$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: zm6DhRzsf9ygw7ptJO9bC/hSRvey0G4E3fjiUg4u7MA= Subject key identifier: 2D:1C:8A:EF:D0:02:03:B0:57:1D:85:37:B8:8F:C0:4A:30:87:BE:18 Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 01984B555090919260988D4BE8F43CAFA2BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 13FB Signing time: Sun 27 Jul 2025 10:02:19 +0000 Manifest this update: Sun 27 Jul 2025 10:02:19 +0000 Manifest next update: Mon 28 Jul 2025 10:02:19 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: qalfUBZ16VYtjrygfk6EXCnCL5bpHB8iWf1j0ZJhFTo=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 09:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4b:55:50:90:91:92:60:98:8d:4b:e8:f4:3c:af:a2:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Jul 27 10:02:19 2025 GMT Not After : Jul 28 10:02:19 2025 GMT Subject: CN=2d1c8aefd00203b0571d8537b88fc04a3087be18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:c3:8e:a6:51:58:4f:6b:72:c1:a7:70:ae: 56:13:bc:a5:0e:be:eb:6a:44:a2:3d:9d:ec:86:14: 05:49:66:83:6f:7d:65:c3:17:e7:da:a2:08:f4:03: 6c:8f:e6:dd:c8:1c:53:54:98:d9:ac:2a:06:40:f4: b7:87:24:0a:67:76:2a:e8:c5:00:da:61:e8:5e:59: ff:a1:3b:aa:96:c6:9c:66:60:27:f4:d2:76:ac:a3: e8:2c:79:9a:03:24:06:4c:19:0f:fb:a7:1f:f8:2f: ab:f2:de:40:ec:0d:36:33:2f:84:da:f1:ea:17:f8: 78:57:64:0c:6d:25:71:af:d0:0e:9c:22:11:30:b5: 14:fe:93:ec:82:58:06:38:6e:2d:85:f3:e3:18:a1: d8:23:a7:3a:6d:9f:00:9b:35:f9:fe:1c:04:9b:99: 03:f9:74:df:5c:a9:8f:2c:63:40:50:10:17:a5:c5: e8:55:4c:39:82:ac:3e:f0:ff:0f:db:33:88:31:5a: bb:64:80:37:26:a9:b0:f5:f8:37:a0:31:0e:03:d5: 70:88:20:05:7d:d0:a2:1e:b0:0b:95:7a:81:17:e2: 7e:11:6e:4e:c5:16:14:24:58:09:87:23:21:c5:94: a3:ba:81:64:bc:b3:3c:19:8b:41:d2:55:3f:0e:a6: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:8A:EF:D0:02:03:B0:57:1D:85:37:B8:8F:C0:4A:30:87:BE:18 X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:25:81:91:74:46:79:bf:fa:2b:5b:3a:80:57:0b:7b:33:aa: 41:c6:7a:f5:cb:f6:51:92:a1:d4:72:97:d8:35:4d:46:4e:4e: ae:96:d2:73:86:76:bd:68:3f:cf:8b:cc:ed:39:80:a9:83:05: 30:db:38:12:4c:40:d9:28:e9:74:d6:76:0e:65:f7:07:54:25: 3f:da:9d:14:a9:92:22:f8:04:ef:e3:ad:e3:41:d8:a2:c1:15: d6:d4:79:b5:41:3e:d4:fc:db:ac:3b:41:14:a8:ba:ec:73:f4: dc:76:80:7c:90:00:0b:c5:2f:9b:a9:87:84:9d:62:df:54:a4: a7:ce:90:42:67:ac:8e:3a:4e:3d:08:54:64:47:98:f0:be:fd: 16:eb:13:b5:93:c9:e4:bc:32:e3:25:ca:2c:10:b2:16:d3:b7: 28:8c:03:1c:c3:34:0a:cc:47:12:1c:31:13:95:04:5c:07:cd: 2a:7f:92:b7:63:9a:64:a6:ef:61:a9:de:87:0a:dc:66:11:a4: 4e:79:46:e0:99:b2:f8:db:df:08:f0:40:2b:aa:f4:3b:e1:e5: ec:06:5c:cd:be:7f:a6:4c:db:a9:00:8b:71:5b:70:02:6c:6a: d0:13:f5:45:51:ed:34:1b:89:d6:e8:05:1e:ca:26:54:63:b8: ed:7b:71:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhLVVCQkZJgmI1L6PQ8r6K/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUwNzI3MTAwMjE5WhcNMjUwNzI4MTAwMjE5WjAzMTEwLwYDVQQD EygyZDFjOGFlZmQwMDIwM2IwNTcxZDg1MzdiODhmYzA0YTMwODdiZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVrDjqZRWE9rcsGncK5WE7ylDr7r akSiPZ3shhQFSWaDb31lwxfn2qII9ANsj+bdyBxTVJjZrCoGQPS3hyQKZ3Yq6MUA 2mHoXln/oTuqlsacZmAn9NJ2rKPoLHmaAyQGTBkP+6cf+C+r8t5A7A02My+E2vHq F/h4V2QMbSVxr9AOnCIRMLUU/pPsglgGOG4thfPjGKHYI6c6bZ8AmzX5/hwEm5kD +XTfXKmPLGNAUBAXpcXoVUw5gqw+8P8P2zOIMVq7ZIA3Jqmw9fg3oDEOA9VwiCAF fdCiHrALlXqBF+J+EW5OxRYUJFgJhyMhxZSjuoFkvLM8GYtB0lU/Dqbu+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0ciu/QAgOwVx2FN7iPwEowh74YMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyWBkXRG eb/6K1s6gFcLezOqQcZ69cv2UZKh1HKX2DVNRk5OrpbSc4Z2vWg/z4vM7TmAqYMF MNs4EkxA2SjpdNZ2DmX3B1QlP9qdFKmSIvgE7+Ot40HYosEV1tR5tUE+1PzbrDtB FKi67HP03HaAfJAAC8Uvm6mHhJ1i31Skp86QQmesjjpOPQhUZEeY8L79FusTtZPJ 5Lwy4yXKLBCyFtO3KIwDHMM0CsxHEhwxE5UEXAfNKn+St2OaZKbvYanehwrcZhGk TnlG4Jmy+NvfCPBAK6r0O+Hl7AZczb5/pkzbqQCLcVtwAmxq0BP1RVHtNBuJ1ugF HsomVGO47Xtx+g== -----END CERTIFICATE-----Generated at Sun Jul 27 17:35:52 2025 by rpki-client