$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: gwlC69db/eF8H58Ir3+PCOB3EAdtCFLOHgGfwSX0KLs= Subject key identifier: BA:F6:AD:08:42:E1:65:E1:96:1C:3B:27:D6:59:11:8C:1C:4E:F3:38 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 0198D5F1A963D76DCC4EDAB06738952031F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 02EA Signing time: Sat 23 Aug 2025 08:00:41 +0000 Manifest this update: Sat 23 Aug 2025 08:00:41 +0000 Manifest next update: Sun 24 Aug 2025 08:00:41 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 3dUk2t_pPl5WdUVwPr_SzoQLFsI.roa (hash: PH0lnE0uN3wnc8tlGu7b2U0ixCX+3/LdiDburPkYelk=) 4: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 5: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 6: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=) 7: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 8: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 9: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 10: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 11: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (hash: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: Ad8ycbaLxz0mwSTA/TcGVvAPiNnO1zbOaPCSHXO4Jgo=) 20: lFi_2CDHgTPSR-Xxo-U5ohxluu8.roa (hash: u4qJFUu2v9DMBJmArLe+Y/Q/WiHYmJsHB3rpShxcurw=) 21: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 22: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 23: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 24: uHsUP9ITNumWBnivSrpnKA1c8sk.roa (hash: RggRwkd0IhdYIM5cTJqQm6e1Y1oQR3G4Ep6Nth1HpWk=) 25: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 26: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:a9:63:d7:6d:cc:4e:da:b0:67:38:95:20:31:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Aug 23 08:00:41 2025 GMT Not After : Aug 24 08:00:41 2025 GMT Subject: CN=baf6ad0842e165e1961c3b27d659118c1c4ef338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:ab:f2:ac:ef:f0:03:e5:7d:20:c3:11:b8: 98:a9:f4:e1:12:bb:52:3a:72:58:8c:a0:7b:05:e0: 93:8e:49:f2:51:62:28:35:14:a6:4f:33:7d:84:0c: c3:2b:aa:99:e0:d4:0e:de:98:05:98:3d:6b:d9:76: 92:57:92:f2:d5:db:ac:2a:ae:37:bc:d7:93:e5:85: 22:da:08:cb:1c:23:58:b7:f4:c9:f8:d9:d2:2f:c7: ee:8b:ca:48:9d:f1:5d:59:14:d5:4a:db:5a:25:6c: 2b:48:ff:66:24:cd:b0:1f:52:87:e5:78:b2:20:a8: e1:c4:9b:c8:0f:cd:9c:9f:1b:08:bb:a4:8f:e6:df: 35:4c:d0:80:9d:d1:73:a1:06:2b:f9:7d:38:41:38: c3:c6:69:12:3b:23:9e:3e:e3:ac:c9:95:10:68:77: ea:9c:3d:ff:36:f7:0f:3d:fc:c2:01:22:d2:4e:ec: da:a0:5e:95:5f:c7:14:9b:46:53:45:d7:52:18:eb: 0c:ac:1a:c4:98:c3:be:11:57:92:bc:35:01:1c:e3: c7:28:10:48:89:11:6a:23:13:da:ef:a8:73:25:98: 57:18:b8:d1:82:76:8c:49:5e:b6:39:06:ba:f2:53: b8:54:09:ae:c6:1f:fc:98:c9:89:0e:ec:cf:2a:b9: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:AD:08:42:E1:65:E1:96:1C:3B:27:D6:59:11:8C:1C:4E:F3:38 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4a:52:4d:a0:cb:73:be:27:f7:43:e2:61:63:8d:de:eb:9a: 96:51:0d:0e:19:08:9a:62:1f:a2:95:ad:d5:63:1d:24:b7:ff: c5:cf:18:31:d6:0e:cd:50:8f:56:c7:31:8a:8a:35:76:75:1a: 4c:e4:30:87:d5:79:e0:fd:40:1c:bd:51:00:37:a3:c7:a9:09: b6:91:4e:9c:5d:3a:01:06:e3:28:98:1e:e3:03:64:4b:13:99: a3:34:33:bb:0c:91:4f:8e:69:4f:00:8a:0e:d6:f2:a2:3e:0e: 41:b8:c9:4f:bb:19:13:d4:4d:54:a5:d0:eb:da:95:1b:fe:99: 16:c5:fd:3b:fe:e3:4e:42:9c:72:30:03:23:77:6f:f9:31:38: 1d:d8:a5:f0:4f:2d:0e:ff:a2:97:f2:d9:4d:bb:d4:24:79:43: d4:db:ff:fc:4b:7b:28:9d:31:58:0b:79:f3:6d:d4:5c:c5:ad: 58:c5:72:4e:11:87:48:ed:f1:8a:49:22:fe:5e:5c:89:fd:bd: 83:c6:fb:82:96:59:fc:74:07:8d:a0:36:19:00:65:f8:39:13: c6:4c:8d:27:19:da:a4:e3:dc:48:fa:e5:70:de:82:c1:6d:2f: dc:06:5a:35:0b:74:71:7a:1e:81:30:12:35:81:98:0f:42:8b: 4d:14:9e:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8alj123MTtqwZziVIDH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwODIzMDgwMDQxWhcNMjUwODI0MDgwMDQxWjAzMTEwLwYDVQQD EyhiYWY2YWQwODQyZTE2NWUxOTYxYzNiMjdkNjU5MTE4YzFjNGVmMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqar8qzv8APlfSDDEbiYqfThErtS OnJYjKB7BeCTjknyUWIoNRSmTzN9hAzDK6qZ4NQO3pgFmD1r2XaSV5Ly1dusKq43 vNeT5YUi2gjLHCNYt/TJ+NnSL8fui8pInfFdWRTVSttaJWwrSP9mJM2wH1KH5Xiy IKjhxJvID82cnxsIu6SP5t81TNCAndFzoQYr+X04QTjDxmkSOyOePuOsyZUQaHfq nD3/NvcPPfzCASLSTuzaoF6VX8cUm0ZTRddSGOsMrBrEmMO+EVeSvDUBHOPHKBBI iRFqIxPa76hzJZhXGLjRgnaMSV62OQa68lO4VAmuxh/8mMmJDuzPKrkX4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr2rQhC4WXhlhw7J9ZZEYwcTvM4MB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukpSTaDL c74n90PiYWON3uuallENDhkImmIfopWt1WMdJLf/xc8YMdYOzVCPVscxioo1dnUa TOQwh9V54P1AHL1RADejx6kJtpFOnF06AQbjKJge4wNkSxOZozQzuwyRT45pTwCK Dtbyoj4OQbjJT7sZE9RNVKXQ69qVG/6ZFsX9O/7jTkKccjADI3dv+TE4Hdil8E8t Dv+il/LZTbvUJHlD1Nv//Et7KJ0xWAt5823UXMWtWMVyThGHSO3xikki/l5cif29 g8b7gpZZ/HQHjaA2GQBl+DkTxkyNJxnapOPcSPrlcN6CwW0v3AZaNQt0cXoegTAS NYGYD0KLTRSewA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:44 2025 by rpki-client