$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: grNe7D1dJlUEv+b+tjjJk8u+IzNvTMKalbK6XxsGPXU= Subject key identifier: CC:32:18:E2:0F:93:D3:4A:4A:FC:B5:4E:2C:F1:19:FE:C2:8D:00:33 Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 0198D583BC00C333563A797722E2BC416376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 1657 Signing time: Sat 23 Aug 2025 06:00:37 +0000 Manifest this update: Sat 23 Aug 2025 06:00:37 +0000 Manifest next update: Sun 24 Aug 2025 06:00:37 +0000 Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=) 2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=) 3: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=) 4: 9eiUlUD0hj0t27n6HAJRiEtwViI.roa (hash: blcfxDrN7nUCCk3DcsvznLKNNMxZgs2x1KvzO6XB+pY=) 5: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=) 6: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: yN8lhJbQm9Pi4qdaHeE1Gjdp0j6flqXRS/V8/kkrwMA=) 7: Mb-LmcxVL1VtsH8hRS7hr7XbD0M.roa (hash: KME4a3jYpOqtZ1MxibFa+qtZYD833WMiiPbSgGuC5dk=) 8: PCRZo7y9tu3CQFwmbfoQbR3eUHc.roa (hash: TAX2ekhpscWHlQTg3ikzSFgXMMFTiQv22GQIE+8xRLA=) 9: XwLFpRj0dZU0LB-jqIeBRVr3WiQ.roa (hash: Hh68YUysT9TlK/wnW8P9Ud671FM4CJjbFuG795wPTz4=) 10: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (hash: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=) 11: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=) 12: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=) 13: ur75_utePzQFHMJnHtwdIqrcVvE.roa (hash: KyHjYmZU1vSOh/Fl9iCE7ipsY2BzRFcyEiJ6qYetbaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:bc:00:c3:33:56:3a:79:77:22:e2:bc:41:63:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Aug 23 06:00:37 2025 GMT Not After : Aug 24 06:00:37 2025 GMT Subject: CN=cc3218e20f93d34a4afcb54e2cf119fec28d0033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:27:a3:0c:b8:88:d1:19:82:67:4d:5c:9e: d7:13:21:23:cf:b5:8a:61:96:a3:70:47:d6:c7:d0: a2:93:21:09:e9:fa:e6:63:36:40:fc:99:6f:b2:b7: c7:96:3a:29:39:d3:6c:95:de:8a:33:c7:43:06:52: 67:e3:bc:88:c4:b3:35:56:f7:3f:44:cc:6d:7a:74: 5b:16:f3:55:f9:d0:d6:1c:68:7c:d3:0d:47:8e:de: 92:33:1d:41:05:ea:8f:cd:8a:4c:92:0b:e0:7a:4d: d2:47:aa:45:0a:55:93:f2:6a:83:68:14:f9:9e:de: 71:e8:d0:cc:3a:b4:be:75:5c:66:3c:5c:f5:e3:2a: df:1d:9b:98:10:7e:25:a6:3e:9d:ec:b5:b5:86:25: c5:3f:41:38:83:a6:05:56:d5:f8:9d:7d:28:03:87: a0:80:1a:61:ec:37:8c:3d:e0:6c:74:4b:53:d0:22: 8c:5a:87:d3:ac:9a:80:82:5e:38:a4:52:ff:6a:62: 6a:f7:3f:3f:eb:24:28:cf:39:da:62:4e:03:69:e7: a2:1f:ab:e6:fa:91:b1:99:61:f9:bc:cb:3f:b5:f5: a6:f4:a5:06:cb:c4:19:c1:0f:62:46:1e:4d:0b:c1: 30:af:c1:e9:cf:1b:6d:40:c6:e8:90:a7:ee:85:ca: 27:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:32:18:E2:0F:93:D3:4A:4A:FC:B5:4E:2C:F1:19:FE:C2:8D:00:33 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e0:37:15:e6:f4:91:88:18:0c:99:7a:c8:43:be:06:35:de: ec:dc:2d:05:7f:a0:f4:ad:c6:55:ad:49:22:71:54:e7:76:0e: 68:e6:88:90:b7:37:90:40:43:2f:78:cc:e4:e8:bf:bf:74:b2: 01:e5:30:9a:17:eb:e9:cb:08:6c:01:55:15:6b:58:91:0d:c0: 77:fe:aa:a4:ee:32:ca:5d:d2:ca:71:c5:cf:c5:49:91:f9:53: 96:40:93:0d:71:2d:98:4f:a3:f9:31:bb:80:82:84:01:f1:c5: 89:fa:5f:8d:89:f1:bb:c2:dc:13:b9:0a:7c:04:91:a1:be:d5: ed:bf:12:5c:28:85:df:6b:2a:8f:cc:75:0e:b9:13:88:3e:f7: ba:96:7a:5c:eb:7c:30:68:25:5d:8e:23:89:85:0d:4b:22:6c: de:be:99:33:4d:c5:30:ee:f1:4b:30:a0:87:4b:78:25:f4:fb: bf:e2:e9:31:de:c9:24:e5:3c:15:e3:69:9d:33:2c:05:73:8f: 16:7e:04:14:a2:0e:05:77:ea:e8:62:ae:01:e5:55:85:e3:a5: 41:3b:8d:8e:01:b5:2b:0a:f2:cc:e6:fd:ae:21:ff:e1:9a:3f: 1e:75:d4:7b:41:a2:59:84:47:12:1f:93:86:91:2c:19:b6:4d: 3a:b7:f9:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg7wAwzNWOnl3IuK8QWN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUwODIzMDYwMDM3WhcNMjUwODI0MDYwMDM3WjAzMTEwLwYDVQQD EyhjYzMyMThlMjBmOTNkMzRhNGFmY2I1NGUyY2YxMTlmZWMyOGQwMDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Unowy4iNEZgmdNXJ7XEyEjz7WK YZajcEfWx9CikyEJ6frmYzZA/JlvsrfHljopOdNsld6KM8dDBlJn47yIxLM1Vvc/ RMxtenRbFvNV+dDWHGh80w1Hjt6SMx1BBeqPzYpMkgvgek3SR6pFClWT8mqDaBT5 nt5x6NDMOrS+dVxmPFz14yrfHZuYEH4lpj6d7LW1hiXFP0E4g6YFVtX4nX0oA4eg gBph7DeMPeBsdEtT0CKMWofTrJqAgl44pFL/amJq9z8/6yQozznaYk4DaeeiH6vm +pGxmWH5vMs/tfWm9KUGy8QZwQ9iRh5NC8Ewr8HpzxttQMbokKfuhconHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwyGOIPk9NKSvy1TizxGf7CjQAzMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOA3Feb0 kYgYDJl6yEO+BjXe7NwtBX+g9K3GVa1JInFU53YOaOaIkLc3kEBDL3jM5Oi/v3Sy AeUwmhfr6csIbAFVFWtYkQ3Ad/6qpO4yyl3SynHFz8VJkflTlkCTDXEtmE+j+TG7 gIKEAfHFifpfjYnxu8LcE7kKfASRob7V7b8SXCiF32sqj8x1DrkTiD73upZ6XOt8 MGglXY4jiYUNSyJs3r6ZM03FMO7xSzCgh0t4JfT7v+LpMd7JJOU8FeNpnTMsBXOP Fn4EFKIOBXfq6GKuAeVVheOlQTuNjgG1KwryzOb9riH/4Zo/HnXUe0GiWYRHEh+T hpEsGbZNOrf5Ww== -----END CERTIFICATE-----Generated at Sat Aug 23 15:24:09 2025 by rpki-client