$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: uqSqWKrSJ/u2tBUCoXE/M/9VhryIc/1TC2OTNQIJ9Po= Subject key identifier: 24:AD:F9:D2:BF:97:CE:E8:82:EB:06:4B:00:6B:88:20:E9:F1:5F:DA Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019826A2A165F18EF680A01E80A9639D5B12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 15E1 Signing time: Sun 20 Jul 2025 07:00:48 +0000 Manifest this update: Sun 20 Jul 2025 07:00:48 +0000 Manifest next update: Mon 21 Jul 2025 07:00:48 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: 4vWkfupeTjUmhl7AkZd28aV53VMdfo6PPGrK8W8IoKY=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:a2:a1:65:f1:8e:f6:80:a0:1e:80:a9:63:9d:5b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jul 20 07:00:48 2025 GMT Not After : Jul 21 07:00:48 2025 GMT Subject: CN=24adf9d2bf97cee882eb064b006b8820e9f15fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:d5:34:ad:21:e6:ca:ba:64:1d:96:c1:8c: 82:47:5c:5b:06:cf:6b:95:fd:5f:ee:1a:78:49:20: 06:ea:35:10:fe:17:e4:b1:c5:51:da:a9:fa:b9:62: 61:cb:c9:56:55:89:68:b6:74:64:10:6b:60:44:15: e5:68:92:01:82:7f:38:c2:80:aa:93:8c:95:bb:a9: 4c:0b:e1:d2:88:3c:7b:0b:e0:60:30:5c:dc:a7:06: dd:9d:f4:3d:e8:9b:28:aa:ee:ff:26:7d:97:3e:1c: 08:36:4c:41:bd:eb:48:44:b5:40:7d:ed:96:26:de: 2b:c9:26:70:64:60:ca:c7:c7:ff:33:e8:37:03:c2: e2:63:21:9f:7c:26:69:4a:a4:d5:bd:81:85:f8:0d: 36:0b:df:71:90:75:c5:11:71:5d:10:cd:c9:58:c2: 8c:3f:52:52:69:e0:e8:de:9b:be:31:ee:75:a6:60: 2e:d3:62:2b:44:20:9c:5f:3c:44:56:6c:2d:75:c6: 26:bd:ff:6f:ed:77:09:5d:7e:77:a5:35:55:0c:c5: ff:d1:7c:49:c7:37:aa:6a:94:68:b8:67:99:78:6f: 67:9c:37:6b:a0:cb:62:f8:28:78:a0:d2:c8:91:d5: 0e:89:d9:e0:b7:86:c1:ee:f3:c3:97:1d:77:1c:e4: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AD:F9:D2:BF:97:CE:E8:82:EB:06:4B:00:6B:88:20:E9:F1:5F:DA X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b6:29:23:0e:c8:72:aa:a4:87:6b:9f:54:8b:86:3d:e5:51: ab:61:e2:09:e8:c7:4d:09:8a:f1:b5:46:df:ec:67:44:ec:50: 33:fb:3c:30:e1:76:8c:0e:99:f6:c5:aa:e3:25:fb:60:8a:c7: 00:e2:14:b1:65:55:9b:22:3a:06:ae:3d:de:06:65:53:18:7a: e3:9e:ed:ea:d2:3c:8d:e9:8d:9e:31:a8:e7:bd:ea:b4:f6:b0: 48:a3:f4:8e:f7:d5:2a:79:cb:30:d1:58:00:9f:51:fc:be:13: 0c:79:61:ed:5b:a3:f6:02:0b:71:19:f6:0c:ff:6c:a5:8c:6e: 8e:36:09:10:b6:e4:23:a9:23:87:64:f7:1d:20:1b:43:e4:b9: e2:7d:54:85:1d:61:6a:b1:d5:34:41:af:ef:30:35:1d:e0:0f: c1:51:e2:5a:de:3c:7a:d1:6b:fc:a3:6a:f3:da:bb:04:34:44: 7d:25:34:b1:49:0d:8d:77:35:6d:8d:4d:12:98:40:cc:04:e6: e2:bf:bb:c3:4c:3e:c1:18:ea:82:b2:5d:20:48:49:11:35:ce: 57:41:ad:0b:ae:54:b0:73:60:92:12:22:3f:4b:a3:b1:4f:97: 43:77:0d:13:39:fc:64:38:c8:fc:9b:53:d5:37:9d:64:7a:2b: 93:18:a8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgmoqFl8Y72gKAegKljnVsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwNzIwMDcwMDQ4WhcNMjUwNzIxMDcwMDQ4WjAzMTEwLwYDVQQD EygyNGFkZjlkMmJmOTdjZWU4ODJlYjA2NGIwMDZiODgyMGU5ZjE1ZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N/VNK0h5sq6ZB2WwYyCR1xbBs9r lf1f7hp4SSAG6jUQ/hfkscVR2qn6uWJhy8lWVYlotnRkEGtgRBXlaJIBgn84woCq k4yVu6lMC+HSiDx7C+BgMFzcpwbdnfQ96Jsoqu7/Jn2XPhwINkxBvetIRLVAfe2W Jt4rySZwZGDKx8f/M+g3A8LiYyGffCZpSqTVvYGF+A02C99xkHXFEXFdEM3JWMKM P1JSaeDo3pu+Me51pmAu02IrRCCcXzxEVmwtdcYmvf9v7XcJXX53pTVVDMX/0XxJ xzeqapRouGeZeG9nnDdroMti+Ch4oNLIkdUOidngt4bB7vPDlx13HOSChwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSt+dK/l87ogusGSwBriCDp8V/aMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLYpIw7I cqqkh2ufVIuGPeVRq2HiCejHTQmK8bVG3+xnROxQM/s8MOF2jA6Z9sWq4yX7YIrH AOIUsWVVmyI6Bq493gZlUxh6457t6tI8jemNnjGo573qtPawSKP0jvfVKnnLMNFY AJ9R/L4TDHlh7Vuj9gILcRn2DP9spYxujjYJELbkI6kjh2T3HSAbQ+S54n1UhR1h arHVNEGv7zA1HeAPwVHiWt48etFr/KNq89q7BDREfSU0sUkNjXc1bY1NEphAzATm 4r+7w0w+wRjqgrJdIEhJETXOV0GtC65UsHNgkhIiP0ujsU+XQ3cNEzn8ZDjI/JtT 1TedZHorkxioBQ== -----END CERTIFICATE-----Generated at Sun Jul 20 16:22:27 2025 by rpki-client