$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: 7YnvxrgiiTQl9pmdjOmllwlfJQ2+t5neAv9FuWhkqKQ= Subject key identifier: C6:7F:86:53:5E:1C:01:BE:EB:D5:E3:48:A1:DC:C2:F9:56:FC:CE:69 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 0198D583DEB779CBEAC069F451C9BC4FFBC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 1221 Signing time: Sat 23 Aug 2025 06:00:45 +0000 Manifest this update: Sat 23 Aug 2025 06:00:45 +0000 Manifest next update: Sun 24 Aug 2025 06:00:45 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 3: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: OIKsfdIkiCOtyjRf7LCepbAdIYQxz3LyqZ/SOYTi02Q=) 4: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 5: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 6: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 7: YpiZDj15UQloSo6Ej-P-5_wLmX0.roa (hash: U0LGxcrLnRjidOqQnFEuAvzeubqh8HZ24iVIBxmVgMY=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:de:b7:79:cb:ea:c0:69:f4:51:c9:bc:4f:fb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Aug 23 06:00:45 2025 GMT Not After : Aug 24 06:00:45 2025 GMT Subject: CN=c67f86535e1c01beebd5e348a1dcc2f956fcce69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:ee:bc:a5:7b:2b:dc:c1:72:b7:91:df:b9: a0:01:eb:48:8e:c4:52:9e:8e:af:31:73:4e:d0:96: 79:3d:f2:80:38:d8:b5:88:6e:c4:d9:eb:05:c5:3a: 15:c3:45:4d:c4:61:10:56:c3:d8:a2:9e:81:1b:08: 89:16:de:13:2b:91:75:b8:2b:3c:4d:73:2c:f0:1c: 29:a9:ef:79:65:8d:e1:81:05:2e:23:ec:38:3c:ec: fb:ba:88:38:49:7c:f4:74:43:f3:19:1b:1e:e1:00: bd:6b:96:10:1c:ab:f6:a8:20:75:ff:a7:8d:5d:55: d7:7e:62:f3:eb:e9:78:1e:c0:2a:af:99:6f:92:a5: 4a:86:40:c4:a1:fe:4a:64:37:98:a3:5c:e9:cf:20: 04:21:49:84:78:b6:14:62:5c:8a:d6:64:fc:6b:3d: 1d:e4:85:f8:d4:9a:1b:8e:38:a0:1b:18:3f:57:22: f0:f0:18:a0:ef:89:73:b8:97:7a:bb:ae:68:d6:ae: 64:fa:d0:ec:74:5a:57:3a:9c:6d:f3:96:3e:1d:db: f2:59:03:f9:ec:67:15:27:2a:96:d0:b4:52:07:14: 90:14:6e:25:94:ec:97:fa:df:f4:e9:10:2c:45:1c: 63:93:d7:20:44:81:91:26:e8:97:c2:e5:e7:68:2f: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7F:86:53:5E:1C:01:BE:EB:D5:E3:48:A1:DC:C2:F9:56:FC:CE:69 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c3:16:41:46:1f:d9:b2:5a:f8:05:d3:65:72:91:05:94:30: 2d:c6:36:84:fe:9d:a1:e0:df:3b:6f:1c:3b:69:f9:2b:ba:f3: e3:1d:7d:f7:4e:53:de:00:f4:12:ce:de:79:07:3a:32:d8:64: 50:85:85:de:91:5d:fb:bd:c6:b2:e5:63:00:8a:ac:8e:72:06: 45:bf:35:c1:d3:9d:36:61:e0:2e:02:ae:94:03:51:37:77:32: 83:eb:1f:3f:c7:a1:d9:21:24:c3:21:8b:78:0e:de:d6:ad:2d: 2f:79:8e:ac:22:77:b6:c0:ed:aa:b8:f2:b4:ea:11:d6:7e:8a: af:31:37:a3:98:f5:98:b5:75:64:5d:94:81:ae:ee:67:23:54: c5:1f:13:a6:35:1e:33:73:a3:47:7f:68:46:6c:6e:a5:ab:9d: 2a:3d:ef:c1:5d:5f:51:67:b6:7b:f0:48:17:c8:f4:ec:93:28: 63:c2:38:0c:85:a3:ff:ff:8e:58:dd:69:62:93:ad:fb:86:39: 55:5c:ab:57:86:af:5d:47:9c:99:ae:91:c8:99:9d:af:0f:81: a3:68:90:09:d7:b3:35:25:dd:02:e2:f9:3f:f5:65:0e:41:0d: a1:0c:13:dd:17:33:91:dc:39:06:e5:dd:ba:4f:83:b1:1e:02: 28:6a:91:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg963ecvqwGn0Ucm8T/vGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwODIzMDYwMDQ1WhcNMjUwODI0MDYwMDQ1WjAzMTEwLwYDVQQD EyhjNjdmODY1MzVlMWMwMWJlZWJkNWUzNDhhMWRjYzJmOTU2ZmNjZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbfuvKV7K9zBcreR37mgAetIjsRS no6vMXNO0JZ5PfKAONi1iG7E2esFxToVw0VNxGEQVsPYop6BGwiJFt4TK5F1uCs8 TXMs8Bwpqe95ZY3hgQUuI+w4POz7uog4SXz0dEPzGRse4QC9a5YQHKv2qCB1/6eN XVXXfmLz6+l4HsAqr5lvkqVKhkDEof5KZDeYo1zpzyAEIUmEeLYUYlyK1mT8az0d 5IX41JobjjigGxg/VyLw8Big74lzuJd6u65o1q5k+tDsdFpXOpxt85Y+HdvyWQP5 7GcVJyqW0LRSBxSQFG4llOyX+t/06RAsRRxjk9cgRIGRJuiXwuXnaC9RbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZ/hlNeHAG+69XjSKHcwvlW/M5pMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8MWQUYf 2bJa+AXTZXKRBZQwLcY2hP6doeDfO28cO2n5K7rz4x19905T3gD0Es7eeQc6Mthk UIWF3pFd+73GsuVjAIqsjnIGRb81wdOdNmHgLgKulANRN3cyg+sfP8eh2SEkwyGL eA7e1q0tL3mOrCJ3tsDtqrjytOoR1n6KrzE3o5j1mLV1ZF2Uga7uZyNUxR8TpjUe M3OjR39oRmxupaudKj3vwV1fUWe2e/BIF8j07JMoY8I4DIWj//+OWN1pYpOt+4Y5 VVyrV4avXUecma6RyJmdrw+Bo2iQCdezNSXdAuL5P/VlDkENoQwT3Rczkdw5BuXd uk+DsR4CKGqRng== -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:58 2025 by rpki-client