$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: 08KIve89WjSEnQY92+nOEqubS+yniZMNDJM8q5r/5V4= Subject key identifier: 02:42:12:39:F8:E8:6D:85:51:C4:24:F2:F2:B7:1E:73:FF:4B:FA:04 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 0198D583CB562B2B7838801AFD982F22F75A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1665 Signing time: Sat 23 Aug 2025 06:00:40 +0000 Manifest this update: Sat 23 Aug 2025 06:00:40 +0000 Manifest next update: Sun 24 Aug 2025 06:00:40 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: K0A1Fvag5wQBZRIEPtaUVvgpD3A.roa (hash: gyUwS3I2bK0n8nOPkM1qVwO/v11ITk+rE5ggoeNpr1Y=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 9: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 10: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 11: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 12: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 13: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 14: fMzT-5d-H7wm7UzPX4PbBLndjlo.roa (hash: QHxOUGueDky85wAcdSL/hpvn/Djtg29akovspAUAOhU=) 15: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 16: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: AUVu/UtLSRImTbj3wQM7vmen3T08FDVXbrkCJ2ONNCk=) 17: ksrEobalLCBWyKJfEvgKO7eGBn0.roa (hash: mhEeMKvhAtKkfgKwj2K8qvolMSVHSEc7JsD/l79bIzA=) 18: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 19: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 20: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 21: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 22: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 23: uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa (hash: lh9JEVycjwO2JOZAXH6/OskJCw09FDKHU4kXtolx/mg=) 24: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 25: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 26: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:cb:56:2b:2b:78:38:80:1a:fd:98:2f:22:f7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Aug 23 06:00:40 2025 GMT Not After : Aug 24 06:00:40 2025 GMT Subject: CN=02421239f8e86d8551c424f2f2b71e73ff4bfa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:89:3b:40:0e:3e:1b:69:ac:33:32:7a:9f: 95:3e:43:c5:0e:5c:cd:0a:81:be:04:b0:0a:7d:5d: da:42:84:41:a0:30:a7:65:7c:11:9a:09:47:f1:cb: f0:2a:d3:46:7e:5d:75:2d:7a:d3:dd:2a:17:e0:ea: 1f:23:e3:5b:a6:3f:5c:19:da:76:80:3b:c3:ef:d5: ed:d2:23:98:f7:47:a8:71:30:9d:15:39:f6:bd:0c: a5:6d:f0:5c:c1:44:ed:4e:13:50:a5:2b:e3:d2:14: 8f:b1:6b:62:7f:9d:17:9e:c3:72:18:e4:f5:9b:2e: 31:fe:03:f3:34:71:88:e6:88:22:39:83:e1:1c:12: 25:d8:1c:3c:07:a4:ba:23:0c:45:d6:3d:ea:dc:ff: e9:ba:c7:eb:ed:08:1c:e5:40:f9:0e:f4:4a:50:b7: 21:58:f0:be:39:c6:c2:3d:42:be:a4:ac:01:10:10: 54:7f:35:76:1c:c2:5f:8c:79:ad:d4:0c:5f:c4:fb: 87:7c:a1:47:45:75:bd:4a:c9:3b:1f:c6:42:4b:f1: 31:f3:48:2a:8e:5c:7d:89:df:9b:2d:cb:ea:78:48: 4c:eb:bf:bc:ac:89:83:29:85:a7:e8:05:29:3f:8d: a3:11:77:01:bd:1b:b6:44:f4:f4:05:aa:23:41:b3: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:42:12:39:F8:E8:6D:85:51:C4:24:F2:F2:B7:1E:73:FF:4B:FA:04 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:75:91:94:c6:50:4f:41:25:88:da:14:27:01:e8:36:a7:1f: 08:3b:1a:81:e3:fa:fe:1d:62:26:d7:89:53:15:a8:ea:df:81: 50:25:d4:22:34:44:0c:57:1b:96:f4:55:32:b3:87:7b:f0:94: f1:2f:67:e0:b6:99:c3:87:61:d3:10:bf:69:58:ed:1e:5c:8d: 30:ed:32:af:bf:83:91:3d:88:4c:92:20:3b:91:c6:04:f0:de: c8:c2:1f:1b:c4:e1:81:d2:7d:2b:7c:be:92:89:ae:17:14:ae: 2b:ec:ea:44:de:3f:d0:a4:11:9e:a1:3e:b6:c1:f4:f5:be:e9: ac:a4:12:43:ac:2a:33:ae:09:e4:c3:e1:11:4a:81:a9:1a:f9: b2:1b:00:d7:0d:20:1b:c7:07:60:8b:93:7d:c2:a6:b2:22:54: b2:0c:e5:bb:af:34:aa:1c:29:6e:46:4b:cc:3d:b9:9a:81:0b: c6:22:76:ea:0c:ca:ab:eb:6f:67:9d:34:84:99:4f:62:59:56: 56:8a:d2:7c:ef:9e:10:26:16:cb:03:cf:1c:e3:8d:35:76:93: 05:d6:2e:f2:bf:91:93:e2:c9:ed:d1:a1:fe:e8:71:17:2b:86: d8:0b:79:a8:97:6f:de:1c:61:5e:5a:d8:ee:93:85:06:4a:f0: 29:a8:43:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg8tWKyt4OIAa/ZgvIvdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwODIzMDYwMDQwWhcNMjUwODI0MDYwMDQwWjAzMTEwLwYDVQQD EygwMjQyMTIzOWY4ZTg2ZDg1NTFjNDI0ZjJmMmI3MWU3M2ZmNGJmYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDuJO0AOPhtprDMyep+VPkPFDlzN CoG+BLAKfV3aQoRBoDCnZXwRmglH8cvwKtNGfl11LXrT3SoX4OofI+Nbpj9cGdp2 gDvD79Xt0iOY90eocTCdFTn2vQylbfBcwUTtThNQpSvj0hSPsWtif50XnsNyGOT1 my4x/gPzNHGI5ogiOYPhHBIl2Bw8B6S6IwxF1j3q3P/pusfr7Qgc5UD5DvRKULch WPC+OcbCPUK+pKwBEBBUfzV2HMJfjHmt1AxfxPuHfKFHRXW9Ssk7H8ZCS/Ex80gq jlx9id+bLcvqeEhM67+8rImDKYWn6AUpP42jEXcBvRu2RPT0BaojQbP93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJCEjn46G2FUcQk8vK3HnP/S/oEMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3WRlMZQ T0EliNoUJwHoNqcfCDsageP6/h1iJteJUxWo6t+BUCXUIjREDFcblvRVMrOHe/CU 8S9n4LaZw4dh0xC/aVjtHlyNMO0yr7+DkT2ITJIgO5HGBPDeyMIfG8ThgdJ9K3y+ komuFxSuK+zqRN4/0KQRnqE+tsH09b7prKQSQ6wqM64J5MPhEUqBqRr5shsA1w0g G8cHYIuTfcKmsiJUsgzlu680qhwpbkZLzD25moELxiJ26gzKq+tvZ500hJlPYllW VorSfO+eECYWywPPHOONNXaTBdYu8r+Rk+LJ7dGh/uhxFyuG2At5qJdv3hxhXlrY 7pOFBkrwKahD4w== -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:22 2025 by rpki-client