$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: +5QRdNVnpGQxAtj41YkB0hCLXHUVfozmAttBWGaxsKk= Subject key identifier: 6E:7A:96:38:B8:16:39:0B:5F:21:19:23:44:14:AA:83:63:A1:9C:3C Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 0198417475D748B88C99996525D8DED74700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1617 Signing time: Fri 25 Jul 2025 12:00:08 +0000 Manifest this update: Fri 25 Jul 2025 12:00:08 +0000 Manifest next update: Sat 26 Jul 2025 12:00:08 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 7: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 8: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 9: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 10: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 11: V44zBaIrT2vwhrVFAcN5IRAmoy4.roa (hash: IDJvYejslYQFS3URSy/7ffz5ilsUpAhyf+EqD49d/+Y=) 12: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 13: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 14: fMzT-5d-H7wm7UzPX4PbBLndjlo.roa (hash: QHxOUGueDky85wAcdSL/hpvn/Djtg29akovspAUAOhU=) 15: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 16: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: vpEUnCBTBrmr2SuxkfQUfbU+mPx5X2eX88oA4OVdmZc=) 17: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 18: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 19: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 22: uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa (hash: lh9JEVycjwO2JOZAXH6/OskJCw09FDKHU4kXtolx/mg=) 23: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 24: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 25: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:41:74:75:d7:48:b8:8c:99:99:65:25:d8:de:d7:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jul 25 12:00:08 2025 GMT Not After : Jul 26 12:00:08 2025 GMT Subject: CN=6e7a9638b816390b5f2119234414aa8363a19c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:3f:0d:ab:81:90:de:3e:a0:2c:40:a2:94: 01:88:17:c1:69:d4:80:2f:9d:64:e4:88:6b:e9:58: 37:f0:70:1e:47:95:06:b7:b2:10:74:4e:f8:f2:97: 2e:78:a7:e7:44:46:f4:03:8f:90:54:32:11:d8:5a: f4:19:05:ed:99:65:39:ab:3b:6a:6a:ea:00:b8:c1: a4:66:4f:1a:b1:3a:fb:b1:25:85:ad:57:48:3f:33: a6:f3:13:c8:54:e6:68:74:89:b8:cd:0c:a0:95:40: f4:67:7e:22:2d:93:c0:52:b7:f1:ea:fb:6e:b5:8c: 00:08:f3:47:05:46:ef:a2:c7:6f:62:71:ef:d1:9f: 54:99:dc:8f:4a:3b:fe:06:e5:86:31:cf:96:f8:10: 95:ea:02:14:ba:3b:74:a1:cf:6a:4e:18:c1:16:f9: 61:8f:75:8c:78:d3:73:a7:ae:a9:ab:44:ca:32:71: 3d:e0:21:25:3f:4a:c7:8a:53:e9:0c:88:fb:59:1a: 7a:d1:7a:ae:03:16:e1:37:c2:48:ea:2b:6c:14:4d: 3c:69:61:0a:eb:2a:89:88:3c:d4:c7:b3:a5:f5:4c: 60:91:ee:b3:ea:5a:44:9b:76:49:6a:6e:c5:50:1b: 2d:0b:4b:a5:43:af:d5:4a:85:1e:4d:66:f3:27:b6: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7A:96:38:B8:16:39:0B:5F:21:19:23:44:14:AA:83:63:A1:9C:3C X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c6:c1:6f:d3:14:9f:93:ba:04:1b:99:b7:0a:b6:db:f5:f2: e4:7a:57:21:7b:14:42:2d:34:71:6d:25:f3:f0:29:3f:9e:6f: 91:db:f6:50:8b:1f:7a:7d:54:1e:06:1a:28:c6:fb:83:8e:ac: 2b:ef:46:f6:e7:6d:64:c3:93:7e:32:f9:d7:57:72:40:a9:74: 64:23:27:7b:96:b1:a9:0e:09:e9:db:41:98:6c:92:80:a7:9c: 3d:a0:1f:a1:28:81:c1:15:1b:32:dc:71:86:6b:0c:ce:54:f0: 14:b5:32:61:45:ef:85:76:2a:a4:cb:8e:a1:57:fa:ba:2a:e3: ae:2a:e1:0b:02:2a:17:cb:ec:23:2c:3d:c8:7c:c1:e3:bb:90: ff:fd:c5:21:b9:c3:3a:2e:16:d0:2e:9c:c6:2c:fb:bb:54:8b: 5b:0d:a7:57:b5:ac:05:8c:5d:c4:18:13:ca:19:d8:eb:09:7b: 74:54:83:fb:79:c7:8e:8a:2d:d4:23:df:46:b7:ff:0d:1c:33: d0:33:51:1f:75:b6:3c:bf:58:ae:80:26:83:78:1b:7c:73:09: 22:09:b5:7b:8e:4d:72:ab:6c:5c:27:fc:2e:b6:4e:69:aa:ff: 27:f9:ec:79:39:03:5e:ae:24:dc:e7:43:a5:d3:5a:df:83:3a: 7f:65:67:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhBdHXXSLiMmZllJdje10cAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwNzI1MTIwMDA4WhcNMjUwNzI2MTIwMDA4WjAzMTEwLwYDVQQD Eyg2ZTdhOTYzOGI4MTYzOTBiNWYyMTE5MjM0NDE0YWE4MzYzYTE5YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrA/DauBkN4+oCxAopQBiBfBadSA L51k5Ihr6Vg38HAeR5UGt7IQdE748pcueKfnREb0A4+QVDIR2Fr0GQXtmWU5qztq auoAuMGkZk8asTr7sSWFrVdIPzOm8xPIVOZodIm4zQyglUD0Z34iLZPAUrfx6vtu tYwACPNHBUbvosdvYnHv0Z9UmdyPSjv+BuWGMc+W+BCV6gIUujt0oc9qThjBFvlh j3WMeNNzp66pq0TKMnE94CElP0rHilPpDIj7WRp60XquAxbhN8JI6itsFE08aWEK 6yqJiDzUx7Ol9Uxgke6z6lpEm3ZJam7FUBstC0ulQ6/VSoUeTWbzJ7YnBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG56lji4FjkLXyEZI0QUqoNjoZw8MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8bBb9MU n5O6BBuZtwq22/Xy5HpXIXsUQi00cW0l8/ApP55vkdv2UIsfen1UHgYaKMb7g46s K+9G9udtZMOTfjL511dyQKl0ZCMne5axqQ4J6dtBmGySgKecPaAfoSiBwRUbMtxx hmsMzlTwFLUyYUXvhXYqpMuOoVf6uirjrirhCwIqF8vsIyw9yHzB47uQ//3FIbnD Oi4W0C6cxiz7u1SLWw2nV7WsBYxdxBgTyhnY6wl7dFSD+3nHjoot1CPfRrf/DRwz 0DNRH3W2PL9YroAmg3gbfHMJIgm1e45NcqtsXCf8LrZOaar/J/nseTkDXq4k3OdD pdNa34M6f2VnVQ== -----END CERTIFICATE-----Generated at Fri Jul 25 17:12:45 2025 by rpki-client