$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: PxsO4aLyl5/7qE53UoAgKVMeR49NliTomf6Zkw9O/dU= Subject key identifier: 1C:A3:7B:99:F5:DC:97:DF:32:E6:CF:40:1C:2C:8A:F9:23:FB:C3:5A Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 01993236B47521525ECB332B4CB4DF6BFEDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1688 Signing time: Wed 10 Sep 2025 06:01:09 +0000 Manifest this update: Wed 10 Sep 2025 06:01:09 +0000 Manifest next update: Thu 11 Sep 2025 06:01:09 +0000 Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: b+j5bE4XZkaEaC5TpAaLve4cYxq8R1pOvELUh8DE3Kg=) 2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 3: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=) 4: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 5: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (hash: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=) 6: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 7: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 8: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 9: fAqAClIqEJU2Z5Ye9QXpUO1Tbkg.roa (hash: YDMyeOOGj2eBmIkqGQ0q84C8FFV9NROwwY19+t/7x2o=) 10: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:32:36:b4:75:21:52:5e:cb:33:2b:4c:b4:df:6b:fe:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Sep 10 06:01:09 2025 GMT Not After : Sep 11 06:01:09 2025 GMT Subject: CN=1ca37b99f5dc97df32e6cf401c2c8af923fbc35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:24:0e:91:82:33:f5:9e:a0:09:d3:df:8b:19: 42:f9:b6:04:29:28:85:c6:48:1d:87:1f:b5:52:f5: d2:e4:5a:87:3a:65:75:ce:cd:c0:6d:7e:2d:7f:93: 6a:89:94:87:47:2f:3e:90:7e:4d:ca:60:c6:0d:fe: 56:a5:b1:7b:8d:cf:2e:d7:79:2b:6f:96:db:98:ee: 8a:ee:5e:1e:3c:3e:fa:c4:96:9e:2b:74:89:93:d7: 02:a7:8f:df:6a:1e:f3:67:75:37:04:98:0a:4e:cf: 0d:b0:81:a2:d2:42:ad:dc:a8:4e:9f:f6:1d:a7:3e: d1:ff:bc:e9:74:ce:2e:73:95:30:08:c9:01:dd:b6: 9f:8b:26:35:5b:08:f7:3d:d3:ab:92:55:c3:c8:cd: 1f:46:dc:51:08:be:af:42:d5:2c:4f:e7:eb:40:c1: d7:84:32:62:e2:e3:14:f5:ee:0f:57:2a:13:31:9d: 80:95:2b:9d:3a:35:4e:65:5c:af:0d:5c:bd:21:8f: 13:ae:08:f1:bd:b5:f2:25:2b:2b:5f:ff:62:93:a8: 7b:9b:91:df:2f:2c:50:b9:19:d3:3e:21:c3:e3:60: 41:28:2e:a4:ef:c5:3f:db:23:70:7e:3f:e8:6d:0a: 30:b9:15:ad:fd:9d:cd:48:b0:30:03:46:11:81:df: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A3:7B:99:F5:DC:97:DF:32:E6:CF:40:1C:2C:8A:F9:23:FB:C3:5A X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ef:f8:db:8b:c0:a6:f9:90:d4:03:ce:64:ab:a9:fe:02:f9: 3a:3e:cf:df:24:28:f2:8b:fb:fc:7a:b0:9e:3b:8d:d4:0f:23: 32:59:ea:bb:f0:6b:fd:cd:a8:e7:0f:54:d9:c4:61:81:12:f0: 4a:23:ee:d3:8d:a9:29:44:92:26:06:c9:67:19:b4:ec:e9:69: 44:88:25:73:60:2d:93:cb:b3:45:d4:95:40:54:69:22:56:53: 4c:69:50:f2:bc:ae:81:4e:30:8c:70:31:96:9d:8c:d1:0c:02: 67:e0:26:44:4d:3f:0b:c8:44:c3:ad:01:1d:50:6b:66:aa:a4: 23:c4:98:9f:71:0b:cf:2c:bc:fa:3a:59:6c:60:09:9b:d6:46: 8e:de:32:95:df:c1:04:0c:43:77:2a:d2:ea:e1:4a:21:95:78: 96:9f:58:b4:15:6a:db:96:cc:b6:02:98:4e:a1:c6:b6:bd:88: 4a:04:95:24:2e:a7:a8:a2:de:fd:09:f0:fe:1a:15:06:55:95: 55:75:e1:87:cf:02:4b:4f:ff:52:a6:a7:0b:21:bc:b8:a6:6d: c2:5b:dd:a7:14:93:43:63:d6:ba:cf:1f:92:9f:ad:7b:3c:64: 50:62:2f:0b:e4:33:c5:71:6f:c9:7d:3f:9d:0b:fe:61:f0:ee: 01:30:88:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkyNrR1IVJeyzMrTLTfa/7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUwOTEwMDYwMTA5WhcNMjUwOTExMDYwMTA5WjAzMTEwLwYDVQQD EygxY2EzN2I5OWY1ZGM5N2RmMzJlNmNmNDAxYzJjOGFmOTIzZmJjMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iQOkYIz9Z6gCdPfixlC+bYEKSiF xkgdhx+1UvXS5FqHOmV1zs3AbX4tf5NqiZSHRy8+kH5NymDGDf5WpbF7jc8u13kr b5bbmO6K7l4ePD76xJaeK3SJk9cCp4/fah7zZ3U3BJgKTs8NsIGi0kKt3KhOn/Yd pz7R/7zpdM4uc5UwCMkB3bafiyY1Wwj3PdOrklXDyM0fRtxRCL6vQtUsT+frQMHX hDJi4uMU9e4PVyoTMZ2AlSudOjVOZVyvDVy9IY8TrgjxvbXyJSsrX/9ik6h7m5Hf LyxQuRnTPiHD42BBKC6k78U/2yNwfj/obQowuRWt/Z3NSLAwA0YRgd9cuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByje5n13JffMubPQBwsivkj+8NaMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO/424vA pvmQ1APOZKup/gL5Oj7P3yQo8ov7/HqwnjuN1A8jMlnqu/Br/c2o5w9U2cRhgRLw SiPu042pKUSSJgbJZxm07OlpRIglc2Atk8uzRdSVQFRpIlZTTGlQ8ryugU4wjHAx lp2M0QwCZ+AmRE0/C8hEw60BHVBrZqqkI8SYn3ELzyy8+jpZbGAJm9ZGjt4yld/B BAxDdyrS6uFKIZV4lp9YtBVq25bMtgKYTqHGtr2ISgSVJC6nqKLe/Qnw/hoVBlWV VXXhh88CS0//UqanCyG8uKZtwlvdpxSTQ2PWus8fkp+tezxkUGIvC+QzxXFvyX0/ nQv+YfDuATCIpg== -----END CERTIFICATE-----Generated at Wed Sep 10 10:25:52 2025 by rpki-client