$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: scM7c/0rR1t5K7o+bU+0R+4g/mXjaXmMX+OmRx8S1uU= Subject key identifier: 5E:B0:DD:79:56:7C:E9:99:80:9B:20:B0:B2:C3:B5:AA:0F:DE:FC:0C Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019774F7838C2F2CB4998E4326ABCD7BBEBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1585 Signing time: Sun 15 Jun 2025 19:01:07 +0000 Manifest this update: Sun 15 Jun 2025 19:01:07 +0000 Manifest next update: Mon 16 Jun 2025 19:01:07 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: Flahsx4wKZjw5yXUaW/oiD3hi6ew8uJQ5l84BN3/3DQ=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:74:f7:83:8c:2f:2c:b4:99:8e:43:26:ab:cd:7b:be:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jun 15 19:01:07 2025 GMT Not After : Jun 16 19:01:07 2025 GMT Subject: CN=5eb0dd79567ce999809b20b0b2c3b5aa0fdefc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:bd:3d:4e:bd:ec:10:6e:7a:b1:5e:4d:c2: 63:da:5d:28:d8:71:7e:5d:4a:97:91:48:8b:77:81: 8a:5c:5b:15:53:b1:65:67:24:8a:0d:3d:31:25:c3: fc:70:c0:2b:9a:87:f6:96:38:db:c6:75:4c:0c:8b: 3a:0d:44:e0:38:2f:14:eb:8b:f1:9e:a8:6f:fd:7b: 89:dd:85:04:9f:a9:16:6a:2d:ae:5d:c5:66:03:eb: 7b:b4:be:89:ac:de:28:91:6b:08:ba:9b:23:53:3a: 7f:b9:4a:f0:7d:12:43:a0:65:30:dc:9a:49:10:fb: a7:fc:51:29:05:e3:47:81:b3:05:1c:9b:6a:ab:89: 5e:d8:68:e7:84:03:6c:2e:44:b5:7d:dd:1c:de:d3: d1:30:23:48:57:7f:99:f1:8d:d9:ed:f9:72:2d:a5: d3:8f:63:b4:54:4a:8c:78:4f:7a:b5:b9:f9:75:b1: cd:75:25:5f:3a:c5:c1:e0:f9:a9:1c:dc:fd:da:aa: a2:6c:34:87:1e:b8:c2:19:91:da:dd:f1:76:37:aa: a5:5b:23:fd:5e:f0:09:04:e1:27:9d:2b:61:ee:a2: 63:67:f1:c6:48:41:94:a1:be:56:4f:b0:b9:76:cd: 03:c6:d9:0f:d4:2e:15:34:3c:61:9e:68:07:6a:3e: 3c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B0:DD:79:56:7C:E9:99:80:9B:20:B0:B2:C3:B5:AA:0F:DE:FC:0C X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:60:3d:92:99:92:91:c3:65:9c:24:2c:2c:9e:2d:d0:75:e7: f0:a2:a3:2c:24:51:eb:d7:6a:8c:cb:a2:4e:3a:56:54:cc:71: 27:e3:95:89:74:42:e7:b4:d8:76:a2:37:a3:c3:20:b6:9c:6b: df:d2:cb:8e:bb:ce:ff:58:11:6c:45:91:ed:1b:63:f0:e8:5a: f1:da:4d:02:28:28:35:66:ce:e6:60:c0:61:18:53:1b:1b:ce: f0:f1:64:b5:2d:86:34:4f:5a:c7:df:8f:6b:f5:cf:f8:a1:5c: 05:05:8e:c0:a7:ac:fb:74:d6:b2:c9:b3:b9:85:f9:6f:46:92: 7c:a4:b5:84:1c:d4:bb:b8:3f:51:76:84:e0:e2:b0:7c:43:55: 34:44:ab:68:41:47:7a:a2:96:8b:ca:97:45:da:95:6c:b8:5f: 3b:e5:32:86:09:5f:00:26:e2:bd:a4:84:d5:bc:f8:72:0d:60: f0:c2:65:6a:67:31:50:00:b9:70:32:00:0a:c0:56:9c:7a:6a: dd:d8:e2:1d:68:ee:df:0c:06:87:8e:8e:f5:88:b9:26:4f:68: 15:64:7b:a1:d4:10:9e:c6:57:83:d7:a0:4a:26:39:6d:bb:da: d2:9c:da:00:f6:d6:b8:34:b1:e6:84:91:9e:c5:16:0f:b1:da: 16:2f:71:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd094OMLyy0mY5DJqvNe766MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwNjE1MTkwMTA3WhcNMjUwNjE2MTkwMTA3WjAzMTEwLwYDVQQD Eyg1ZWIwZGQ3OTU2N2NlOTk5ODA5YjIwYjBiMmMzYjVhYTBmZGVmYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmO9PU697BBuerFeTcJj2l0o2HF+ XUqXkUiLd4GKXFsVU7FlZySKDT0xJcP8cMArmof2ljjbxnVMDIs6DUTgOC8U64vx nqhv/XuJ3YUEn6kWai2uXcVmA+t7tL6JrN4okWsIupsjUzp/uUrwfRJDoGUw3JpJ EPun/FEpBeNHgbMFHJtqq4le2GjnhANsLkS1fd0c3tPRMCNIV3+Z8Y3Z7flyLaXT j2O0VEqMeE96tbn5dbHNdSVfOsXB4PmpHNz92qqibDSHHrjCGZHa3fF2N6qlWyP9 XvAJBOEnnSth7qJjZ/HGSEGUob5WT7C5ds0DxtkP1C4VNDxhnmgHaj48jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6w3XlWfOmZgJsgsLLDtaoP3vwMMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2A9kpmS kcNlnCQsLJ4t0HXn8KKjLCRR69dqjMuiTjpWVMxxJ+OViXRC57TYdqI3o8Mgtpxr 39LLjrvO/1gRbEWR7Rtj8Oha8dpNAigoNWbO5mDAYRhTGxvO8PFktS2GNE9ax9+P a/XP+KFcBQWOwKes+3TWssmzuYX5b0aSfKS1hBzUu7g/UXaE4OKwfENVNESraEFH eqKWi8qXRdqVbLhfO+UyhglfACbivaSE1bz4cg1g8MJlamcxUAC5cDIACsBWnHpq 3djiHWju3wwGh46O9Yi5Jk9oFWR7odQQnsZXg9egSiY5bbva0pzaAPbWuDSx5oSR nsUWD7HaFi9xlA== -----END CERTIFICATE-----Generated at Mon Jun 16 01:19:14 2025 by rpki-client