$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: 7WCu24kvqVhD0XVLC0Od/9uO7qkf/XyZxAQhzcnBibY= Subject key identifier: 53:78:53:23:FF:CD:ED:B6:C4:D1:D6:61:D8:FD:A5:97:77:00:61:91 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 01991EAFBE366BFE71CA91A5A3E50E8A737B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1664 Signing time: Sat 06 Sep 2025 11:00:57 +0000 Manifest this update: Sat 06 Sep 2025 11:00:57 +0000 Manifest next update: Sun 07 Sep 2025 11:00:57 +0000 Files and hashes: 1: 1UU6MCTnDEDobHzSg4UMqiaaRjc.roa (hash: CB73txk5aBRpEFRR6hDmWxMjlF9JGNg97hQM2Aq5Bgw=) 2: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 3: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 4: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: NFpImjT1ZmBk0YPdl8r9ty1DiTHrc+tBcbK/worEczU=) 5: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 6: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:af:be:36:6b:fe:71:ca:91:a5:a3:e5:0e:8a:73:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Sep 6 11:00:57 2025 GMT Not After : Sep 7 11:00:57 2025 GMT Subject: CN=53785323ffcdedb6c4d1d661d8fda59777006191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:38:5b:38:b6:09:33:72:6c:05:87:7c:4d: f2:4d:cb:fc:9d:6e:0c:83:bb:b1:ad:48:7f:ea:0c: 2a:1d:d7:fa:b4:4c:85:99:cc:d4:a0:16:a6:ed:b2: fa:3d:dc:e6:67:f1:6a:51:1b:05:c8:3d:4c:6d:d0: 96:16:86:91:2e:fa:3d:f9:91:1d:8b:2a:e6:76:22: f7:66:00:1f:26:61:b3:7b:22:4d:6b:4b:5c:44:a6: 74:d6:f3:66:7d:82:0b:bb:ae:35:2d:00:48:6f:85: cb:a0:b2:db:4a:db:09:41:46:ac:40:a1:0a:e0:44: e1:72:09:10:6c:28:8a:e2:c7:56:de:ea:d2:5f:cd: 20:60:e6:0c:95:48:62:45:fe:d8:c7:44:24:3b:3e: df:8e:c7:25:0c:6c:7e:13:09:3e:5d:73:3a:44:30: dd:41:a8:4a:93:25:6a:61:81:6c:9e:b8:4a:11:71: 7e:5f:be:15:fd:5c:46:0b:0e:28:6c:07:1a:8c:43: 26:e2:0a:4f:50:63:f3:76:b1:49:d2:d8:6b:02:af: b6:fe:87:06:a0:9e:f6:29:c4:48:61:cc:69:c5:35: 6e:d0:95:95:ff:45:3b:bc:79:c7:0b:b5:4a:41:ba: 15:7b:44:ea:f5:ea:4d:3a:7f:ba:d1:6a:0d:f1:8d: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:53:23:FF:CD:ED:B6:C4:D1:D6:61:D8:FD:A5:97:77:00:61:91 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b5:3d:26:a3:86:ff:8a:d7:68:81:71:65:5c:f2:92:a0:af: 71:b2:62:af:66:c1:08:4e:98:af:f5:7e:ab:cc:96:23:c4:5a: 70:c8:ec:c8:0b:5a:f1:e4:f4:8d:24:42:0b:5f:79:6d:a6:63: e8:4f:48:f8:dc:8e:20:f7:17:29:be:ec:45:80:d5:ca:b1:43: c5:31:c2:e5:09:c4:42:c7:a5:70:41:df:e2:dd:8a:58:90:dc: 3a:bd:68:72:75:13:96:29:8c:e9:73:32:1a:27:b8:18:c3:95: ad:af:0a:dd:e1:c0:46:ad:2d:fe:69:e6:01:a5:e4:50:69:ed: 2d:c5:61:d3:66:6e:9e:81:0c:85:ef:d5:ef:34:12:c3:bc:cf: 41:68:71:0b:8f:23:05:f6:b4:dd:4b:00:c8:f3:a9:66:c2:54: ad:ad:74:69:38:1c:f8:10:db:e6:5d:4d:2f:3c:b4:9b:d4:88: 80:d1:5d:53:af:67:f7:61:e2:63:93:f6:af:e3:07:da:cc:1b: 74:3b:07:8c:66:6d:86:2f:48:a6:1b:2a:f9:39:9c:c5:ce:73: 5c:11:c4:ad:ab:94:63:7d:c6:1d:63:d4:fc:c9:80:23:b4:4d: f4:8d:2c:cb:bf:0f:15:d0:42:8d:aa:ca:f4:2b:38:6f:6b:10: 75:8a:57:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZker742a/5xypGlo+UOinN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwOTA2MTEwMDU3WhcNMjUwOTA3MTEwMDU3WjAzMTEwLwYDVQQD Eyg1Mzc4NTMyM2ZmY2RlZGI2YzRkMWQ2NjFkOGZkYTU5Nzc3MDA2MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiec4Wzi2CTNybAWHfE3yTcv8nW4M g7uxrUh/6gwqHdf6tEyFmczUoBam7bL6PdzmZ/FqURsFyD1MbdCWFoaRLvo9+ZEd iyrmdiL3ZgAfJmGzeyJNa0tcRKZ01vNmfYILu641LQBIb4XLoLLbStsJQUasQKEK 4EThcgkQbCiK4sdW3urSX80gYOYMlUhiRf7Yx0QkOz7fjsclDGx+Ewk+XXM6RDDd QahKkyVqYYFsnrhKEXF+X74V/VxGCw4obAcajEMm4gpPUGPzdrFJ0thrAq+2/ocG oJ72KcRIYcxpxTVu0JWV/0U7vHnHC7VKQboVe0Tq9epNOn+60WoN8Y3KFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFN4UyP/ze22xNHWYdj9pZd3AGGRMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbU9JqOG /4rXaIFxZVzykqCvcbJir2bBCE6Yr/V+q8yWI8RacMjsyAta8eT0jSRCC195baZj 6E9I+NyOIPcXKb7sRYDVyrFDxTHC5QnEQselcEHf4t2KWJDcOr1ocnUTlimM6XMy Gie4GMOVra8K3eHARq0t/mnmAaXkUGntLcVh02ZunoEMhe/V7zQSw7zPQWhxC48j Bfa03UsAyPOpZsJUra10aTgc+BDb5l1NLzy0m9SIgNFdU69n92HiY5P2r+MH2swb dDsHjGZthi9Iphsq+Tmcxc5zXBHErauUY33GHWPU/MmAI7RN9I0sy78PFdBCjarK 9Cs4b2sQdYpXBQ== -----END CERTIFICATE-----Generated at Sat Sep 6 14:35:19 2025 by rpki-client