$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: twpOxxj+kOfCaKTfcqvXmzsIHtmYf2rLQg1+XnjFpR8= Subject key identifier: AA:82:E3:73:D8:BF:63:B7:C2:99:E4:DF:32:4F:8D:E0:54:CB:9B:D8 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019A00DA07EADB2C576CD0FA00EEBC26FF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1710 Signing time: Mon 20 Oct 2025 09:01:20 +0000 Manifest this update: Mon 20 Oct 2025 09:01:20 +0000 Manifest next update: Tue 21 Oct 2025 09:01:20 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 7: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 8: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 9: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 10: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 11: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 12: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 13: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: 45Lbw59vqGvLU5SkCw3aDEad/qKAnztE0Beega9xd5w=) 14: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 15: t9cMUxvikbT-puwHblOe9z97QHQ.roa (hash: r/s40Ua5KoUJDVObSaE57ggRULCLKWYn/PjeYW7Wd/k=) 16: w3xxqTiLQnAH3cHQYhrUZxFMWqg.roa (hash: M5jABXYfv3dOr183BC0+Qkk5fkM0jwggytr5ejlAXco=) 17: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 18: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 19: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:da:07:ea:db:2c:57:6c:d0:fa:00:ee:bc:26:ff:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Oct 20 09:01:20 2025 GMT Not After : Oct 21 09:01:20 2025 GMT Subject: CN=aa82e373d8bf63b7c299e4df324f8de054cb9bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:5b:8b:b5:3a:1b:2d:bc:c9:31:a5:81:db: d8:b5:83:06:a1:8e:43:0c:ed:fe:0f:7c:a5:d9:c5: c9:40:18:2c:e3:55:93:d4:69:5a:c8:32:93:1d:13: cd:c9:b7:06:e7:e4:6c:70:23:e0:a9:e6:47:3c:d8: 06:d8:9d:54:e8:fd:4e:23:7a:db:7c:28:46:7e:8a: 9f:98:cc:8a:0e:89:05:b6:64:3f:20:62:cd:91:e8: 3f:c3:df:3d:3e:50:c6:85:bb:07:0d:38:a9:81:f9: fc:ec:d6:c9:05:33:6f:d8:7b:7a:6a:70:80:26:d5: 92:ff:61:4f:54:36:cb:93:99:9f:ed:1a:1f:d8:55: ef:b6:26:e5:5d:87:87:21:54:89:9e:70:85:7c:f0: 6b:f6:8a:7a:fb:f0:df:75:d9:85:da:e9:0e:76:c0: 19:5d:61:33:b5:4e:94:6a:11:c2:f9:3f:17:a7:15: 0b:34:2e:88:ff:06:80:a7:79:46:74:da:a9:98:48: 1b:3f:0f:1f:70:be:3d:b5:95:54:ce:5f:c1:e8:8c: 8a:bd:fc:0a:18:5b:3f:a8:4b:95:3a:09:71:04:6f: 76:b6:95:e2:25:bd:e9:31:0c:28:ee:14:80:29:09: 4f:4a:5a:b6:e4:c7:08:6f:66:18:09:01:74:00:f9: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:82:E3:73:D8:BF:63:B7:C2:99:E4:DF:32:4F:8D:E0:54:CB:9B:D8 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:45:aa:5d:f2:4f:dd:0d:de:fc:6b:e5:d0:d5:4d:ba:6b:e9: ce:0f:a5:74:a3:32:ce:06:37:6e:2a:f5:30:e9:6b:1e:a4:91: 4d:aa:f4:5b:be:22:da:97:71:6a:da:d9:65:3b:4f:d2:9e:9b: d2:65:b8:dd:89:53:1d:18:f8:bb:da:d6:cb:68:34:ae:e4:fa: c6:06:59:e7:88:21:a0:23:80:85:1f:25:97:be:5a:9a:8f:74: 98:94:00:68:91:31:60:f9:c6:43:24:70:df:f7:01:36:99:85: 2e:f6:1c:2a:40:41:f9:69:47:e0:c4:bc:c1:5e:c3:6a:8e:df: 01:a1:01:ea:4d:fc:4a:42:96:91:c5:c9:99:6e:fd:a1:45:2f: fe:45:b0:48:50:25:73:c4:41:2d:18:27:7f:8d:00:c5:28:f7: 4b:ea:d3:09:24:0c:2b:33:26:d4:45:c1:0a:1a:6e:21:8c:52: 54:20:92:12:71:ef:a6:b8:bc:2c:3b:10:e8:d8:f1:e6:1a:55: 19:50:4a:7a:5c:1c:79:6a:27:d4:96:5c:0c:18:07:df:45:11: ac:11:c5:7a:3e:4e:17:11:61:90:e0:52:a8:5e:f6:d3:10:94: 90:3f:3d:01:b8:46:4e:40:b6:f6:b8:bb:b8:da:7b:cf:8f:3f: d7:a8:0a:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoA2gfq2yxXbND6AO68Jv9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUxMDIwMDkwMTIwWhcNMjUxMDIxMDkwMTIwWjAzMTEwLwYDVQQD EyhhYTgyZTM3M2Q4YmY2M2I3YzI5OWU0ZGYzMjRmOGRlMDU0Y2I5YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjBbi7U6Gy28yTGlgdvYtYMGoY5D DO3+D3yl2cXJQBgs41WT1GlayDKTHRPNybcG5+RscCPgqeZHPNgG2J1U6P1OI3rb fChGfoqfmMyKDokFtmQ/IGLNkeg/w989PlDGhbsHDTipgfn87NbJBTNv2Ht6anCA JtWS/2FPVDbLk5mf7Rof2FXvtiblXYeHIVSJnnCFfPBr9op6+/DfddmF2ukOdsAZ XWEztU6UahHC+T8XpxULNC6I/waAp3lGdNqpmEgbPw8fcL49tZVUzl/B6IyKvfwK GFs/qEuVOglxBG92tpXiJb3pMQwo7hSAKQlPSlq25McIb2YYCQF0APkX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqC43PYv2O3wpnk3zJPjeBUy5vYMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkWqXfJP 3Q3e/Gvl0NVNumvpzg+ldKMyzgY3bir1MOlrHqSRTar0W74i2pdxatrZZTtP0p6b 0mW43YlTHRj4u9rWy2g0ruT6xgZZ54ghoCOAhR8ll75amo90mJQAaJExYPnGQyRw 3/cBNpmFLvYcKkBB+WlH4MS8wV7Dao7fAaEB6k38SkKWkcXJmW79oUUv/kWwSFAl c8RBLRgnf40AxSj3S+rTCSQMKzMm1EXBChpuIYxSVCCSEnHvpri8LDsQ6Njx5hpV GVBKelwceWon1JZcDBgH30URrBHFej5OFxFhkOBSqF720xCUkD89AbhGTkC29ri7 uNp7z48/16gKKg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:48 2025 by rpki-client