$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json) Hash identifier: mlrpz8JMQh94BqSb9RFsMxGnTA+ZX13AyGRRktChXX8= Subject key identifier: 7F:F2:81:AE:EC:95:8C:47:6E:9B:8E:15:EB:A5:DF:FB:E0:FC:8E:5C Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019A51F5B2C9F9D357F530D38776A741CC05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft Manifest number: 172C Signing time: Wed 05 Nov 2025 03:00:47 +0000 Manifest this update: Wed 05 Nov 2025 03:00:47 +0000 Manifest next update: Thu 06 Nov 2025 03:00:47 +0000 Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=) 2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=) 3: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=) 4: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=) 5: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=) 6: I8vapMCNrfWppn81n36Xnnd_dc0.roa (hash: nkV+aB69M6byViVbXc/yY8edvpoQaOOIi8NiZU4LCHg=) 7: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: sv2vL9jJbfQ7LStQZ+EppwdNacUF+zIR1uG11N1lLzs=) 8: OQwatOOKNts1l5QciIRYlIrZrUA.roa (hash: /WVw3A1izDTxQhVDT4B9DMpIDCfh/f6b1AgbmhKnBE4=) 9: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (hash: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=) 10: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=) 11: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=) 12: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=) 13: vfrfnXjwuO2Ljtk3BmqnSY1CSYM.roa (hash: PaapxA4jz7Vq2ccTghK9n2VTqgozDnJPDGFKN2bry58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:f5:b2:c9:f9:d3:57:f5:30:d3:87:76:a7:41:cc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Nov 5 03:00:47 2025 GMT Not After : Nov 6 03:00:47 2025 GMT Subject: CN=7ff281aeec958c476e9b8e15eba5dffbe0fc8e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:a4:65:64:75:16:b6:cc:60:d7:89:dc:38: 86:26:78:23:59:88:6a:14:88:fd:3c:50:31:03:66: 1b:09:a4:83:b5:28:4b:71:90:88:1d:35:e3:bb:b8: 14:91:eb:e4:78:2f:44:b3:14:a0:f1:a0:01:32:bf: 6a:b7:f8:ba:09:bc:a8:a1:91:4a:3a:1e:9d:a3:20: 1c:b4:7f:eb:40:e0:01:a6:50:70:b0:78:50:cf:02: c6:5a:80:7a:e7:f0:d5:1e:a3:b5:cd:a3:ca:2b:b5: 10:93:1b:c1:c3:40:b4:5e:4e:7e:e9:f5:17:df:14: 7a:a6:74:4b:16:eb:d6:0c:8c:4e:ec:5e:35:e8:38: 67:48:73:5a:b0:79:19:64:e9:00:83:57:53:06:2b: 6e:c7:48:41:a4:e9:ff:8e:6d:14:84:d0:8c:35:78: ab:28:d5:e8:af:16:77:aa:ed:0b:aa:76:69:83:6a: 18:09:45:bc:a0:1b:f0:26:2e:cc:00:92:35:c2:81: 56:7c:8a:24:60:a7:70:7a:40:29:b9:f8:3e:4f:5f: e1:c5:c7:a4:89:f6:4d:00:21:6e:90:b6:c9:5b:c9: a5:66:d1:19:d2:d3:1b:90:09:1a:b1:c0:2a:1a:bb: d7:e1:15:9c:15:7b:bf:c2:5e:c0:35:a8:38:28:ac: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:81:AE:EC:95:8C:47:6E:9B:8E:15:EB:A5:DF:FB:E0:FC:8E:5C X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:03:ad:d2:61:d6:81:b0:56:42:36:66:dd:9d:a3:27:a6:60: 72:be:be:ec:e7:9a:9f:6f:0f:c4:cf:dc:33:71:27:49:e1:b9: ea:cf:8e:c6:9e:89:c0:65:b5:be:d5:85:02:b2:a4:f2:59:c4: fb:01:ca:1d:2d:53:c7:45:0e:a8:40:8e:68:53:fc:cb:5f:57: bb:5e:19:0d:64:bc:65:2c:2d:75:dd:ab:db:5d:d9:0c:77:24: c0:15:c7:0a:94:82:57:97:16:13:af:c8:b0:eb:29:c3:d9:1a: 74:1f:49:d1:84:fe:2f:58:87:af:a0:4e:1f:07:16:94:db:e8: 15:be:23:8e:2c:18:71:20:07:63:e3:60:53:1f:11:54:a6:c3: d3:34:2f:e1:8f:03:b0:34:66:b5:fc:3e:d5:a2:32:59:79:6c: 32:bb:49:d4:62:26:16:30:82:a8:95:cd:60:c6:c1:07:54:bf: ff:87:4d:99:ba:70:3b:ea:c7:29:cb:92:4a:0b:81:8c:8d:0d: cd:2f:df:e5:96:45:7f:bf:6c:3c:ff:06:d9:7f:6d:51:a0:22: 58:b2:6f:5d:d5:af:bd:ed:9b:10:92:3b:1d:47:7b:e3:1e:9d: 31:b7:86:f3:f7:0f:9d:05:cd:4b:21:09:eb:4c:27:a9:25:84: 67:45:e4:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpR9bLJ+dNX9TDTh3anQcwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjUxMTA1MDMwMDQ3WhcNMjUxMTA2MDMwMDQ3WjAzMTEwLwYDVQQD Eyg3ZmYyODFhZWVjOTU4YzQ3NmU5YjhlMTVlYmE1ZGZmYmUwZmM4ZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4ykZWR1FrbMYNeJ3DiGJngjWYhq FIj9PFAxA2YbCaSDtShLcZCIHTXju7gUkevkeC9EsxSg8aABMr9qt/i6CbyooZFK Oh6doyActH/rQOABplBwsHhQzwLGWoB65/DVHqO1zaPKK7UQkxvBw0C0Xk5+6fUX 3xR6pnRLFuvWDIxO7F416DhnSHNasHkZZOkAg1dTBitux0hBpOn/jm0UhNCMNXir KNXorxZ3qu0LqnZpg2oYCUW8oBvwJi7MAJI1woFWfIokYKdwekApufg+T1/hxcek ifZNACFukLbJW8mlZtEZ0tMbkAkascAqGrvX4RWcFXu/wl7ANag4KKw34QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/yga7slYxHbpuOFeul3/vg/I5cMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgOt0mHW gbBWQjZm3Z2jJ6Zgcr6+7Oean28PxM/cM3EnSeG56s+Oxp6JwGW1vtWFArKk8lnE +wHKHS1Tx0UOqECOaFP8y19Xu14ZDWS8ZSwtdd2r213ZDHckwBXHCpSCV5cWE6/I sOspw9kadB9J0YT+L1iHr6BOHwcWlNvoFb4jjiwYcSAHY+NgUx8RVKbD0zQv4Y8D sDRmtfw+1aIyWXlsMrtJ1GImFjCCqJXNYMbBB1S//4dNmbpwO+rHKcuSSguBjI0N zS/f5ZZFf79sPP8G2X9tUaAiWLJvXdWvve2bEJI7HUd74x6dMbeG8/cPnQXNSyEJ 60wnqSWEZ0XkGw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:14:26 2025 by rpki-client