$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: tzQDdvJF/4VAhD0fHuVgSN1WxwaF9OJton6uAkxn8E0= Subject key identifier: 17:BF:E8:97:B6:87:F7:D2:AB:E4:81:59:E8:CA:82:02:42:69:0B:FC Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 0198854573DE9C0B685858F2EB75764B7801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 1419 Signing time: Thu 07 Aug 2025 16:02:57 +0000 Manifest this update: Thu 07 Aug 2025 16:02:57 +0000 Manifest next update: Fri 08 Aug 2025 16:02:57 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: 9MbO3qH36Nz7bbHMQ6kMt8U45ctUQ7+70oyM8Rh4k8U=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 16:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:85:45:73:de:9c:0b:68:58:58:f2:eb:75:76:4b:78:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Aug 7 16:02:57 2025 GMT Not After : Aug 8 16:02:57 2025 GMT Subject: CN=17bfe897b687f7d2abe48159e8ca820242690bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:89:5d:60:69:eb:b9:e7:18:84:8d:db:5c: 89:38:44:fc:02:86:01:ff:d9:08:ff:0c:6a:6e:c9: 16:24:fc:da:0e:0d:3a:8e:a3:ea:60:8c:54:29:b6: f4:c6:11:d9:ff:4f:27:c6:59:52:54:1f:cc:7b:c7: 5e:9f:0d:81:cc:4e:c7:bf:00:24:15:34:1e:19:69: 1a:af:a1:a1:a9:88:6d:d9:c2:46:18:21:c4:64:7e: d6:b0:d0:e8:9d:8c:d2:72:d7:aa:d6:d6:a5:23:2d: b2:06:35:40:6c:da:b6:63:34:55:23:f5:c8:3c:e5: 06:e4:68:56:9e:ce:49:4d:9f:f1:0e:57:47:a3:29: 57:71:b1:e1:ae:b2:34:4d:74:85:bc:f1:1d:37:03: 07:66:97:d2:ee:91:2b:89:89:dc:18:1c:c7:e1:90: a8:47:32:eb:47:b6:12:4b:ee:5b:0d:3c:75:df:ae: db:fa:36:7a:66:c2:cc:e3:24:5a:17:20:45:6a:10: 67:2a:3d:b5:9c:db:ad:64:6a:e8:11:ef:dc:c3:33: 1c:da:26:9e:47:f1:77:13:84:8c:11:af:fd:57:db: 25:bf:d5:9f:9b:e8:7f:e5:fa:cf:31:b7:04:e4:ab: dd:e6:2b:6c:da:19:d5:b9:c4:83:14:3e:69:91:4c: f4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BF:E8:97:B6:87:F7:D2:AB:E4:81:59:E8:CA:82:02:42:69:0B:FC X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4e:b6:01:39:a8:37:60:01:45:cc:77:b3:fb:18:54:0f:9c: 07:f4:a7:4a:bd:6c:bb:2d:64:ad:45:81:72:72:19:a9:5a:4d: 69:75:1c:8f:89:7f:46:6a:7c:c8:44:87:d5:88:60:61:ca:ec: ac:bc:a7:95:14:a9:32:71:a8:27:d0:11:de:0a:28:94:45:30: cc:3a:42:86:d4:d8:df:3f:8f:d6:61:5c:19:03:92:88:80:68: c4:42:62:49:28:57:1c:6c:45:0e:71:3f:15:2d:0f:de:c0:68: 1c:59:12:cd:1b:6f:b7:e9:6f:3d:ff:b2:da:09:03:48:f7:c6: 4b:bd:fe:cc:f5:54:55:88:9f:bf:99:a0:48:f8:e5:b2:f4:3a: b2:0d:94:da:90:35:21:b9:1f:5a:12:a7:af:1c:3a:e7:92:2e: 13:75:e7:f9:63:11:c6:a9:53:df:14:c4:a0:2d:4e:ef:e3:13: 59:6b:f1:c3:9d:6c:34:8d:d3:21:83:17:91:0d:b8:57:b4:8a: 73:0b:1e:db:71:9a:90:8b:e0:8f:d4:2e:7b:ca:b1:f7:1e:00: 51:68:4d:a4:d9:27:79:f7:1b:1f:14:7b:2d:ac:43:12:0a:40: 33:92:82:09:dd:a5:fb:87:34:63:b4:fd:d6:ba:3b:ab:44:c7: b8:0b:04:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiFRXPenAtoWFjy63V2S3gBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUwODA3MTYwMjU3WhcNMjUwODA4MTYwMjU3WjAzMTEwLwYDVQQD EygxN2JmZTg5N2I2ODdmN2QyYWJlNDgxNTllOGNhODIwMjQyNjkwYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5eJXWBp67nnGISN21yJOET8AoYB /9kI/wxqbskWJPzaDg06jqPqYIxUKbb0xhHZ/08nxllSVB/Me8denw2BzE7HvwAk FTQeGWkar6GhqYht2cJGGCHEZH7WsNDonYzScteq1talIy2yBjVAbNq2YzRVI/XI POUG5GhWns5JTZ/xDldHoylXcbHhrrI0TXSFvPEdNwMHZpfS7pEriYncGBzH4ZCo RzLrR7YSS+5bDTx1367b+jZ6ZsLM4yRaFyBFahBnKj21nNutZGroEe/cwzMc2iae R/F3E4SMEa/9V9slv9Wfm+h/5frPMbcE5Kvd5its2hnVucSDFD5pkUz0iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe/6Je2h/fSq+SBWejKggJCaQv8MB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE62ATmo N2ABRcx3s/sYVA+cB/SnSr1suy1krUWBcnIZqVpNaXUcj4l/Rmp8yESH1YhgYcrs rLynlRSpMnGoJ9AR3goolEUwzDpChtTY3z+P1mFcGQOSiIBoxEJiSShXHGxFDnE/ FS0P3sBoHFkSzRtvt+lvPf+y2gkDSPfGS73+zPVUVYifv5mgSPjlsvQ6sg2U2pA1 IbkfWhKnrxw655IuE3Xn+WMRxqlT3xTEoC1O7+MTWWvxw51sNI3TIYMXkQ24V7SK cwse23GakIvgj9Que8qx9x4AUWhNpNknefcbHxR7LaxDEgpAM5KCCd2l+4c0Y7T9 1ro7q0THuAsESg== -----END CERTIFICATE-----Generated at Thu Aug 7 20:15:38 2025 by rpki-client