$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: pxA0bEeG2NnoZUXId5Ju7lkG3EdakHDu+NGbs/lGo7U= Subject key identifier: 40:3C:B3:CE:1C:E6:23:67:F2:B5:8A:C6:58:2D:F9:88:15:89:88:EE Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 01987F79D3BF8D554425661AD39B92259C81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1645 Signing time: Wed 06 Aug 2025 13:02:27 +0000 Manifest this update: Wed 06 Aug 2025 13:02:27 +0000 Manifest next update: Thu 07 Aug 2025 13:02:27 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 7: R0-mbrlkQj2Gy6Nt6WDL988hyv8.roa (hash: TNdehcbateMNki61iSUqlN2sgtl/UwdBnEcO8z3cSF0=) 8: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 9: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 10: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 11: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 12: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 13: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 14: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: iBTgz4Rz1B/aJldnQD6aNqX3MUIS384xpmIHkUbjA7g=) 15: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 16: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 17: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 18: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) 19: zzxDA_jaGZ-licmX7_8AfzWVEg4.roa (hash: yQZb/wWXMNaCLJYPnwrZFiYxI3PMack8phKpUQ0e+Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 13:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7f:79:d3:bf:8d:55:44:25:66:1a:d3:9b:92:25:9c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Aug 6 13:02:27 2025 GMT Not After : Aug 7 13:02:27 2025 GMT Subject: CN=403cb3ce1ce62367f2b58ac6582df988158988ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:7c:d7:50:e7:f0:44:82:35:3c:09:c5:c4: 2d:d6:9d:60:28:42:18:d6:83:8e:c3:4b:16:67:4e: 6e:b3:f5:fa:bc:dc:dc:04:7a:46:2f:30:6f:e0:21: bb:16:4c:be:4b:48:b0:54:d4:0c:d9:e5:90:f7:32: 02:bc:df:f0:d7:9c:9b:61:0c:58:6e:35:d4:10:3a: 58:90:d9:d7:d3:2a:ae:d8:56:5e:09:9a:c5:a4:32: b4:5e:34:ca:8b:d4:0a:40:5b:60:78:88:dd:f6:ff: cc:04:9b:f3:2a:53:1d:68:53:0c:08:ce:3f:9d:25: 49:db:ff:c7:5f:f0:41:af:ac:e4:94:8e:3a:a2:8a: 7c:eb:1a:cd:21:f3:2b:91:44:1c:49:55:cc:14:ff: 24:71:6a:d7:fe:5b:47:28:0e:6d:4d:ed:ef:d9:c7: 11:2d:44:8a:9c:e0:dc:7d:39:e1:0c:3a:91:dc:57: 4e:71:05:06:85:e4:7b:86:5f:61:38:b1:ce:ba:92: c5:2b:fa:53:fe:58:c4:c4:16:e5:e9:5c:98:5f:79: d4:d3:2e:c7:50:12:94:1b:1f:94:df:c3:e5:e1:e8: 08:a2:fc:76:52:8e:24:f3:75:f0:77:94:b5:8a:f5: 7d:cd:b3:81:4e:b5:7d:32:a8:17:20:92:38:27:59: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3C:B3:CE:1C:E6:23:67:F2:B5:8A:C6:58:2D:F9:88:15:89:88:EE X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5f:49:8a:1e:d8:17:6e:60:e1:a5:be:4d:38:51:81:39:2f: c9:49:67:70:9d:8c:82:34:84:2b:b9:d0:59:cd:8d:9b:45:6a: 8f:c4:9f:ca:29:d2:86:27:19:fa:cd:97:a5:3f:70:3b:1b:82: 57:9f:13:4e:80:ab:da:3f:2d:fa:5d:25:a3:e5:e6:ae:a5:fb: 09:00:73:b3:ca:8a:09:c1:50:b9:2f:12:3f:6b:7f:3d:ce:1d: 2f:e8:6a:ed:fa:b7:bc:74:0d:6d:87:0d:3f:33:70:a9:29:54: dd:e3:94:2e:28:34:88:1e:0c:71:61:b9:8c:e9:c4:f8:29:37: 93:f3:fa:da:9c:03:0d:8a:6b:1c:57:2d:df:29:e2:e2:c7:05: 46:cc:47:2f:a8:e5:43:e3:80:5e:21:3d:f4:67:ee:a0:cf:f8: 16:f8:16:8f:c1:04:e4:a2:87:a3:db:46:43:9e:cc:f1:a1:70: 24:bf:bd:ad:cd:da:03:c3:67:e2:06:3c:b6:57:4c:55:92:e6: 35:59:34:78:ba:aa:99:75:84:2d:d3:8a:f1:54:22:dd:e5:c7: f0:3c:58:20:3e:64:da:b3:9e:ea:b6:7f:17:f4:43:2d:d1:c6: 53:fa:76:08:29:bc:6d:e7:c6:d5:f2:a1:f7:01:d3:29:04:19: 2f:fa:d8:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh/edO/jVVEJWYa05uSJZyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUwODA2MTMwMjI3WhcNMjUwODA3MTMwMjI3WjAzMTEwLwYDVQQD Eyg0MDNjYjNjZTFjZTYyMzY3ZjJiNThhYzY1ODJkZjk4ODE1ODk4OGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPd811Dn8ESCNTwJxcQt1p1gKEIY 1oOOw0sWZ05us/X6vNzcBHpGLzBv4CG7Fky+S0iwVNQM2eWQ9zICvN/w15ybYQxY bjXUEDpYkNnX0yqu2FZeCZrFpDK0XjTKi9QKQFtgeIjd9v/MBJvzKlMdaFMMCM4/ nSVJ2//HX/BBr6zklI46oop86xrNIfMrkUQcSVXMFP8kcWrX/ltHKA5tTe3v2ccR LUSKnODcfTnhDDqR3FdOcQUGheR7hl9hOLHOupLFK/pT/ljExBbl6VyYX3nU0y7H UBKUGx+U38Pl4egIovx2Uo4k83Xwd5S1ivV9zbOBTrV9MqgXIJI4J1nv9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA8s84c5iNn8rWKxlgt+YgViYjuMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiF9Jih7Y F25g4aW+TThRgTkvyUlncJ2MgjSEK7nQWc2Nm0Vqj8SfyinShicZ+s2XpT9wOxuC V58TToCr2j8t+l0lo+XmrqX7CQBzs8qKCcFQuS8SP2t/Pc4dL+hq7fq3vHQNbYcN PzNwqSlU3eOULig0iB4McWG5jOnE+Ck3k/P62pwDDYprHFct3yni4scFRsxHL6jl Q+OAXiE99GfuoM/4FvgWj8EE5KKHo9tGQ57M8aFwJL+9rc3aA8Nn4gY8tldMVZLm NVk0eLqqmXWELdOK8VQi3eXH8DxYID5k2rOe6rZ/F/RDLdHGU/p2CCm8befG1fKh 9wHTKQQZL/rYlQ== -----END CERTIFICATE-----Generated at Wed Aug 6 16:19:18 2025 by rpki-client