$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: 4TOaOz83hDtijoYsSa7Kj1886V6/IzhRTT5X/Brocc4= Subject key identifier: EC:30:E3:1C:34:2B:01:5C:2A:98:FE:AB:8B:78:45:38:A5:EA:01:1C Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019A52A876B9390AA53128A6CB9F51FB3907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 172E Signing time: Wed 05 Nov 2025 06:16:03 +0000 Manifest this update: Wed 05 Nov 2025 06:16:03 +0000 Manifest next update: Thu 06 Nov 2025 06:16:03 +0000 Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=) 2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=) 3: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=) 4: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=) 5: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=) 6: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: gnYmdYkBl/0SbZRqKcJQWUfnpi/YEBNftvMkcZE9B3k=) 7: J7Mq7A3jpKO6MctLoycxbGYGUKE.roa (hash: BOAsWVPt08z408fa5M73TMfMWbdYH0PR4ngkjEtOvUU=) 8: OQwatOOKNts1l5QciIRYlIrZrUA.roa (hash: /WVw3A1izDTxQhVDT4B9DMpIDCfh/f6b1AgbmhKnBE4=) 9: RH37hHc3GmgIoml6z_o3SxfSdR0.roa (hash: w1vLiJ/bJwF0Pqx6pmikofyWlbdaoX3R+uI564sKdJA=) 10: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (hash: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=) 11: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=) 12: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=) 13: mfK6aJ71QzV-sAHIX3PCViU0DkU.roa (hash: U0sp/61DcLhPsHuAw+3JAiFKjincTtP/CmWk6DPp/9o=) 14: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 03:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:a8:76:b9:39:0a:a5:31:28:a6:cb:9f:51:fb:39:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Nov 5 06:16:03 2025 GMT Not After : Nov 6 06:16:03 2025 GMT Subject: CN=ec30e31c342b015c2a98feab8b784538a5ea011c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:0a:aa:f4:c2:f9:3f:58:74:29:24:4c:45: bc:c4:50:a5:79:68:fc:11:49:e2:33:3b:b6:05:9a: 78:a1:3f:bf:ca:25:4a:61:df:86:ba:76:fa:f5:14: 22:c2:68:91:d6:ec:c9:e9:58:13:3d:2c:5b:8f:43: fa:18:a7:07:20:f7:ba:94:35:67:1d:86:1c:9a:dd: c0:4e:dd:6d:cf:c7:04:ea:8d:d6:01:04:61:df:7d: 83:35:29:94:b5:a7:b3:f1:fb:5a:6e:ab:1e:9c:01: 1f:ab:05:fe:3b:1e:30:eb:76:dc:45:24:26:40:c9: 6a:7b:58:4b:c8:54:af:02:06:08:df:f9:41:7a:8e: 6d:ab:7b:00:8f:41:02:81:da:77:3e:66:b5:76:8a: 09:56:df:55:20:85:4b:76:2b:f2:0d:14:0d:f3:f4: b4:a8:1b:6d:24:83:08:a0:96:12:b1:98:21:ad:ee: fd:3b:69:f5:44:55:52:10:53:3a:f2:d2:5f:be:20: 1f:f9:de:a4:ff:94:18:1f:f5:48:62:dc:fa:3c:53: a5:27:2c:1d:e4:05:70:da:86:ce:db:f2:44:41:8b: 9d:a0:4e:e0:06:d5:13:a0:52:ed:81:d6:2c:47:89: d0:0c:50:dd:47:13:88:f9:01:50:13:a3:8d:ff:ca: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:30:E3:1C:34:2B:01:5C:2A:98:FE:AB:8B:78:45:38:A5:EA:01:1C X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b9:81:88:8a:27:66:9e:ff:b9:a3:a9:8e:ce:9c:69:e2:65: 7b:da:24:2c:b2:be:64:94:45:e1:5e:b2:61:12:f9:5f:51:8d: 32:81:fe:e2:3a:a0:9e:f1:46:8f:4c:b9:ab:b3:2e:2c:82:96: 2c:51:bf:24:aa:f4:cc:50:13:2d:9c:62:1a:d4:86:45:69:c2: 45:f3:f7:5d:55:02:f4:37:41:fb:70:16:75:68:e6:64:02:fe: 01:39:fd:28:ba:01:3a:ab:98:54:69:34:3c:25:3f:f3:41:64: 6d:b8:57:e8:94:8e:85:5b:9f:f8:96:71:c4:fc:5e:4e:35:b1: 0d:e5:67:d6:ad:27:54:58:98:2f:16:c2:59:e8:d9:e1:f1:52: 6e:a4:22:c4:c3:ff:28:dd:8e:66:19:0c:39:f1:b7:81:a0:de: 13:67:76:27:ff:5f:01:71:b9:bf:cd:51:35:00:27:93:cd:28: f6:16:7f:84:42:18:85:77:d8:37:e0:e7:03:ff:8b:87:a2:26: c4:41:42:11:71:63:0d:75:de:ef:74:a3:85:c7:ae:ad:20:57: e2:04:90:d6:b8:50:bf:78:34:72:a8:5b:58:17:28:ee:42:7b: cd:f5:c1:b4:ff:29:3f:af:b1:03:8c:e8:13:73:b5:59:21:24: c8:43:5d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpSqHa5OQqlMSimy59R+zkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMTA1MDYxNjAzWhcNMjUxMTA2MDYxNjAzWjAzMTEwLwYDVQQD EyhlYzMwZTMxYzM0MmIwMTVjMmE5OGZlYWI4Yjc4NDUzOGE1ZWEwMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZwKqvTC+T9YdCkkTEW8xFCleWj8 EUniMzu2BZp4oT+/yiVKYd+Gunb69RQiwmiR1uzJ6VgTPSxbj0P6GKcHIPe6lDVn HYYcmt3ATt1tz8cE6o3WAQRh332DNSmUtaez8ftabqsenAEfqwX+Ox4w63bcRSQm QMlqe1hLyFSvAgYI3/lBeo5tq3sAj0ECgdp3Pma1dooJVt9VIIVLdivyDRQN8/S0 qBttJIMIoJYSsZghre79O2n1RFVSEFM68tJfviAf+d6k/5QYH/VIYtz6PFOlJywd 5AVw2obO2/JEQYudoE7gBtUToFLtgdYsR4nQDFDdRxOI+QFQE6ON/8oJPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOww4xw0KwFcKpj+q4t4RTil6gEcMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7mBiIon Zp7/uaOpjs6caeJle9okLLK+ZJRF4V6yYRL5X1GNMoH+4jqgnvFGj0y5q7MuLIKW LFG/JKr0zFATLZxiGtSGRWnCRfP3XVUC9DdB+3AWdWjmZAL+ATn9KLoBOquYVGk0 PCU/80FkbbhX6JSOhVuf+JZxxPxeTjWxDeVn1q0nVFiYLxbCWejZ4fFSbqQixMP/ KN2OZhkMOfG3gaDeE2d2J/9fAXG5v81RNQAnk80o9hZ/hEIYhXfYN+DnA/+Lh6Im xEFCEXFjDXXe73SjhceurSBX4gSQ1rhQv3g0cqhbWBco7kJ7zfXBtP8pP6+xA4zo E3O1WSEkyENddg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:56:04 2025 by rpki-client