$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: 1Hz7C9Q4O4wUkApuqTCSsZ2qYTtXOQipTC99aDawHz0= Subject key identifier: 37:3C:02:29:09:BF:FE:53:13:BD:C3:49:CE:D6:BA:D2:55:D6:B8:28 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 0198D5BB9BBE366ED90CACCB6D70468E43C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1657 Signing time: Sat 23 Aug 2025 07:01:38 +0000 Manifest this update: Sat 23 Aug 2025 07:01:38 +0000 Manifest next update: Sun 24 Aug 2025 07:01:38 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 4Zct-UA2loSt3irTG6EROEOgPVU.roa (hash: NLd8vf2slw/QIb/HBdVGn4XmU0dDovssu3lZU415Pao=) 3: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 4: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (hash: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=) 5: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 6: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 7: fRZWH_M0OyQ2q7C3l2YZBzviPzY.roa (hash: F07+RgoevJOf1u0ML2Jb2xCzFrPFpbtH07Gxnbmp3Hg=) 8: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: zJSU2C1+F6OD1I53HheeKB0AOxoruNkBhjSoi3MMwAQ=) 10: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 11: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:9b:be:36:6e:d9:0c:ac:cb:6d:70:46:8e:43:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Aug 23 07:01:38 2025 GMT Not After : Aug 24 07:01:38 2025 GMT Subject: CN=373c022909bffe5313bdc349ced6bad255d6b828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:64:d9:c4:d5:b0:39:29:a5:89:93:16:db: 01:b2:b9:43:c6:80:b4:e5:95:f2:ff:cd:0e:82:26: 80:f4:8f:71:4b:2a:00:64:d2:03:28:29:fa:bb:d7: 65:d5:94:5d:57:37:9c:15:fd:70:63:86:f0:82:46: 0d:41:3e:c3:cc:f4:50:05:ef:69:7c:17:63:27:f0: 70:36:7a:fb:28:a6:6c:06:41:95:fc:ae:03:05:79: d5:2e:b3:fd:a7:e9:c1:e8:6a:17:67:b0:10:0b:25: db:2b:1a:fd:3e:01:8c:ef:15:07:c1:ce:57:93:01: 56:2c:6d:43:bc:46:77:7c:54:65:4e:ce:22:57:e7: 95:b7:c6:5d:55:3e:dd:51:63:30:3f:6c:0e:54:5d: 64:e4:c2:e9:36:48:82:9f:bc:e5:71:49:66:6a:ce: 96:86:93:35:7b:88:57:40:17:10:87:f4:f6:ad:f1: 6b:d0:96:20:22:d9:c0:e5:55:98:de:f5:52:1a:ee: 0e:a7:45:5b:72:55:2e:f8:45:98:24:ff:e3:7d:d3: f5:28:12:cf:bb:7a:c3:87:f9:6c:c4:05:48:00:5e: 70:de:aa:ec:de:2f:83:64:91:08:3a:0e:27:c1:38: 29:ea:9a:f8:6e:c2:1b:66:b4:b1:46:69:1b:f5:de: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3C:02:29:09:BF:FE:53:13:BD:C3:49:CE:D6:BA:D2:55:D6:B8:28 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:30:2c:c0:53:9d:00:52:8d:96:f1:f1:c0:b7:d1:d1:bf:04: e9:49:ea:33:f3:3b:62:34:5f:18:18:c2:47:a7:a0:15:2d:a9: 49:51:a5:28:1e:88:1c:af:43:54:7d:8e:af:a0:14:82:2f:af: 6e:60:78:40:ed:e3:02:04:36:10:53:93:2f:1b:39:1a:6c:3c: f7:27:4c:d2:36:6b:3d:e6:cf:ab:ed:9b:5d:e6:b6:ba:2a:bb: 14:25:cd:0c:d3:a6:69:72:37:78:10:8e:00:9e:a9:28:9d:d2: 7a:31:6d:6c:34:6d:a7:d1:ed:6c:3a:d3:f3:61:5a:c5:ad:1b: 27:c5:35:41:49:74:49:fb:8a:81:08:90:a5:a6:8c:f4:96:ca: 36:d9:6e:81:6b:59:52:b4:a0:02:9b:4e:c8:17:30:63:d0:b1: 14:49:31:e1:90:c6:da:59:be:da:9e:2e:90:cf:92:a5:34:9f: 4d:96:99:f2:24:92:69:db:9f:d8:5e:2b:ce:b0:4c:86:bd:07: fd:5e:58:f4:ec:7f:53:9c:37:fc:4c:dc:16:bc:13:c4:1c:cc: 60:f1:43:34:17:82:fc:af:07:7f:5b:f3:40:46:3c:e9:71:69: b0:da:9e:d2:9b:2d:66:b3:c6:03:32:8f:c9:44:b1:f1:bc:00: f7:4d:27:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu5u+Nm7ZDKzLbXBGjkPHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUwODIzMDcwMTM4WhcNMjUwODI0MDcwMTM4WjAzMTEwLwYDVQQD EygzNzNjMDIyOTA5YmZmZTUzMTNiZGMzNDljZWQ2YmFkMjU1ZDZiODI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGtk2cTVsDkppYmTFtsBsrlDxoC0 5ZXy/80OgiaA9I9xSyoAZNIDKCn6u9dl1ZRdVzecFf1wY4bwgkYNQT7DzPRQBe9p fBdjJ/BwNnr7KKZsBkGV/K4DBXnVLrP9p+nB6GoXZ7AQCyXbKxr9PgGM7xUHwc5X kwFWLG1DvEZ3fFRlTs4iV+eVt8ZdVT7dUWMwP2wOVF1k5MLpNkiCn7zlcUlmas6W hpM1e4hXQBcQh/T2rfFr0JYgItnA5VWY3vVSGu4Op0VbclUu+EWYJP/jfdP1KBLP u3rDh/lsxAVIAF5w3qrs3i+DZJEIOg4nwTgp6pr4bsIbZrSxRmkb9d4AGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDc8AikJv/5TE73DSc7WutJV1rgoMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjAswFOd AFKNlvHxwLfR0b8E6UnqM/M7YjRfGBjCR6egFS2pSVGlKB6IHK9DVH2Or6AUgi+v bmB4QO3jAgQ2EFOTLxs5Gmw89ydM0jZrPebPq+2bXea2uiq7FCXNDNOmaXI3eBCO AJ6pKJ3SejFtbDRtp9HtbDrT82Faxa0bJ8U1QUl0SfuKgQiQpaaM9JbKNtlugWtZ UrSgAptOyBcwY9CxFEkx4ZDG2lm+2p4ukM+SpTSfTZaZ8iSSaduf2F4rzrBMhr0H /V5Y9Ox/U5w3/EzcFrwTxBzMYPFDNBeC/K8Hf1vzQEY86XFpsNqe0pstZrPGAzKP yUSx8bwA900nCw== -----END CERTIFICATE-----Generated at Sat Aug 23 13:49:26 2025 by rpki-client