$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: J0rLk4WXZD/blV9MyfjJfca5ltTrkWZAL6aZikjvp1I= Subject key identifier: 82:92:95:95:06:A5:6D:96:9A:7A:53:92:2E:72:28:55:F2:8F:2D:D9 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 01983570F776B6848681EA0EA9512B7CF85A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1604 Signing time: Wed 23 Jul 2025 04:00:52 +0000 Manifest this update: Wed 23 Jul 2025 04:00:52 +0000 Manifest next update: Thu 24 Jul 2025 04:00:52 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 4Zct-UA2loSt3irTG6EROEOgPVU.roa (hash: NLd8vf2slw/QIb/HBdVGn4XmU0dDovssu3lZU415Pao=) 3: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 4: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (hash: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=) 5: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 6: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 7: fRZWH_M0OyQ2q7C3l2YZBzviPzY.roa (hash: F07+RgoevJOf1u0ML2Jb2xCzFrPFpbtH07Gxnbmp3Hg=) 8: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: eQRCWTdxm9VNsTN22EihKmVCCb673E12HSJN8vpwz2s=) 10: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 11: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:70:f7:76:b6:84:86:81:ea:0e:a9:51:2b:7c:f8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jul 23 04:00:52 2025 GMT Not After : Jul 24 04:00:52 2025 GMT Subject: CN=8292959506a56d969a7a53922e722855f28f2dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:e5:b5:00:cf:a8:48:33:f3:c8:7e:22:cf: cc:b5:87:c1:6d:a6:b6:ee:12:ea:1d:aa:34:f9:a2: ae:7d:3b:b3:83:0d:83:17:f8:b6:d1:f9:9f:68:ec: fb:50:7c:5b:bb:72:28:ec:70:26:e1:6e:36:23:7b: 83:de:ad:78:06:c1:c7:a3:cf:fb:65:91:7b:c0:28: 88:e9:94:85:6f:4b:3a:c9:6f:c9:0a:8c:89:57:48: 03:cd:1e:35:b0:e0:31:ae:34:5c:52:4b:a5:0f:d0: 14:f5:86:9f:43:bf:3e:86:5d:88:63:41:f9:0a:5b: 17:51:be:98:fd:92:59:46:d9:97:80:b3:70:ef:7a: 8b:c2:c7:85:4e:b4:30:ea:61:e2:e9:66:93:f1:33: 05:00:bf:e1:39:8d:44:bc:30:89:40:53:98:74:27: e5:5b:1e:f7:c5:cc:5e:b6:cd:51:7f:e9:dd:e5:87: 21:40:fe:b4:63:71:c4:01:a4:94:29:36:17:d5:be: ea:b4:8c:81:23:26:1d:57:0e:ce:ae:6b:5d:d7:f1: 9f:55:73:d2:15:99:99:26:95:fe:e6:22:b9:c7:ea: 6f:53:b9:65:48:2d:7c:cb:ab:06:6d:9e:35:78:b5: 1c:ad:9d:8b:51:c4:c4:0a:a6:68:ad:f3:87:7a:67: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:92:95:95:06:A5:6D:96:9A:7A:53:92:2E:72:28:55:F2:8F:2D:D9 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c9:42:22:7a:48:0a:13:99:55:1d:80:c0:c5:48:8f:ea:b7: 9c:08:bb:8d:9f:1f:15:d2:07:2c:4d:0c:d0:f7:16:ce:f4:c7: f1:d7:e4:03:eb:f5:33:94:b1:8a:5c:5e:a8:ff:e0:3e:98:67: 4f:8c:4b:73:0c:6e:79:a0:4b:d0:6e:1d:f2:31:4f:d0:c7:ad: f9:c1:a7:1f:b0:a3:3a:42:e6:80:db:50:d6:af:54:a3:d2:4d: 4d:eb:f5:9e:9e:bf:c6:ab:99:bf:04:c0:54:f2:39:51:15:64: f2:4d:2b:55:d9:a1:c2:69:53:5d:02:10:bd:fe:82:24:cb:b1: 51:40:d4:81:49:91:5a:01:13:6f:27:05:17:70:11:2f:ba:6c: e6:5a:79:57:eb:c8:eb:4e:96:2a:47:2b:32:f9:99:a4:d7:bb: 76:19:7c:a3:f4:19:86:ae:e2:1f:db:9b:b5:60:ff:64:77:68: f2:88:27:40:f7:2b:07:30:a3:79:91:71:72:e5:97:0a:17:a2: 54:6a:7c:a1:6f:b9:00:cc:0f:8d:d9:eb:68:37:86:63:1e:7f: 70:e3:c2:0f:a4:3f:0f:91:16:5f:60:b6:cf:90:86:f8:9e:a3: 8b:9b:90:d3:a2:d9:4f:8a:98:0f:40:1c:6a:12:ac:ad:48:12: 77:e8:d2:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cPd2toSGgeoOqVErfPhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUwNzIzMDQwMDUyWhcNMjUwNzI0MDQwMDUyWjAzMTEwLwYDVQQD Eyg4MjkyOTU5NTA2YTU2ZDk2OWE3YTUzOTIyZTcyMjg1NWYyOGYyZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+bltQDPqEgz88h+Is/MtYfBbaa2 7hLqHao0+aKufTuzgw2DF/i20fmfaOz7UHxbu3Io7HAm4W42I3uD3q14BsHHo8/7 ZZF7wCiI6ZSFb0s6yW/JCoyJV0gDzR41sOAxrjRcUkulD9AU9YafQ78+hl2IY0H5 ClsXUb6Y/ZJZRtmXgLNw73qLwseFTrQw6mHi6WaT8TMFAL/hOY1EvDCJQFOYdCfl Wx73xcxets1Rf+nd5YchQP60Y3HEAaSUKTYX1b7qtIyBIyYdVw7Ormtd1/GfVXPS FZmZJpX+5iK5x+pvU7llSC18y6sGbZ41eLUcrZ2LUcTECqZorfOHemcogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKSlZUGpW2WmnpTki5yKFXyjy3ZMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMlCInpI ChOZVR2AwMVIj+q3nAi7jZ8fFdIHLE0M0PcWzvTH8dfkA+v1M5SxilxeqP/gPphn T4xLcwxueaBL0G4d8jFP0Met+cGnH7CjOkLmgNtQ1q9Uo9JNTev1np6/xquZvwTA VPI5URVk8k0rVdmhwmlTXQIQvf6CJMuxUUDUgUmRWgETbycFF3ARL7ps5lp5V+vI 606WKkcrMvmZpNe7dhl8o/QZhq7iH9ubtWD/ZHdo8ognQPcrBzCjeZFxcuWXChei VGp8oW+5AMwPjdnraDeGYx5/cOPCD6Q/D5EWX2C2z5CG+J6ji5uQ06LZT4qYD0Ac ahKsrUgSd+jSrQ== -----END CERTIFICATE-----Generated at Wed Jul 23 12:59:42 2025 by rpki-client