$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: sPMpSEVATaRc/zXYv89Hf/+b7psV6jtlgJFHdbElRNg= Subject key identifier: 8E:BE:C9:15:CA:6F:A1:E7:63:74:B1:C6:ED:35:99:5C:CB:5A:B2:B6 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019A09A57B630682674960EDBC6BCA5A5DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 16DE Signing time: Wed 22 Oct 2025 02:00:31 +0000 Manifest this update: Wed 22 Oct 2025 02:00:31 +0000 Manifest next update: Thu 23 Oct 2025 02:00:31 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: woT1zP0yxGKJ4qf+dGejddsmsjsGHpypdEO47b+z2es=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa (hash: Hy1jxMcmkJjc7Rfw6ZAzEMKDTAjkCP2ewVbsibxOPr4=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 19:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:09:a5:7b:63:06:82:67:49:60:ed:bc:6b:ca:5a:5d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Oct 22 02:00:31 2025 GMT Not After : Oct 23 02:00:31 2025 GMT Subject: CN=8ebec915ca6fa1e76374b1c6ed35995ccb5ab2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:57:64:d2:93:c2:16:54:c8:96:3e:3c:a8: b5:87:95:6b:38:54:e2:41:22:53:da:12:1e:fd:43: 6a:a2:e6:c5:58:07:d3:67:72:ed:8e:10:07:6f:86: 77:78:7a:4a:8e:b1:25:5c:10:84:54:ab:46:a1:1a: ed:cb:35:74:3f:8b:2d:af:04:6c:a3:24:91:0f:1e: ec:b5:51:06:39:be:b5:f5:af:ea:1e:5b:c0:6c:23: 62:19:4c:86:eb:23:29:a2:d1:cd:13:e5:e8:c7:c1: a4:e0:6b:b7:be:48:37:7d:5e:4a:f3:85:a5:7b:b3: 8c:df:b6:ca:76:9a:b0:3c:7f:62:2a:b7:92:d3:3e: 1d:af:5e:10:25:90:2e:e0:5f:32:4a:ef:8e:b8:d5: 3e:84:bd:1e:a6:f9:43:1e:31:5b:b1:75:b6:b0:6e: a2:da:91:bf:57:0c:26:b1:a4:52:ae:2a:61:7d:72: b6:a8:0c:a7:c2:9e:fa:31:e1:7e:1d:30:ac:9e:ec: 2e:13:6e:ba:f6:42:b2:ca:4c:b7:79:20:f3:f3:ae: c0:59:84:99:fb:0e:a2:26:24:4b:7f:ea:11:56:cf: 9b:d5:8d:a9:82:97:ed:65:7e:e8:b6:cd:d4:9b:01: 89:13:40:e9:a5:80:d0:48:32:f4:df:09:d8:6a:99: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:C9:15:CA:6F:A1:E7:63:74:B1:C6:ED:35:99:5C:CB:5A:B2:B6 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9d:7e:a8:6c:0f:55:ef:ec:d9:46:b9:bb:d6:a5:4a:76:00: 6f:73:25:4e:05:0b:df:d7:c3:8e:80:45:da:3f:3a:67:a4:c2: 2b:6f:5b:7d:2c:4d:53:66:98:5a:bb:3b:43:6c:66:95:7b:f4: 0f:fe:69:3d:de:c8:b6:74:f2:f8:62:08:fb:9f:20:d4:5f:2c: cd:b9:5f:e7:f5:fc:97:2e:8d:c9:02:5c:92:7d:0c:81:e0:d0: 1c:e4:ac:22:0a:66:ab:75:5e:e9:4d:d1:72:be:5d:a2:26:1f: 11:6e:bf:02:29:53:c8:bf:3f:44:63:a4:1f:a5:3c:64:1e:eb: 28:5b:be:12:b1:3e:df:26:b6:c2:82:77:72:cd:7b:ff:c0:1e: 87:05:ec:81:a5:ed:20:1f:bc:a5:2b:1f:ff:d9:fd:ff:9e:9e: 9f:b0:da:81:43:1b:47:38:db:93:16:a9:9d:b5:79:e0:58:6c: f2:55:5e:28:60:4f:80:ec:e8:69:30:8e:94:fa:64:8c:0f:e2: 0f:fe:25:56:56:75:47:d5:9d:24:51:a5:65:e8:b8:b6:1d:8d: 87:88:18:6b:c2:c2:9b:cb:76:0f:13:e3:26:5d:f7:18:28:4c: 00:a6:44:3c:69:f7:aa:d7:4e:3c:d1:a6:81:90:9f:62:5f:19: 47:cf:5f:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoJpXtjBoJnSWDtvGvKWl3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUxMDIyMDIwMDMxWhcNMjUxMDIzMDIwMDMxWjAzMTEwLwYDVQQD Eyg4ZWJlYzkxNWNhNmZhMWU3NjM3NGIxYzZlZDM1OTk1Y2NiNWFiMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZXZNKTwhZUyJY+PKi1h5VrOFTi QSJT2hIe/UNqoubFWAfTZ3LtjhAHb4Z3eHpKjrElXBCEVKtGoRrtyzV0P4strwRs oySRDx7stVEGOb619a/qHlvAbCNiGUyG6yMpotHNE+Xox8Gk4Gu3vkg3fV5K84Wl e7OM37bKdpqwPH9iKreS0z4dr14QJZAu4F8ySu+OuNU+hL0epvlDHjFbsXW2sG6i 2pG/VwwmsaRSriphfXK2qAynwp76MeF+HTCsnuwuE2669kKyyky3eSDz867AWYSZ +w6iJiRLf+oRVs+b1Y2pgpftZX7ots3UmwGJE0DppYDQSDL03wnYapnZUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6+yRXKb6HnY3Sxxu01mVzLWrK2MB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ1+qGwP Ve/s2Ua5u9alSnYAb3MlTgUL39fDjoBF2j86Z6TCK29bfSxNU2aYWrs7Q2xmlXv0 D/5pPd7ItnTy+GII+58g1F8szblf5/X8ly6NyQJckn0MgeDQHOSsIgpmq3Ve6U3R cr5doiYfEW6/AilTyL8/RGOkH6U8ZB7rKFu+ErE+3ya2woJ3cs17/8AehwXsgaXt IB+8pSsf/9n9/56en7DagUMbRzjbkxapnbV54Fhs8lVeKGBPgOzoaTCOlPpkjA/i D/4lVlZ1R9WdJFGlZei4th2Nh4gYa8LCm8t2DxPjJl33GChMAKZEPGn3qtdOPNGm gZCfYl8ZR89fJQ== -----END CERTIFICATE-----Generated at Wed Oct 22 04:39:47 2025 by rpki-client