$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: UCvLk0DzS8I/ZB963kdpuZB4k3ulg3BUOeECm8QPtOA= Subject key identifier: 2F:2C:96:7D:6C:99:76:77:EF:11:52:5E:6A:7D:06:AD:0A:09:EC:B4 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 0198D473393143489BDA5F2D271ACFFE5B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 163B Signing time: Sat 23 Aug 2025 01:02:57 +0000 Manifest this update: Sat 23 Aug 2025 01:02:57 +0000 Manifest next update: Sun 24 Aug 2025 01:02:57 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: 3QFB5AiwAI8OVDZoya27wxJ2oA9x371sXtwfh6SA6V4=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:39:31:43:48:9b:da:5f:2d:27:1a:cf:fe:5b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Aug 23 01:02:57 2025 GMT Not After : Aug 24 01:02:57 2025 GMT Subject: CN=2f2c967d6c997677ef11525e6a7d06ad0a09ecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:8d:9b:9e:0c:36:3c:e5:19:91:16:29:92: d4:dc:ed:31:dd:c3:f5:54:72:64:f7:ba:51:b0:25: 42:f5:e1:d9:20:9d:c9:29:e2:e5:b1:e7:c6:34:06: 9b:ee:58:8a:bf:0c:df:29:96:21:b0:c8:c9:23:30: 2b:40:d7:a3:aa:e4:9e:cc:e6:d3:80:5c:88:96:4a: 0d:75:75:60:33:68:cc:2a:a8:75:fe:35:fb:dc:ff: 8a:c6:ac:30:08:e6:7d:09:f6:a5:05:bc:1f:9b:aa: 7b:14:94:d7:76:68:e7:0c:01:0d:b3:21:a3:50:85: 66:64:66:1e:44:3e:e6:37:6c:75:16:fb:ab:83:a7: 58:f6:81:b7:ea:c9:da:99:eb:2e:c7:1a:87:79:34: 3d:55:50:e4:8b:42:79:a9:7b:20:db:db:c5:d6:26: ed:2c:39:c5:29:38:c9:23:0c:d2:c7:18:74:33:72: 97:fe:77:d3:d9:9a:a7:9d:0e:d6:7d:ff:9a:bf:46: 10:61:e8:1d:05:02:b6:e3:1f:62:28:ad:7f:28:da: ae:09:01:39:58:93:25:da:91:6f:67:df:86:c4:e6: 41:2d:31:fd:5f:c5:81:74:26:27:7a:d2:ea:87:69: c5:22:40:7d:35:61:9e:6d:a8:7e:7a:fa:37:c8:d2: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2C:96:7D:6C:99:76:77:EF:11:52:5E:6A:7D:06:AD:0A:09:EC:B4 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:8c:18:19:fb:be:35:61:a3:38:f8:3a:e6:74:22:0e:3c:dc: b4:cf:95:c3:05:8a:6e:68:64:69:10:b7:d7:79:7d:4b:e4:1f: 23:53:2c:b8:5f:a2:9a:d2:cc:7a:23:91:7a:78:c9:fa:34:0a: c2:dc:f7:96:36:a7:11:6a:9e:13:25:1d:d6:4f:6a:5b:6c:8b: a9:d7:83:bf:04:63:68:04:85:50:ef:b3:97:dd:ed:dd:07:45: 72:0b:7f:c5:08:39:66:06:1b:5f:b3:6f:b1:ab:ec:74:c8:e5: e1:2d:d7:7f:38:78:25:35:67:7c:e3:e1:28:be:fa:c6:59:37: b7:6f:c2:03:98:ad:1c:3b:ce:d6:4f:d6:23:1f:b5:c8:55:b2: 5d:bc:c0:12:17:4f:9e:7f:7b:0b:45:e1:47:39:5c:fd:6a:44: b4:23:8c:01:48:a5:f0:88:f9:72:f5:1a:ff:d8:cb:c6:b1:a9: a2:82:21:2f:32:c7:4b:60:7b:13:24:63:5c:e2:93:82:38:67: 7b:d7:60:a6:5a:ff:3f:07:3b:37:d5:23:2e:8c:aa:9d:96:8a: b9:de:1f:95:ee:32:88:83:b6:90:75:33:9d:be:92:67:8a:98: cd:8c:aa:4e:58:c9:d6:97:bc:56:06:f0:2d:17:6c:43:3a:9c: e9:2a:a5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUczkxQ0ib2l8tJxrP/lstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwODIzMDEwMjU3WhcNMjUwODI0MDEwMjU3WjAzMTEwLwYDVQQD EygyZjJjOTY3ZDZjOTk3Njc3ZWYxMTUyNWU2YTdkMDZhZDBhMDllY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL6Nm54MNjzlGZEWKZLU3O0x3cP1 VHJk97pRsCVC9eHZIJ3JKeLlsefGNAab7liKvwzfKZYhsMjJIzArQNejquSezObT gFyIlkoNdXVgM2jMKqh1/jX73P+KxqwwCOZ9CfalBbwfm6p7FJTXdmjnDAENsyGj UIVmZGYeRD7mN2x1Fvurg6dY9oG36snamesuxxqHeTQ9VVDki0J5qXsg29vF1ibt LDnFKTjJIwzSxxh0M3KX/nfT2ZqnnQ7Wff+av0YQYegdBQK24x9iKK1/KNquCQE5 WJMl2pFvZ9+GxOZBLTH9X8WBdCYnetLqh2nFIkB9NWGebah+evo3yNIqJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8sln1smXZ37xFSXmp9Bq0KCey0MB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4wYGfu+ NWGjOPg65nQiDjzctM+VwwWKbmhkaRC313l9S+QfI1MsuF+imtLMeiORenjJ+jQK wtz3ljanEWqeEyUd1k9qW2yLqdeDvwRjaASFUO+zl93t3QdFcgt/xQg5ZgYbX7Nv savsdMjl4S3Xfzh4JTVnfOPhKL76xlk3t2/CA5itHDvO1k/WIx+1yFWyXbzAEhdP nn97C0XhRzlc/WpEtCOMAUil8Ij5cvUa/9jLxrGpooIhLzLHS2B7EyRjXOKTgjhn e9dgplr/Pwc7N9UjLoyqnZaKud4fle4yiIO2kHUznb6SZ4qYzYyqTljJ1pe8Vgbw LRdsQzqc6Sqlhw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:31:37 2025 by rpki-client