:3f:a1:dc:64:b3:c4:5b:7c:f2:26:3e:44:ba:19: 1a:0d:e2:75:a7:ff:9c:b1:43:b3:7c:c1:ee:94:a7:cc:4b:8e: 2b:42:ca:b0:fe:a1:0a:09:79:cc:56:a9:6f:2a:e5:0f:3b:3e: eb:a4:de:bb:e3:f9:34:02:ae:d2:cf:b6:ce:fd:2f:9f:1d:f4: 42:45:d1:77:e9:99:f4:a8:8c:ca:48:12:77:e5:d1:55:47:be: ee:f4:9d:51:e4:25:d4:48:de:5a:f3:a3:2f:9f:dc:18:b5:4d: 48:58:7b:79:5a:1c:52:da:db:04:72:bf:d1:3c:96:d7:90:ec: 26:d2:b2:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZo2tMIc/l97H3U5x26Lc4KcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUxMDMwMjAwMDA2WhcNMjUxMDMxMjAwMDA2WjAzMTEwLwYDVQQD Eyg4OTg4ODcwMTVlMTE1NzA1NzNiZDdmNWY2YmUxZTZjYzY0MDRkMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8J5zWVEP1aBTXIAIhNBAYGcuTClE xD8nSJa4V1Kh30Vj8Ni2fi7fnt58GPOzb8RNPq2oTox9ZqnLaxuCbuaS+B9De2lH 2kGQro6ZMvUqKQ+KA4qVWpd/Km4FWfdBDyDpErhwUL33RvTxJgBYgMful098JFgx aA4p+mc2ueAFhfXFMfpNuLHzeX1KmtmfN+fXIpgFc+6FeqYMODtkqHYCnpqvXzaA 2JXbwslCDb8rSSQq/bGvIfYMa4mH53iclmQOtz5UvlruTyDxP7v+2TSufks6MOS1 40o9T55yCaeP0AYNfQz2M7fgfMX7I0y7K8ssF6zg68OxNSZYdPpgKMPX1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImIhwFeEVcFc71/X2vh5sxkBNEFMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3N5D5eI MrlNsue+9GC841dbFi7X3GexPJ+w2OWpIyIcd2VKyKN1PdONfV0tv/Oi/ownBVA6 xdsiPDqqsZzOsIXntsxIproYxD34jUmyqbxPIQq1slc6PXr4AqIr7Ux9wB/JMrzj oiywGTJnSYDYBq16JIqZJa3zJgD5T0Val/Pg+D+h3GSzxFt88iY+RLoZGg3idaf/ nLFDs3zB7pSnzEuOK0LKsP6hCgl5zFapbyrlDzs+66Teu+P5NAKu0s+2zv0vnx30 QkXRd+mZ9KiMykgSd+XRVUe+7vSdUeQl1EjeWvOjL5/cGLVNSFh7eVocUtrbBHK/ 0TyW15DsJtKyWA== -----END CERTIFICATE-----Generated at Fri Oct 31 04:49:53 2025 by rpki-client