$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: e9RKBWx09mFdNHm1Os5TiNfY4VVXK93bDcG0306H6kY= Subject key identifier: 1C:93:17:9D:24:11:44:D7:A0:2A:71:FA:69:8D:A2:CA:95:D4:0D:7E Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 01987A88CF2ABAEAA31F3F97AF46EE854016 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 1629 Signing time: Tue 05 Aug 2025 14:00:42 +0000 Manifest this update: Tue 05 Aug 2025 14:00:42 +0000 Manifest next update: Wed 06 Aug 2025 14:00:42 +0000 Files and hashes: 1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=) 2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=) 3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=) 4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=) 5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=) 6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=) 7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: GqfmDbWQKruXrgDxX6d7iYvVKocoQL9u5UapbNAFkCI=) 8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=) 9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=) 10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=) 11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:88:cf:2a:ba:ea:a3:1f:3f:97:af:46:ee:85:40:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Aug 5 14:00:42 2025 GMT Not After : Aug 6 14:00:42 2025 GMT Subject: CN=1c93179d241144d7a02a71fa698da2ca95d40d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:80:76:c2:cd:f6:bc:48:92:95:7f:f4:11: 9d:82:d3:8a:11:7f:64:d5:10:00:ae:f5:65:4a:65: 16:32:34:6c:79:97:5b:3d:92:1b:90:c3:ca:a7:06: bc:5d:3c:4f:7e:7e:b4:2e:fe:90:e6:82:23:e2:83: 8a:0b:9c:c8:7a:e1:f1:88:17:99:bf:0e:f9:98:95: 0c:4f:0e:22:f5:e9:60:3c:eb:ac:16:dc:52:1a:bd: 10:bc:9d:93:ec:d2:7f:b1:65:52:dd:aa:ca:94:7f: 13:df:1e:7d:2a:13:4d:14:7e:5e:41:2a:46:5f:fd: 84:5b:fd:50:41:c4:d0:c4:1b:d3:e8:8b:b2:92:23: 5f:57:58:22:49:d1:d1:ad:67:0f:33:74:6b:05:8c: 54:af:f8:a4:71:5f:8d:d0:ea:ee:db:f3:e1:48:78: 04:12:74:10:a9:9a:3e:0b:66:1a:82:54:c3:17:f9: ad:e4:31:ac:c7:9b:e9:46:6c:ed:5a:e8:1c:6b:2f: 52:20:83:1b:53:92:d5:8c:1a:0e:80:cb:c0:fa:cf: d1:fe:75:65:25:21:95:6d:c1:6c:45:e6:bf:b2:d7: 60:70:c7:ee:c8:f4:f8:e2:ab:2e:0e:3b:a7:42:74: 34:03:ba:7f:27:27:f0:d0:e7:1b:41:4e:69:6d:ff: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:93:17:9D:24:11:44:D7:A0:2A:71:FA:69:8D:A2:CA:95:D4:0D:7E X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:97:97:bd:43:97:10:11:a3:fb:0b:9a:a2:27:37:eb:27:93: e7:6f:f3:f3:8a:84:54:c8:c9:68:62:ff:20:aa:b4:bd:10:f5: 1f:6b:bd:4b:e6:4b:51:d6:a6:c3:cc:eb:72:4e:96:12:24:31: 58:08:13:67:d5:d8:7c:ac:47:b0:1a:e5:98:8e:b8:72:2d:d2: 88:4a:39:5a:c2:b2:fe:bc:d0:57:78:4d:f8:88:af:98:40:ab: 83:af:31:5d:51:74:49:94:1d:cc:6a:00:cc:61:fc:47:4a:ed: bf:96:42:44:72:a6:61:42:ee:af:30:7e:66:4d:a9:b2:d6:70: 84:5e:14:57:19:55:64:83:0c:4e:f7:80:2f:9b:e7:0b:e7:06: 95:9e:5f:b9:36:55:e6:aa:ba:45:3e:14:29:bf:1b:4a:03:87: db:a4:8c:cc:ee:d5:94:58:ad:1c:84:af:89:67:d1:ec:45:6f: 1d:45:80:c9:d3:5d:f3:0d:19:36:55:69:f3:17:d9:16:31:32: d4:bd:3f:82:7a:e9:17:51:c6:62:d7:d9:96:a4:5c:04:50:00: f9:f3:f6:af:3e:9f:e5:a0:76:25:b0:5d:d2:f6:35:1d:2a:94: 16:8b:3e:aa:e5:b9:61:30:22:ea:bd:fa:f1:2f:95:cb:03:44: ac:56:f4:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6iM8quuqjHz+Xr0buhUAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjUwODA1MTQwMDQyWhcNMjUwODA2MTQwMDQyWjAzMTEwLwYDVQQD EygxYzkzMTc5ZDI0MTE0NGQ3YTAyYTcxZmE2OThkYTJjYTk1ZDQwZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscSAdsLN9rxIkpV/9BGdgtOKEX9k 1RAArvVlSmUWMjRseZdbPZIbkMPKpwa8XTxPfn60Lv6Q5oIj4oOKC5zIeuHxiBeZ vw75mJUMTw4i9elgPOusFtxSGr0QvJ2T7NJ/sWVS3arKlH8T3x59KhNNFH5eQSpG X/2EW/1QQcTQxBvT6IuykiNfV1giSdHRrWcPM3RrBYxUr/ikcV+N0Oru2/PhSHgE EnQQqZo+C2YaglTDF/mt5DGsx5vpRmztWugcay9SIIMbU5LVjBoOgMvA+s/R/nVl JSGVbcFsRea/stdgcMfuyPT44qsuDjunQnQ0A7p/Jyfw0OcbQU5pbf86JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByTF50kEUTXoCpx+mmNosqV1A1+MB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJeXvUOX EBGj+wuaoic36yeT52/z84qEVMjJaGL/IKq0vRD1H2u9S+ZLUdamw8zrck6WEiQx WAgTZ9XYfKxHsBrlmI64ci3SiEo5WsKy/rzQV3hN+IivmECrg68xXVF0SZQdzGoA zGH8R0rtv5ZCRHKmYULurzB+Zk2pstZwhF4UVxlVZIMMTveAL5vnC+cGlZ5fuTZV 5qq6RT4UKb8bSgOH26SMzO7VlFitHISviWfR7EVvHUWAydNd8w0ZNlVp8xfZFjEy 1L0/gnrpF1HGYtfZlqRcBFAA+fP2rz6f5aB2JbBd0vY1HSqUFos+quW5YTAi6r36 8S+VywNErFb0uw== -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:07 2025 by rpki-client