$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: uHfa9TlVAnCUbgf6E02StXN/5e86F2aBX3IvXqDHEnA= Subject key identifier: DD:BA:5C:BB:37:98:DB:12:EC:25:A7:AA:B4:99:34:09:34:72:F8:3D Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019879AD750F5C32D451DED9F7BC12FB1D65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 160C Signing time: Tue 05 Aug 2025 10:01:07 +0000 Manifest this update: Tue 05 Aug 2025 10:01:07 +0000 Manifest next update: Wed 06 Aug 2025 10:01:07 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: yLZImISX60VuVxliQV/4RNhgXNt6qi5r9xwd4kyEYLM=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:ad:75:0f:5c:32:d4:51:de:d9:f7:bc:12:fb:1d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Aug 5 10:01:07 2025 GMT Not After : Aug 6 10:01:07 2025 GMT Subject: CN=ddba5cbb3798db12ec25a7aab49934093472f83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:2a:73:8d:c3:63:72:21:21:ee:e2:bf:cd: 52:54:e8:08:87:94:06:ca:3b:79:c0:e1:fb:d9:07: a9:ff:1f:ab:c7:51:dd:9d:ee:05:52:49:bc:4a:50: d0:d7:3c:58:07:37:11:c1:2d:bc:3a:07:9d:7c:80: f5:34:d6:01:c9:06:e6:e4:b1:08:50:85:2e:03:38: c1:f2:9c:a4:66:30:af:34:0a:87:47:c7:f7:bd:db: 4f:e1:fc:e9:65:de:70:c2:4b:7c:08:c3:f3:09:e5: 40:ad:85:4b:ea:1c:f9:f8:55:7a:39:8d:aa:27:f7: 91:c4:c7:69:98:90:1a:db:3e:f9:6b:48:80:20:a7: 88:ec:f7:38:b1:cf:cf:5a:12:ec:dc:7e:e3:e7:5f: 27:c1:52:ef:e3:5c:2a:04:c9:f1:52:e8:13:81:33: a0:b2:5c:5f:b2:e5:72:eb:95:e0:14:77:80:e1:1b: 63:71:c0:13:15:b9:8f:22:fa:ec:54:88:d7:56:f1: 98:2e:1c:24:67:33:c7:b7:02:45:d2:a1:c3:ab:32: 10:7b:19:bf:13:40:15:ce:14:a0:d3:85:8b:db:25: ed:ec:8a:df:40:62:18:67:f7:5f:c5:eb:7c:b0:69: 86:58:4f:7d:89:55:93:60:45:5b:8f:6c:29:79:12: 40:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BA:5C:BB:37:98:DB:12:EC:25:A7:AA:B4:99:34:09:34:72:F8:3D X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7f:81:89:52:9e:fa:8f:0f:3b:d9:0b:a0:53:16:f7:31:f3: 4d:50:14:91:0e:cd:ba:be:8d:0b:c2:55:74:da:cf:a7:8d:07: 19:d6:4c:33:c2:dc:3c:8e:c4:46:4b:0c:9a:5f:00:eb:cd:3f: 1e:6e:fd:f4:27:0b:b4:16:83:2e:0c:1a:db:fa:2c:a4:9b:63: a8:7c:a8:6d:5d:c1:59:c3:82:d6:93:cd:05:c9:2d:2e:cb:20: b4:59:e4:22:5b:1c:01:b8:e0:07:0c:91:e6:6f:1e:16:f3:a1: 35:fe:43:91:e2:7a:78:32:08:11:a0:88:35:af:7e:18:80:34: 78:f1:ae:44:34:67:b6:a0:cc:5e:31:ea:d6:3c:5f:93:da:93: 8c:ef:c0:65:92:b1:d2:07:61:a6:90:77:b7:54:1a:ea:3f:10: 94:b4:26:79:e3:b6:8c:44:d2:31:3a:53:90:92:ed:5a:89:07: a7:4b:8d:5c:24:9b:3a:75:ac:6e:b9:2f:a2:f5:37:c6:47:c5: 34:78:08:10:3c:18:10:e0:74:c9:25:e0:6a:b5:9b:53:51:a8: 89:03:a1:38:fe:6d:1d:8b:2e:2c:53:fc:1d:2d:f8:84:1a:46: 41:09:27:9b:72:12:8e:44:27:8b:10:37:48:82:1d:73:9e:4d: 06:44:f5:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh5rXUPXDLUUd7Z97wS+x1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwODA1MTAwMTA3WhcNMjUwODA2MTAwMTA3WjAzMTEwLwYDVQQD EyhkZGJhNWNiYjM3OThkYjEyZWMyNWE3YWFiNDk5MzQwOTM0NzJmODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr60qc43DY3IhIe7iv81SVOgIh5QG yjt5wOH72Qep/x+rx1Hdne4FUkm8SlDQ1zxYBzcRwS28OgedfID1NNYByQbm5LEI UIUuAzjB8pykZjCvNAqHR8f3vdtP4fzpZd5wwkt8CMPzCeVArYVL6hz5+FV6OY2q J/eRxMdpmJAa2z75a0iAIKeI7Pc4sc/PWhLs3H7j518nwVLv41wqBMnxUugTgTOg slxfsuVy65XgFHeA4RtjccATFbmPIvrsVIjXVvGYLhwkZzPHtwJF0qHDqzIQexm/ E0AVzhSg04WL2yXt7IrfQGIYZ/dfxet8sGmGWE99iVWTYEVbj2wpeRJAiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN26XLs3mNsS7CWnqrSZNAk0cvg9MB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX+BiVKe +o8PO9kLoFMW9zHzTVAUkQ7Nur6NC8JVdNrPp40HGdZMM8LcPI7ERksMml8A680/ Hm799CcLtBaDLgwa2/ospJtjqHyobV3BWcOC1pPNBcktLssgtFnkIlscAbjgBwyR 5m8eFvOhNf5DkeJ6eDIIEaCINa9+GIA0ePGuRDRntqDMXjHq1jxfk9qTjO/AZZKx 0gdhppB3t1Qa6j8QlLQmeeO2jETSMTpTkJLtWokHp0uNXCSbOnWsbrkvovU3xkfF NHgIEDwYEOB0ySXgarWbU1GoiQOhOP5tHYsuLFP8HS34hBpGQQknm3ISjkQnixA3 SIIdc55NBkT1Tw== -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:29 2025 by rpki-client