$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: 0lmhnVqvl8Inc46khjbsCCDiojg8L2VWwXSesX32ZBk= Subject key identifier: E3:67:32:BC:0F:53:25:44:A6:27:CC:D0:4E:1B:A4:34:2A:8D:17:C2 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019A13F225D4F8CC5A761C595570BD76A932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 1457 Signing time: Fri 24 Oct 2025 02:00:27 +0000 Manifest this update: Fri 24 Oct 2025 02:00:27 +0000 Manifest next update: Sat 25 Oct 2025 02:00:27 +0000 Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 2: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 3: H85sOAhghTea9a0fF7V97F8PmPU.roa (hash: 2OxoGkdCVVcRfuQOFsn/tuCAYUwqPM6hV+wTzXUpbKk=) 4: HLAFzpF1dtaNSAOxEl-uHrb_wcg.roa (hash: PtoSILiXlrGyGsA1CVrSehyontCCBay4De7QPXIkVlI=) 5: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=) 6: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: axiuzF+LlusisY0pTvVEHMWjjbcGR2bkGZ6Xf8oQaQk=) 7: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 8: NIsfNrgr61FvPf7cYDhBUlhxHyo.roa (hash: erf8aKvQjphq5ECHQpzvwfDmeIXYw4ufNsUCtqSAry4=) 9: NojFSrrS5JKJQebH50O-Sn9xxis.roa (hash: 99amkQAhCwzYf+SSxz6XlFlKrJhhJL3h7GCB1tqsJIA=) 10: O0dA6ORgAzDqkWmj1R355BHaTrI.roa (hash: 296lT6a3xrMsAitqkt1Jep7cJYB5SeLJP2n68zngwhU=) 11: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 12: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=) 13: bappW0a76vCPpE7es6c1mZAIjsM.roa (hash: cqG7BmBZANbhw2q44YhM+SIY2oACb3Cf8jR7Of0U21w=) 14: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 15: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 16: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 17: yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa (hash: D7e3OOFi7lIh2fyesD48w9fTpDFZydPZVUW+H+QSZ9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:f2:25:d4:f8:cc:5a:76:1c:59:55:70:bd:76:a9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Oct 24 02:00:27 2025 GMT Not After : Oct 25 02:00:27 2025 GMT Subject: CN=e36732bc0f532544a627ccd04e1ba4342a8d17c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:dc:69:e7:6a:a4:51:be:24:ea:c0:9b:2a: 06:ba:98:9f:04:e8:31:07:59:8f:bc:f4:0c:d4:97: 01:5b:b6:39:4d:71:4b:f2:00:b5:eb:ef:41:6d:02: ac:eb:28:11:9e:91:51:2f:65:18:21:aa:95:e4:db: b4:c7:61:ea:2a:45:b5:b0:15:4d:3b:c2:ba:6b:19: 28:c6:8d:1b:92:2a:79:66:af:c4:6a:30:80:d9:09: f2:35:98:7f:d6:d2:f3:3d:50:c0:0f:12:dc:0a:71: 70:3a:94:7d:19:37:8b:ee:fc:a7:ea:87:6b:8b:b3: 32:8e:14:ea:b7:b0:6d:85:5b:ea:a3:a3:8f:0b:5f: 7e:d5:5a:34:1e:9c:81:a4:ca:28:b0:03:4c:68:93: 27:61:50:e0:aa:6a:36:fd:54:26:c7:f5:79:59:5f: ff:82:14:39:23:df:07:f7:c3:4a:86:9f:a5:d1:53: 5e:8a:db:7b:2d:2a:30:49:53:97:91:4e:cc:fa:6a: fa:a6:44:14:07:1f:59:ad:70:53:cc:75:5f:91:34: 15:83:87:53:59:c6:bb:ef:3b:95:be:36:85:2c:0a: c5:98:3b:12:6a:60:23:f1:fc:da:76:cd:b4:a6:fe: 75:cd:4a:77:c8:d5:2e:b8:2c:2c:31:ee:fd:7b:ff: 21:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:67:32:BC:0F:53:25:44:A6:27:CC:D0:4E:1B:A4:34:2A:8D:17:C2 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:80:c6:21:b9:6d:16:9c:12:21:3a:cf:f9:98:d0:73:04:9f: 85:82:c5:95:5a:b6:d5:af:51:bb:90:57:0b:f1:26:a8:d3:be: 8a:9f:ee:4d:df:5e:d7:a1:dc:35:cf:17:88:7d:88:2b:9a:8b: c8:c0:51:4a:19:39:cf:79:ea:9e:0f:53:fd:7b:42:62:74:9f: bc:bf:5f:39:28:d9:f7:f4:b6:47:1d:00:af:6a:ef:aa:cb:d2: cc:3a:ed:81:3d:90:57:97:ca:7b:68:05:90:c1:37:bc:51:b1: 9c:a7:6c:89:05:5c:20:16:d1:6c:8a:7a:f7:8a:76:95:57:fe: 67:89:de:15:41:41:0c:15:9c:ea:49:18:55:d0:3d:bb:76:a9: 76:7e:fc:ce:9d:a0:33:33:d6:09:89:57:cb:59:92:e8:91:d9: 58:06:4b:e4:9c:b6:21:63:d4:f1:f4:85:cb:f0:15:5d:57:40: fb:00:d3:8a:33:c2:b7:15:8d:ad:9e:db:1f:2e:87:f2:32:80: 5c:3f:93:37:47:cc:4b:86:dd:98:61:96:1b:4f:23:2a:b9:31: 05:43:5e:4b:09:8c:cb:e2:e6:d7:33:ff:0b:8a:41:3f:e4:d8: 64:c6:18:a4:04:11:c9:a8:ec:a1:e7:da:28:3d:2a:ee:0d:ae: be:ca:5a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoT8iXU+MxadhxZVXC9dqkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMDI0MDIwMDI3WhcNMjUxMDI1MDIwMDI3WjAzMTEwLwYDVQQD EyhlMzY3MzJiYzBmNTMyNTQ0YTYyN2NjZDA0ZTFiYTQzNDJhOGQxN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIXcaedqpFG+JOrAmyoGupifBOgx B1mPvPQM1JcBW7Y5TXFL8gC16+9BbQKs6ygRnpFRL2UYIaqV5Nu0x2HqKkW1sBVN O8K6axkoxo0bkip5Zq/EajCA2QnyNZh/1tLzPVDADxLcCnFwOpR9GTeL7vyn6odr i7MyjhTqt7BthVvqo6OPC19+1Vo0HpyBpMoosANMaJMnYVDgqmo2/VQmx/V5WV// ghQ5I98H98NKhp+l0VNeitt7LSowSVOXkU7M+mr6pkQUBx9ZrXBTzHVfkTQVg4dT Wca77zuVvjaFLArFmDsSamAj8fzads20pv51zUp3yNUuuCwsMe79e/8h8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONnMrwPUyVEpifM0E4bpDQqjRfCMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4DGIblt FpwSITrP+ZjQcwSfhYLFlVq21a9Ru5BXC/EmqNO+ip/uTd9e16HcNc8XiH2IK5qL yMBRShk5z3nqng9T/XtCYnSfvL9fOSjZ9/S2Rx0Ar2rvqsvSzDrtgT2QV5fKe2gF kME3vFGxnKdsiQVcIBbRbIp694p2lVf+Z4neFUFBDBWc6kkYVdA9u3apdn78zp2g MzPWCYlXy1mS6JHZWAZL5Jy2IWPU8fSFy/AVXVdA+wDTijPCtxWNrZ7bHy6H8jKA XD+TN0fMS4bdmGGWG08jKrkxBUNeSwmMy+Lm1zP/C4pBP+TYZMYYpAQRyajsoefa KD0q7g2uvspaDA== -----END CERTIFICATE-----Generated at Fri Oct 24 09:02:23 2025 by rpki-client