$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: 71x0yaFNkJYvdTF8eBb+uCHaifFhVGrV1BxEb+yo9No= Subject key identifier: B2:9E:1D:E3:5C:65:47:9E:5B:1E:A6:85:D1:47:27:41:69:FC:E0:2A Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 0197722CB9FA9E8E5DD8A34768A9151DB00B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 15A7 Signing time: Sun 15 Jun 2025 06:00:23 +0000 Manifest this update: Sun 15 Jun 2025 06:00:23 +0000 Manifest next update: Mon 16 Jun 2025 06:00:23 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: FUSDgc58t7U4fuucmEPuEjO5Yhg.roa (hash: aS1RV6Hjz0mszrBpJALZA+zpAxzsSz5luvIAMzBTdPk=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: SyMnl-k5UucfnTeo_SQYwZ82xYs.roa (hash: IFFK24iMwjJA7VBKRvD/UabtondGciIM3nxVgegj8qk=) 9: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 10: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 11: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 12: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 13: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 14: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 15: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 16: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 16bUFK/Bmiis9ham6U1G57jN9iFM9rEZggJdGSsWPfQ=) 17: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 18: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 19: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 22: uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa (hash: lh9JEVycjwO2JOZAXH6/OskJCw09FDKHU4kXtolx/mg=) 23: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 24: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 25: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (hash: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=) 26: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 22:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:72:2c:b9:fa:9e:8e:5d:d8:a3:47:68:a9:15:1d:b0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jun 15 06:00:23 2025 GMT Not After : Jun 16 06:00:23 2025 GMT Subject: CN=b29e1de35c65479e5b1ea685d147274169fce02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:a0:fc:a3:a7:5d:05:35:cf:74:88:30:07: 66:98:f2:2e:0e:0b:17:94:a0:cd:a5:cf:cb:c4:92: a8:b0:93:50:5f:9f:3a:45:19:0e:09:cf:48:14:85: 65:07:e5:5f:1c:44:bc:2c:08:9a:37:14:d5:d0:9c: 77:d7:08:77:4d:59:5e:b8:c4:33:28:74:a0:38:39: e5:0f:13:05:89:c8:e5:7d:82:cd:03:cd:33:cb:7d: cc:31:e1:79:25:20:54:2c:2f:ca:ef:db:4a:4a:76: 91:a6:5e:e0:c9:10:08:e7:05:fe:14:59:21:7a:c5: 98:d6:e5:95:5a:ac:03:b1:33:7e:72:8e:7b:ad:bc: 03:75:e0:0b:fc:05:3f:3c:54:39:a3:23:53:c7:51: 2d:24:a5:c8:6a:6f:2e:a6:94:b7:35:b1:f1:ab:e2: 5d:6a:9c:60:06:5d:dd:06:61:f5:dc:17:95:fe:4b: 60:b7:17:7a:d8:73:11:cf:97:16:04:61:d3:ef:a1: 5e:7d:77:3a:37:75:5b:60:dd:95:b1:90:76:46:31: 1c:73:60:32:10:89:19:9c:92:05:dc:0f:8c:52:19: 58:3e:2f:5f:ff:2b:a3:cc:5d:b8:5e:e6:76:15:b8: 66:c3:b8:50:ed:84:e4:3a:10:54:5c:1b:07:11:9f: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9E:1D:E3:5C:65:47:9E:5B:1E:A6:85:D1:47:27:41:69:FC:E0:2A X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:db:75:85:38:33:fa:84:de:82:7d:fa:e4:ea:6e:1e:d4:ff: f4:0a:64:70:ee:85:fb:52:0c:57:ae:43:1c:6a:72:ad:70:b1: 4d:1c:43:17:48:1b:66:16:00:e8:ef:3f:4c:0d:1e:2e:10:2c: 54:28:25:e5:0c:a5:af:34:25:d4:93:7f:95:99:7a:c4:24:fc: 6c:de:ad:de:da:6b:e8:b2:f6:94:46:03:d1:d6:27:e6:69:7e: d5:a4:bf:2a:d5:c5:11:e2:27:ce:07:0d:70:53:5b:eb:c2:48: 6d:6a:e3:23:4b:68:35:b9:da:24:1f:46:88:a8:9c:0d:2b:9e: b6:ab:43:83:31:29:17:b2:c6:a9:2e:6e:56:ee:7f:c3:53:ef: 79:c2:3a:23:c1:07:ae:e1:14:69:c6:30:3d:72:98:29:37:4b: b5:47:7e:5b:60:a9:e3:56:63:8b:3d:5f:65:f8:1c:d6:9c:db: d2:83:31:fc:cb:a5:69:37:b2:dd:80:f6:e8:42:0e:ca:26:e1: f4:1e:33:fa:2d:9b:5f:b4:c8:85:6e:60:5f:57:2e:c1:45:45: 30:a0:78:0c:95:e4:04:91:36:73:a3:4b:0c:a0:94:14:28:10: 13:a3:43:52:fd:0d:f0:f8:4e:14:d5:03:92:9d:e5:ff:49:b0: b8:fa:85:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdyLLn6no5d2KNHaKkVHbALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwNjE1MDYwMDIzWhcNMjUwNjE2MDYwMDIzWjAzMTEwLwYDVQQD EyhiMjllMWRlMzVjNjU0NzllNWIxZWE2ODVkMTQ3Mjc0MTY5ZmNlMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssOg/KOnXQU1z3SIMAdmmPIuDgsX lKDNpc/LxJKosJNQX586RRkOCc9IFIVlB+VfHES8LAiaNxTV0Jx31wh3TVleuMQz KHSgODnlDxMFicjlfYLNA80zy33MMeF5JSBULC/K79tKSnaRpl7gyRAI5wX+FFkh esWY1uWVWqwDsTN+co57rbwDdeAL/AU/PFQ5oyNTx1EtJKXIam8uppS3NbHxq+Jd apxgBl3dBmH13BeV/ktgtxd62HMRz5cWBGHT76FefXc6N3VbYN2VsZB2RjEcc2Ay EIkZnJIF3A+MUhlYPi9f/yujzF24XuZ2Fbhmw7hQ7YTkOhBUXBsHEZ/97QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKeHeNcZUeeWx6mhdFHJ0Fp/OAqMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdt1hTgz +oTegn365OpuHtT/9ApkcO6F+1IMV65DHGpyrXCxTRxDF0gbZhYA6O8/TA0eLhAs VCgl5QylrzQl1JN/lZl6xCT8bN6t3tpr6LL2lEYD0dYn5ml+1aS/KtXFEeInzgcN cFNb68JIbWrjI0toNbnaJB9GiKicDSuetqtDgzEpF7LGqS5uVu5/w1PvecI6I8EH ruEUacYwPXKYKTdLtUd+W2Cp41Zjiz1fZfgc1pzb0oMx/MulaTey3YD26EIOyibh 9B4z+i2bX7TIhW5gX1cuwUVFMKB4DJXkBJE2c6NLDKCUFCgQE6NDUv0N8PhOFNUD kp3l/0mwuPqFHQ== -----END CERTIFICATE-----Generated at Sun Jun 15 07:33:33 2025 by rpki-client