$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: +x8wDsiu9ptV3Ak+ussKMf4jq0wNJav1Ojf/ejOuJl8= Subject key identifier: C6:D7:C3:2E:56:27:9A:6F:D9:AE:89:46:88:38:DE:59:11:3A:DE:FF Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 01968B1379C940C717F2633DB169C9DC769E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 151E Signing time: Thu 01 May 2025 09:00:31 +0000 Manifest this update: Thu 01 May 2025 09:00:31 +0000 Manifest next update: Fri 02 May 2025 09:00:31 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: bXUZNa3kTL5GzP3ILgovP0Vr7JE3ECyvTCU5LlyJP2U=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:8b:13:79:c9:40:c7:17:f2:63:3d:b1:69:c9:dc:76:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: May 1 09:00:31 2025 GMT Not After : May 2 09:00:31 2025 GMT Subject: CN=c6d7c32e56279a6fd9ae89468838de59113adeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:45:09:af:c2:06:53:ea:74:2a:97:99:00:49: 2e:93:b4:8f:40:a9:44:3d:0e:ea:68:fb:fd:28:1f: 9c:b7:7d:42:00:f4:f1:23:47:ae:aa:10:30:d2:6b: f4:5b:07:4f:9b:15:ec:12:f0:67:3a:0b:50:d0:15: ac:0e:00:2c:15:05:80:ef:b3:80:29:bb:c9:60:b9: bf:3d:23:67:08:fe:9a:db:f0:82:21:82:7b:44:ac: 22:d9:d3:03:62:c3:0b:51:db:5a:99:18:ee:00:d4: 2e:a3:3e:88:45:e1:17:9d:88:29:53:aa:09:c6:20: 42:d4:56:98:b0:6f:93:92:f2:61:ce:db:65:82:06: df:38:ca:15:8b:72:cf:82:ee:88:59:dc:eb:b9:45: 6b:77:10:a2:e2:41:da:f7:81:18:e5:30:60:52:db: 1e:f0:fa:53:c9:c2:0e:43:42:23:2d:c1:29:4c:d2: 7a:26:e4:3a:39:44:9f:54:6e:cb:3d:d0:83:f7:3b: a8:cb:f6:d1:89:15:fc:18:b0:6e:8a:52:b0:bc:d5: b2:d7:bd:bb:a6:35:dd:16:82:2f:bf:45:97:73:9d: fb:27:16:31:b3:23:21:23:55:ec:b8:86:80:79:4a: 5f:3b:d4:ae:31:1d:5b:a6:51:7f:6c:fc:17:af:cd: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:C3:2E:56:27:9A:6F:D9:AE:89:46:88:38:DE:59:11:3A:DE:FF X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:90:0d:0e:44:74:35:33:6f:62:ad:d3:d9:eb:33:16:13:95: 36:14:d9:b2:5c:33:dd:7d:e0:50:37:71:4d:39:9e:68:2b:c1: 62:1f:27:06:ba:2e:9c:af:b2:83:d5:12:ac:bf:e5:63:4b:63: 84:f9:0b:3b:6a:08:7d:cb:f1:bb:15:15:54:63:f6:8e:11:14: f4:0c:6f:93:5b:a1:8d:f8:03:a1:46:00:75:20:eb:76:d5:f0: cb:bf:e3:76:56:0e:e3:38:a5:44:d5:bb:21:09:9f:4a:18:7a: 83:47:84:3e:55:b8:cf:09:a1:af:fa:a1:bf:b2:92:1e:73:08: e1:45:36:f8:7a:eb:1e:a2:e5:2a:39:56:cf:50:36:be:a5:fd: 07:cd:59:3a:2c:0a:1b:0c:0a:87:55:4a:f7:71:6d:e2:ec:19: 56:35:90:ff:c9:e6:99:e9:e1:e9:64:f0:5c:c9:5c:51:d3:09: 3e:ae:e5:b3:a7:05:22:b7:58:af:6b:69:5f:98:41:55:03:97: 6a:ff:89:91:f7:07:55:a9:69:c6:2a:38:b6:b3:da:6d:a1:d7: fb:87:44:e2:e7:2f:00:80:02:32:e0:b0:d2:18:0e:42:90:fd: 25:00:f0:85:80:ec:0c:a7:a3:6b:c7:2a:f9:62:b8:f4:bc:dd: 90:36:0e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaLE3nJQMcX8mM9sWnJ3HaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwNTAxMDkwMDMxWhcNMjUwNTAyMDkwMDMxWjAzMTEwLwYDVQQD EyhjNmQ3YzMyZTU2Mjc5YTZmZDlhZTg5NDY4ODM4ZGU1OTExM2FkZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEUJr8IGU+p0KpeZAEkuk7SPQKlE PQ7qaPv9KB+ct31CAPTxI0euqhAw0mv0WwdPmxXsEvBnOgtQ0BWsDgAsFQWA77OA KbvJYLm/PSNnCP6a2/CCIYJ7RKwi2dMDYsMLUdtamRjuANQuoz6IReEXnYgpU6oJ xiBC1FaYsG+TkvJhzttlggbfOMoVi3LPgu6IWdzruUVrdxCi4kHa94EY5TBgUtse 8PpTycIOQ0IjLcEpTNJ6JuQ6OUSfVG7LPdCD9zuoy/bRiRX8GLBuilKwvNWy1727 pjXdFoIvv0WXc537JxYxsyMhI1XsuIaAeUpfO9SuMR1bplF/bPwXr81AUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbXwy5WJ5pv2a6JRog43lkROt7/MB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJANDkR0 NTNvYq3T2eszFhOVNhTZslwz3X3gUDdxTTmeaCvBYh8nBrounK+yg9USrL/lY0tj hPkLO2oIfcvxuxUVVGP2jhEU9Axvk1uhjfgDoUYAdSDrdtXwy7/jdlYO4zilRNW7 IQmfShh6g0eEPlW4zwmhr/qhv7KSHnMI4UU2+HrrHqLlKjlWz1A2vqX9B81ZOiwK GwwKh1VK93Ft4uwZVjWQ/8nmmenh6WTwXMlcUdMJPq7ls6cFIrdYr2tpX5hBVQOX av+JkfcHValpxio4trPabaHX+4dE4ucvAIACMuCw0hgOQpD9JQDwhYDsDKeja8cq +WK49LzdkDYOTw== -----END CERTIFICATE-----Generated at Thu May 1 17:27:34 2025 by rpki-client