$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: xvkdmg0sB6k7qrO9WiE6pfBSd5/M1Rz+OpYW6Y+SzGk= Subject key identifier: CE:5B:64:4A:09:49:86:DC:8E:B5:D6:9D:C3:68:39:E9:58:71:9E:D0 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019A006C7D177B542C0BB93314EA951E12A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 16FC Signing time: Mon 20 Oct 2025 07:01:41 +0000 Manifest this update: Mon 20 Oct 2025 07:01:41 +0000 Manifest next update: Tue 21 Oct 2025 07:01:41 +0000 Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=) 2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=) 3: 5B96JsENP7oPHcdFfVpqYDbmFYg.roa (hash: EHvXfHafsqrn16RMNZ7Iql67i0KDC/bzUoVDYjRF+eY=) 4: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=) 5: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=) 6: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=) 7: D-NXxAC8NeHpEpwRfW7yOtZvJ_4.roa (hash: uOBxJRz4MueUQogrYlERneeeJCrcr4YCwkzWVxRxFkQ=) 8: I8vapMCNrfWppn81n36Xnnd_dc0.roa (hash: nkV+aB69M6byViVbXc/yY8edvpoQaOOIi8NiZU4LCHg=) 9: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: lmrlEMXcFSnVVTAUXbFR3xNTyWfOF2VTwndO8YLcnwI=) 10: XwLFpRj0dZU0LB-jqIeBRVr3WiQ.roa (hash: Hh68YUysT9TlK/wnW8P9Ud671FM4CJjbFuG795wPTz4=) 11: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (hash: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=) 12: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=) 13: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=) 14: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=) 15: rIsYs00Wf7HbWx24CSUDr8qM3AA.roa (hash: Rm9hgt1r8vljNOunul0A1uzlnsmrlXuLijTx17itpBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:6c:7d:17:7b:54:2c:0b:b9:33:14:ea:95:1e:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Oct 20 07:01:41 2025 GMT Not After : Oct 21 07:01:41 2025 GMT Subject: CN=ce5b644a094986dc8eb5d69dc36839e958719ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:5a:1c:f9:48:04:1e:1e:db:fc:47:6e:7e: 2d:3e:6f:14:4a:2b:e0:52:bd:10:86:bc:3a:e9:c9: 0d:b9:11:d2:c3:0a:8f:de:01:5d:4f:41:1a:cf:a1: 10:61:26:56:15:2f:d0:52:2d:b1:4c:26:ad:d7:80: 6e:9f:2e:fe:df:dd:00:af:e9:ed:e9:cf:fc:3e:0a: 96:53:e2:55:3a:ae:bf:a7:4b:13:f2:aa:7b:07:e7: b5:d4:42:6d:79:4e:93:d6:66:59:22:67:ce:40:dd: 25:a0:87:c0:b6:1c:92:cc:3b:51:31:8f:cf:2c:ec: 3b:41:a1:a4:ef:95:a3:48:d6:72:84:71:d9:a7:9f: 03:79:ba:34:11:84:69:31:ad:7d:e1:5b:70:8b:a9: da:bd:4f:0e:93:81:70:25:a1:63:d1:b7:e3:f7:99: ce:80:0d:83:6d:1c:21:a1:b5:9f:c3:e5:99:60:a1: ac:19:d0:7a:cb:ec:74:91:9b:e7:64:15:78:c0:b5: 76:23:06:96:7c:81:74:e8:65:fc:5e:1a:2b:12:5c: f3:09:fa:8a:cf:99:dd:f7:e1:c9:3a:17:67:2a:33: dc:6b:79:33:d1:51:02:d9:0f:c4:5c:67:f7:6f:26: 48:17:a7:ac:ad:99:e7:51:e9:48:e8:c8:0c:a8:ce: 12:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5B:64:4A:09:49:86:DC:8E:B5:D6:9D:C3:68:39:E9:58:71:9E:D0 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7e:c2:39:c0:1e:76:ed:88:30:7b:d7:c0:51:62:a5:e2:14: 96:ac:e6:1b:ca:2f:42:03:af:5b:5c:17:18:d5:f4:e7:ae:c7: 97:f3:37:28:b1:13:7f:3c:12:61:75:ae:5a:30:77:0f:a8:eb: ad:4f:af:13:6f:5e:69:5e:23:da:e6:44:43:d8:58:dc:b8:9d: 21:fd:ea:f6:6a:64:6f:e3:ba:55:e8:25:8b:de:a4:24:1a:4f: 14:eb:69:5e:28:cb:23:35:fb:e1:6d:b8:cd:ab:bd:72:70:4f: c6:c2:95:2c:90:55:b6:7c:0f:0f:84:01:93:65:c6:f5:39:ca: a3:ff:6e:0d:f4:2e:45:ee:a1:94:b6:b3:d7:ca:40:c5:65:72: df:bd:7b:b8:2a:c0:cf:48:4a:ce:12:dd:70:84:f1:ce:e6:e6: 6b:4e:fc:54:b2:d7:ca:34:9f:ef:be:dc:e3:02:59:78:47:0c: 38:7f:63:5f:36:32:52:a1:a3:d8:71:82:fb:5c:ef:6f:96:bc: 6a:77:e8:6a:3f:c4:60:78:ce:dc:76:71:89:b6:97:5d:99:75: 6e:68:3b:0f:90:7e:d7:22:01:9f:4f:8d:9d:af:9e:f4:aa:9a: c2:df:4e:c3:39:86:c3:7d:72:eb:e3:22:2b:f8:33:ba:45:8a: 8c:eb:f1:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoAbH0Xe1QsC7kzFOqVHhKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMDIwMDcwMTQxWhcNMjUxMDIxMDcwMTQxWjAzMTEwLwYDVQQD EyhjZTViNjQ0YTA5NDk4NmRjOGViNWQ2OWRjMzY4MzllOTU4NzE5ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQRaHPlIBB4e2/xHbn4tPm8USivg Ur0Qhrw66ckNuRHSwwqP3gFdT0Eaz6EQYSZWFS/QUi2xTCat14Buny7+390Ar+nt 6c/8PgqWU+JVOq6/p0sT8qp7B+e11EJteU6T1mZZImfOQN0loIfAthySzDtRMY/P LOw7QaGk75WjSNZyhHHZp58Debo0EYRpMa194Vtwi6navU8Ok4FwJaFj0bfj95nO gA2DbRwhobWfw+WZYKGsGdB6y+x0kZvnZBV4wLV2IwaWfIF06GX8XhorElzzCfqK z5nd9+HJOhdnKjPca3kz0VEC2Q/EXGf3byZIF6esrZnnUelI6MgMqM4SHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5bZEoJSYbcjrXWncNoOelYcZ7QMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn7COcAe du2IMHvXwFFipeIUlqzmG8ovQgOvW1wXGNX0567Hl/M3KLETfzwSYXWuWjB3D6jr rU+vE29eaV4j2uZEQ9hY3LidIf3q9mpkb+O6Vegli96kJBpPFOtpXijLIzX74W24 zau9cnBPxsKVLJBVtnwPD4QBk2XG9TnKo/9uDfQuRe6hlLaz18pAxWVy3717uCrA z0hKzhLdcITxzubma078VLLXyjSf777c4wJZeEcMOH9jXzYyUqGj2HGC+1zvb5a8 anfoaj/EYHjO3HZxibaXXZl1bmg7D5B+1yIBn0+Nna+e9Kqawt9OwzmGw31y6+Mi K/gzukWKjOvxJA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:53:16 2025 by rpki-client