$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: kzXYdDP4C7d+SVTDxNyQ28csRQG0iNYbZMHImQYttBs= Subject key identifier: B3:B3:21:B8:C6:3F:08:E1:D9:8F:5F:AA:73:9F:75:70:29:37:4A:E8 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 01984966E6B90E31959298B47CDFFBEA1F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 029E Signing time: Sun 27 Jul 2025 01:02:17 +0000 Manifest this update: Sun 27 Jul 2025 01:02:17 +0000 Manifest next update: Mon 28 Jul 2025 01:02:17 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 4: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 5: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 11: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (hash: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (hash: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: MW963YDeotTTd294DAJhihBeAJ0qbi9O5Y+QS7v1QZc=) 20: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 21: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:66:e6:b9:0e:31:95:92:98:b4:7c:df:fb:ea:1f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jul 27 01:02:17 2025 GMT Not After : Jul 28 01:02:17 2025 GMT Subject: CN=b3b321b8c63f08e1d98f5faa739f757029374ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:19:4c:b5:c5:19:1d:19:4e:d3:63:0c:d2: 67:a3:f0:0d:3f:1b:dc:ba:1d:e5:f2:06:ad:9f:1b: 9b:43:90:a0:66:56:d3:40:15:e5:20:59:e1:6d:9d: df:f5:3d:02:ae:0a:c2:d7:89:37:67:80:be:df:c6: e0:bc:d3:d7:7b:f1:d6:cc:07:f8:f6:ed:51:9c:71: aa:52:77:6d:97:9e:2d:11:3f:93:ce:cc:86:81:34: 84:98:dd:72:9f:9a:70:e3:11:16:80:63:5b:7d:7a: 7d:6d:60:76:2f:c4:50:db:67:05:7e:10:6c:ac:d4: 62:d3:64:e7:b6:40:dd:c8:78:58:ff:4d:2e:da:59: d6:60:6c:f8:99:36:36:4e:47:db:03:92:56:63:66: 39:bb:b9:01:0c:1e:ce:9b:36:dd:1c:8b:a0:4f:1f: 09:b8:c8:37:3c:c6:ae:d0:73:6f:c2:ab:e8:a3:00: 88:e3:84:13:bd:a3:87:72:08:e1:b5:81:ae:1a:04: e7:62:41:f8:c9:e2:4e:3b:c2:a3:25:ad:cd:fb:62: bd:ae:6a:69:af:9d:2e:b7:b1:c5:70:32:50:37:48: 5e:7f:de:07:f6:1d:c7:c3:dc:c3:c6:db:e4:89:66: 5e:f6:63:58:cc:83:ea:d3:0c:bb:ab:51:49:6e:15: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B3:21:B8:C6:3F:08:E1:D9:8F:5F:AA:73:9F:75:70:29:37:4A:E8 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:37:88:8c:69:7e:d9:88:3c:72:ee:83:6b:61:64:27:49:03: 13:4c:7d:ff:c6:1b:66:14:15:0a:18:b1:f5:7b:9b:b4:8a:d2: 1a:92:86:95:7f:22:43:66:a0:48:bc:99:e1:e5:9c:da:96:ab: 6c:3e:6d:74:41:4b:4e:58:11:34:12:c2:41:53:fa:7e:49:c2: 1d:1c:29:2f:6d:15:69:7e:b8:52:e4:a5:4c:63:ec:f1:d5:36: 84:71:d4:34:bc:fe:0f:7a:49:fc:4e:1b:19:e3:a2:a0:c3:fc: a5:68:46:54:d4:da:f4:81:e7:0a:3a:19:f5:7b:a9:40:48:c9: 5d:c2:cf:d1:94:18:c9:68:2f:c0:5e:91:04:55:4a:0d:4c:39: d7:b0:4e:65:0d:a8:5d:f1:ed:b8:9e:e9:01:08:c9:e7:1a:58: 0c:61:7d:cf:50:82:07:84:96:41:79:47:6e:24:41:91:f2:a8: 9a:a3:22:af:a0:f4:f8:24:f8:bf:2d:a6:15:d6:87:76:61:60: 1e:1d:33:35:b4:e6:1e:ec:b3:e4:07:61:0f:c9:43:2b:d2:fe: c2:63:97:5a:e2:d8:6c:c9:00:6b:40:00:41:bf:9a:02:4c:ed: b7:02:09:0b:e2:e9:41:36:21:a2:90:02:a7:98:39:f8:63:52: 9f:45:15:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJZua5DjGVkpi0fN/76h9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwNzI3MDEwMjE3WhcNMjUwNzI4MDEwMjE3WjAzMTEwLwYDVQQD EyhiM2IzMjFiOGM2M2YwOGUxZDk4ZjVmYWE3MzlmNzU3MDI5Mzc0YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23AZTLXFGR0ZTtNjDNJno/ANPxvc uh3l8gatnxubQ5CgZlbTQBXlIFnhbZ3f9T0CrgrC14k3Z4C+38bgvNPXe/HWzAf4 9u1RnHGqUndtl54tET+TzsyGgTSEmN1yn5pw4xEWgGNbfXp9bWB2L8RQ22cFfhBs rNRi02TntkDdyHhY/00u2lnWYGz4mTY2TkfbA5JWY2Y5u7kBDB7OmzbdHIugTx8J uMg3PMau0HNvwqvoowCI44QTvaOHcgjhtYGuGgTnYkH4yeJOO8KjJa3N+2K9rmpp r50ut7HFcDJQN0hef94H9h3Hw9zDxtvkiWZe9mNYzIPq0wy7q1FJbhVbLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOzIbjGPwjh2Y9fqnOfdXApN0roMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzeIjGl+ 2Yg8cu6Da2FkJ0kDE0x9/8YbZhQVChix9XubtIrSGpKGlX8iQ2agSLyZ4eWc2par bD5tdEFLTlgRNBLCQVP6fknCHRwpL20VaX64UuSlTGPs8dU2hHHUNLz+D3pJ/E4b GeOioMP8pWhGVNTa9IHnCjoZ9XupQEjJXcLP0ZQYyWgvwF6RBFVKDUw517BOZQ2o XfHtuJ7pAQjJ5xpYDGF9z1CCB4SWQXlHbiRBkfKomqMir6D0+CT4vy2mFdaHdmFg Hh0zNbTmHuyz5AdhD8lDK9L+wmOXWuLYbMkAa0AAQb+aAkzttwIJC+LpQTYhopAC p5g5+GNSn0UV+Q== -----END CERTIFICATE-----Generated at Sun Jul 27 08:35:35 2025 by rpki-client