$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: e+YzuvxhtSjW43x8CVj841QPXwY42ojVHckO3K4DM4k= Subject key identifier: 48:6C:2F:A1:04:B4:E5:33:26:E1:6E:8B:BC:1A:48:39:5A:99:36:06 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 01982710E9AEFF1CA7AE793EF24B21EDB316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 1341 Signing time: Sun 20 Jul 2025 09:01:16 +0000 Manifest this update: Sun 20 Jul 2025 09:01:16 +0000 Manifest next update: Mon 21 Jul 2025 09:01:16 +0000 Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 2: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 3: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=) 4: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: jYoTVuT0QbCmdGQzpK5SxtPp6i1pXZ/Kut3nYPFxCQU=) 5: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 6: NojFSrrS5JKJQebH50O-Sn9xxis.roa (hash: 99amkQAhCwzYf+SSxz6XlFlKrJhhJL3h7GCB1tqsJIA=) 7: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 8: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=) 9: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 10: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 11: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 12: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=) 13: yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa (hash: D7e3OOFi7lIh2fyesD48w9fTpDFZydPZVUW+H+QSZ9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:10:e9:ae:ff:1c:a7:ae:79:3e:f2:4b:21:ed:b3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jul 20 09:01:16 2025 GMT Not After : Jul 21 09:01:16 2025 GMT Subject: CN=486c2fa104b4e53326e16e8bbc1a48395a993606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:90:a4:2f:fe:90:ce:d9:2f:fc:6a:f1:de: aa:be:c0:c2:48:bb:9b:c7:13:76:21:bb:c4:96:af: d9:18:57:69:07:66:ec:5e:91:94:e0:fa:c3:10:7a: fa:3d:b9:c4:47:db:f6:d3:86:6d:d7:2c:e9:f8:71: ce:f3:01:65:b4:53:84:5f:81:3e:f2:86:59:ce:40: 55:55:33:11:8b:19:77:74:20:72:45:1b:ee:61:eb: d5:d9:e6:c7:af:9d:d0:fa:05:f1:5a:ab:d6:7b:5d: dd:1e:23:a1:f9:9b:3b:58:86:e1:f4:5c:32:57:61: 00:f0:0f:ed:9a:bb:51:aa:35:40:03:4f:cc:04:8c: 6a:15:41:f7:ff:87:6b:e8:84:ff:1c:57:e5:2f:ff: 5a:5b:38:c6:cd:5b:e7:ac:78:fe:9c:4d:5f:8d:8d: 57:a0:26:02:4d:ce:f6:3f:ac:6b:d3:f4:a4:c2:61: e3:50:82:4e:85:45:df:e8:a0:7c:c5:95:25:e6:38: 17:f6:7f:75:03:48:b9:c6:7b:99:21:2e:6f:3f:a9: 6e:dc:83:45:92:01:a6:53:f2:63:4a:52:5c:34:0f: 4b:f7:6f:9b:bf:6c:d7:c7:ef:bf:61:37:f9:9b:46: 8b:01:19:52:0f:ba:f1:9e:33:de:3b:92:e3:3c:57: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6C:2F:A1:04:B4:E5:33:26:E1:6E:8B:BC:1A:48:39:5A:99:36:06 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6a:e1:99:87:f2:3b:89:54:c2:f9:dc:f3:dd:5e:42:c5:3a: 5b:b1:a4:71:89:cc:c1:8d:0b:16:d3:d2:ca:a2:e7:b8:a0:df: b9:b5:27:5f:b3:e2:fb:17:e5:03:31:9c:09:dd:97:ea:5d:97: 76:c5:d9:8b:2f:1e:dc:df:3d:2e:ce:10:64:0e:88:3d:98:54: d4:57:83:8b:d9:25:c9:44:30:24:b1:8e:75:0c:21:c1:30:c0: c3:e9:8b:39:0a:92:a2:83:d5:72:67:e7:b9:32:0f:9d:7e:d6: bc:71:0f:78:17:b6:70:d4:c1:2c:89:a3:58:01:7b:f8:22:b0: ea:9d:bd:f9:f4:d0:69:8e:c6:85:73:f6:54:d5:49:a5:58:b7: c4:39:41:8f:6d:cd:36:82:95:61:09:b2:37:10:f2:d4:1e:13: cd:78:68:83:a2:0e:e4:6b:03:22:0f:ec:3d:6d:26:26:cf:8f: 33:a5:dd:ab:cb:b8:dd:68:4d:e3:80:fb:c5:00:a4:6f:4a:04: aa:9a:14:ca:aa:1e:2c:d6:76:95:df:48:a3:ec:45:a7:ef:46: bf:96:8b:d3:ba:f4:20:d6:0c:2a:e8:cc:66:2b:6a:5b:a8:8e: eb:ba:cd:23:45:27:2d:22:05:46:3b:3c:27:ef:b1:62:51:60: 19:29:7f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnEOmu/xynrnk+8ksh7bMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUwNzIwMDkwMTE2WhcNMjUwNzIxMDkwMTE2WjAzMTEwLwYDVQQD Eyg0ODZjMmZhMTA0YjRlNTMzMjZlMTZlOGJiYzFhNDgzOTVhOTkzNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t2QpC/+kM7ZL/xq8d6qvsDCSLub xxN2IbvElq/ZGFdpB2bsXpGU4PrDEHr6PbnER9v204Zt1yzp+HHO8wFltFOEX4E+ 8oZZzkBVVTMRixl3dCByRRvuYevV2ebHr53Q+gXxWqvWe13dHiOh+Zs7WIbh9Fwy V2EA8A/tmrtRqjVAA0/MBIxqFUH3/4dr6IT/HFflL/9aWzjGzVvnrHj+nE1fjY1X oCYCTc72P6xr0/SkwmHjUIJOhUXf6KB8xZUl5jgX9n91A0i5xnuZIS5vP6lu3INF kgGmU/JjSlJcNA9L92+bv2zXx++/YTf5m0aLARlSD7rxnjPeO5LjPFf0PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhsL6EEtOUzJuFui7waSDlamTYGMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmrhmYfy O4lUwvnc891eQsU6W7GkcYnMwY0LFtPSyqLnuKDfubUnX7Pi+xflAzGcCd2X6l2X dsXZiy8e3N89Ls4QZA6IPZhU1FeDi9klyUQwJLGOdQwhwTDAw+mLOQqSooPVcmfn uTIPnX7WvHEPeBe2cNTBLImjWAF7+CKw6p29+fTQaY7GhXP2VNVJpVi3xDlBj23N NoKVYQmyNxDy1B4TzXhog6IO5GsDIg/sPW0mJs+PM6Xdq8u43WhN44D7xQCkb0oE qpoUyqoeLNZ2ld9Io+xFp+9Gv5aL07r0INYMKujMZitqW6iO67rNI0UnLSIFRjs8 J++xYlFgGSl/Rg== -----END CERTIFICATE-----Generated at Sun Jul 20 14:49:55 2025 by rpki-client