$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: mTzalqYQZ8OfCk5eN1sfs/k5wRwEpb3w0UMq/f0qQH4= Subject key identifier: F5:C0:1B:E4:1B:F3:AE:FC:E8:EA:E3:0B:C2:BE:6C:60:5F:48:04:D3 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019930116D628F13EBB513C03BBE18CF822D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1695 Signing time: Tue 09 Sep 2025 20:01:12 +0000 Manifest this update: Tue 09 Sep 2025 20:01:12 +0000 Manifest next update: Wed 10 Sep 2025 20:01:12 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 5: K0A1Fvag5wQBZRIEPtaUVvgpD3A.roa (hash: gyUwS3I2bK0n8nOPkM1qVwO/v11ITk+rE5ggoeNpr1Y=) 6: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 7: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 8: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 9: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 10: YStL0HC2iupvMB3K_nzQ1mY2mqA.roa (hash: WukKHdtA8Ogh36RPRpLQPR04BbShXxNlIo1JfOr0Q7A=) 11: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 12: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 13: fMzT-5d-H7wm7UzPX4PbBLndjlo.roa (hash: QHxOUGueDky85wAcdSL/hpvn/Djtg29akovspAUAOhU=) 14: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 15: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: +8rc2oJZQeNRu6eS6Ifvh6zN2qBIqBep0AaH3qrN8dg=) 16: ksrEobalLCBWyKJfEvgKO7eGBn0.roa (hash: mhEeMKvhAtKkfgKwj2K8qvolMSVHSEc7JsD/l79bIzA=) 17: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 18: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 19: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 22: uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa (hash: lh9JEVycjwO2JOZAXH6/OskJCw09FDKHU4kXtolx/mg=) 23: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 24: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 25: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:30:11:6d:62:8f:13:eb:b5:13:c0:3b:be:18:cf:82:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Sep 9 20:01:12 2025 GMT Not After : Sep 10 20:01:12 2025 GMT Subject: CN=f5c01be41bf3aefce8eae30bc2be6c605f4804d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:f5:4f:84:c3:a5:d1:62:76:4c:b2:0b:10: 9e:1f:c7:1d:3a:ad:b1:ec:37:70:b8:0a:cd:a2:da: c8:e8:13:ab:a6:52:d9:6d:fd:c5:17:5f:88:93:e3: 64:52:cd:99:77:2d:b8:00:26:a9:cd:52:e1:27:c6: 82:a9:35:19:36:ca:51:f1:94:cd:29:02:ed:b2:26: ff:34:24:70:43:f8:6c:26:d0:0f:32:e7:9e:6b:ae: cf:ab:99:71:16:78:4d:31:79:e8:b1:d7:db:88:96: 36:f1:05:ef:42:5e:19:01:58:08:c3:05:7a:6e:81: 66:db:4e:54:c2:ba:09:82:1c:d6:1b:f7:d6:20:1f: cd:43:1f:74:e0:18:55:f7:a7:0e:6a:35:b2:90:9c: a4:f0:15:a2:bb:bc:83:70:44:2f:f1:bf:5b:4f:11: cf:49:48:03:d3:6d:04:23:22:ad:de:72:10:39:c3: fe:da:5b:6a:8f:a7:c4:37:5c:5f:9f:ba:3b:28:f5: e7:4f:3b:ee:60:58:16:96:ec:25:dd:b2:c6:e5:d6: 61:d2:07:04:e2:d0:9d:15:72:4f:e6:f9:5f:44:7d: fc:16:1f:57:63:33:7b:f4:a8:4e:4c:3f:3d:61:eb: 41:a1:c3:af:12:25:6b:3f:d2:31:6d:cf:0f:38:44: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C0:1B:E4:1B:F3:AE:FC:E8:EA:E3:0B:C2:BE:6C:60:5F:48:04:D3 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e8:02:87:28:69:ec:ba:40:7d:f7:0c:b0:c9:ad:44:9a:59: 47:fe:b9:fd:72:0f:c7:03:7c:da:e0:d2:1b:5c:df:e5:dc:3c: 6b:da:0b:6f:2d:89:d7:ec:72:32:85:05:67:53:06:a9:f0:c5: 2b:e1:c2:2e:94:a0:b1:0a:9d:26:d7:dd:ba:2d:cc:02:99:3c: 32:de:1d:5e:d3:54:9e:91:18:a1:20:ef:15:16:cd:64:99:33: a5:76:1c:12:c6:84:68:99:20:9b:ce:1d:81:ad:6c:46:d3:8d: ab:ca:d3:51:34:c5:12:3f:0a:be:fd:5c:28:c5:08:74:4c:35: 7d:68:cc:d2:f5:20:1a:a0:dd:59:3b:8e:ee:1f:a0:e5:ae:b4: 59:9c:c4:bd:f3:df:42:06:64:b4:8f:35:32:7b:ca:e8:39:86: 72:43:10:7b:bb:cd:e6:c4:80:b4:69:3e:46:c6:c8:95:75:26: a0:ae:c8:c3:2b:b1:66:c1:5f:25:48:6f:18:39:9a:03:ad:69: 92:6a:5a:02:a1:ae:5a:e6:94:2b:7d:6c:a7:cb:83:97:dc:1f: d7:dc:09:52:c4:d6:94:1f:3e:2d:3c:1b:4e:ad:01:24:25:75: 66:8d:4c:ce:f3:32:e9:5d:42:9f:9a:cf:59:be:8e:f8:46:c6: 74:68:1f:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkwEW1ijxPrtRPAO74Yz4ItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwOTA5MjAwMTEyWhcNMjUwOTEwMjAwMTEyWjAzMTEwLwYDVQQD EyhmNWMwMWJlNDFiZjNhZWZjZThlYWUzMGJjMmJlNmM2MDVmNDgwNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmX1T4TDpdFidkyyCxCeH8cdOq2x 7DdwuArNotrI6BOrplLZbf3FF1+Ik+NkUs2Zdy24ACapzVLhJ8aCqTUZNspR8ZTN KQLtsib/NCRwQ/hsJtAPMueea67Pq5lxFnhNMXnosdfbiJY28QXvQl4ZAVgIwwV6 boFm205UwroJghzWG/fWIB/NQx904BhV96cOajWykJyk8BWiu7yDcEQv8b9bTxHP SUgD020EIyKt3nIQOcP+2ltqj6fEN1xfn7o7KPXnTzvuYFgWluwl3bLG5dZh0gcE 4tCdFXJP5vlfRH38Fh9XYzN79KhOTD89YetBocOvEiVrP9Ixbc8POERsqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXAG+Qb86786OrjC8K+bGBfSATTMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+gChyhp 7LpAffcMsMmtRJpZR/65/XIPxwN82uDSG1zf5dw8a9oLby2J1+xyMoUFZ1MGqfDF K+HCLpSgsQqdJtfdui3MApk8Mt4dXtNUnpEYoSDvFRbNZJkzpXYcEsaEaJkgm84d ga1sRtONq8rTUTTFEj8Kvv1cKMUIdEw1fWjM0vUgGqDdWTuO7h+g5a60WZzEvfPf QgZktI81MnvK6DmGckMQe7vN5sSAtGk+RsbIlXUmoK7IwyuxZsFfJUhvGDmaA61p kmpaAqGuWuaUK31sp8uDl9wf19wJUsTWlB8+LTwbTq0BJCV1Zo1MzvMy6V1Cn5rP Wb6O+EbGdGgfWQ== -----END CERTIFICATE-----Generated at Wed Sep 10 03:44:54 2025 by rpki-client