$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: pvfyZ6/zDPaKJmkZar2D7jdwVFcnVAiOk/8LNedaIIA= Subject key identifier: 56:40:1B:38:65:35:28:3F:82:DB:18:4C:75:BA:36:94:A7:57:6B:44 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019923A0E0FB52910621D225A9D016D8C53C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 13C6 Signing time: Sun 07 Sep 2025 10:02:49 +0000 Manifest this update: Sun 07 Sep 2025 10:02:49 +0000 Manifest next update: Mon 08 Sep 2025 10:02:49 +0000 Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 2: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 3: HLAFzpF1dtaNSAOxEl-uHrb_wcg.roa (hash: PtoSILiXlrGyGsA1CVrSehyontCCBay4De7QPXIkVlI=) 4: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=) 5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: MiwmUwAGJLmv3tIF7yf88XgB3UzySpF+JeEFnu2lyr4=) 6: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 7: NojFSrrS5JKJQebH50O-Sn9xxis.roa (hash: 99amkQAhCwzYf+SSxz6XlFlKrJhhJL3h7GCB1tqsJIA=) 8: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 9: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=) 10: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 11: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 12: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 13: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=) 14: yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa (hash: D7e3OOFi7lIh2fyesD48w9fTpDFZydPZVUW+H+QSZ9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:a0:e0:fb:52:91:06:21:d2:25:a9:d0:16:d8:c5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Sep 7 10:02:49 2025 GMT Not After : Sep 8 10:02:49 2025 GMT Subject: CN=56401b386535283f82db184c75ba3694a7576b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:16:0e:7d:a1:98:69:12:2a:d4:6a:ff:16: 5d:aa:48:a6:89:5c:ed:56:41:12:b0:73:02:62:dc: ad:89:44:d8:9d:7d:b3:28:67:5a:be:d1:52:53:d6: 11:93:b3:f4:4a:81:60:34:dc:50:6d:f6:95:35:69: 44:d6:e7:ac:11:a0:f5:b9:93:5d:12:26:a6:b0:57: d3:32:af:78:6b:b8:67:18:55:cd:f5:a3:0b:b5:2a: b7:fa:f4:a3:02:39:22:6f:95:cf:e9:a6:a2:25:8e: 86:32:10:d1:ca:26:f2:08:79:38:cb:f6:77:c0:6d: 5d:b4:f4:19:86:ff:34:f2:8d:f9:59:f1:ba:dd:93: 9f:c7:27:54:31:cb:5d:2f:ac:1b:39:eb:7e:cb:8f: d2:8e:1e:98:8a:88:36:6d:13:56:d5:2a:f1:53:07: 22:e3:27:23:46:47:81:f1:19:4a:8b:99:28:dd:18: c2:c2:56:88:df:5b:c2:20:84:5e:f5:84:c5:3c:d0: 59:bf:1c:02:6f:9e:04:f1:67:a4:ea:e0:19:3c:fb: c6:4e:cb:25:9c:2d:66:05:5e:79:c4:3c:a3:03:4a: 77:47:23:81:25:2b:61:4c:c4:a9:7e:55:df:fc:17: 06:24:2f:db:87:8c:ed:2b:c0:39:4a:72:18:77:23: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:40:1B:38:65:35:28:3F:82:DB:18:4C:75:BA:36:94:A7:57:6B:44 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:53:37:93:91:37:64:94:5f:da:d9:8f:51:8b:dc:bf:70:c0: 4a:f8:9c:d1:16:2b:e0:5f:25:0a:ef:fe:e5:73:c0:fd:32:31: 06:85:85:d6:98:ec:31:14:5a:24:43:eb:fe:ce:5c:35:7e:ec: b1:03:20:75:cb:36:ae:19:3e:41:ca:b4:f0:07:07:34:9b:9c: 40:7d:96:2d:92:1e:f4:0d:fc:85:3d:24:42:a3:88:a5:a5:b7: 7f:3e:97:df:a6:dd:55:4f:f0:b0:87:6c:fc:05:66:42:fa:d3: 83:27:9c:75:b4:9b:d5:bf:9c:5e:59:90:cc:6f:36:64:ea:d2: b5:d4:ee:db:ed:c4:98:a9:50:64:90:b3:4f:37:53:ef:20:52: 27:be:5d:29:c4:45:77:22:1e:d8:34:d9:ba:a7:de:71:14:38: 2c:68:7f:65:e7:9b:0d:9c:cb:8a:44:a7:f2:37:20:96:a0:ab: b5:2e:fd:ab:b4:d3:9a:6b:7a:dc:3e:03:89:c0:c3:8c:c1:9d: cd:fd:c7:cc:d1:74:32:09:e4:da:db:96:58:e8:28:2f:8e:a1: 19:70:e3:5b:c6:a9:5c:ae:22:5d:3b:2a:bb:aa:83:d5:9a:e1: f3:16:43:dd:b1:a9:07:2c:c8:bf:f3:04:1a:f4:52:2f:bb:6f: 05:b5:d7:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjoOD7UpEGIdIlqdAW2MU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUwOTA3MTAwMjQ5WhcNMjUwOTA4MTAwMjQ5WjAzMTEwLwYDVQQD Eyg1NjQwMWIzODY1MzUyODNmODJkYjE4NGM3NWJhMzY5NGE3NTc2YjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iIWDn2hmGkSKtRq/xZdqkimiVzt VkESsHMCYtytiUTYnX2zKGdavtFSU9YRk7P0SoFgNNxQbfaVNWlE1uesEaD1uZNd EiamsFfTMq94a7hnGFXN9aMLtSq3+vSjAjkib5XP6aaiJY6GMhDRyibyCHk4y/Z3 wG1dtPQZhv808o35WfG63ZOfxydUMctdL6wbOet+y4/Sjh6Yiog2bRNW1SrxUwci 4ycjRkeB8RlKi5ko3RjCwlaI31vCIIRe9YTFPNBZvxwCb54E8Wek6uAZPPvGTssl nC1mBV55xDyjA0p3RyOBJSthTMSpflXf/BcGJC/bh4ztK8A5SnIYdyN6VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZAGzhlNSg/gtsYTHW6NpSnV2tEMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1M3k5E3 ZJRf2tmPUYvcv3DASvic0RYr4F8lCu/+5XPA/TIxBoWF1pjsMRRaJEPr/s5cNX7s sQMgdcs2rhk+Qcq08AcHNJucQH2WLZIe9A38hT0kQqOIpaW3fz6X36bdVU/wsIds /AVmQvrTgyecdbSb1b+cXlmQzG82ZOrStdTu2+3EmKlQZJCzTzdT7yBSJ75dKcRF dyIe2DTZuqfecRQ4LGh/ZeebDZzLikSn8jcglqCrtS79q7TTmmt63D4DicDDjMGd zf3HzNF0Mgnk2tuWWOgoL46hGXDjW8apXK4iXTsqu6qD1Zrh8xZD3bGpByzIv/ME GvRSL7tvBbXXiQ== -----END CERTIFICATE-----Generated at Sun Sep 7 11:25:28 2025 by rpki-client