$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: X9EEc1LtdEbemDkxcVHonnhYRgeLGSx7NL+zMoH5Bwc= Subject key identifier: AD:AF:FE:63:2F:74:91:70:67:55:BD:7A:17:96:F1:73:AA:BE:64:E7 Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 0198D660EE643FF3143D5A0CA54068579B70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 1443 Signing time: Sat 23 Aug 2025 10:02:13 +0000 Manifest this update: Sat 23 Aug 2025 10:02:13 +0000 Manifest next update: Sun 24 Aug 2025 10:02:13 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: v/LXggjLpJuttVGabkTgHGy9WwqBJtRXz9mtQsL+KWc=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:60:ee:64:3f:f3:14:3d:5a:0c:a5:40:68:57:9b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Aug 23 10:02:13 2025 GMT Not After : Aug 24 10:02:13 2025 GMT Subject: CN=adaffe632f7491706755bd7a1796f173aabe64e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:27:5e:9a:7f:e2:7e:cd:8b:16:6d:fa:9d: d0:84:37:c8:5a:4c:03:d2:9b:bb:1f:b3:be:c0:a0: ea:de:26:23:99:11:4a:94:10:28:2b:34:f3:85:17: 7a:bc:e8:3a:8b:4b:e6:1e:ce:c2:65:e6:d3:43:df: 88:ef:41:a0:46:bb:2e:6d:21:11:1a:63:50:0f:1f: f0:1f:d9:02:14:c4:c4:87:33:42:10:d9:3c:4e:ab: 88:9b:57:55:fd:91:7b:54:28:16:7c:56:be:e2:f2: 70:6e:4b:72:c6:8a:13:dc:c0:6e:72:0e:5c:74:f1: 8b:26:67:cf:cd:91:41:32:55:b8:6b:39:8f:06:f2: d0:4b:74:dc:47:fe:d3:c4:27:85:77:99:1e:f9:ca: 4f:93:98:cc:ec:02:51:8e:28:ad:36:97:28:03:49: 09:02:b2:34:65:f3:b2:4a:9b:61:76:e9:90:56:13: a5:62:c5:f3:25:87:f9:2a:05:1f:2c:a6:96:e4:43: f9:c1:08:c4:75:23:b5:79:68:da:6a:70:ec:0f:ae: b9:d5:34:89:aa:28:d5:cc:bd:16:f0:78:d9:91:8f: 6b:91:d7:f2:e7:cc:be:b3:6b:8e:ab:f7:98:40:35: fa:47:b7:1d:fa:69:81:06:95:76:0b:30:31:fc:8a: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AF:FE:63:2F:74:91:70:67:55:BD:7A:17:96:F1:73:AA:BE:64:E7 X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4f:65:24:64:43:62:af:30:da:e3:e4:54:92:ad:f7:60:24: 87:33:10:ec:6b:36:63:3c:02:b9:ef:ff:ae:34:46:25:6b:a5: 57:58:9c:42:f8:c4:97:b8:2d:06:ea:83:8c:c7:53:36:38:9c: 7e:2a:23:21:a5:02:10:28:df:8e:8f:6a:d8:5f:bc:a4:66:dc: 12:99:34:8c:3e:eb:45:34:f9:d2:ee:e1:e9:8b:3d:4f:31:0a: dd:44:57:23:59:73:78:92:c0:51:9e:e9:9f:0f:f2:fe:96:c0: 26:bb:66:f8:c9:1f:96:a5:7f:70:4b:0e:58:44:bc:8e:b4:17: 5b:d7:be:cc:40:74:15:7c:af:e3:47:89:0a:4e:48:6f:a5:07: ef:a4:ea:3c:40:78:d7:86:30:39:46:f8:31:a3:0b:49:15:a4: e3:ca:e5:74:5e:c1:8f:4c:df:a9:31:88:d0:dc:c2:28:5c:ee: 18:e7:65:fe:7f:27:d9:bb:51:c6:67:98:c1:f4:e0:54:9b:83: d4:07:97:fe:5a:71:f5:11:6c:84:6b:45:4d:0b:78:f6:1a:4e: 51:99:89:e4:6b:86:8e:2b:b7:92:46:cc:a4:a0:6b:dc:5e:92: c3:d1:cc:36:bd:8f:ca:aa:a8:46:09:47:92:9c:f9:e7:00:ad: 2f:c3:e4:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWYO5kP/MUPVoMpUBoV5twMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUwODIzMTAwMjEzWhcNMjUwODI0MTAwMjEzWjAzMTEwLwYDVQQD EyhhZGFmZmU2MzJmNzQ5MTcwNjc1NWJkN2ExNzk2ZjE3M2FhYmU2NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqwnXpp/4n7NixZt+p3QhDfIWkwD 0pu7H7O+wKDq3iYjmRFKlBAoKzTzhRd6vOg6i0vmHs7CZebTQ9+I70GgRrsubSER GmNQDx/wH9kCFMTEhzNCENk8TquIm1dV/ZF7VCgWfFa+4vJwbktyxooT3MBucg5c dPGLJmfPzZFBMlW4azmPBvLQS3TcR/7TxCeFd5ke+cpPk5jM7AJRjiitNpcoA0kJ ArI0ZfOySpthdumQVhOlYsXzJYf5KgUfLKaW5EP5wQjEdSO1eWjaanDsD6651TSJ qijVzL0W8HjZkY9rkdfy58y+s2uOq/eYQDX6R7cd+mmBBpV2CzAx/IpAkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2v/mMvdJFwZ1W9eheW8XOqvmTnMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGk9lJGRD Yq8w2uPkVJKt92AkhzMQ7Gs2YzwCue//rjRGJWulV1icQvjEl7gtBuqDjMdTNjic fiojIaUCECjfjo9q2F+8pGbcEpk0jD7rRTT50u7h6Ys9TzEK3URXI1lzeJLAUZ7p nw/y/pbAJrtm+MkflqV/cEsOWES8jrQXW9e+zEB0FXyv40eJCk5Ib6UH76TqPEB4 14YwOUb4MaMLSRWk48rldF7Bj0zfqTGI0NzCKFzuGOdl/n8n2btRxmeYwfTgVJuD 1AeX/lpx9RFshGtFTQt49hpOUZmJ5GuGjiu3kkbMpKBr3F6Sw9HMNr2PyqqoRglH kpz55wCtL8Pkrw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:37 2025 by rpki-client