$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: 4aO0R5k2C/meUF7je8uZ9uzp8rODzOCAQyjGESr8aoQ= Subject key identifier: C3:92:A1:7C:CB:61:A9:91:62:85:82:A2:30:D7:65:11:03:FE:18:6B Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019A4D3D1AA1988D417469442CB376A57844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1701 Signing time: Tue 04 Nov 2025 05:00:41 +0000 Manifest this update: Tue 04 Nov 2025 05:00:41 +0000 Manifest next update: Wed 05 Nov 2025 05:00:41 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: WYiN6LN3Rhei9oJ3uUiVWnHbh+gnnEYdVzZlbHYzx7Q=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa (hash: Hy1jxMcmkJjc7Rfw6ZAzEMKDTAjkCP2ewVbsibxOPr4=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:3d:1a:a1:98:8d:41:74:69:44:2c:b3:76:a5:78:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Nov 4 05:00:41 2025 GMT Not After : Nov 5 05:00:41 2025 GMT Subject: CN=c392a17ccb61a991628582a230d7651103fe186b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:64:97:bf:cc:7a:23:ae:86:09:86:65:cd: be:55:00:5b:d2:b1:ad:80:5b:40:f7:be:26:be:a3: 35:a2:3e:1a:5f:18:ab:73:6f:2a:d3:36:32:0f:8c: 57:94:41:8b:59:6f:56:88:79:9f:a3:fc:a6:8c:54: c0:84:76:9e:3d:8b:a2:d0:b3:7d:e3:6b:6a:55:40: 40:09:10:93:ae:d6:d2:24:c7:f3:bf:8f:b6:a8:de: 32:68:df:9e:8d:55:84:f1:74:ff:4f:ed:a7:ba:c5: d1:e4:a3:1d:e9:d2:ab:16:20:6e:3b:84:e4:43:44: 31:dd:21:fe:81:c5:9f:b5:6a:24:fe:a5:01:80:95: 92:5d:7c:16:b0:16:42:4d:bf:66:fd:5c:1d:14:0b: d5:e8:38:6a:fe:4a:79:ab:a2:58:82:7b:fa:53:ea: 9d:c3:af:93:5d:e9:18:69:2e:dc:5e:3a:24:61:7f: d6:62:be:d1:55:93:23:ab:cd:44:2a:ea:e0:61:27: 54:84:47:0d:d4:15:20:4c:ba:51:b2:77:98:db:c6: 8f:51:0a:f1:db:41:6c:95:1e:59:62:c6:6b:26:19: 77:62:90:a0:44:df:ef:1a:5c:f7:02:e3:b6:3b:f1: f9:66:d3:b6:8e:62:f6:b1:d7:55:50:52:bd:49:06: 5e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:92:A1:7C:CB:61:A9:91:62:85:82:A2:30:D7:65:11:03:FE:18:6B X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:fc:3f:82:8b:3d:ce:9f:f2:11:1a:7c:cc:41:47:8e:55:3e: 08:c8:1b:86:6a:35:f0:84:e9:80:52:f8:d2:10:31:1d:dc:74: 17:38:9c:3c:29:cd:ce:14:9f:3f:f5:24:a9:27:3a:d1:70:d1: c2:56:26:63:f6:44:cb:7a:c1:56:52:02:4a:1a:4a:3b:2c:d4: fb:8e:b3:8e:83:3e:1a:87:17:ef:2d:f8:93:fc:b2:ca:e6:3f: ab:73:9a:89:e3:11:c7:2a:10:f3:53:a1:19:bf:a6:84:40:b9: a1:1f:4f:c1:f5:5c:2c:c7:ea:55:64:51:47:92:a0:54:4e:e8: 45:3f:bb:7d:7c:bf:3d:2a:01:b6:41:d0:fc:64:61:e2:76:0d: 6a:3d:3f:a3:43:be:e6:e1:ed:55:af:fc:21:ce:8f:32:0b:0e: ad:77:a9:3d:95:30:53:20:63:c7:ef:fc:04:23:bc:8d:87:3c: 6d:9a:70:fc:e2:dc:c1:5d:6f:fe:9a:a5:26:9e:0a:f8:5f:a0: dd:19:f1:79:23:ed:a6:55:1d:7b:6a:97:75:e4:d1:70:8f:91: df:b5:6d:08:d2:5d:f0:76:25:7b:c1:ec:0c:32:ce:34:d5:03: 58:a7:ed:a4:ee:d6:bb:1a:5b:2b:23:4e:77:c2:89:a2:42:fd: e9:3c:89:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNPRqhmI1BdGlELLN2pXhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUxMTA0MDUwMDQxWhcNMjUxMTA1MDUwMDQxWjAzMTEwLwYDVQQD EyhjMzkyYTE3Y2NiNjFhOTkxNjI4NTgyYTIzMGQ3NjUxMTAzZmUxODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Fkl7/MeiOuhgmGZc2+VQBb0rGt gFtA974mvqM1oj4aXxirc28q0zYyD4xXlEGLWW9WiHmfo/ymjFTAhHaePYui0LN9 42tqVUBACRCTrtbSJMfzv4+2qN4yaN+ejVWE8XT/T+2nusXR5KMd6dKrFiBuO4Tk Q0Qx3SH+gcWftWok/qUBgJWSXXwWsBZCTb9m/VwdFAvV6Dhq/kp5q6JYgnv6U+qd w6+TXekYaS7cXjokYX/WYr7RVZMjq81EKurgYSdUhEcN1BUgTLpRsneY28aPUQrx 20FslR5ZYsZrJhl3YpCgRN/vGlz3AuO2O/H5ZtO2jmL2sddVUFK9SQZe2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOSoXzLYamRYoWCojDXZRED/hhrMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfw/gos9 zp/yERp8zEFHjlU+CMgbhmo18ITpgFL40hAxHdx0FzicPCnNzhSfP/UkqSc60XDR wlYmY/ZEy3rBVlICShpKOyzU+46zjoM+GocX7y34k/yyyuY/q3OaieMRxyoQ81Oh Gb+mhEC5oR9PwfVcLMfqVWRRR5KgVE7oRT+7fXy/PSoBtkHQ/GRh4nYNaj0/o0O+ 5uHtVa/8Ic6PMgsOrXepPZUwUyBjx+/8BCO8jYc8bZpw/OLcwV1v/pqlJp4K+F+g 3RnxeSPtplUde2qXdeTRcI+R37VtCNJd8HYle8HsDDLONNUDWKftpO7WuxpbKyNO d8KJokL96TyJgA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:48:13 2025 by rpki-client