$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: jc07rClcQGKjgbStHmDI5ZrZOlthPOADb2wSxI5uuqM= Subject key identifier: D2:77:3E:AE:87:76:37:5E:A4:24:6D:23:9C:DA:27:8E:3F:CF:92:01 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019A006BE702BA8876B20055C4A9FB796F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 1040 Signing time: Mon 20 Oct 2025 07:01:02 +0000 Manifest this update: Mon 20 Oct 2025 07:01:02 +0000 Manifest next update: Tue 21 Oct 2025 07:01:02 +0000 Files and hashes: 1: 1-YME93lc1AWh4-bMqvVDZYenQg0.roa (hash: Euu0W5ctvY2bfvnvaMrD1zBWGCi2DVPvkYQ6p9zTjts=) 2: HdvJhluj0mmgaFdPVm0s0ofNMQM.roa (hash: p1LONhiWBtnwDM/uG7ENsu+2YSQKoESJAbc98yta6C4=) 3: PG5DPUzHhisMDmHNMi2OiyC4Krk.roa (hash: 5vgSE6xpOM3tTVvShPg0nfAqcYxZUDm3VYRogPEs1nM=) 4: QWifAQ3dSu8nhEAeOh_F1BphWro.roa (hash: itO7AV5EF/O+Sl0fYRa8cl6eA4q/nRa0iBG6sGElFQI=) 5: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: GAohk+249rch1NlI1K8/0K+f9Mmcm6thT6o8DXUIE9c=) 6: Z6ubH84vQbgEnifkNYkjjYx5LIg.roa (hash: A5Iyh12sixazcVNr3007j9RNY5bFIJZSLARvNvwI0hI=) 7: cWGszmobGgkTRu82roBLKR9vgkE.roa (hash: bXFzT/7+8yagPIwyKl0fdIxc7uJ/wfFRRzbV8w0a7yI=) 8: flrC_8zXbr01pJXgtmy__huZXOA.roa (hash: vzxZLPURPSKJVHe6QAWg0rqm4QhuQOuF7VBOWspThjA=) 9: lms_h40r3-LvmvS_QZG5u3K67Uw.roa (hash: sioeVX/bhxcVhyyVff9dr3QSj+48OLBpgP5/WVrFXzw=) 10: nGntDaqcmONxUi1sd87UMvT9x4I.roa (hash: JUPdqbOgdaD6LXB1MI+aJwuym5PZcQO3ILLdGvRsfU8=) 11: nzJ1VVo_PG7VRYK1qXbMx1rFS50.roa (hash: /GaOWlamFjP2Dj79UI9A1USxEJfBxcpOsY5WVrDbQNw=) 12: p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa (hash: iKYw9dWKEOaAlzn5AmL4rdC2+rWU6FDA6bFijDgxb2w=) 13: qXSDx6qMLmAkAg9CUQzF6i4iyY0.roa (hash: wdkB7sltE+pNfWEVP8+xe0pE2lM5C0vVvLdbwwyDf04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:6b:e7:02:ba:88:76:b2:00:55:c4:a9:fb:79:6f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Oct 20 07:01:02 2025 GMT Not After : Oct 21 07:01:02 2025 GMT Subject: CN=d2773eae8776375ea4246d239cda278e3fcf9201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:1a:7e:10:4a:2a:14:00:d3:80:30:24:f1: 4d:0f:b2:dc:f3:61:6e:18:d8:c3:b9:58:46:01:08: 30:de:7c:c7:7a:aa:f3:6b:5e:9b:c8:dd:49:23:23: 4a:a3:ff:0e:e2:36:20:3a:05:cd:33:ba:76:2e:40: 94:64:0f:18:8d:e8:66:c2:90:fa:22:69:1b:b7:aa: bd:8a:24:d1:59:0b:9d:cd:af:9f:f5:0d:e0:10:4b: 6f:8c:39:1d:f2:8b:54:f0:56:86:36:d2:10:97:7e: 1c:a6:e4:ec:f7:3a:8b:6c:a4:45:9a:8f:78:32:29: 25:d3:38:ca:e5:2d:7f:f9:c0:dd:8b:d8:ae:7a:c5: 2a:f2:d5:2f:4c:7f:0c:15:e7:7e:f2:b3:62:c4:c1: 7c:de:cc:9c:20:2d:91:f6:30:79:f3:55:92:d8:02: e5:a4:8a:82:ff:76:1f:a6:45:1a:89:57:d3:47:ae: fa:a5:7f:c5:d7:10:87:17:64:13:88:53:66:d4:71: f6:53:36:bd:02:6c:bd:aa:9c:0d:19:f3:f5:a7:7a: d5:35:fd:06:bc:61:d4:d8:86:08:66:ea:16:b5:97: 94:31:35:a9:04:d3:95:fc:8f:ac:b2:fe:18:ad:83: c6:75:4e:cf:9e:a9:56:30:04:5f:fb:cf:4f:44:05: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:77:3E:AE:87:76:37:5E:A4:24:6D:23:9C:DA:27:8E:3F:CF:92:01 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c1:77:ae:2b:0e:0d:18:a2:0a:d8:f9:bb:be:44:74:5a:d6: 45:8d:25:5c:f4:00:f0:6c:9b:84:2b:86:60:1c:7b:26:e1:8c: 9e:1e:d3:90:5d:7a:34:4a:46:67:ce:6f:9d:6c:df:57:7f:9f: 03:96:31:26:4f:11:df:e0:dc:2c:ce:04:a1:53:07:1b:5e:83: d8:25:84:c5:8f:1d:85:8d:4c:15:40:d3:23:09:16:33:97:10: f2:c0:b7:b4:4f:10:57:3c:0d:91:fd:46:eb:8f:1c:a2:77:f7: 79:ae:c8:eb:5b:30:9f:c0:8a:0b:4b:d6:4c:77:b1:c5:af:6e: b0:55:26:6f:43:08:89:1a:d9:2a:2f:cf:21:22:4c:12:e0:32: 88:48:02:df:ef:ed:a8:9b:e1:2a:fb:c4:5f:b5:38:0b:8a:e3: 1b:2a:a8:e6:25:bf:94:62:fe:6e:82:2f:76:2b:27:e5:46:9e: 78:16:33:c8:7c:c1:fb:34:c9:19:98:bb:66:06:ed:77:f5:64: 04:2b:14:65:4f:37:3a:4d:34:0b:06:1c:e3:fa:02:dd:df:84: db:7d:d1:81:1e:20:13:bf:01:92:67:0c:f2:f8:38:9c:43:b9: d8:a9:76:e7:e2:17:1a:4d:50:3e:35:41:18:3b:94:48:9c:f4: bc:4c:1c:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoAa+cCuoh2sgBVxKn7eW+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjUxMDIwMDcwMTAyWhcNMjUxMDIxMDcwMTAyWjAzMTEwLwYDVQQD EyhkMjc3M2VhZTg3NzYzNzVlYTQyNDZkMjM5Y2RhMjc4ZTNmY2Y5MjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C8afhBKKhQA04AwJPFND7Lc82Fu GNjDuVhGAQgw3nzHeqrza16byN1JIyNKo/8O4jYgOgXNM7p2LkCUZA8YjehmwpD6 Imkbt6q9iiTRWQudza+f9Q3gEEtvjDkd8otU8FaGNtIQl34cpuTs9zqLbKRFmo94 Mikl0zjK5S1/+cDdi9iuesUq8tUvTH8MFed+8rNixMF83sycIC2R9jB581WS2ALl pIqC/3YfpkUaiVfTR676pX/F1xCHF2QTiFNm1HH2Uza9Amy9qpwNGfP1p3rVNf0G vGHU2IYIZuoWtZeUMTWpBNOV/I+ssv4YrYPGdU7PnqlWMARf+89PRAXgkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ3Pq6HdjdepCRtI5zaJ44/z5IBMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8F3risO DRiiCtj5u75EdFrWRY0lXPQA8GybhCuGYBx7JuGMnh7TkF16NEpGZ85vnWzfV3+f A5YxJk8R3+DcLM4EoVMHG16D2CWExY8dhY1MFUDTIwkWM5cQ8sC3tE8QVzwNkf1G 648conf3ea7I61swn8CKC0vWTHexxa9usFUmb0MIiRrZKi/PISJMEuAyiEgC3+/t qJvhKvvEX7U4C4rjGyqo5iW/lGL+boIvdisn5UaeeBYzyHzB+zTJGZi7Zgbtd/Vk BCsUZU83Ok00CwYc4/oC3d+E233RgR4gE78BkmcM8vg4nEO52Kl25+IXGk1QPjVB GDuUSJz0vEwc9w== -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:47 2025 by rpki-client