$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: OGIJRC/sivbn9Ec6cdvkK4gm5ygEElnFg/xxnMbla2I= Subject key identifier: D1:7E:80:F4:CA:50:B0:4C:32:3E:2C:63:91:5F:1E:AD:D4:8F:4F:5F Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019873AACA4B576C74B02300724894B25A78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1631 Signing time: Mon 04 Aug 2025 06:00:29 +0000 Manifest this update: Mon 04 Aug 2025 06:00:29 +0000 Manifest next update: Tue 05 Aug 2025 06:00:29 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 7: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 8: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 9: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 10: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 11: V44zBaIrT2vwhrVFAcN5IRAmoy4.roa (hash: IDJvYejslYQFS3URSy/7ffz5ilsUpAhyf+EqD49d/+Y=) 12: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 13: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 14: fMzT-5d-H7wm7UzPX4PbBLndjlo.roa (hash: QHxOUGueDky85wAcdSL/hpvn/Djtg29akovspAUAOhU=) 15: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 16: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: Phftn+Vk4jgd2lFjA1875UkN7JSifeyFXu7UN/Enuzo=) 17: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 18: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 19: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 22: uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa (hash: lh9JEVycjwO2JOZAXH6/OskJCw09FDKHU4kXtolx/mg=) 23: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 24: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 25: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:aa:ca:4b:57:6c:74:b0:23:00:72:48:94:b2:5a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Aug 4 06:00:29 2025 GMT Not After : Aug 5 06:00:29 2025 GMT Subject: CN=d17e80f4ca50b04c323e2c63915f1eadd48f4f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:10:7d:ce:e8:bd:78:b8:49:1f:0a:9f:65: 12:6b:a0:b1:2e:34:3d:12:c4:e7:a3:2c:1b:52:08: 93:35:4f:f3:83:48:46:ab:e6:14:b0:bd:3f:e9:4f: 3e:5e:d1:6d:4e:74:87:a0:e1:25:d4:8b:cf:9b:93: 94:6b:f1:48:ce:40:99:fc:ce:9e:45:49:43:2f:a3: 43:a2:42:a0:b1:5a:2b:fb:4e:ac:1e:76:cd:d1:53: ee:08:df:3f:11:eb:f7:3c:bf:12:36:bf:a2:e6:74: 50:66:0a:a2:df:0e:87:3b:53:9f:09:67:e7:6e:ce: ab:f8:b2:8a:68:f0:3a:b1:9c:8e:44:95:90:a7:06: 2f:ed:ca:af:cc:36:62:9e:47:b9:57:0a:6c:4c:0e: 02:b5:52:95:ff:f2:6e:15:37:80:97:45:01:27:8b: 2a:05:5e:0e:23:89:0b:a0:02:a8:58:85:ed:4d:b8: c1:91:ce:d2:71:8e:49:1a:f5:b2:3f:e1:24:68:89: 4c:d3:f5:ec:1c:2d:c7:e0:75:4d:f6:60:87:36:04: 93:80:dd:47:f7:87:0d:b2:1c:9a:8b:7f:9a:b5:29: 63:43:27:95:2c:e2:62:d7:22:83:9b:5f:fa:d1:a6: d6:29:6f:c8:bb:16:6f:a9:0a:f8:51:6b:40:5e:65: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:80:F4:CA:50:B0:4C:32:3E:2C:63:91:5F:1E:AD:D4:8F:4F:5F X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0c:d4:5d:0b:7a:40:fe:38:c3:8c:80:62:88:bc:87:25:a1: bb:36:ae:78:a0:9f:86:29:33:b7:83:5a:7b:b1:76:b2:ac:62: 83:6a:02:e1:80:8b:c6:18:46:24:de:eb:d8:2c:56:bb:48:1d: 41:f5:2e:dc:a0:c4:7d:4c:a0:10:2c:77:02:a0:ef:d0:35:e0: 95:72:da:3b:d0:9f:13:ef:3b:38:7a:96:2c:bb:6e:d4:fe:d5: fc:f5:b2:30:15:a1:49:ee:ed:56:4c:5e:01:a4:6c:80:6e:25: 07:ee:b6:4c:37:43:7d:90:c6:ad:b7:e5:07:e8:ab:0b:20:56: 7c:62:0a:8b:a4:08:f0:5c:12:51:cb:7e:4d:84:da:35:92:8c: ea:ec:8e:7a:c8:87:ae:33:3c:3c:e5:ec:ac:aa:8a:a3:a6:0e: 97:df:49:58:ab:aa:ed:ff:68:50:f7:4f:81:ce:e7:93:bd:72: 12:73:69:5f:23:07:1a:53:0a:9c:d4:c2:b7:be:09:63:01:02: 15:38:f4:a3:81:6d:f0:ca:eb:cb:38:f2:9c:97:e5:1f:e2:cc: 5f:e3:30:f9:73:2d:0f:3e:6d:93:34:a1:e7:61:7f:5c:2d:55: 85:47:3a:97:1d:1d:da:b8:54:43:1c:c5:25:1d:10:63:7b:7f: 74:a0:13:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzqspLV2x0sCMAckiUslp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwODA0MDYwMDI5WhcNMjUwODA1MDYwMDI5WjAzMTEwLwYDVQQD EyhkMTdlODBmNGNhNTBiMDRjMzIzZTJjNjM5MTVmMWVhZGQ0OGY0ZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KkQfc7ovXi4SR8Kn2USa6CxLjQ9 EsTnoywbUgiTNU/zg0hGq+YUsL0/6U8+XtFtTnSHoOEl1IvPm5OUa/FIzkCZ/M6e RUlDL6NDokKgsVor+06sHnbN0VPuCN8/Eev3PL8SNr+i5nRQZgqi3w6HO1OfCWfn bs6r+LKKaPA6sZyORJWQpwYv7cqvzDZinke5VwpsTA4CtVKV//JuFTeAl0UBJ4sq BV4OI4kLoAKoWIXtTbjBkc7ScY5JGvWyP+EkaIlM0/XsHC3H4HVN9mCHNgSTgN1H 94cNshyai3+atSljQyeVLOJi1yKDm1/60abWKW/IuxZvqQr4UWtAXmWDnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNF+gPTKULBMMj4sY5FfHq3Uj09fMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwzUXQt6 QP44w4yAYoi8hyWhuzaueKCfhikzt4Nae7F2sqxig2oC4YCLxhhGJN7r2CxWu0gd QfUu3KDEfUygECx3AqDv0DXglXLaO9CfE+87OHqWLLtu1P7V/PWyMBWhSe7tVkxe AaRsgG4lB+62TDdDfZDGrbflB+irCyBWfGIKi6QI8FwSUct+TYTaNZKM6uyOesiH rjM8POXsrKqKo6YOl99JWKuq7f9oUPdPgc7nk71yEnNpXyMHGlMKnNTCt74JYwEC FTj0o4Ft8MrryzjynJflH+LMX+Mw+XMtDz5tkzSh52F/XC1VhUc6lx0d2rhUQxzF JR0QY3t/dKAThw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:07:26 2025 by rpki-client