$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: ulwXBepzHU8Io0GWIuKX3cQxnzTRM0HExulGhHUzJa0= Subject key identifier: FD:FD:C4:3F:FB:AF:BC:5D:CD:E5:44:2E:5F:93:4B:7D:32:7E:54:64 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 0199180A3BB5DDC788EC18C547512767082F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1694 Signing time: Fri 05 Sep 2025 04:02:27 +0000 Manifest this update: Fri 05 Sep 2025 04:02:27 +0000 Manifest next update: Sat 06 Sep 2025 04:02:27 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 7: R0-mbrlkQj2Gy6Nt6WDL988hyv8.roa (hash: TNdehcbateMNki61iSUqlN2sgtl/UwdBnEcO8z3cSF0=) 8: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 9: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 10: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 11: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 12: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 13: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 14: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: h90jQumnunmAo6AjP/ZGR1RfTa5ODmB+7IKRg3+J6OE=) 15: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 16: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 17: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 18: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) 19: zzxDA_jaGZ-licmX7_8AfzWVEg4.roa (hash: yQZb/wWXMNaCLJYPnwrZFiYxI3PMack8phKpUQ0e+Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:18:0a:3b:b5:dd:c7:88:ec:18:c5:47:51:27:67:08:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Sep 5 04:02:27 2025 GMT Not After : Sep 6 04:02:27 2025 GMT Subject: CN=fdfdc43ffbafbc5dcde5442e5f934b7d327e5464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:75:6d:cd:09:55:89:1c:e2:f4:9b:34:1c: db:64:ab:34:a1:1e:a9:f6:22:87:bb:3d:78:af:5d: f6:eb:32:1f:13:5e:56:1e:4c:de:4c:c1:be:0b:a1: 3a:ec:53:cc:da:4f:17:c8:1f:0f:ac:c5:94:7a:5d: fe:b4:d8:64:a9:7b:bd:39:b6:80:0e:9c:2c:a7:73: 7a:c8:e6:bc:f9:63:23:82:81:ea:4f:4f:f7:51:3b: da:80:6c:cf:b7:1d:6a:26:49:b8:b3:c6:15:31:bd: 90:61:88:66:0c:36:1d:03:52:7c:d4:15:51:aa:91: 8f:0b:02:89:38:05:48:e9:61:26:c2:fc:46:30:c4: 6f:1e:d1:74:c2:52:91:f9:b1:5c:4d:ed:98:1b:3b: d4:b9:3d:9a:6d:e2:f9:be:ac:e8:f1:ff:77:38:4c: f4:d5:be:82:65:71:a9:85:45:ef:75:ff:70:b2:fa: 74:a7:70:33:e6:a5:ea:fa:db:04:94:13:51:ed:c4: 37:d3:47:b4:c4:b7:cd:ff:26:57:15:ba:ca:5c:8f: db:cc:7f:d9:1d:c6:4c:b1:cb:31:c4:27:fb:16:4d: 43:40:b5:1e:a6:20:2b:a3:d2:8f:16:5a:65:1d:dd: 72:cc:28:83:b5:61:bb:cc:2b:ae:a7:90:81:74:a1: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FD:C4:3F:FB:AF:BC:5D:CD:E5:44:2E:5F:93:4B:7D:32:7E:54:64 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7a:40:ea:43:22:f5:b7:94:0e:26:d6:0f:42:25:5a:71:77: 78:94:4e:1d:0f:20:7f:34:ef:a5:72:ef:8f:51:d0:22:46:c0: 5a:fa:1b:60:4b:6c:b5:50:c7:c8:e0:e3:63:8f:84:87:05:be: 5d:fa:e9:c4:b4:9f:ec:53:ad:46:e2:f4:28:7b:cb:a1:59:08: 3c:16:22:06:e1:68:59:a3:fa:4f:e3:64:37:14:fe:e8:85:6e: 27:43:d8:87:8b:bc:a4:19:08:9a:c4:73:eb:62:2a:29:91:85: 11:9d:57:4a:74:2a:02:30:3b:14:45:23:81:15:47:04:56:66: 35:08:6e:f4:90:46:c7:85:0c:68:96:4b:a5:67:bd:ce:34:fd: f2:4d:c9:fd:93:89:d2:e6:b5:af:6d:c6:f1:49:4c:aa:0f:3d: b3:0b:7a:e6:fe:52:52:00:0a:8c:9d:25:34:50:50:dc:86:d0: 2c:f0:c1:fd:4f:71:f7:1c:b1:45:e1:18:04:fe:ab:f7:85:b6: 79:78:2e:18:f4:a5:ad:48:7e:f8:d5:25:cb:9c:4f:25:22:c6: 26:c2:b9:31:b7:15:38:94:87:ed:da:24:3e:29:a8:65:ba:80: b9:45:a1:87:9e:43:7c:de:19:6f:4e:c0:31:cc:d9:a8:a0:d7: 50:8b:5d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkYCju13ceI7BjFR1EnZwgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUwOTA1MDQwMjI3WhcNMjUwOTA2MDQwMjI3WjAzMTEwLwYDVQQD EyhmZGZkYzQzZmZiYWZiYzVkY2RlNTQ0MmU1ZjkzNGI3ZDMyN2U1NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYN1bc0JVYkc4vSbNBzbZKs0oR6p 9iKHuz14r1326zIfE15WHkzeTMG+C6E67FPM2k8XyB8PrMWUel3+tNhkqXu9ObaA Dpwsp3N6yOa8+WMjgoHqT0/3UTvagGzPtx1qJkm4s8YVMb2QYYhmDDYdA1J81BVR qpGPCwKJOAVI6WEmwvxGMMRvHtF0wlKR+bFcTe2YGzvUuT2abeL5vqzo8f93OEz0 1b6CZXGphUXvdf9wsvp0p3Az5qXq+tsElBNR7cQ300e0xLfN/yZXFbrKXI/bzH/Z HcZMscsxxCf7Fk1DQLUepiAro9KPFlplHd1yzCiDtWG7zCuup5CBdKF3/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP39xD/7r7xdzeVELl+TS30yflRkMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXpA6kMi 9beUDibWD0IlWnF3eJROHQ8gfzTvpXLvj1HQIkbAWvobYEtstVDHyODjY4+EhwW+ XfrpxLSf7FOtRuL0KHvLoVkIPBYiBuFoWaP6T+NkNxT+6IVuJ0PYh4u8pBkImsRz 62IqKZGFEZ1XSnQqAjA7FEUjgRVHBFZmNQhu9JBGx4UMaJZLpWe9zjT98k3J/ZOJ 0ua1r23G8UlMqg89swt65v5SUgAKjJ0lNFBQ3IbQLPDB/U9x9xyxReEYBP6r94W2 eXguGPSlrUh++NUly5xPJSLGJsK5MbcVOJSH7dokPimoZbqAuUWhh55DfN4Zb07A MczZqKDXUItdsw== -----END CERTIFICATE-----Generated at Fri Sep 5 10:44:20 2025 by rpki-client