$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: Ph9QBQO3SuUI+mlppSIw9iX9LROaY4pY4fUqgs1+1XY= Subject key identifier: 70:0C:27:18:98:A5:E5:28:AB:5A:53:87:62:52:15:7D:5F:EC:6B:97 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019960C6EBEEDBC42628B5BF0F53768AEB39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 16A6 Signing time: Fri 19 Sep 2025 07:01:13 +0000 Manifest this update: Fri 19 Sep 2025 07:01:13 +0000 Manifest next update: Sat 20 Sep 2025 07:01:13 +0000 Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=) 2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=) 3: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=) 4: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=) 5: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=) 6: H_966Wk1FTC3jkTyzqV8yNg_ZNA.roa (hash: TnyQK3WU+PBRd+vEsMdM10aU8d+vzRsAvTM7gsLxMXo=) 7: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: NNl90qM2oH+hQc01iUpgczRtc4CuwEwd7yBjywao+p0=) 8: PCRZo7y9tu3CQFwmbfoQbR3eUHc.roa (hash: TAX2ekhpscWHlQTg3ikzSFgXMMFTiQv22GQIE+8xRLA=) 9: XwLFpRj0dZU0LB-jqIeBRVr3WiQ.roa (hash: Hh68YUysT9TlK/wnW8P9Ud671FM4CJjbFuG795wPTz4=) 10: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (hash: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=) 11: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=) 12: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=) 13: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=) 14: ur75_utePzQFHMJnHtwdIqrcVvE.roa (hash: KyHjYmZU1vSOh/Fl9iCE7ipsY2BzRFcyEiJ6qYetbaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:60:c6:eb:ee:db:c4:26:28:b5:bf:0f:53:76:8a:eb:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Sep 19 07:01:13 2025 GMT Not After : Sep 20 07:01:13 2025 GMT Subject: CN=700c271898a5e528ab5a53876252157d5fec6b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:41:e6:fd:3a:a4:b4:67:15:82:12:e0:77: b1:95:07:62:08:4a:d0:f6:7d:a9:4c:4c:f6:78:b5: 69:76:ef:9d:b5:2d:f7:d4:26:a1:82:e2:76:2d:36: e8:11:72:1f:fe:83:bc:aa:21:9f:d0:5a:95:61:fb: 28:bf:68:1e:a5:0a:c2:f0:5d:7d:d8:19:a3:b4:23: 8d:57:81:3a:30:f2:b8:3e:99:80:e2:e2:89:aa:cf: da:61:9d:34:62:d5:93:e8:2e:ff:2b:bf:3c:fb:82: cb:94:a0:bf:38:36:0c:6b:46:3d:58:93:4c:6e:35: fc:07:0d:9c:bf:d3:60:e0:0f:9d:b8:ca:5d:95:04: 2f:e8:ff:73:b5:fa:f5:ac:fd:b8:92:3a:57:67:03: fb:a6:29:08:40:ff:a0:18:cf:20:39:66:64:81:2c: 86:a8:c4:ea:84:1c:29:54:d5:7d:ac:c7:6e:00:44: 5d:a4:11:98:87:2b:3d:3e:4d:b3:03:bc:1c:6a:c4: c2:c3:76:3e:bc:96:e9:a1:25:7e:67:53:61:45:6c: 85:fc:ba:2b:7d:1d:fa:7f:1f:53:6a:61:ad:d7:01: ad:18:a3:e2:b9:e3:e5:ab:a4:18:ad:bc:1b:18:9e: 52:a0:6c:25:6f:81:f7:41:aa:ac:17:bc:52:ff:bd: 0b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0C:27:18:98:A5:E5:28:AB:5A:53:87:62:52:15:7D:5F:EC:6B:97 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:36:2b:26:fe:0a:00:45:4f:41:48:1f:69:77:b3:17:84:fe: fd:8f:a4:08:77:68:c2:6d:63:1d:b3:e4:06:ac:b2:9d:fd:6a: 8a:e6:7a:b2:a7:66:99:68:97:0c:56:23:49:08:79:9e:46:39: d0:80:20:53:b7:5a:5e:8a:23:b3:9d:95:05:b4:0b:eb:39:4f: 05:10:a1:c8:ed:d5:33:fa:13:9d:d6:97:71:77:f1:cc:35:5e: f9:a0:42:f3:6e:ae:ca:47:6b:5a:81:1d:fd:01:6f:68:60:4c: 78:ed:5d:62:ce:46:64:b1:14:dd:a4:32:d8:a0:66:a2:ce:74: 2c:b7:64:95:6c:f7:e2:75:e1:26:97:c1:6d:ff:0b:fb:7e:c2: 52:c1:71:8e:c5:ca:63:fc:15:16:d8:2a:5a:7c:20:c8:d7:0d: e4:0f:90:6e:79:f8:17:94:4e:6d:60:0f:ba:5e:6c:ab:fe:f8: e4:52:15:b8:10:3b:23:87:3d:1d:99:76:7d:9b:21:d2:1c:63: 0f:a2:36:c9:bc:3d:03:e2:02:74:ec:6c:11:82:dc:89:7a:9c: 27:66:02:a6:f6:ef:1a:74:63:bd:b0:41:e8:f2:3c:6c:61:6b: 23:f5:e2:54:0f:95:79:04:f0:34:c3:ca:ff:29:65:e1:ac:c2: c3:9d:0a:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlgxuvu28QmKLW/D1N2ius5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUwOTE5MDcwMTEzWhcNMjUwOTIwMDcwMTEzWjAzMTEwLwYDVQQD Eyg3MDBjMjcxODk4YTVlNTI4YWI1YTUzODc2MjUyMTU3ZDVmZWM2Yjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO9B5v06pLRnFYIS4HexlQdiCErQ 9n2pTEz2eLVpdu+dtS331CahguJ2LTboEXIf/oO8qiGf0FqVYfsov2gepQrC8F19 2BmjtCONV4E6MPK4PpmA4uKJqs/aYZ00YtWT6C7/K788+4LLlKC/ODYMa0Y9WJNM bjX8Bw2cv9Ng4A+duMpdlQQv6P9ztfr1rP24kjpXZwP7pikIQP+gGM8gOWZkgSyG qMTqhBwpVNV9rMduAERdpBGYhys9Pk2zA7wcasTCw3Y+vJbpoSV+Z1NhRWyF/Lor fR36fx9TamGt1wGtGKPiuePlq6QYrbwbGJ5SoGwlb4H3QaqsF7xS/70LTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAMJxiYpeUoq1pTh2JSFX1f7GuXMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTYrJv4K AEVPQUgfaXezF4T+/Y+kCHdowm1jHbPkBqyynf1qiuZ6sqdmmWiXDFYjSQh5nkY5 0IAgU7daXoojs52VBbQL6zlPBRChyO3VM/oTndaXcXfxzDVe+aBC826uykdrWoEd /QFvaGBMeO1dYs5GZLEU3aQy2KBmos50LLdklWz34nXhJpfBbf8L+37CUsFxjsXK Y/wVFtgqWnwgyNcN5A+Qbnn4F5RObWAPul5sq/745FIVuBA7I4c9HZl2fZsh0hxj D6I2ybw9A+ICdOxsEYLciXqcJ2YCpvbvGnRjvbBB6PI8bGFrI/XiVA+VeQTwNMPK /yll4azCw50KoQ== -----END CERTIFICATE-----Generated at Fri Sep 19 12:09:15 2025 by rpki-client