$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: szCjfzOGc+atDVdWN4o3xXIAhWM5h3TohniMy53piiY= Subject key identifier: 70:D0:71:D8:B7:A0:5E:23:0E:65:4C:2A:5D:07:AE:C1:FC:10:3B:DB Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 0198485321EDD7A037DF8E9193106ADD7BB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 160F Signing time: Sat 26 Jul 2025 20:01:04 +0000 Manifest this update: Sat 26 Jul 2025 20:01:04 +0000 Manifest next update: Sun 27 Jul 2025 20:01:04 +0000 Files and hashes: 1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=) 2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=) 3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=) 4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=) 5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=) 6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=) 7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: HsM3FKUzneYVU185l55ZqyFfs8P7Qiw9EEv/RitoJj4=) 8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=) 9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=) 10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=) 11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:53:21:ed:d7:a0:37:df:8e:91:93:10:6a:dd:7b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jul 26 20:01:04 2025 GMT Not After : Jul 27 20:01:04 2025 GMT Subject: CN=70d071d8b7a05e230e654c2a5d07aec1fc103bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:91:37:02:45:82:56:d2:2a:c8:cc:06:50: 92:0a:23:8e:d5:1d:0d:ec:00:14:3e:4c:32:fa:77: 4f:be:cd:1d:27:cc:1c:12:05:2f:6f:a8:df:49:37: 07:ff:1d:bf:a9:8f:90:6d:f0:e1:61:af:25:b5:d7: f4:c9:70:c1:be:10:16:b8:49:34:44:83:25:97:a4: e6:08:15:24:f7:99:54:30:ed:e0:d7:70:11:12:d1: a7:18:02:43:6f:1d:94:30:82:83:c7:e1:47:86:c3: 24:80:43:2a:f9:c4:ba:01:9d:ee:89:be:15:06:3c: 94:71:86:4b:21:e2:3f:f2:3b:45:70:11:78:7b:eb: 96:36:30:94:5e:fa:ff:65:f4:b4:c0:06:d3:96:8b: aa:33:78:9e:ad:9b:e2:f0:f5:6c:45:92:fe:65:38: 1e:c5:36:df:e6:50:23:95:9a:cb:1f:99:0e:4d:43: 45:45:f1:84:36:5f:99:84:12:10:36:16:bc:4a:da: 10:ed:36:78:25:1e:e9:65:c8:d7:be:3f:9f:7b:40: cf:a5:ce:f4:76:11:ae:35:61:63:3d:0c:da:84:a4: a7:ed:db:b1:5d:c8:92:0c:83:80:32:80:7b:ac:09: c8:46:6b:57:74:63:86:cf:72:06:3e:2b:96:08:b6: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D0:71:D8:B7:A0:5E:23:0E:65:4C:2A:5D:07:AE:C1:FC:10:3B:DB X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:20:91:98:36:cc:79:0a:62:95:b6:26:e2:40:1f:49:4c:2d: a6:a1:ba:7f:00:d5:78:48:3b:0f:a2:8e:95:84:8f:e7:7e:07: c6:c7:5a:a8:1f:9e:b7:8d:00:0d:1a:56:8a:b9:e3:d6:06:ab: 96:c3:bb:e6:a4:5b:03:78:0c:11:e3:87:8b:28:1e:7e:d0:21: 04:cb:af:73:ee:bf:63:5f:95:d1:61:df:05:ba:0d:97:d7:db: 8a:ae:fc:ab:1e:a0:c5:56:1f:b4:e6:e6:a9:6d:41:32:02:87: 3a:d2:9d:c6:d3:88:84:8b:12:2b:95:e0:2f:cf:ed:9c:54:e2: 72:e8:05:5b:06:16:68:a0:e9:d4:34:f1:5d:2d:16:ea:f5:97: 48:79:db:06:c3:b2:8f:9a:a6:00:4c:72:22:ea:db:36:f8:76: 1b:02:88:0c:a8:e8:30:1c:3d:33:09:54:31:99:dc:f0:32:9d: 96:80:59:7d:e1:26:84:4a:b1:a5:db:3c:b1:2c:7e:fd:67:30: fa:9e:ef:27:80:15:ba:d7:af:5a:58:b3:de:eb:71:61:f2:7f: 3f:9f:19:38:e0:b8:e1:c9:db:e6:0f:b3:6d:ad:a6:9f:a5:73: ba:05:c6:a7:23:56:72:aa:64:72:b2:83:7e:90:df:0d:b9:54: 19:6e:e0:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIUyHt16A3346RkxBq3Xu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjUwNzI2MjAwMTA0WhcNMjUwNzI3MjAwMTA0WjAzMTEwLwYDVQQD Eyg3MGQwNzFkOGI3YTA1ZTIzMGU2NTRjMmE1ZDA3YWVjMWZjMTAzYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9CRNwJFglbSKsjMBlCSCiOO1R0N 7AAUPkwy+ndPvs0dJ8wcEgUvb6jfSTcH/x2/qY+QbfDhYa8ltdf0yXDBvhAWuEk0 RIMll6TmCBUk95lUMO3g13AREtGnGAJDbx2UMIKDx+FHhsMkgEMq+cS6AZ3uib4V BjyUcYZLIeI/8jtFcBF4e+uWNjCUXvr/ZfS0wAbTlouqM3ierZvi8PVsRZL+ZTge xTbf5lAjlZrLH5kOTUNFRfGENl+ZhBIQNha8StoQ7TZ4JR7pZcjXvj+fe0DPpc70 dhGuNWFjPQzahKSn7duxXciSDIOAMoB7rAnIRmtXdGOGz3IGPiuWCLY0YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDQcdi3oF4jDmVMKl0HrsH8EDvbMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSCRmDbM eQpilbYm4kAfSUwtpqG6fwDVeEg7D6KOlYSP534HxsdaqB+et40ADRpWirnj1gar lsO75qRbA3gMEeOHiygeftAhBMuvc+6/Y1+V0WHfBboNl9fbiq78qx6gxVYftObm qW1BMgKHOtKdxtOIhIsSK5XgL8/tnFTicugFWwYWaKDp1DTxXS0W6vWXSHnbBsOy j5qmAExyIurbNvh2GwKIDKjoMBw9MwlUMZnc8DKdloBZfeEmhEqxpds8sSx+/Wcw +p7vJ4AVutevWliz3utxYfJ/P58ZOOC44cnb5g+zba2mn6VzugXGpyNWcqpkcrKD fpDfDblUGW7gGg== -----END CERTIFICATE-----Generated at Sun Jul 27 05:22:21 2025 by rpki-client