$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: jTZ0ujNrj7FcbwMcTmce8SMJHyImRL+orPxcrRr55dQ= Subject key identifier: 54:02:72:86:CF:EB:83:39:FE:2E:EB:2A:EA:21:B0:88:84:80:17:99 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 0199FE7E03718CAFB42934DDCD863F9176A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 16FB Signing time: Sun 19 Oct 2025 22:01:35 +0000 Manifest this update: Sun 19 Oct 2025 22:01:35 +0000 Manifest next update: Mon 20 Oct 2025 22:01:35 +0000 Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=) 2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=) 3: 5B96JsENP7oPHcdFfVpqYDbmFYg.roa (hash: EHvXfHafsqrn16RMNZ7Iql67i0KDC/bzUoVDYjRF+eY=) 4: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=) 5: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=) 6: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=) 7: D-NXxAC8NeHpEpwRfW7yOtZvJ_4.roa (hash: uOBxJRz4MueUQogrYlERneeeJCrcr4YCwkzWVxRxFkQ=) 8: I8vapMCNrfWppn81n36Xnnd_dc0.roa (hash: nkV+aB69M6byViVbXc/yY8edvpoQaOOIi8NiZU4LCHg=) 9: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: 3s1iQ4B58tJBHEZR0QQAevvgdQeyYSNnw9XD+bcIPuE=) 10: XwLFpRj0dZU0LB-jqIeBRVr3WiQ.roa (hash: Hh68YUysT9TlK/wnW8P9Ud671FM4CJjbFuG795wPTz4=) 11: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (hash: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=) 12: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=) 13: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=) 14: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=) 15: rIsYs00Wf7HbWx24CSUDr8qM3AA.roa (hash: Rm9hgt1r8vljNOunul0A1uzlnsmrlXuLijTx17itpBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:7e:03:71:8c:af:b4:29:34:dd:cd:86:3f:91:76:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Oct 19 22:01:35 2025 GMT Not After : Oct 20 22:01:35 2025 GMT Subject: CN=54027286cfeb8339fe2eeb2aea21b08884801799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c7:eb:08:3d:44:84:7a:e7:c5:5a:64:c9:de: 0b:40:04:3c:12:70:41:28:b7:f9:18:f3:5e:38:16: 38:59:51:7c:70:49:ca:62:8f:c9:2e:86:8e:21:b5: 10:39:06:ec:65:0c:ef:70:05:01:b9:3b:59:83:ca: e8:d5:84:97:64:0d:4b:03:2c:02:b4:6f:81:fc:6a: ec:6e:0a:d1:19:74:f0:7f:29:21:bd:db:7d:1d:1b: 95:28:a0:e0:40:8e:03:43:83:a4:4c:8f:9a:43:46: 91:b4:90:b6:5e:bd:32:25:52:9a:1a:8f:f3:9e:6e: f6:fe:94:33:dc:c5:08:e0:0a:39:aa:87:3d:8d:86: 98:52:41:ec:bf:24:f2:3a:aa:1f:eb:da:07:fe:2b: 14:74:99:27:ae:f4:02:88:f2:81:c0:2e:7b:35:2c: 8c:16:a9:c5:72:4f:8d:26:de:d4:ae:07:d2:23:39: ba:23:d2:d5:d9:be:39:90:02:6a:a5:82:cf:eb:3b: 76:1d:c3:2d:87:31:a7:e7:29:20:68:c3:f1:20:cd: b3:36:f1:48:34:48:c3:fc:e6:db:c1:e6:19:50:2f: f4:3c:43:87:0c:6f:db:84:0d:e9:5f:63:f5:e3:94: 03:04:24:ab:31:2d:a5:62:1c:ad:9b:ea:00:03:2d: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:02:72:86:CF:EB:83:39:FE:2E:EB:2A:EA:21:B0:88:84:80:17:99 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9d:54:8b:28:e9:78:61:83:90:80:f4:fc:b1:4e:5e:1e:a0: c2:ee:f9:77:cf:94:c6:90:c8:f1:7e:76:c9:6e:d6:94:fd:bf: ff:87:a7:17:d4:05:19:d3:35:11:81:89:27:59:38:a3:b2:c8: 02:54:ed:e9:47:c2:c3:8a:b6:80:c8:52:6b:e3:bd:45:f8:15: 2b:4b:f9:c1:53:9c:0d:9e:9b:dd:99:51:4c:71:59:06:86:d3: 58:2b:2f:82:73:04:b8:1c:91:90:d3:fb:9f:77:e9:d9:e2:95: 1b:f2:71:96:80:5a:2f:e5:f3:d2:72:7c:42:ab:37:d4:fe:09: 74:a2:34:b7:c8:e5:db:09:5e:56:b5:b5:f0:d4:8a:78:42:dd: e2:a6:88:bd:7b:a3:b5:29:cc:b3:7e:82:2f:83:bf:94:ef:0b: 9a:24:5f:2f:85:4d:09:eb:5c:02:df:62:63:1c:9e:e2:64:79: a5:35:b3:0f:0e:fa:13:ae:c5:77:33:0a:d7:28:6e:b6:4f:b2: 30:99:fc:5c:15:52:47:eb:6d:36:da:ce:56:06:a2:a6:05:63: 4a:8b:5e:7b:fd:07:36:00:1f:90:f3:ed:e5:85:9c:6b:1b:90: da:04:87:23:9d:3d:68:a6:9d:54:e5:70:ac:55:f3:3c:81:d0: 17:b7:f5:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+fgNxjK+0KTTdzYY/kXanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMDE5MjIwMTM1WhcNMjUxMDIwMjIwMTM1WjAzMTEwLwYDVQQD Eyg1NDAyNzI4NmNmZWI4MzM5ZmUyZWViMmFlYTIxYjA4ODg0ODAxNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8frCD1EhHrnxVpkyd4LQAQ8EnBB KLf5GPNeOBY4WVF8cEnKYo/JLoaOIbUQOQbsZQzvcAUBuTtZg8ro1YSXZA1LAywC tG+B/GrsbgrRGXTwfykhvdt9HRuVKKDgQI4DQ4OkTI+aQ0aRtJC2Xr0yJVKaGo/z nm72/pQz3MUI4Ao5qoc9jYaYUkHsvyTyOqof69oH/isUdJknrvQCiPKBwC57NSyM FqnFck+NJt7UrgfSIzm6I9LV2b45kAJqpYLP6zt2HcMthzGn5ykgaMPxIM2zNvFI NEjD/ObbweYZUC/0PEOHDG/bhA3pX2P145QDBCSrMS2lYhytm+oAAy232wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQCcobP64M5/i7rKuohsIiEgBeZMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ1Uiyjp eGGDkID0/LFOXh6gwu75d8+UxpDI8X52yW7WlP2//4enF9QFGdM1EYGJJ1k4o7LI AlTt6UfCw4q2gMhSa+O9RfgVK0v5wVOcDZ6b3ZlRTHFZBobTWCsvgnMEuByRkNP7 n3fp2eKVG/JxloBaL+Xz0nJ8Qqs31P4JdKI0t8jl2wleVrW18NSKeELd4qaIvXuj tSnMs36CL4O/lO8LmiRfL4VNCetcAt9iYxye4mR5pTWzDw76E67FdzMK1yhutk+y MJn8XBVSR+ttNtrOVgaipgVjSotee/0HNgAfkPPt5YWcaxuQ2gSHI509aKadVOVw rFXzPIHQF7f15w== -----END CERTIFICATE-----Generated at Mon Oct 20 02:46:24 2025 by rpki-client