$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: 6QVo5aHnl8gZy+WOK5j6m5UzYlQPekAI7zMTK+S9cVQ= Subject key identifier: 16:D1:90:92:81:DD:E8:26:D1:F2:7B:0A:41:4D:DF:FA:06:1C:33:B4 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019A48CB7113CF64EBA5BC250B7380BAE022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1723 Signing time: Mon 03 Nov 2025 08:18:03 +0000 Manifest this update: Mon 03 Nov 2025 08:18:03 +0000 Manifest next update: Tue 04 Nov 2025 08:18:03 +0000 Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=) 2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=) 3: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=) 4: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=) 5: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=) 6: D-NXxAC8NeHpEpwRfW7yOtZvJ_4.roa (hash: uOBxJRz4MueUQogrYlERneeeJCrcr4YCwkzWVxRxFkQ=) 7: DBeutfdGN6-nsik-J7EKtzdzgug.roa (hash: rSGIe460ofzpwJUY3MOtl5l8cQMj+FOwHoTbjc8T+uk=) 8: I8vapMCNrfWppn81n36Xnnd_dc0.roa (hash: nkV+aB69M6byViVbXc/yY8edvpoQaOOIi8NiZU4LCHg=) 9: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: iKvqfwyekkr9KNdgT7mhHEiaya0mZRXrlvaPwWRX7aY=) 10: OQwatOOKNts1l5QciIRYlIrZrUA.roa (hash: /WVw3A1izDTxQhVDT4B9DMpIDCfh/f6b1AgbmhKnBE4=) 11: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (hash: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=) 12: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=) 13: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=) 14: krMvWrTmClN0QDDCKGHyCwEtM1o.roa (hash: ZbHVn1/9WHrH30Xx8aRofoJKIUy9MeJR0ZfYS2/1ROo=) 15: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 08:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:48:cb:71:13:cf:64:eb:a5:bc:25:0b:73:80:ba:e0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Nov 3 08:18:03 2025 GMT Not After : Nov 4 08:18:03 2025 GMT Subject: CN=16d1909281dde826d1f27b0a414ddffa061c33b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2b:52:05:59:28:b2:b0:c9:93:f9:a4:a1:7c: 81:7a:39:fc:9a:c8:49:93:93:c6:4f:a4:e6:60:33: f0:98:4d:e4:b2:7f:4b:3d:b5:06:73:ad:4d:17:9a: 89:bb:b9:51:d0:1c:a8:80:44:2b:8c:62:34:b4:c0: 67:d5:3e:a2:63:c4:5d:fb:c7:a8:38:ca:4b:ea:8d: 7e:f7:72:ec:8d:a3:81:ae:43:a8:d8:4c:5d:a0:79: 0c:d2:29:a7:2e:af:e3:8b:77:b4:ff:5e:a3:75:11: ca:77:ac:39:2c:3a:f8:3b:f5:e3:28:ad:0b:0d:93: f7:e9:14:a0:74:ed:76:d1:72:9a:f1:1e:64:49:9a: 57:ed:f1:8b:04:a5:e9:74:c4:41:bd:43:e0:8f:5f: 6e:40:f0:45:62:eb:23:74:92:db:3a:5b:35:b4:12: 7f:ba:39:35:63:b2:a4:e0:9f:9e:30:41:36:47:f4: af:3b:d8:52:84:e0:96:f5:ef:2e:83:d8:56:3d:04: 0f:77:3d:48:36:3d:b9:2b:55:6b:9e:a0:fc:83:8e: 63:44:a3:82:98:b9:31:3b:24:52:aa:43:e4:53:7d: 00:e1:57:54:92:94:56:12:3b:5a:1c:f3:ce:29:e7: 56:81:ed:ea:7d:c8:90:98:32:57:2f:cc:fe:27:c6: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D1:90:92:81:DD:E8:26:D1:F2:7B:0A:41:4D:DF:FA:06:1C:33:B4 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:83:bb:e3:24:0a:10:a6:09:d2:4a:e6:8f:53:45:d6:5d:75: 6e:b3:d6:5a:9f:79:68:25:58:0f:ba:56:12:bb:04:b8:2f:a1: f9:56:6c:71:63:c3:81:a6:64:97:51:b3:d3:d8:35:f1:37:77: 10:76:fb:db:e4:48:97:b9:90:44:60:06:62:4b:4a:23:42:f4: 4f:ce:d4:08:1b:f9:73:03:e4:46:e3:c4:c5:79:c3:c4:95:bb: d7:fa:4c:f2:c8:f4:7b:c1:0b:54:d2:41:9f:50:16:e8:37:a7: 91:20:5a:6d:ce:58:b9:e2:40:49:d7:d2:7d:9b:84:c7:1f:48: b9:7d:8d:e5:14:0d:e8:97:15:c0:10:4f:61:43:b2:09:04:96: 3d:a4:16:0d:77:66:b5:1b:7d:d3:5e:fd:d0:6b:c7:f1:73:68: ed:30:39:46:d7:5d:8c:d0:49:d3:cb:08:dd:f5:19:7a:15:12: 6e:9d:cc:a4:ec:e0:8d:c4:4a:05:f7:e5:2a:83:24:04:fb:87: 8b:71:f3:5c:0e:19:3e:d7:45:54:39:f3:ed:f5:9a:26:e9:77: a1:4d:4a:2d:53:d3:19:da:32:4a:e5:7b:94:40:15:c9:64:04: 15:d7:3b:f1:98:25:10:78:88:3f:6a:3a:2d:79:79:25:c1:12: 05:6f:49:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpIy3ETz2TrpbwlC3OAuuAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMTAzMDgxODAzWhcNMjUxMTA0MDgxODAzWjAzMTEwLwYDVQQD EygxNmQxOTA5MjgxZGRlODI2ZDFmMjdiMGE0MTRkZGZmYTA2MWMzM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnStSBVkosrDJk/mkoXyBejn8mshJ k5PGT6TmYDPwmE3ksn9LPbUGc61NF5qJu7lR0ByogEQrjGI0tMBn1T6iY8Rd+8eo OMpL6o1+93LsjaOBrkOo2ExdoHkM0imnLq/ji3e0/16jdRHKd6w5LDr4O/XjKK0L DZP36RSgdO120XKa8R5kSZpX7fGLBKXpdMRBvUPgj19uQPBFYusjdJLbOls1tBJ/ ujk1Y7Kk4J+eMEE2R/SvO9hShOCW9e8ug9hWPQQPdz1INj25K1VrnqD8g45jRKOC mLkxOyRSqkPkU30A4VdUkpRWEjtaHPPOKedWge3qfciQmDJXL8z+J8Yw1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbRkJKB3egm0fJ7CkFN3/oGHDO0MB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYO74yQK EKYJ0krmj1NF1l11brPWWp95aCVYD7pWErsEuC+h+VZscWPDgaZkl1Gz09g18Td3 EHb72+RIl7mQRGAGYktKI0L0T87UCBv5cwPkRuPExXnDxJW71/pM8sj0e8ELVNJB n1AW6DenkSBabc5YueJASdfSfZuExx9IuX2N5RQN6JcVwBBPYUOyCQSWPaQWDXdm tRt901790GvH8XNo7TA5RtddjNBJ08sI3fUZehUSbp3MpOzgjcRKBfflKoMkBPuH i3HzXA4ZPtdFVDnz7fWaJul3oU1KLVPTGdoySuV7lEAVyWQEFdc78ZglEHiIP2o6 LXl5JcESBW9JCg== -----END CERTIFICATE-----Generated at Mon Nov 3 16:14:39 2025 by rpki-client