$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: SCM81AAnMtEDlTCh1WE1uaizNHrgRo1kIutaiPWd3Rw= Subject key identifier: 96:7B:9E:ED:B0:EF:27:E3:6B:CA:46:09:DB:AD:DF:A6:15:5F:CA:0E Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019826D99EE450A29329741C13AD7AB5F8B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1617 Signing time: Sun 20 Jul 2025 08:00:52 +0000 Manifest this update: Sun 20 Jul 2025 08:00:52 +0000 Manifest next update: Mon 21 Jul 2025 08:00:52 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: K38hiAFbaYjOEYyRFTbUch8B7wY.roa (hash: 31zMtO1y1o6k5IZqjvDfJAnA0Cm9rKJm+VuP2mPceec=) 7: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 8: R0-mbrlkQj2Gy6Nt6WDL988hyv8.roa (hash: TNdehcbateMNki61iSUqlN2sgtl/UwdBnEcO8z3cSF0=) 9: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 10: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 11: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 12: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 13: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 14: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: VYMrW4mLIWRmS+7vzHrb1iIImD8ExsL2YjIqnZKmJL0=) 16: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 17: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 18: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 19: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:d9:9e:e4:50:a2:93:29:74:1c:13:ad:7a:b5:f8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jul 20 08:00:52 2025 GMT Not After : Jul 21 08:00:52 2025 GMT Subject: CN=967b9eedb0ef27e36bca4609dbaddfa6155fca0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:db:2b:71:b1:4f:00:4a:4b:d2:48:56:66:7b: bc:c5:1b:63:96:40:0e:84:ae:b2:fd:cd:f6:4b:35: 7b:1c:1d:76:e1:d9:e9:1f:60:b3:bd:e3:98:07:b3: 99:62:72:ef:b9:59:77:61:16:3a:a6:81:a7:04:d0: 0f:5d:00:2f:02:43:7b:30:91:f0:1c:12:87:ae:a9: 8e:c6:69:56:bf:c7:ba:77:23:34:26:8c:a7:d6:f0: ac:a9:f9:0d:22:00:a5:16:18:63:6d:63:92:41:4d: 43:9e:45:0d:49:73:9e:34:b5:76:4e:dc:2c:38:05: e8:ef:4d:43:f8:89:3d:d6:e0:6a:c6:6f:c1:8c:c9: 9c:ff:92:ee:20:05:56:31:da:2a:19:6f:20:0c:43: 05:41:61:14:af:f5:32:7b:10:34:86:d8:22:3b:88: 75:4f:ec:45:aa:aa:22:9c:19:45:d4:1a:3c:31:dc: fb:d7:6d:8c:b0:fd:6a:13:d0:9c:51:ad:e6:5b:5a: 46:ae:32:ac:4e:cb:1b:97:59:1d:d9:8c:e9:ff:78: 4c:ea:46:53:49:8a:48:e8:74:87:6a:30:2e:2a:5d: 9a:aa:91:e4:5c:e2:24:61:7b:1a:81:34:cb:21:e4: 3f:0d:17:68:2b:dc:9d:95:b5:c1:40:f3:16:80:99: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7B:9E:ED:B0:EF:27:E3:6B:CA:46:09:DB:AD:DF:A6:15:5F:CA:0E X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:36:d3:ed:8e:cc:db:6f:b6:60:b7:d3:c6:96:7b:14:c2:a1: 39:8e:20:70:64:13:c0:72:c7:e2:c9:60:ed:da:96:d6:82:9e: 52:1a:85:f6:03:10:24:a1:8a:a9:ee:8b:60:f6:4e:66:91:c4: e4:8b:c0:13:20:74:62:90:f0:e5:ab:20:47:18:9a:54:ce:88: b8:1b:96:26:f7:55:9d:ec:8a:8c:89:16:31:a0:b1:a1:76:e2: 35:79:9d:47:4a:5b:7a:68:2c:0c:71:0f:f0:6d:09:f5:29:cd: 6b:3d:55:3b:39:9e:cb:f4:6b:e8:9d:21:a5:b6:16:e4:73:45: 34:e3:02:98:26:7c:33:06:c1:cc:77:53:39:fe:63:f0:06:65: 0c:22:a8:32:b8:6f:29:44:f1:4f:99:29:84:a4:85:41:64:a4: ab:c2:9b:59:98:13:c4:96:c2:d1:9d:cf:45:ef:be:c8:40:e7: 56:e8:a7:f5:37:e5:27:25:79:42:72:38:76:da:8a:d1:ec:76: 74:f3:b4:64:c6:db:df:3f:00:76:53:68:21:89:32:a3:23:fc: 35:50:85:28:ba:44:32:dc:87:dd:13:43:01:e9:2f:db:24:f7: 54:31:a7:c2:b7:d4:ee:21:96:82:d3:8e:45:68:7e:22:5b:b6: 03:94:b1:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgm2Z7kUKKTKXQcE616tfi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUwNzIwMDgwMDUyWhcNMjUwNzIxMDgwMDUyWjAzMTEwLwYDVQQD Eyg5NjdiOWVlZGIwZWYyN2UzNmJjYTQ2MDlkYmFkZGZhNjE1NWZjYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09srcbFPAEpL0khWZnu8xRtjlkAO hK6y/c32SzV7HB124dnpH2CzveOYB7OZYnLvuVl3YRY6poGnBNAPXQAvAkN7MJHw HBKHrqmOxmlWv8e6dyM0Joyn1vCsqfkNIgClFhhjbWOSQU1DnkUNSXOeNLV2Ttws OAXo701D+Ik91uBqxm/BjMmc/5LuIAVWMdoqGW8gDEMFQWEUr/UyexA0htgiO4h1 T+xFqqoinBlF1Bo8Mdz7122MsP1qE9CcUa3mW1pGrjKsTssbl1kd2Yzp/3hM6kZT SYpI6HSHajAuKl2aqpHkXOIkYXsagTTLIeQ/DRdoK9ydlbXBQPMWgJnscwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZ7nu2w7yfja8pGCdut36YVX8oOMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDbT7Y7M 22+2YLfTxpZ7FMKhOY4gcGQTwHLH4slg7dqW1oKeUhqF9gMQJKGKqe6LYPZOZpHE 5IvAEyB0YpDw5asgRxiaVM6IuBuWJvdVneyKjIkWMaCxoXbiNXmdR0pbemgsDHEP 8G0J9SnNaz1VOzmey/Rr6J0hpbYW5HNFNOMCmCZ8MwbBzHdTOf5j8AZlDCKoMrhv KUTxT5kphKSFQWSkq8KbWZgTxJbC0Z3PRe++yEDnVuin9TflJyV5QnI4dtqK0ex2 dPO0ZMbb3z8AdlNoIYkyoyP8NVCFKLpEMtyH3RNDAekv2yT3VDGnwrfU7iGWgtOO RWh+Ilu2A5Sxkw== -----END CERTIFICATE-----Generated at Sun Jul 20 14:19:14 2025 by rpki-client