$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: Tjuc+qavQmijfRUxHG5R9eFukXXjLUFXKpGePw7XaA0= Subject key identifier: D4:45:DD:41:AC:00:FB:AE:95:8B:C1:AA:00:91:FC:9F:E4:59:CB:5F Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 0196741E127196CB93087863C6635B9964E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1500 Signing time: Sat 26 Apr 2025 22:00:49 +0000 Manifest this update: Sat 26 Apr 2025 22:00:49 +0000 Manifest next update: Sun 27 Apr 2025 22:00:49 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: TvEccsNJ3cvDraWp1lm/+lGb6v9CkPqC4ZPye/qNcp0=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:1e:12:71:96:cb:93:08:78:63:c6:63:5b:99:64:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Apr 26 22:00:49 2025 GMT Not After : Apr 27 22:00:49 2025 GMT Subject: CN=d445dd41ac00fbae958bc1aa0091fc9fe459cb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:4a:28:d0:9f:a0:87:f4:f8:89:66:03:b5: 76:9e:73:e6:59:89:84:0d:0f:0c:e8:10:73:31:5c: 60:3b:14:b0:c3:70:ee:74:fc:0c:8b:66:b7:a9:e9: 28:6a:6a:58:4a:e7:d7:d1:e6:2c:fd:ed:22:4a:4c: 9a:f5:0f:e5:3f:15:34:5e:04:9b:0c:eb:68:3a:1e: 6f:60:a6:c8:ed:1c:c6:be:8f:76:50:63:0d:b1:d5: 75:c0:fc:09:8b:89:da:b6:06:a8:dc:8a:5a:7b:4a: 5c:c6:8a:6e:2f:0c:ea:78:5a:3c:a3:83:db:7f:28: a9:1a:6e:0f:10:7a:f2:16:d4:d2:09:0e:27:84:46: 0b:ed:85:8f:00:e4:b5:a2:99:7a:ad:de:43:39:af: 95:91:4a:43:dc:00:64:b2:23:49:23:fb:af:df:59: 42:f4:13:26:22:58:1a:89:40:30:da:f0:90:58:4e: be:e6:72:cc:fd:c5:25:af:32:78:80:97:09:e5:3d: 76:1e:49:2f:4c:22:d4:66:25:b1:ba:d3:cb:66:88: 28:16:ca:83:73:2a:4c:85:8e:f3:d0:f9:bc:85:73: ae:92:10:3c:d6:f2:5b:98:d9:e1:d8:42:94:f2:ab: 77:5c:a9:e9:63:00:c3:a3:bd:ca:46:98:51:22:07: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:45:DD:41:AC:00:FB:AE:95:8B:C1:AA:00:91:FC:9F:E4:59:CB:5F X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:13:99:6d:96:db:8e:ae:2e:73:ae:8c:62:45:57:be:41:83: 97:65:1d:8d:4e:09:1f:47:d0:98:88:6b:d7:97:f2:67:0c:4e: c6:ef:be:a1:1e:30:17:5a:e7:6f:f4:4b:40:0c:59:6a:7f:53: 17:6e:34:bd:57:e9:9c:df:18:07:a5:ad:f0:cb:76:f6:28:40: 24:e2:a7:ad:bc:1d:42:3d:96:e9:67:b4:d0:68:ec:92:c2:79: 51:9d:73:ab:53:b0:69:b6:03:bc:7c:7d:74:81:19:18:6a:1e: 88:ea:81:67:7d:da:53:d9:58:c6:d5:9b:3c:2a:40:d8:e1:a7: e3:9c:a0:bb:73:69:48:1a:76:dc:5d:44:72:ec:cc:d7:bd:59: 5a:27:03:4d:fb:7c:43:04:97:60:74:d0:11:11:47:9b:6a:7a: a3:19:d8:87:b6:74:d0:5d:67:ac:10:63:f7:fe:8b:5b:5d:94: 57:b4:ef:d6:26:4b:b3:71:b5:b2:21:52:ce:9a:8e:4c:17:e2: 12:34:3f:bb:e6:2a:39:67:0b:d3:d7:07:c2:18:9c:45:4a:d6: 69:4c:6d:b1:31:00:db:75:7a:ef:e7:de:9f:f9:ea:d0:f5:08: 72:ab:72:58:77:fb:f7:d4:7f:e2:91:16:26:a3:c3:b3:50:23: ef:00:2a:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0HhJxlsuTCHhjxmNbmWTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwNDI2MjIwMDQ5WhcNMjUwNDI3MjIwMDQ5WjAzMTEwLwYDVQQD EyhkNDQ1ZGQ0MWFjMDBmYmFlOTU4YmMxYWEwMDkxZmM5ZmU0NTljYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrNKKNCfoIf0+IlmA7V2nnPmWYmE DQ8M6BBzMVxgOxSww3DudPwMi2a3qekoampYSufX0eYs/e0iSkya9Q/lPxU0XgSb DOtoOh5vYKbI7RzGvo92UGMNsdV1wPwJi4natgao3Ipae0pcxopuLwzqeFo8o4Pb fyipGm4PEHryFtTSCQ4nhEYL7YWPAOS1opl6rd5DOa+VkUpD3ABksiNJI/uv31lC 9BMmIlgaiUAw2vCQWE6+5nLM/cUlrzJ4gJcJ5T12HkkvTCLUZiWxutPLZogoFsqD cypMhY7z0Pm8hXOukhA81vJbmNnh2EKU8qt3XKnpYwDDo73KRphRIgcE2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRF3UGsAPuulYvBqgCR/J/kWctfMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYROZbZbb jq4uc66MYkVXvkGDl2UdjU4JH0fQmIhr15fyZwxOxu++oR4wF1rnb/RLQAxZan9T F240vVfpnN8YB6Wt8Mt29ihAJOKnrbwdQj2W6We00GjsksJ5UZ1zq1OwabYDvHx9 dIEZGGoeiOqBZ33aU9lYxtWbPCpA2OGn45ygu3NpSBp23F1EcuzM171ZWicDTft8 QwSXYHTQERFHm2p6oxnYh7Z00F1nrBBj9/6LW12UV7Tv1iZLs3G1siFSzpqOTBfi EjQ/u+YqOWcL09cHwhicRUrWaUxtsTEA23V67+fen/nq0PUIcqtyWHf799R/4pEW JqPDs1Aj7wAqxQ== -----END CERTIFICATE-----Generated at Sun Apr 27 08:01:36 2025 by rpki-client