$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: wsnZqQ/CP4nr8jfqHdHxhUduIUvPvWfDrrKnW+CPo+E= Subject key identifier: FF:F5:6E:2D:B8:16:3E:E6:80:66:AB:B0:7E:28:65:49:BA:18:8C:A6 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 0198D5F17E3A665465DAE38233BE0F715041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1658 Signing time: Sat 23 Aug 2025 08:00:30 +0000 Manifest this update: Sat 23 Aug 2025 08:00:30 +0000 Manifest next update: Sun 24 Aug 2025 08:00:30 +0000 Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 6BT98WHfFmR4owf9MCuTUslLNUyTPoULNUEKOX/bZvU=) 2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 3: LLDN_VlIX6uSYmTBHX9Ec_R1T-4.roa (hash: hv1fz/RMOjKKf9RN0y/htAasmo3HpIuTxmY1YS1UNXM=) 4: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 5: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (hash: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=) 6: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 7: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 8: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 9: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=) 10: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:7e:3a:66:54:65:da:e3:82:33:be:0f:71:50:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Aug 23 08:00:30 2025 GMT Not After : Aug 24 08:00:30 2025 GMT Subject: CN=fff56e2db8163ee68066abb07e286549ba188ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:d4:da:10:f1:4d:ed:4d:72:47:9c:21:7c: 39:92:e9:dc:af:53:37:59:e4:dd:a0:4b:00:0d:d7: 5c:20:99:bf:0a:71:a9:e5:79:64:0d:25:37:ff:7e: 73:61:df:82:54:80:48:ff:b6:67:d7:78:72:d7:f2: 02:aa:df:8d:ac:60:cc:e6:58:1a:71:40:1d:d8:7c: 45:93:0d:b9:4d:c3:67:71:b5:47:cd:12:ea:b3:7a: 03:d7:62:12:b4:bb:dd:b3:ff:5f:14:76:ef:bd:33: 41:c9:34:e4:a4:ac:3a:7f:f1:60:7d:09:a9:f6:64: 64:e0:98:bb:d8:54:46:c9:f9:80:a7:e5:fb:f0:6f: e9:a1:af:e2:10:3c:25:e2:d6:93:4a:0c:7f:3e:24: c8:df:8a:11:be:b9:59:92:39:57:34:ed:01:96:5a: 62:f8:f4:2b:57:51:8f:46:6a:f6:d8:87:37:bf:a3: 6e:da:9f:2e:4f:44:54:45:2f:7f:53:f9:51:dc:05: 98:75:c8:2a:5d:ae:28:67:8a:0e:c4:3f:31:e3:45: 9e:5c:1c:6e:24:b3:14:9c:e9:73:61:4e:b5:aa:a7: f7:f2:d0:aa:e4:54:97:66:31:21:1a:ed:93:02:53: 57:fc:ac:15:d9:4c:bd:86:94:c7:83:69:26:4c:a7: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F5:6E:2D:B8:16:3E:E6:80:66:AB:B0:7E:28:65:49:BA:18:8C:A6 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f9:dc:8c:b6:7e:5c:41:fa:68:63:9d:7b:a5:77:b1:69:05: 6a:fb:ec:00:13:cd:f3:45:08:6e:0e:6f:da:87:04:2d:df:76: 3e:05:af:d8:c4:4a:59:76:f3:07:46:16:d7:da:ab:3c:06:37: fd:9a:6e:5d:45:4e:bd:74:e1:f0:47:a5:04:a4:91:6b:d4:e4: 1f:3f:6b:d0:b4:8c:ef:09:8b:23:e4:18:78:a6:fe:66:3c:de: b0:0f:1b:20:c4:d7:71:d9:4a:fe:11:b6:c3:18:b2:c6:68:63: 2b:ad:69:62:ea:dc:64:28:43:3b:fe:61:85:49:46:de:c2:37: 53:3a:51:54:5a:96:ea:d1:c9:0b:da:56:51:b4:1e:c5:57:99: 91:27:b6:48:c8:b0:f5:07:53:8c:65:3d:37:58:68:3c:f7:b5: 04:21:83:af:49:23:17:5e:6d:b1:c5:dd:79:ab:3a:b9:b7:eb: 82:8f:b8:7b:b7:19:55:3d:e1:0c:47:b4:02:8f:90:77:48:59: 06:a3:25:42:0b:62:0b:28:9a:42:73:6d:23:0d:36:b1:2a:a2: 2e:d4:7e:80:ba:29:79:b8:9a:a6:4c:d9:ba:a4:8a:0f:f5:e7: 5b:ee:d8:5b:1b:f1:96:ac:31:7a:f6:f6:8d:ef:b2:a7:bd:2e: cb:e0:9e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8X46ZlRl2uOCM74PcVBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUwODIzMDgwMDMwWhcNMjUwODI0MDgwMDMwWjAzMTEwLwYDVQQD EyhmZmY1NmUyZGI4MTYzZWU2ODA2NmFiYjA3ZTI4NjU0OWJhMTg4Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCzU2hDxTe1NckecIXw5kuncr1M3 WeTdoEsADddcIJm/CnGp5XlkDSU3/35zYd+CVIBI/7Zn13hy1/ICqt+NrGDM5lga cUAd2HxFkw25TcNncbVHzRLqs3oD12IStLvds/9fFHbvvTNByTTkpKw6f/FgfQmp 9mRk4Ji72FRGyfmAp+X78G/poa/iEDwl4taTSgx/PiTI34oRvrlZkjlXNO0Bllpi +PQrV1GPRmr22Ic3v6Nu2p8uT0RURS9/U/lR3AWYdcgqXa4oZ4oOxD8x40WeXBxu JLMUnOlzYU61qqf38tCq5FSXZjEhGu2TAlNX/KwV2Uy9hpTHg2kmTKfV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/1bi24Fj7mgGarsH4oZUm6GIymMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPncjLZ+ XEH6aGOde6V3sWkFavvsABPN80UIbg5v2ocELd92PgWv2MRKWXbzB0YW19qrPAY3 /ZpuXUVOvXTh8EelBKSRa9TkHz9r0LSM7wmLI+QYeKb+ZjzesA8bIMTXcdlK/hG2 wxiyxmhjK61pYurcZChDO/5hhUlG3sI3UzpRVFqW6tHJC9pWUbQexVeZkSe2SMiw 9QdTjGU9N1hoPPe1BCGDr0kjF15tscXdeas6ubfrgo+4e7cZVT3hDEe0Ao+Qd0hZ BqMlQgtiCyiaQnNtIw02sSqiLtR+gLopebiapkzZuqSKD/XnW+7YWxvxlqwxevb2 je+yp70uy+Cepg== -----END CERTIFICATE-----Generated at Sat Aug 23 14:10:04 2025 by rpki-client