$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: UZBDWEnzd/4eKl3WNz2zsFFTifjJwHtZgxXuZmtRG7o= Subject key identifier: 6A:2C:5D:08:65:01:FA:3E:99:79:74:9D:77:82:E6:7B:F7:F4:D7:7C Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 01992367D139A1420356B6D66BD1838ACEC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 124A Signing time: Sun 07 Sep 2025 09:00:30 +0000 Manifest this update: Sun 07 Sep 2025 09:00:30 +0000 Manifest next update: Mon 08 Sep 2025 09:00:30 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 3: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: rfytO/V3lv4pm7AlwRY4grfYbehcc/5U0m7n4HHLwB4=) 4: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 5: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 6: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 7: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 8: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 9: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 10: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 11: xXfwL3nXnXFEEVcYcv_dc6Fb5P4.roa (hash: sO38IVaxxxNJ8+o5mB4XNWptxay9N15BzuBDzJ2RLLI=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:67:d1:39:a1:42:03:56:b6:d6:6b:d1:83:8a:ce:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Sep 7 09:00:30 2025 GMT Not After : Sep 8 09:00:30 2025 GMT Subject: CN=6a2c5d086501fa3e9979749d7782e67bf7f4d77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:42:f3:09:7c:79:ab:0b:f0:4c:18:09:9d: 24:fe:14:48:fa:45:7f:3b:5c:3c:c0:34:76:11:55: a3:7c:ef:2f:35:2a:b2:55:5a:61:80:01:02:61:b6: da:a7:fa:e7:3b:e7:61:f3:7c:85:00:4b:28:87:9c: f0:9a:7f:c4:f2:a6:49:e1:56:cf:d1:6f:12:2d:a2: 8e:93:26:ae:90:c2:53:a3:5c:ee:fa:a5:d7:02:46: 7d:24:84:e4:90:7a:1e:d4:4f:6f:a3:47:19:29:41: 67:db:e2:6c:94:62:5a:68:ca:2f:d1:b3:fa:51:c5: 68:fb:5a:eb:c6:94:13:8b:20:f6:db:59:41:97:9f: 5d:d7:29:25:c7:d0:38:b0:14:0e:d2:0c:e8:0c:91: b6:ba:56:26:fc:76:77:40:57:b3:20:a2:7a:89:36: 6a:8e:80:07:8b:6b:3d:91:80:f3:37:63:5e:ee:a0: d1:33:19:3c:7e:28:1a:6a:55:84:65:45:d9:42:a2: a0:41:da:41:c0:a3:09:de:4a:21:80:16:3c:80:8f: d0:4a:fd:21:56:00:95:24:ca:ab:a6:88:c8:8c:bc: f1:a0:da:35:eb:7a:55:e0:8c:43:f6:21:b5:ff:79: c3:10:78:6a:7b:0e:eb:b3:61:0d:4a:4e:f8:e2:79: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2C:5D:08:65:01:FA:3E:99:79:74:9D:77:82:E6:7B:F7:F4:D7:7C X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2d:fe:0f:a4:61:e4:a8:85:92:ac:52:83:1a:2c:10:a3:d0: bd:6b:ec:d4:7b:e1:d0:ed:23:ad:b5:ea:98:25:3d:7f:6e:ee: 27:21:8f:f9:d6:6a:7c:4d:88:18:28:61:1a:54:91:a3:6a:0d: 6a:6b:a3:c2:3b:cd:5d:d4:d7:13:cc:b5:e2:fd:23:ea:b9:eb: c1:91:c7:60:d3:33:13:b4:92:19:35:71:ec:f2:38:94:96:c8: cb:ef:c9:eb:ae:c7:04:9f:b8:8e:a8:e6:b2:2e:c6:8d:70:af: d2:06:c8:ff:c8:04:62:8f:0a:39:82:c2:82:e4:12:af:09:f1: 1a:e6:f7:78:d2:16:d3:1b:92:42:34:81:3d:8c:de:f0:b2:12: 74:81:dd:c3:1f:11:c3:f1:fc:a8:0f:31:09:5c:68:0a:ef:9f: 56:27:dc:06:75:49:e4:f5:e5:bc:98:2e:04:2d:18:88:95:5a: 45:1a:90:2d:7d:ea:7b:2b:8d:d7:ab:af:dd:93:54:5f:76:fd: 46:61:cf:ca:38:dd:0f:b8:ce:d5:16:ac:23:08:d9:88:83:bb: de:e2:84:7b:66:f2:d1:b4:8e:41:62:d7:46:da:37:32:33:2f: 08:4b:73:c2:be:42:23:72:6a:8f:8d:ff:3b:ba:3c:f2:80:0c: f9:3c:5f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjZ9E5oUIDVrbWa9GDis7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwOTA3MDkwMDMwWhcNMjUwOTA4MDkwMDMwWjAzMTEwLwYDVQQD Eyg2YTJjNWQwODY1MDFmYTNlOTk3OTc0OWQ3NzgyZTY3YmY3ZjRkNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AJC8wl8easL8EwYCZ0k/hRI+kV/ O1w8wDR2EVWjfO8vNSqyVVphgAECYbbap/rnO+dh83yFAEsoh5zwmn/E8qZJ4VbP 0W8SLaKOkyaukMJTo1zu+qXXAkZ9JITkkHoe1E9vo0cZKUFn2+JslGJaaMov0bP6 UcVo+1rrxpQTiyD221lBl59d1yklx9A4sBQO0gzoDJG2ulYm/HZ3QFezIKJ6iTZq joAHi2s9kYDzN2Ne7qDRMxk8figaalWEZUXZQqKgQdpBwKMJ3kohgBY8gI/QSv0h VgCVJMqrpojIjLzxoNo163pV4IxD9iG1/3nDEHhqew7rs2ENSk744nnWYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGosXQhlAfo+mXl0nXeC5nv39Nd8MB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni3+D6Rh 5KiFkqxSgxosEKPQvWvs1Hvh0O0jrbXqmCU9f27uJyGP+dZqfE2IGChhGlSRo2oN amujwjvNXdTXE8y14v0j6rnrwZHHYNMzE7SSGTVx7PI4lJbIy+/J667HBJ+4jqjm si7GjXCv0gbI/8gEYo8KOYLCguQSrwnxGub3eNIW0xuSQjSBPYze8LISdIHdwx8R w/H8qA8xCVxoCu+fVifcBnVJ5PXlvJguBC0YiJVaRRqQLX3qeyuN16uv3ZNUX3b9 RmHPyjjdD7jO1RasIwjZiIO73uKEe2by0bSOQWLXRto3MjMvCEtzwr5CI3Jqj43/ O7o88oAM+TxfYw== -----END CERTIFICATE-----Generated at Sun Sep 7 10:06:27 2025 by rpki-client