$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: 9k5mvD4aVinM2VJXpfIJw1zvq6CpXBc80vT0sNN1SC0= Subject key identifier: 3C:25:BE:27:47:EA:4A:63:A1:E2:04:44:A3:8F:C6:E1:D6:75:98:04 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019671537EB965E74A800327CF766C30DAC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 1074 Signing time: Sat 26 Apr 2025 09:00:19 +0000 Manifest this update: Sat 26 Apr 2025 09:00:19 +0000 Manifest next update: Sun 27 Apr 2025 09:00:19 +0000 Files and hashes: 1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=) 2: 1-SD58DvCs7ya-7E2FpTU4fI87Ow.roa (hash: HUsbSacmCFroTzSN4bvsRHu/98AfJF8ghdyReaEsmzs=) 3: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=) 4: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=) 5: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=) 6: DthOD_kxSHI_yAmMQURpyHdQPX8.roa (hash: 8Uu1LNAmsaRUJ+QbM5XSgI4iAjEHIEeippuJeVtKzew=) 7: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: bHhnTUwUSAqD3crTMzMG8QTjOH9NxstFj0r1589oymI=) 8: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=) 9: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=) 10: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=) 11: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=) 12: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=) 13: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=) 14: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=) 15: _2Z2DCyP8AoFTrwYYnrTE8duSKk.roa (hash: 9BjH2YLT3BThs3wwk+jwBx3zqx+MMwKVuJzuVbVoQIE=) 16: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=) 17: hqAa-HGl9YYSVOAZse-mATGGJYM.roa (hash: KOeloEwv9QnlDfRaZ27Ece4epTiFo9JQL3WkmnmhezQ=) 18: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=) 19: zBCnMJFWnMXKgz_j_g57vjHzFUk.roa (hash: 4csBVOwSYwoxyrDsoROei21hUJZS/HdqdCvpTaBSh6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 09:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:53:7e:b9:65:e7:4a:80:03:27:cf:76:6c:30:da:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Apr 26 09:00:19 2025 GMT Not After : Apr 27 09:00:19 2025 GMT Subject: CN=3c25be2747ea4a63a1e20444a38fc6e1d6759804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:c9:17:5e:bb:c1:1b:d9:9e:a5:4a:b4:61: 77:69:62:22:5f:8c:c3:51:e0:98:98:91:d4:36:96: 45:07:aa:19:ff:bd:22:4e:9b:5e:49:c3:96:6a:b9: 78:f4:a9:6d:56:14:fb:39:43:eb:ef:e2:5a:67:f2: de:26:45:e1:ed:41:e4:65:a6:41:0a:b0:04:5b:94: 90:ce:b8:8b:dc:38:93:a4:63:ae:ed:29:78:89:26: 74:51:55:b1:51:2a:a9:37:f1:9c:e4:de:12:68:55: a7:5d:40:8d:3a:11:13:30:86:97:be:61:12:bf:25: 54:1b:bc:00:5d:10:e9:55:a0:62:c9:1c:77:4a:d1: 7d:ab:fc:10:15:0d:4e:c8:11:a3:3a:95:c3:7f:1c: 61:db:07:97:34:78:f9:b8:51:a6:89:bb:72:4f:66: 4d:6f:f7:92:90:0d:5e:b1:fa:78:1f:4c:d6:cb:fc: a4:6b:c0:2e:e0:9c:04:00:ac:85:a5:d5:96:72:e7: e6:55:8a:50:17:ad:78:0d:39:36:43:3c:65:33:0b: ce:8b:dd:2c:b3:42:8b:80:bf:e3:aa:6b:b7:72:fa: cb:48:cc:97:d4:8d:da:3a:be:f5:87:14:b0:6b:40: 96:2e:56:66:12:4a:2e:c9:56:c1:49:0e:92:17:d9: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:25:BE:27:47:EA:4A:63:A1:E2:04:44:A3:8F:C6:E1:D6:75:98:04 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d5:88:bf:19:22:86:fe:35:ca:67:93:c9:3e:5d:76:00:19: a3:f4:4a:9e:d4:99:69:4a:86:61:81:4a:c4:77:32:3a:2c:13: 8d:15:44:5d:69:71:92:08:1f:66:28:ae:8b:9a:6b:38:66:bd: 02:76:ce:6c:aa:52:8c:07:64:ac:77:a7:fb:78:72:95:5a:fe: 23:a8:bb:4b:d4:26:07:6e:32:2a:86:a9:82:50:e4:2e:7e:0a: 23:2d:1d:fd:3f:86:7a:5b:d8:f2:3c:e9:cb:08:38:95:ad:ea: c2:e2:ac:be:11:12:60:ff:5b:b3:5d:2a:62:a7:e2:f5:49:28: 38:6a:73:7f:55:a5:a8:c5:79:17:85:09:4a:de:37:71:ca:53: f7:2a:d5:55:dd:dc:3c:42:96:75:39:64:e8:33:70:b7:1c:0c: 75:e7:b7:8b:79:11:ef:da:ea:7c:7d:74:26:1d:a8:1b:b6:a6: 42:d1:8f:21:45:01:6e:6a:c0:88:21:e8:48:64:da:03:5b:11: 8a:cf:48:1e:67:d9:46:e5:a1:c1:bb:ad:bb:8d:d9:fa:2a:6d: 67:f3:4a:86:1f:15:8e:2b:bd:7d:a4:3b:f1:4d:38:e5:7e:f4: 6c:fc:56:8e:88:48:73:ab:1a:3b:a7:60:cd:7e:b5:f8:9d:bc: f7:51:97:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxU365ZedKgAMnz3ZsMNrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjUwNDI2MDkwMDE5WhcNMjUwNDI3MDkwMDE5WjAzMTEwLwYDVQQD EygzYzI1YmUyNzQ3ZWE0YTYzYTFlMjA0NDRhMzhmYzZlMWQ2NzU5ODA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGPJF167wRvZnqVKtGF3aWIiX4zD UeCYmJHUNpZFB6oZ/70iTpteScOWarl49KltVhT7OUPr7+JaZ/LeJkXh7UHkZaZB CrAEW5SQzriL3DiTpGOu7Sl4iSZ0UVWxUSqpN/Gc5N4SaFWnXUCNOhETMIaXvmES vyVUG7wAXRDpVaBiyRx3StF9q/wQFQ1OyBGjOpXDfxxh2weXNHj5uFGmibtyT2ZN b/eSkA1esfp4H0zWy/yka8Au4JwEAKyFpdWWcufmVYpQF614DTk2QzxlMwvOi90s s0KLgL/jqmu3cvrLSMyX1I3aOr71hxSwa0CWLlZmEkouyVbBSQ6SF9nUDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwlvidH6kpjoeIERKOPxuHWdZgEMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdWIvxki hv41ymeTyT5ddgAZo/RKntSZaUqGYYFKxHcyOiwTjRVEXWlxkggfZiiui5prOGa9 AnbObKpSjAdkrHen+3hylVr+I6i7S9QmB24yKoapglDkLn4KIy0d/T+GelvY8jzp ywg4la3qwuKsvhESYP9bs10qYqfi9UkoOGpzf1WlqMV5F4UJSt43ccpT9yrVVd3c PEKWdTlk6DNwtxwMdee3i3kR79rqfH10Jh2oG7amQtGPIUUBbmrAiCHoSGTaA1sR is9IHmfZRuWhwbutu43Z+iptZ/NKhh8Vjiu9faQ78U045X70bPxWjohIc6saO6dg zX61+J2891GXOw== -----END CERTIFICATE-----Generated at Sat Apr 26 18:15:49 2025 by rpki-client