$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: rGFucOUzhENAR5RHDvtfYu98EYAz02UqKT9mzShhhhY= Subject key identifier: B3:1A:C5:47:8C:82:89:E0:BE:43:9D:B0:1F:AE:F9:DA:95:E0:CE:03 Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 01995F7D3705939EF95BDDF8800954B1E71B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 148A Signing time: Fri 19 Sep 2025 01:01:05 +0000 Manifest this update: Fri 19 Sep 2025 01:01:05 +0000 Manifest next update: Sat 20 Sep 2025 01:01:05 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: 6QNhdyvnPWqUUNVhAle6pKEr9yvs9h8qGa3FAx5lsOU=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 22:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:5f:7d:37:05:93:9e:f9:5b:dd:f8:80:09:54:b1:e7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Sep 19 01:01:05 2025 GMT Not After : Sep 20 01:01:05 2025 GMT Subject: CN=b31ac5478c8289e0be439db01faef9da95e0ce03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:e7:72:e4:0b:6e:b3:cf:65:f6:0a:a5:07: 89:14:3b:5c:c3:9b:40:03:8f:1e:ec:bd:b6:c6:c9: bd:80:5b:f1:e6:33:7b:63:9d:2b:ff:17:62:68:68: f2:cf:0e:54:89:ce:ff:dc:ba:d1:c1:92:a8:ad:25: cb:68:0c:a7:d8:ec:d7:53:69:17:7d:34:7b:fd:7f: d2:67:2c:63:65:95:8f:b5:80:1e:8c:d2:15:db:a9: 65:f2:e1:3c:12:16:dc:7f:ba:a8:00:ab:95:c6:de: 83:09:e5:e5:07:74:06:df:6e:53:bf:70:b4:d6:84: 27:6d:92:7d:6b:71:7c:9e:91:64:37:fe:0e:d8:16: c8:e7:62:9b:03:75:85:c9:b7:9e:a9:bd:9c:95:23: f7:3b:9e:5c:20:58:8f:05:b0:c5:9f:e9:e5:ac:39: 48:56:79:56:37:64:8f:ef:28:e6:5c:15:04:a5:f9: 30:57:bb:2b:64:62:cb:d5:a0:63:46:be:0a:f2:3a: 01:4e:19:16:50:b4:38:f7:9d:11:7b:c9:34:e2:df: 82:54:89:72:ee:cf:a1:db:08:a3:b2:ba:27:9c:7a: 68:52:a2:f3:05:03:40:5f:36:6a:7d:a0:03:63:db: 96:d3:e0:65:62:eb:34:90:6d:d2:2b:17:ec:8d:ce: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1A:C5:47:8C:82:89:E0:BE:43:9D:B0:1F:AE:F9:DA:95:E0:CE:03 X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:75:df:da:f5:28:8e:4e:62:c2:4a:d4:9a:0e:d7:a5:f4:9b: 88:0a:b3:6e:83:3a:ad:64:7e:3c:5b:4c:f7:7e:9c:92:1c:f6: 08:9d:ee:88:fd:82:86:97:f3:75:54:0a:55:35:30:7e:bf:f1: ab:45:ec:ad:c2:82:a8:9f:9a:62:c3:c8:01:1f:2d:01:b0:ae: 17:db:98:53:04:09:2c:5a:a9:d6:b6:e7:c8:cd:d5:6e:cb:ab: b6:89:19:fc:47:45:35:ed:eb:17:9a:ab:d8:97:2e:71:71:8d: 43:ab:6b:cd:3e:f6:ee:87:c3:4c:fc:71:9a:b6:db:b8:4d:75: ab:dd:db:de:a6:6d:79:8c:82:fb:c7:98:33:d4:8d:17:55:1d: 47:7a:27:13:7e:05:00:b6:c8:f3:25:2d:6d:9b:69:bb:11:18: 8d:49:f5:af:4e:38:6c:19:04:be:9e:6a:81:58:a3:46:91:df: 09:2c:5a:85:c1:ca:56:09:cb:33:1d:d3:65:38:d1:d0:45:a5: 74:55:39:55:5b:65:3d:77:48:d1:fb:33:df:77:f0:ef:34:b5: a2:75:91:bf:09:13:d0:f9:fe:a8:10:88:96:59:a9:84:ef:3b: 66:32:d9:49:f9:c9:57:3d:9b:64:72:18:e3:f2:d6:b2:d4:d5: e5:d2:06:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlffTcFk575W934gAlUsecbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUwOTE5MDEwMTA1WhcNMjUwOTIwMDEwMTA1WjAzMTEwLwYDVQQD EyhiMzFhYzU0NzhjODI4OWUwYmU0MzlkYjAxZmFlZjlkYTk1ZTBjZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt93ncuQLbrPPZfYKpQeJFDtcw5tA A48e7L22xsm9gFvx5jN7Y50r/xdiaGjyzw5Uic7/3LrRwZKorSXLaAyn2OzXU2kX fTR7/X/SZyxjZZWPtYAejNIV26ll8uE8Ehbcf7qoAKuVxt6DCeXlB3QG325Tv3C0 1oQnbZJ9a3F8npFkN/4O2BbI52KbA3WFybeeqb2clSP3O55cIFiPBbDFn+nlrDlI VnlWN2SP7yjmXBUEpfkwV7srZGLL1aBjRr4K8joBThkWULQ4950Re8k04t+CVIly 7s+h2wijsronnHpoUqLzBQNAXzZqfaADY9uW0+BlYus0kG3SKxfsjc67cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMaxUeMgongvkOdsB+u+dqV4M4DMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3Xf2vUo jk5iwkrUmg7XpfSbiAqzboM6rWR+PFtM936ckhz2CJ3uiP2ChpfzdVQKVTUwfr/x q0XsrcKCqJ+aYsPIAR8tAbCuF9uYUwQJLFqp1rbnyM3VbsurtokZ/EdFNe3rF5qr 2JcucXGNQ6trzT727ofDTPxxmrbbuE11q93b3qZteYyC+8eYM9SNF1UdR3onE34F ALbI8yUtbZtpuxEYjUn1r044bBkEvp5qgVijRpHfCSxahcHKVgnLMx3TZTjR0EWl dFU5VVtlPXdI0fsz33fw7zS1onWRvwkT0Pn+qBCIllmphO87ZjLZSfnJVz2bZHIY 4/LWstTV5dIGAA== -----END CERTIFICATE-----Generated at Fri Sep 19 03:32:45 2025 by rpki-client