$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: z1OoBYbthbDP4KVZqITDmSnX0/mofteThCWwUPOkYCU= Subject key identifier: 54:88:52:FB:01:1D:58:4B:16:DD:58:CD:E5:CB:C7:18:26:5B:41:7B Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 0198D472A6B56120E346F403D3126E2339FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 139D Signing time: Sat 23 Aug 2025 01:02:20 +0000 Manifest this update: Sat 23 Aug 2025 01:02:20 +0000 Manifest next update: Sun 24 Aug 2025 01:02:20 +0000 Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 2: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 3: HLAFzpF1dtaNSAOxEl-uHrb_wcg.roa (hash: PtoSILiXlrGyGsA1CVrSehyontCCBay4De7QPXIkVlI=) 4: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=) 5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: LJvw9JRrwriKg7jy96PR3y88ghhhdISuMVOpE5mELdQ=) 6: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 7: NojFSrrS5JKJQebH50O-Sn9xxis.roa (hash: 99amkQAhCwzYf+SSxz6XlFlKrJhhJL3h7GCB1tqsJIA=) 8: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 9: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=) 10: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 11: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 12: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 13: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=) 14: yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa (hash: D7e3OOFi7lIh2fyesD48w9fTpDFZydPZVUW+H+QSZ9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:72:a6:b5:61:20:e3:46:f4:03:d3:12:6e:23:39:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Aug 23 01:02:20 2025 GMT Not After : Aug 24 01:02:20 2025 GMT Subject: CN=548852fb011d584b16dd58cde5cbc718265b417b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cf:8b:cf:61:87:bd:e5:24:a8:80:31:35:ce: a0:00:e0:96:7b:74:3c:7d:1f:1d:6b:34:f0:d3:53: 1d:61:36:74:6b:00:5e:6c:bc:0c:91:8f:b0:82:30: 32:be:30:18:c0:95:ac:7e:ca:1a:9f:b3:1f:e6:dc: 1f:dc:af:db:a7:f6:30:9d:8d:4c:31:2f:64:0d:75: d5:43:f7:d0:e5:4c:44:52:21:c7:fd:9a:35:da:7a: 13:6a:85:11:8d:40:5d:64:83:01:20:bb:71:36:d9: a2:93:05:26:27:07:b5:95:e0:e9:28:3a:55:24:67: 65:98:92:fd:5d:7e:d1:f1:44:e9:cc:d6:84:ff:a2: 7d:05:27:82:d8:30:8b:0b:c2:3a:98:c8:0e:c1:c9: 96:9d:5b:c6:4e:f4:54:bd:02:28:01:08:dc:52:23: 52:ce:3a:c4:e5:de:62:a8:27:06:bb:d8:38:38:99: e4:5c:44:5a:e9:58:dc:44:7d:e1:e5:a3:e8:2d:53: fb:79:84:17:d1:e1:c9:80:15:f2:d6:82:0a:78:c1: a3:f6:42:e7:57:d4:e5:5f:e8:ae:bf:a1:12:42:4a: ce:2a:cb:40:d0:97:13:87:15:e3:26:bb:07:54:ef: 01:58:67:2e:35:6c:d6:58:34:4f:64:4b:ea:28:fe: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:88:52:FB:01:1D:58:4B:16:DD:58:CD:E5:CB:C7:18:26:5B:41:7B X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ff:cf:4a:c6:36:fe:ad:54:a1:c0:d1:de:24:e7:70:74:8e: d2:50:fa:ed:66:3d:92:b0:4d:55:30:77:33:9e:74:dd:fe:97: af:28:e3:f7:df:5d:90:61:ea:d6:cb:3c:19:fd:2d:0d:36:5e: 4d:04:f5:c3:c6:0e:7f:2c:f6:4b:49:46:32:21:bd:57:da:0d: b4:80:35:bf:39:42:9c:9c:bb:72:bf:17:38:0b:fb:a5:a6:2b: cc:17:71:8c:d3:68:af:7d:3f:6f:d4:6f:88:79:bc:cc:29:15: 99:47:e8:5a:d9:84:d0:73:26:93:d6:3e:d0:94:61:aa:90:af: b3:db:b3:7c:3f:8c:0f:43:b4:5e:6b:20:d9:95:b1:fe:d0:c5: 93:01:bf:d5:a7:62:bc:be:be:26:2b:86:de:2e:79:05:10:cf: cd:01:32:26:3d:a0:77:d9:48:45:dd:32:b3:c7:f4:1d:d1:1d: 9b:ab:b2:8e:80:d2:1b:b3:2f:7f:9d:01:87:a2:6f:22:66:e1: 37:29:da:fd:12:a3:55:4f:91:b1:a9:a3:f0:14:38:3f:43:ab: fe:a5:1e:8f:09:5e:2d:1e:96:b2:aa:8d:87:ef:e8:8a:c1:a9: 00:cd:c5:34:df:47:54:69:4b:06:00:a4:20:99:ee:eb:0c:d9: fa:cc:a7:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUcqa1YSDjRvQD0xJuIzn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUwODIzMDEwMjIwWhcNMjUwODI0MDEwMjIwWjAzMTEwLwYDVQQD Eyg1NDg4NTJmYjAxMWQ1ODRiMTZkZDU4Y2RlNWNiYzcxODI2NWI0MTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs+Lz2GHveUkqIAxNc6gAOCWe3Q8 fR8dazTw01MdYTZ0awBebLwMkY+wgjAyvjAYwJWsfsoan7Mf5twf3K/bp/YwnY1M MS9kDXXVQ/fQ5UxEUiHH/Zo12noTaoURjUBdZIMBILtxNtmikwUmJwe1leDpKDpV JGdlmJL9XX7R8UTpzNaE/6J9BSeC2DCLC8I6mMgOwcmWnVvGTvRUvQIoAQjcUiNS zjrE5d5iqCcGu9g4OJnkXERa6VjcRH3h5aPoLVP7eYQX0eHJgBXy1oIKeMGj9kLn V9TlX+iuv6ESQkrOKstA0JcThxXjJrsHVO8BWGcuNWzWWDRPZEvqKP4ZWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSIUvsBHVhLFt1YzeXLxxgmW0F7MB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFP/PSsY2 /q1UocDR3iTncHSO0lD67WY9krBNVTB3M5503f6Xryjj999dkGHq1ss8Gf0tDTZe TQT1w8YOfyz2S0lGMiG9V9oNtIA1vzlCnJy7cr8XOAv7paYrzBdxjNNor30/b9Rv iHm8zCkVmUfoWtmE0HMmk9Y+0JRhqpCvs9uzfD+MD0O0Xmsg2ZWx/tDFkwG/1adi vL6+JiuG3i55BRDPzQEyJj2gd9lIRd0ys8f0HdEdm6uyjoDSG7Mvf50Bh6JvImbh Nyna/RKjVU+Rsamj8BQ4P0Or/qUejwleLR6WsqqNh+/oisGpAM3FNN9HVGlLBgCk IJnu6wzZ+synnQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:31:57 2025 by rpki-client