$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: amcTlE2x2Q3xT8x5ceeE6xVCixlgtSqIVbPRM7WKsQU= Subject key identifier: E9:B0:48:AC:E8:66:61:36:AD:13:7F:52:7A:17:0D:F1:20:61:54:6C Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 01987D8A669007295E4B01BB58BE3A5463FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 02B9 Signing time: Wed 06 Aug 2025 04:01:18 +0000 Manifest this update: Wed 06 Aug 2025 04:01:18 +0000 Manifest next update: Thu 07 Aug 2025 04:01:18 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 4: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 5: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 11: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (hash: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: hzfPn6OtAv0uvvwro1B8i4NcGgw.roa (hash: 7hWpl5O8danSnIxZLjLxt9gMPgFm0E5udpDgdhH+Kno=) 19: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: TTm0cJlyvXx7qNRJ38yAT+q9SixAkBOjKWglyRrfEgs=) 20: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 21: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:8a:66:90:07:29:5e:4b:01:bb:58:be:3a:54:63:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Aug 6 04:01:18 2025 GMT Not After : Aug 7 04:01:18 2025 GMT Subject: CN=e9b048ace8666136ad137f527a170df12061546c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:fb:e1:ca:f6:98:0f:3f:d2:bc:46:0a:97: cc:95:24:54:95:e3:09:b7:d2:1c:1b:a8:cc:a9:47: 86:dc:05:1e:4a:bc:56:30:2f:77:da:9c:f7:d2:70: 9b:4a:07:ef:6e:fc:37:17:79:f1:46:66:18:e7:a2: 4e:12:6e:ac:eb:dd:5d:a6:dd:17:48:46:93:2b:b5: 62:d9:c7:ab:28:a9:d2:bd:cf:c2:af:7b:50:8e:e7: fb:d1:7d:cc:b3:1c:0a:5d:9e:6e:17:5a:dd:8e:cb: de:2a:51:0a:54:c4:43:e3:60:73:e9:dd:88:53:f0: 4c:16:a8:7e:0d:82:06:2d:87:d9:c0:27:97:a3:48: f0:34:c7:9a:c7:77:4a:29:5a:e2:17:e2:70:2b:f1: 8d:31:eb:b2:6f:23:08:9c:c4:be:bc:8a:e8:a2:f1: 23:68:6c:b5:74:85:da:f4:13:fe:76:dd:30:1a:04: fc:19:64:c8:f1:6e:f9:7d:af:83:5f:1a:99:80:32: 24:8e:ab:70:bd:ec:ff:2f:bb:77:f4:9d:ab:49:fe: 21:28:f3:25:3f:0e:b6:65:1c:d4:18:7a:9e:e7:fc: 9e:70:28:33:af:51:9e:09:f0:fb:b9:d7:e7:f7:e3: bc:8f:44:e9:a3:76:43:7d:e5:1e:ce:0f:d4:f7:f0: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:48:AC:E8:66:61:36:AD:13:7F:52:7A:17:0D:F1:20:61:54:6C X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:44:e3:f6:e4:d6:a0:5a:5f:31:df:7c:58:f2:7d:bf:b0:b3: d2:0b:91:28:8b:ed:2e:8e:5a:fa:31:47:5a:34:4c:09:4a:da: d6:1e:25:85:9e:11:0a:51:dc:8d:d9:c4:ba:a1:43:45:53:9f: 7a:b3:dd:2f:ac:e2:11:37:46:21:d8:97:66:ec:3f:9c:ca:82: 20:6c:78:42:63:e9:0f:d8:ec:fe:63:a0:1d:8e:97:e0:26:ec: c4:0f:12:76:7f:5e:f9:69:4d:51:4f:eb:92:7e:c2:d8:28:a8: e3:65:13:c7:81:28:25:c4:1f:82:2a:d2:45:95:31:ca:67:5d: b2:6a:5d:7f:48:96:17:7a:fb:2c:f8:03:93:73:c3:0b:80:b7: 3c:20:59:2d:f3:eb:fd:09:9d:30:59:bf:4f:da:95:55:02:d6: 40:03:c4:52:76:6a:92:5a:d2:4e:11:57:94:f3:47:75:70:09: 89:51:76:63:4f:1c:73:ba:b6:5f:4a:b9:65:43:e9:6d:7c:8b: 72:19:b3:ce:b9:6e:12:fa:98:4e:6f:74:43:a4:4a:63:01:9d: 04:84:36:34:a0:31:f2:63:59:46:f2:3e:9b:f9:85:ae:7f:a4: f9:f9:8b:a2:2b:80:ec:f2:00:05:14:07:2f:02:ca:49:f6:25: c8:0a:ad:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9imaQByleSwG7WL46VGP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwODA2MDQwMTE4WhcNMjUwODA3MDQwMTE4WjAzMTEwLwYDVQQD EyhlOWIwNDhhY2U4NjY2MTM2YWQxMzdmNTI3YTE3MGRmMTIwNjE1NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgH74cr2mA8/0rxGCpfMlSRUleMJ t9IcG6jMqUeG3AUeSrxWMC932pz30nCbSgfvbvw3F3nxRmYY56JOEm6s691dpt0X SEaTK7Vi2cerKKnSvc/Cr3tQjuf70X3MsxwKXZ5uF1rdjsveKlEKVMRD42Bz6d2I U/BMFqh+DYIGLYfZwCeXo0jwNMeax3dKKVriF+JwK/GNMeuybyMInMS+vIroovEj aGy1dIXa9BP+dt0wGgT8GWTI8W75fa+DXxqZgDIkjqtwvez/L7t39J2rSf4hKPMl Pw62ZRzUGHqe5/yecCgzr1GeCfD7udfn9+O8j0Tpo3ZDfeUezg/U9/ADaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmwSKzoZmE2rRN/UnoXDfEgYVRsMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUTj9uTW oFpfMd98WPJ9v7Cz0guRKIvtLo5a+jFHWjRMCUra1h4lhZ4RClHcjdnEuqFDRVOf erPdL6ziETdGIdiXZuw/nMqCIGx4QmPpD9js/mOgHY6X4CbsxA8Sdn9e+WlNUU/r kn7C2Cio42UTx4EoJcQfgirSRZUxymddsmpdf0iWF3r7LPgDk3PDC4C3PCBZLfPr /QmdMFm/T9qVVQLWQAPEUnZqklrSThFXlPNHdXAJiVF2Y08cc7q2X0q5ZUPpbXyL chmzzrluEvqYTm90Q6RKYwGdBIQ2NKAx8mNZRvI+m/mFrn+k+fmLoiuA7PIABRQH LwLKSfYlyAqtFQ== -----END CERTIFICATE-----Generated at Wed Aug 6 12:44:21 2025 by rpki-client