$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: OgEjfMmqPixQRWSzgY7uIQV25kC5oRK+ssQhzI27qNI= Subject key identifier: 35:CD:5A:50:C3:B9:DB:97:42:1F:CC:E2:35:4E:FB:BA:3A:D2:AC:F7 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 0199FC21BA3E48E4B50001BA36572F525CBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 16D7 Signing time: Sun 19 Oct 2025 11:01:32 +0000 Manifest this update: Sun 19 Oct 2025 11:01:32 +0000 Manifest next update: Mon 20 Oct 2025 11:01:32 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: R0nQtdDS7gwq2fcnOqMNwGB9CkcWLuc+A6mnYdXbUgg=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa (hash: Hy1jxMcmkJjc7Rfw6ZAzEMKDTAjkCP2ewVbsibxOPr4=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:ba:3e:48:e4:b5:00:01:ba:36:57:2f:52:5c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Oct 19 11:01:32 2025 GMT Not After : Oct 20 11:01:32 2025 GMT Subject: CN=35cd5a50c3b9db97421fcce2354efbba3ad2acf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:39:57:69:0c:84:48:84:d6:ba:4e:13:46:2b: 79:c6:cb:7e:2c:35:5d:21:16:9e:13:58:89:31:19: d0:42:22:19:2d:c2:54:46:fc:3f:56:e0:ce:e8:5a: d8:71:b7:ec:74:60:c5:08:b4:a5:70:16:83:e5:49: d1:ac:6e:f5:e1:a7:02:c6:7e:ed:f6:b1:dc:97:0f: bd:ee:ae:7b:60:a4:62:51:90:df:1f:a9:66:bb:3d: 79:cd:b8:34:78:9c:4a:d1:78:a3:db:6c:73:d4:68: c6:48:e8:7e:43:1b:04:ed:fb:c0:62:97:e9:e8:72: 02:e3:be:54:8d:dd:b9:eb:b1:cf:74:60:32:77:e7: c0:99:36:52:fa:93:05:9b:2b:fd:2e:e0:1f:e5:ed: 59:0f:42:07:67:17:67:82:2a:d6:7e:72:f2:62:2f: cc:2a:e5:58:ef:51:38:36:d8:ba:10:10:50:0b:39: 46:54:e5:3e:85:d0:fe:f6:c4:2e:bf:c7:aa:1c:6a: 9b:9f:0b:c3:2d:f4:48:e1:21:81:f1:63:28:74:6d: 8a:43:fe:4d:3f:9e:91:b5:c8:57:3f:41:77:a7:4b: d7:8d:d1:03:3f:04:02:42:6a:a0:38:71:07:65:56: 58:70:7f:3f:39:ed:17:89:ec:32:b0:bd:47:e8:3c: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CD:5A:50:C3:B9:DB:97:42:1F:CC:E2:35:4E:FB:BA:3A:D2:AC:F7 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c2:9d:1f:d1:9e:95:92:1f:96:bd:b4:d8:06:00:60:e2:78: dc:e0:3f:0c:bd:0d:6f:b4:c2:6c:4b:74:f9:69:00:77:d1:aa: fb:dd:cc:b1:d7:dd:5f:5a:9b:bb:86:44:40:8a:e4:56:8f:bc: 46:d1:a5:6a:e7:e8:8b:c3:60:5f:02:ab:dc:37:ba:65:01:6c: 31:16:0c:b6:e4:0a:b9:0f:f6:58:ab:b9:a5:05:ec:ce:c0:17: 88:e8:2e:07:ef:7a:13:cc:58:d8:29:c3:f0:86:81:a3:c7:2d: 38:f7:0a:79:57:6e:0e:f1:7f:e8:40:1a:f8:2c:26:c6:ad:c0: a7:41:36:c0:9d:15:4b:28:84:1e:cc:05:c1:73:7c:f9:5c:ea: 45:3b:14:3e:8e:21:ac:1b:07:52:7e:22:bd:7d:6a:94:8e:f5: e1:18:1d:07:70:46:73:41:c2:fc:58:a3:27:cb:ca:1f:1d:63: cb:32:0e:36:68:6f:fa:ae:a0:f9:a5:1b:56:5e:9b:71:af:d5: 66:97:e7:7a:4f:be:2d:a2:6e:b6:4d:5c:dc:11:92:47:fd:06: 14:7c:18:1f:e7:f7:b0:40:19:a7:10:2f:43:fa:cf:c6:c0:ff: dd:91:b6:cf:00:85:c1:2e:6a:3f:2f:8f:9c:01:43:e4:1e:00: 68:97:d0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8Ibo+SOS1AAG6NlcvUly6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUxMDE5MTEwMTMyWhcNMjUxMDIwMTEwMTMyWjAzMTEwLwYDVQQD EygzNWNkNWE1MGMzYjlkYjk3NDIxZmNjZTIzNTRlZmJiYTNhZDJhY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTlXaQyESITWuk4TRit5xst+LDVd IRaeE1iJMRnQQiIZLcJURvw/VuDO6FrYcbfsdGDFCLSlcBaD5UnRrG714acCxn7t 9rHclw+97q57YKRiUZDfH6lmuz15zbg0eJxK0Xij22xz1GjGSOh+QxsE7fvAYpfp 6HIC475Ujd2567HPdGAyd+fAmTZS+pMFmyv9LuAf5e1ZD0IHZxdngirWfnLyYi/M KuVY71E4Nti6EBBQCzlGVOU+hdD+9sQuv8eqHGqbnwvDLfRI4SGB8WModG2KQ/5N P56RtchXP0F3p0vXjdEDPwQCQmqgOHEHZVZYcH8/Oe0XiewysL1H6DygmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXNWlDDuduXQh/M4jVO+7o60qz3MB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcKdH9Ge lZIflr202AYAYOJ43OA/DL0Nb7TCbEt0+WkAd9Gq+93MsdfdX1qbu4ZEQIrkVo+8 RtGlaufoi8NgXwKr3De6ZQFsMRYMtuQKuQ/2WKu5pQXszsAXiOguB+96E8xY2CnD 8IaBo8ctOPcKeVduDvF/6EAa+Cwmxq3Ap0E2wJ0VSyiEHswFwXN8+VzqRTsUPo4h rBsHUn4ivX1qlI714RgdB3BGc0HC/FijJ8vKHx1jyzIONmhv+q6g+aUbVl6bca/V Zpfnek++LaJutk1c3BGSR/0GFHwYH+f3sEAZpxAvQ/rPxsD/3ZG2zwCFwS5qPy+P nAFD5B4AaJfQxQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:22:50 2025 by rpki-client