$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: kiY6JRomcc1srJGQ+xrGOmGh+tlSSuIodH237M7Ci7w= Subject key identifier: 7A:A7:A3:34:97:BA:62:FC:6A:E8:59:FB:7C:14:07:A9:AD:92:86:56 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 01976D3E58E89A2B68B6F15838067160E7E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 159C Signing time: Sat 14 Jun 2025 07:01:31 +0000 Manifest this update: Sat 14 Jun 2025 07:01:31 +0000 Manifest next update: Sun 15 Jun 2025 07:01:31 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 3: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (hash: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=) 4: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 5: YVY9nIlUnxzvYvUHcuswYdgv-5c.roa (hash: de7Nhke3BR4RbsVq7LgDRBaPDz0mhJShPdisp8UZut0=) 6: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 7: fRZWH_M0OyQ2q7C3l2YZBzviPzY.roa (hash: F07+RgoevJOf1u0ML2Jb2xCzFrPFpbtH07Gxnbmp3Hg=) 8: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: Dvb3dN8aeA7wAFZ75bGSFwyj155iHvxQvhucrZmi1rk=) 10: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 11: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:3e:58:e8:9a:2b:68:b6:f1:58:38:06:71:60:e7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jun 14 07:01:31 2025 GMT Not After : Jun 15 07:01:31 2025 GMT Subject: CN=7aa7a33497ba62fc6ae859fb7c1407a9ad928656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:aa:ac:8d:03:e2:78:a6:b9:1c:10:e0:4a: b0:b8:0e:04:c6:e3:9b:02:f7:70:b5:a6:d5:96:e2: 14:3d:c9:b2:68:c8:71:62:65:62:ae:3c:dc:3f:e8: 39:2e:b6:b8:51:96:5c:71:16:63:a4:67:34:46:45: 61:c2:17:0d:59:02:d9:29:9a:18:8f:e8:ef:42:63: fa:8b:bc:50:44:69:bd:de:bb:65:c6:6f:49:d8:3e: bb:ed:ad:26:66:64:6e:de:ce:3e:60:a5:c1:91:54: 73:d6:66:e8:9d:91:0c:33:65:09:b0:16:86:f6:80: 7b:73:7e:c1:ca:92:92:a9:db:bb:15:f2:07:e9:82: cc:97:86:a7:dd:73:6d:0f:9e:8d:88:9c:47:7f:a5: fe:da:bb:13:be:7e:1d:82:25:2c:da:02:70:6c:f5: d9:9c:3c:5c:47:76:db:a6:44:b4:b1:c2:d1:91:aa: 67:de:9a:bd:40:f2:65:79:1e:64:d7:92:55:e7:b6: 4b:3c:59:36:ae:e8:ca:d0:cd:2c:db:cc:0b:d0:ac: f8:f3:33:52:54:32:6e:d1:ed:c0:9d:6d:3e:c7:6c: cd:b0:d5:31:b2:41:e5:24:2b:d5:89:66:17:c0:ae: 84:0d:8d:14:74:b7:29:6e:5e:b5:03:5e:ff:ac:c7: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A7:A3:34:97:BA:62:FC:6A:E8:59:FB:7C:14:07:A9:AD:92:86:56 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a1:0e:b7:7d:01:57:52:b6:2d:ad:03:b9:40:c0:48:b4:b7: f2:64:b7:35:9c:5c:1d:d8:40:1e:44:cf:a7:04:69:31:c6:20: 7f:a7:2f:61:0e:cb:cf:90:ae:90:98:f5:ab:5a:4d:1a:f9:2e: 76:dc:82:bb:94:45:ee:af:d3:d1:59:19:f2:07:f2:8b:34:69: 85:83:61:cb:2b:b1:e9:b4:01:21:f0:14:aa:ad:b2:11:28:a5: 4c:39:e0:da:03:77:88:e6:76:e0:95:75:ec:3f:3e:3d:20:c4: 60:76:5b:3c:3c:36:77:84:f0:22:1f:2f:0c:00:d3:d6:c4:4c: b5:50:21:80:02:0f:a1:46:95:30:bc:13:d8:d8:4b:bf:a8:98: 1e:2f:80:0d:eb:d6:c9:98:30:ed:49:87:83:92:1e:7e:5a:77: f5:54:69:0b:13:4c:5d:39:da:9b:c4:5e:81:32:bf:92:55:1e: 5e:2b:31:59:09:13:0c:1f:4c:ae:3f:b7:b2:ea:ca:f2:21:b1: 28:3a:62:ba:a0:43:6c:27:80:79:e8:aa:a3:e8:ac:ef:69:5c: eb:e5:41:e5:6c:20:2b:71:03:d9:91:73:df:4e:6c:f0:2d:ae: f7:8b:72:bd:b0:a1:da:58:2c:ac:ba:37:47:96:21:ac:3e:30: dd:d2:f7:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtPljomitotvFYOAZxYOfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUwNjE0MDcwMTMxWhcNMjUwNjE1MDcwMTMxWjAzMTEwLwYDVQQD Eyg3YWE3YTMzNDk3YmE2MmZjNmFlODU5ZmI3YzE0MDdhOWFkOTI4NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTmqrI0D4nimuRwQ4EqwuA4ExuOb AvdwtabVluIUPcmyaMhxYmVirjzcP+g5Lra4UZZccRZjpGc0RkVhwhcNWQLZKZoY j+jvQmP6i7xQRGm93rtlxm9J2D677a0mZmRu3s4+YKXBkVRz1mbonZEMM2UJsBaG 9oB7c37BypKSqdu7FfIH6YLMl4an3XNtD56NiJxHf6X+2rsTvn4dgiUs2gJwbPXZ nDxcR3bbpkS0scLRkapn3pq9QPJleR5k15JV57ZLPFk2rujK0M0s28wL0Kz48zNS VDJu0e3AnW0+x2zNsNUxskHlJCvViWYXwK6EDY0UdLcpbl61A17/rMciQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqnozSXumL8auhZ+3wUB6mtkoZWMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6EOt30B V1K2La0DuUDASLS38mS3NZxcHdhAHkTPpwRpMcYgf6cvYQ7Lz5CukJj1q1pNGvku dtyCu5RF7q/T0VkZ8gfyizRphYNhyyux6bQBIfAUqq2yESilTDng2gN3iOZ24JV1 7D8+PSDEYHZbPDw2d4TwIh8vDADT1sRMtVAhgAIPoUaVMLwT2NhLv6iYHi+ADevW yZgw7UmHg5Ieflp39VRpCxNMXTnam8RegTK/klUeXisxWQkTDB9Mrj+3surK8iGx KDpiuqBDbCeAeeiqo+is72lc6+VB5WwgK3ED2ZFz305s8C2u94tyvbCh2lgsrLo3 R5YhrD4w3dL3Aw== -----END CERTIFICATE-----Generated at Sat Jun 14 10:09:59 2025 by rpki-client