$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: p3k7NhnhO3VJaM0DGF7XoVtsgD1va9MzvubKGa/lX8E= Subject key identifier: 93:1F:DA:DE:D4:58:AA:FA:BB:F1:A1:F3:C6:20:1D:FA:1B:29:20:8D Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 019778D4949DF5BA838A60FD5798BFC42120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 138E Signing time: Mon 16 Jun 2025 13:01:26 +0000 Manifest this update: Mon 16 Jun 2025 13:01:26 +0000 Manifest next update: Tue 17 Jun 2025 13:01:26 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: 6k6X+R3g1aX6hTKYImTlxs860FVAIBcljCSm2u/Mcq8=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:78:d4:94:9d:f5:ba:83:8a:60:fd:57:98:bf:c4:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Jun 16 13:01:26 2025 GMT Not After : Jun 17 13:01:26 2025 GMT Subject: CN=931fdaded458aafabbf1a1f3c6201dfa1b29208d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:71:df:70:c8:22:b3:30:23:1f:eb:f2:7d: 0c:1a:b2:a3:df:15:c8:2c:69:ef:d9:d5:91:42:ab: ba:af:3f:b7:af:45:95:9d:dd:45:92:0a:90:a0:93: 47:01:ca:66:63:7f:96:b3:ca:68:90:4b:4d:11:58: bc:0d:3c:92:59:88:b3:e5:4c:90:22:53:a8:da:48: d4:f2:08:ab:b4:f3:bc:a8:b9:ca:31:0a:18:81:5d: 2f:65:cb:9b:7b:87:12:89:90:1e:8b:17:48:b1:e6: 8b:ee:d2:d8:40:dd:ac:48:8b:d7:d0:b9:48:ee:43: 12:f5:6d:97:00:0e:36:02:b1:9d:9a:29:26:2b:a8: 7a:ea:b0:1d:48:81:0d:ee:db:c2:81:a2:a1:80:2f: 09:f1:1f:89:c4:0f:02:c6:72:9f:54:75:04:94:01: 41:45:4a:e8:d2:5a:af:66:03:64:05:f9:83:ba:5d: 01:97:91:17:77:29:45:7e:dc:b2:fa:be:02:1b:6f: 93:5d:be:07:95:21:53:de:16:37:7b:45:0e:8c:02: b8:bb:98:58:4e:d9:cb:46:0f:4d:25:45:3c:9d:ae: 90:03:3b:c5:5c:8f:c8:21:6f:50:df:13:f1:ee:6f: df:d9:69:8e:7b:eb:b7:33:26:07:2c:2c:81:53:0b: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1F:DA:DE:D4:58:AA:FA:BB:F1:A1:F3:C6:20:1D:FA:1B:29:20:8D X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0d:5a:aa:97:91:94:bc:7f:3d:7a:de:f3:65:87:15:4a:67: 3e:42:8e:42:bf:61:b1:83:9f:ed:1a:34:c1:ec:58:bd:3f:42: b5:38:50:31:d1:e5:7d:ee:f7:2e:a7:90:9c:60:da:3f:53:93: 97:30:44:60:1d:98:9f:60:96:34:16:75:7e:29:ce:ed:b0:e6: c0:b5:c4:73:c8:94:9b:cd:36:48:c3:13:a1:b8:50:b0:68:c8: 2a:2c:91:5a:4f:5f:85:46:a9:a4:08:1d:bf:b0:31:2f:bf:9d: 01:fa:67:25:f1:0a:d1:96:95:33:a0:17:fc:e0:34:f3:38:cb: 56:3c:7b:59:21:7d:fa:1b:e1:6f:37:42:60:06:a8:9c:25:9a: d2:17:32:7e:0a:37:b3:e1:f6:7f:29:c0:fd:29:09:ea:4e:47: a5:ed:0c:52:16:4f:4e:64:1f:91:07:2e:ed:46:ca:9c:49:d4: b8:8e:9f:24:f8:11:77:57:b4:79:f5:c1:5c:58:b8:ee:f3:e4: 97:0a:a1:d6:63:6d:32:c0:97:20:9f:20:ed:5f:e0:e4:88:fe: d9:ea:3d:80:0b:cc:df:5c:58:d6:21:9b:7d:ed:7d:2f:23:ed: 31:ed:01:b8:e8:85:cc:ec:28:0b:63:98:d1:46:5d:c7:bd:07: 7c:73:61:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd41JSd9bqDimD9V5i/xCEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUwNjE2MTMwMTI2WhcNMjUwNjE3MTMwMTI2WjAzMTEwLwYDVQQD Eyg5MzFmZGFkZWQ0NThhYWZhYmJmMWExZjNjNjIwMWRmYTFiMjkyMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP5x33DIIrMwIx/r8n0MGrKj3xXI LGnv2dWRQqu6rz+3r0WVnd1FkgqQoJNHAcpmY3+Ws8pokEtNEVi8DTySWYiz5UyQ IlOo2kjU8girtPO8qLnKMQoYgV0vZcube4cSiZAeixdIseaL7tLYQN2sSIvX0LlI 7kMS9W2XAA42ArGdmikmK6h66rAdSIEN7tvCgaKhgC8J8R+JxA8CxnKfVHUElAFB RUro0lqvZgNkBfmDul0Bl5EXdylFftyy+r4CG2+TXb4HlSFT3hY3e0UOjAK4u5hY TtnLRg9NJUU8na6QAzvFXI/IIW9Q3xPx7m/f2WmOe+u3MyYHLCyBUwvr/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMf2t7UWKr6u/Gh88YgHfobKSCNMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQ1aqpeR lLx/PXre82WHFUpnPkKOQr9hsYOf7Ro0wexYvT9CtThQMdHlfe73LqeQnGDaP1OT lzBEYB2Yn2CWNBZ1finO7bDmwLXEc8iUm802SMMTobhQsGjIKiyRWk9fhUappAgd v7AxL7+dAfpnJfEK0ZaVM6AX/OA08zjLVjx7WSF9+hvhbzdCYAaonCWa0hcyfgo3 s+H2fynA/SkJ6k5Hpe0MUhZPTmQfkQcu7UbKnEnUuI6fJPgRd1e0efXBXFi47vPk lwqh1mNtMsCXIJ8g7V/g5Ij+2eo9gAvM31xY1iGbfe19LyPtMe0BuOiFzOwoC2OY 0UZdx70HfHNh2w== -----END CERTIFICATE-----Generated at Mon Jun 16 21:37:41 2025 by rpki-client