$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: AtKuQs9wsl438R2uTtjczJ2rnelqNulrabze3fSUsck= Subject key identifier: BD:7A:3E:D9:9B:23:B1:65:34:53:7A:6D:C9:48:45:C3:15:6C:FF:37 Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 0199FDD8DC3FD069D38340A6982F8E006A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 14DC Signing time: Sun 19 Oct 2025 19:01:11 +0000 Manifest this update: Sun 19 Oct 2025 19:01:11 +0000 Manifest next update: Mon 20 Oct 2025 19:01:11 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: utgxQ9eXLKQ8E6AJUa6TZplBAFXkrk2LOtWW4IufF8o=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d8:dc:3f:d0:69:d3:83:40:a6:98:2f:8e:00:6a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Oct 19 19:01:11 2025 GMT Not After : Oct 20 19:01:11 2025 GMT Subject: CN=bd7a3ed99b23b16534537a6dc94845c3156cff37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:f4:27:d7:72:ee:66:4e:fc:98:db:2a:ca: c0:3c:c1:99:69:98:c6:c2:d4:2b:e4:22:50:a2:c1: a0:4b:bc:34:25:7b:60:37:85:8c:f2:3e:b9:1e:ed: bb:4b:06:df:fe:c1:87:20:dc:9f:fa:3a:f8:ff:d5: 43:bd:a0:31:94:c7:54:31:60:ba:b6:7c:05:89:21: 6c:11:6e:ea:46:30:24:8d:d4:f3:90:a1:eb:07:e5: fb:46:37:ca:74:b1:ea:e0:32:6e:89:fd:5f:35:5b: e2:c6:57:e1:97:10:f5:b2:86:59:6a:02:4c:e5:d7: 36:83:1a:16:0f:65:5a:11:fa:53:e1:38:18:81:89: 38:a3:5e:c0:5e:8e:33:e9:97:49:6c:06:c2:49:e0: c9:be:1e:62:a6:21:7c:20:7b:d1:bf:a6:4f:30:4c: f5:5d:c5:35:58:c6:94:98:44:0e:23:74:49:c0:02: bb:61:97:0f:30:42:e2:8a:f4:99:68:10:08:1a:71: 8a:4c:42:04:4b:76:0a:80:5b:e0:34:ef:ca:db:bd: 64:74:ec:34:e4:67:9a:af:9a:d3:dd:7c:a2:da:32: 7e:35:9b:9f:8a:ac:85:89:c6:23:38:1a:29:5b:22: 9d:c4:9f:94:2a:ef:a7:f2:5a:c6:f9:9b:6e:53:3c: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7A:3E:D9:9B:23:B1:65:34:53:7A:6D:C9:48:45:C3:15:6C:FF:37 X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e1:a5:fe:16:e9:f7:d7:a3:69:a4:b8:ca:9e:4e:1f:89:36: e4:5b:55:c8:8d:e1:9c:79:b2:d2:aa:60:f9:f8:9b:02:0d:b6: c1:d0:61:d4:0b:a7:c1:c6:5c:8f:78:a5:5b:14:46:ff:e9:34: 7c:f9:72:f5:b0:2d:63:a6:5a:eb:3d:dd:ea:4f:3e:28:d2:52: 35:8b:45:92:8e:47:68:15:d2:e7:40:b8:1d:3a:91:5c:0e:29: d8:b4:13:63:8d:66:5d:49:aa:72:80:5e:3f:fe:0d:8f:dc:3a: 71:7e:b4:e3:74:10:bb:06:0a:d2:f6:72:43:9d:eb:ef:ab:95: 6c:1d:a7:0a:c6:1a:bb:9b:2e:ae:82:72:7d:8d:21:6b:7a:0c: 8e:ce:ad:8b:96:9b:19:ff:b5:82:b2:1c:7f:26:6e:70:da:8e: 89:83:31:f5:36:d6:53:23:2b:3e:fa:26:03:66:66:91:22:60: 6a:ea:fa:a6:f1:cd:2c:78:93:02:0b:6e:c9:a5:ff:b7:e7:5a: 84:26:d7:55:94:a5:5c:95:8c:ef:bb:de:35:1c:61:27:84:f9: fd:5d:df:41:6c:04:f0:c0:f4:00:19:62:43:8d:5e:83:d9:5f: 47:38:f8:ee:29:0f:c6:18:73:3e:6d:41:99:b5:25:d8:01:18: 6f:c3:5a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92Nw/0GnTg0CmmC+OAGprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUxMDE5MTkwMTExWhcNMjUxMDIwMTkwMTExWjAzMTEwLwYDVQQD EyhiZDdhM2VkOTliMjNiMTY1MzQ1MzdhNmRjOTQ4NDVjMzE1NmNmZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf/0J9dy7mZO/JjbKsrAPMGZaZjG wtQr5CJQosGgS7w0JXtgN4WM8j65Hu27Swbf/sGHINyf+jr4/9VDvaAxlMdUMWC6 tnwFiSFsEW7qRjAkjdTzkKHrB+X7RjfKdLHq4DJuif1fNVvixlfhlxD1soZZagJM 5dc2gxoWD2VaEfpT4TgYgYk4o17AXo4z6ZdJbAbCSeDJvh5ipiF8IHvRv6ZPMEz1 XcU1WMaUmEQOI3RJwAK7YZcPMELiivSZaBAIGnGKTEIES3YKgFvgNO/K271kdOw0 5Gear5rT3Xyi2jJ+NZufiqyFicYjOBopWyKdxJ+UKu+n8lrG+ZtuUzz6TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL16PtmbI7FlNFN6bclIRcMVbP83MB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOGl/hbp 99ejaaS4yp5OH4k25FtVyI3hnHmy0qpg+fibAg22wdBh1AunwcZcj3ilWxRG/+k0 fPly9bAtY6Za6z3d6k8+KNJSNYtFko5HaBXS50C4HTqRXA4p2LQTY41mXUmqcoBe P/4Nj9w6cX6043QQuwYK0vZyQ53r76uVbB2nCsYau5suroJyfY0ha3oMjs6ti5ab Gf+1grIcfyZucNqOiYMx9TbWUyMrPvomA2ZmkSJgaur6pvHNLHiTAgtuyaX/t+da hCbXVZSlXJWM77veNRxhJ4T5/V3fQWwE8MD0ABliQ41eg9lfRzj47ikPxhhzPm1B mbUl2AEYb8NanA== -----END CERTIFICATE-----Generated at Mon Oct 20 01:17:48 2025 by rpki-client