$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: MosmPkAKdmA1Shg/urCNimm1I6UAMG8rld22fXdlW/Y= Subject key identifier: DD:11:3A:68:22:5A:59:9B:24:30:FD:B2:10:53:02:14:76:34:1F:9A Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 01988B0E601ACD4E4652B1194FF29D8BADCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1627 Signing time: Fri 08 Aug 2025 19:00:31 +0000 Manifest this update: Fri 08 Aug 2025 19:00:31 +0000 Manifest next update: Sat 09 Aug 2025 19:00:31 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: 2otuYYB6HV1FHj7aLEOrVwufapwvX/sn/FPshUHQtak=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8b:0e:60:1a:cd:4e:46:52:b1:19:4f:f2:9d:8b:ad:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Aug 8 19:00:31 2025 GMT Not After : Aug 9 19:00:31 2025 GMT Subject: CN=dd113a68225a599b2430fdb21053021476341f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:27:67:11:78:6e:78:8b:23:c5:1f:47:e1: ff:a3:39:2d:2d:99:95:63:35:d2:99:6e:a9:1f:e8: 79:e6:2f:00:8b:27:13:ee:18:4d:e8:de:8b:74:47: d7:e3:ef:3c:0c:31:67:b5:17:00:bd:90:9a:31:5f: 4e:1d:cf:8f:bc:b1:34:9c:f5:c4:fb:db:c6:02:1a: e5:d4:27:ee:81:33:24:05:7f:09:4c:0e:9d:80:f0: 81:77:f2:a7:37:2c:38:01:8a:8b:34:ca:5f:e5:3c: d9:33:69:eb:ea:2f:b6:5f:e0:77:85:00:f2:60:65: 7e:0f:b7:07:3d:3e:45:4f:c2:d0:53:74:0e:da:b5: c7:a9:80:34:5c:56:24:68:b1:45:3f:60:dd:2c:7e: d2:7b:c4:3d:27:ae:45:68:84:23:f7:57:9e:ea:cb: a6:af:7d:20:9c:ad:2d:3c:51:1e:02:31:ca:99:dd: d8:bc:83:10:cc:29:4f:a5:27:dd:37:44:fb:7b:6d: 1f:11:2d:bc:74:77:ca:dc:6e:6e:39:e6:d8:c4:f5: 9f:39:0b:46:94:32:2b:8e:3e:4e:b4:f8:6e:4e:f3: 6c:09:54:83:75:73:a5:2a:e6:01:c1:9a:c4:04:1d: 43:af:bf:67:d4:a3:47:9d:c3:69:43:a6:5c:13:50: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:11:3A:68:22:5A:59:9B:24:30:FD:B2:10:53:02:14:76:34:1F:9A X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:00:8c:81:6a:22:6e:82:be:29:0e:78:83:23:67:0f:99:a7: b8:e3:30:ef:30:19:97:b7:57:6a:4a:75:e0:0d:3c:e1:43:7c: c9:9b:67:1c:f7:c0:dc:45:02:ff:e8:69:b2:60:78:60:62:cd: 4b:ea:6c:7d:0b:6a:e5:2a:f0:70:bd:e4:1b:f4:6a:1d:3d:b6: c1:e5:a0:69:76:8b:10:9a:b6:c1:52:a7:09:30:bd:32:a8:c7: fc:cc:70:73:d2:e0:62:a9:b2:cb:3e:22:f2:b0:4c:23:e3:7b: 59:1d:a4:5e:5c:f9:aa:e8:f2:66:fd:c0:52:e3:31:cd:31:5a: 38:76:70:e7:57:4e:e6:ee:58:25:5e:95:3b:67:91:a1:31:0f: 7a:b6:7b:24:49:0b:40:df:f7:ea:3d:e7:fd:ae:c3:b0:28:91: 71:6d:db:f8:ba:ec:33:11:1f:3e:f4:f9:48:c3:c8:d2:cb:bb: f0:64:52:3f:e1:f0:92:13:b1:ab:3e:2e:32:5c:de:29:bd:92: d0:4a:b1:bb:41:b5:10:9a:12:15:bb:8f:37:ad:44:5a:79:84: d1:58:73:df:56:15:97:fa:f4:1a:69:b4:14:23:62:17:39:e6: 96:5c:28:65:a9:fe:e8:38:02:f8:9b:60:34:16:c9:68:1e:52: a9:6b:5e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiLDmAazU5GUrEZT/Kdi63KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwODA4MTkwMDMxWhcNMjUwODA5MTkwMDMxWjAzMTEwLwYDVQQD EyhkZDExM2E2ODIyNWE1OTliMjQzMGZkYjIxMDUzMDIxNDc2MzQxZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+8nZxF4bniLI8UfR+H/ozktLZmV YzXSmW6pH+h55i8AiycT7hhN6N6LdEfX4+88DDFntRcAvZCaMV9OHc+PvLE0nPXE +9vGAhrl1CfugTMkBX8JTA6dgPCBd/KnNyw4AYqLNMpf5TzZM2nr6i+2X+B3hQDy YGV+D7cHPT5FT8LQU3QO2rXHqYA0XFYkaLFFP2DdLH7Se8Q9J65FaIQj91ee6sum r30gnK0tPFEeAjHKmd3YvIMQzClPpSfdN0T7e20fES28dHfK3G5uOebYxPWfOQtG lDIrjj5OtPhuTvNsCVSDdXOlKuYBwZrEBB1Dr79n1KNHncNpQ6ZcE1AxJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0ROmgiWlmbJDD9shBTAhR2NB+aMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwCMgWoi boK+KQ54gyNnD5mnuOMw7zAZl7dXakp14A084UN8yZtnHPfA3EUC/+hpsmB4YGLN S+psfQtq5SrwcL3kG/RqHT22weWgaXaLEJq2wVKnCTC9MqjH/Mxwc9LgYqmyyz4i 8rBMI+N7WR2kXlz5qujyZv3AUuMxzTFaOHZw51dO5u5YJV6VO2eRoTEPerZ7JEkL QN/36j3n/a7DsCiRcW3b+LrsMxEfPvT5SMPI0su78GRSP+HwkhOxqz4uMlzeKb2S 0Eqxu0G1EJoSFbuPN61EWnmE0Vhz31YVl/r0Gmm0FCNiFznmllwoZan+6DgC+Jtg NBbJaB5SqWteNA== -----END CERTIFICATE-----Generated at Sat Aug 9 05:48:00 2025 by rpki-client