$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: iHl8tNH2O1CBlrO3Y2Kbn1m3dTWx4rvG8I2wT+1ES2w= Subject key identifier: 4D:B0:6D:8C:AB:F3:D4:58:D2:65:83:18:EE:8B:6F:11:CD:57:48:05 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 0198D472C7F9CCE27B6D7E7B9E4BA6F0E275 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 164D Signing time: Sat 23 Aug 2025 01:02:28 +0000 Manifest this update: Sat 23 Aug 2025 01:02:28 +0000 Manifest next update: Sun 24 Aug 2025 01:02:28 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: viVLLozYXtpcXtARJxeXleqwrmxm0XbZrTQIO7R1Hzg=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:72:c7:f9:cc:e2:7b:6d:7e:7b:9e:4b:a6:f0:e2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Aug 23 01:02:28 2025 GMT Not After : Aug 24 01:02:28 2025 GMT Subject: CN=4db06d8cabf3d458d2658318ee8b6f11cd574805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:f9:0e:79:3c:fd:f7:33:60:94:99:78:74: f9:8a:b8:09:4b:09:47:ae:00:c9:50:de:b0:33:d6: c5:e7:58:1e:2e:9f:2b:18:61:c5:f7:c2:c9:eb:09: a2:d0:53:5f:26:f5:56:ac:2e:5d:63:1f:a1:1b:af: d8:25:1f:18:cf:d7:03:77:3b:81:09:4b:53:bb:b0: 28:96:7a:8a:7d:3b:5d:19:96:7c:e8:3f:d7:0e:2e: 61:f9:9b:61:20:05:e7:60:28:98:63:d8:3b:d3:31: 85:28:14:23:97:83:77:32:18:16:8a:d1:6c:0d:ef: 4a:f1:41:99:93:f5:53:02:67:d8:17:98:5e:90:59: a4:0e:c7:62:e1:b6:dc:03:f1:ad:67:12:06:5f:f1: 42:97:1f:c9:a6:7e:e0:ec:aa:a2:aa:ff:53:a1:59: f7:84:d0:f1:c1:6e:29:54:68:4a:0c:d9:da:1e:e8: 4e:14:6d:b8:25:d4:54:2a:77:78:ec:e0:23:f3:5b: 42:c5:64:e4:99:4f:c9:18:85:dd:7b:ef:d3:c7:94: 83:b7:42:3a:aa:9a:2b:3b:a8:33:a5:99:92:85:09: b3:2c:b5:97:44:77:f6:2d:fc:bb:0c:86:7e:8a:8c: b2:44:ef:d7:4d:42:79:a4:1e:0f:06:6a:42:c6:6e: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B0:6D:8C:AB:F3:D4:58:D2:65:83:18:EE:8B:6F:11:CD:57:48:05 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2b:9c:c1:14:19:88:84:73:26:fa:4e:c1:ed:53:09:1a:7b: c5:f0:f8:8a:77:ef:e6:2f:bc:8f:85:64:67:70:a5:07:8b:0c: be:74:2f:1e:30:5c:78:68:ea:4c:f6:5f:c2:40:9f:f8:d8:fd: d0:54:f5:62:33:6f:2f:6a:4a:d6:02:ee:44:01:0e:17:ad:8b: d8:a1:71:83:43:92:f1:0c:d0:31:1f:31:e7:3a:b0:c0:a0:97: 35:3b:a5:43:8f:64:40:17:4e:c5:1d:b3:74:ba:51:6e:7d:f4: f4:e4:a6:77:b1:ef:bc:fd:4e:e2:df:38:37:65:21:03:ae:97: ba:f0:bd:9f:fd:64:20:8f:70:e8:bc:9e:57:41:5a:ae:50:40: fa:c2:e4:9b:a2:7b:07:d6:c5:e5:cb:72:6c:31:4d:58:72:65: ba:7a:8e:40:4a:96:cc:91:fb:ad:ed:7d:20:52:81:df:44:bc: 71:6b:11:aa:21:11:39:35:d9:74:92:12:0c:64:19:e3:29:0c: 9d:65:e4:3f:81:83:32:8d:2d:6b:b1:3b:60:73:36:fe:f9:c4: 6f:1a:07:48:8d:bb:e1:fa:ce:40:dc:cc:bb:ab:48:f2:96:c3: a2:b4:54:f1:35:27:f8:16:93:88:73:18:76:58:0f:a9:64:99: 32:12:7f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUcsf5zOJ7bX57nkum8OJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwODIzMDEwMjI4WhcNMjUwODI0MDEwMjI4WjAzMTEwLwYDVQQD Eyg0ZGIwNmQ4Y2FiZjNkNDU4ZDI2NTgzMThlZThiNmYxMWNkNTc0ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A/5Dnk8/fczYJSZeHT5irgJSwlH rgDJUN6wM9bF51geLp8rGGHF98LJ6wmi0FNfJvVWrC5dYx+hG6/YJR8Yz9cDdzuB CUtTu7AolnqKfTtdGZZ86D/XDi5h+ZthIAXnYCiYY9g70zGFKBQjl4N3MhgWitFs De9K8UGZk/VTAmfYF5hekFmkDsdi4bbcA/GtZxIGX/FClx/Jpn7g7Kqiqv9ToVn3 hNDxwW4pVGhKDNnaHuhOFG24JdRUKnd47OAj81tCxWTkmU/JGIXde+/Tx5SDt0I6 qporO6gzpZmShQmzLLWXRHf2Lfy7DIZ+ioyyRO/XTUJ5pB4PBmpCxm6yiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2wbYyr89RY0mWDGO6LbxHNV0gFMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyucwRQZ iIRzJvpOwe1TCRp7xfD4infv5i+8j4VkZ3ClB4sMvnQvHjBceGjqTPZfwkCf+Nj9 0FT1YjNvL2pK1gLuRAEOF62L2KFxg0OS8QzQMR8x5zqwwKCXNTulQ49kQBdOxR2z dLpRbn309OSmd7HvvP1O4t84N2UhA66XuvC9n/1kII9w6LyeV0FarlBA+sLkm6J7 B9bF5ctybDFNWHJlunqOQEqWzJH7re19IFKB30S8cWsRqiEROTXZdJISDGQZ4ykM nWXkP4GDMo0ta7E7YHM2/vnEbxoHSI274frOQNzMu6tI8pbDorRU8TUn+BaTiHMY dlgPqWSZMhJ/wg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:22 2025 by rpki-client