$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: ZSSfoVq1sMeUUokzA7RL6YaJZN4USSbTWf216CTL3T8= Subject key identifier: 24:14:BF:E0:FD:B8:93:10:A1:F1:02:DC:D5:E4:35:3B:8A:3F:07:C7 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 0196718A70A91748F817B3E4B16754F82785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 01A8 Signing time: Sat 26 Apr 2025 10:00:20 +0000 Manifest this update: Sat 26 Apr 2025 10:00:20 +0000 Manifest next update: Sun 27 Apr 2025 10:00:20 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 4: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 5: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 11: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (hash: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: 6xfU9T4iM8Ikx5HlpJdh3hm66gSu2ygWLGzM54zbdVA=) 19: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 20: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 21: rLFXbl__3TAOb3S5Cx0KvKn5se8.roa (hash: JoWfelx8Wab0+mon7O7zO9ngmwLQkIC05SIGqXCeWe8=) 22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:8a:70:a9:17:48:f8:17:b3:e4:b1:67:54:f8:27:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Apr 26 10:00:20 2025 GMT Not After : Apr 27 10:00:20 2025 GMT Subject: CN=2414bfe0fdb89310a1f102dcd5e4353b8a3f07c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:aa:0e:16:08:c0:5d:2e:23:ef:6d:d9:a2: 3b:e5:33:44:98:3c:0d:db:6e:de:af:93:b2:2c:d4: 06:86:07:26:41:37:6c:5f:e2:18:f5:c7:37:f1:e8: e1:3e:67:ae:62:2d:ad:4e:39:4b:2d:75:bd:50:e1: c9:d3:77:66:e5:17:f8:bd:00:07:69:a1:f8:a6:0b: 54:a7:71:b8:06:1a:11:6a:81:fd:5f:34:70:39:78: 52:1b:94:18:92:56:c2:57:34:53:a2:2b:fe:15:1a: c9:64:70:22:26:55:29:24:93:d4:98:5c:49:31:90: 4b:a3:69:c8:7f:bf:93:bf:2f:bd:de:41:01:ae:da: b0:59:5a:64:c9:dc:5c:0a:42:29:52:85:9d:db:5a: bb:82:85:49:1f:8a:ad:52:5b:ad:a0:81:b9:88:95: 09:75:44:bb:f8:e2:72:9b:a0:a9:20:54:9b:56:a3: 99:10:fb:b2:ab:84:c7:a3:5e:08:5b:7a:3b:6c:9e: 75:24:6c:e7:bc:d5:03:3d:9f:d5:a3:f3:91:bd:67: d0:81:f1:ae:76:ce:9a:45:fc:4d:18:dc:bd:dc:f6: 4d:f1:a8:89:de:e0:ef:44:82:59:95:5d:9d:95:9c: 6a:46:67:5d:2b:88:1d:65:c9:a2:8d:20:0c:14:d3: 8d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:14:BF:E0:FD:B8:93:10:A1:F1:02:DC:D5:E4:35:3B:8A:3F:07:C7 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:a1:a3:a9:ab:9c:83:39:ef:1a:2a:c0:d1:49:53:d6:b0:d9: 8a:d5:e9:0b:62:50:1c:4e:75:2b:69:26:14:ce:78:ea:d7:32: fc:16:98:25:c7:e9:9a:cd:83:6c:8b:03:70:10:a3:1d:ba:46: 7f:c3:8c:d1:80:cb:f6:c3:44:fc:1f:3f:4a:99:f6:0b:91:5e: 79:c0:2c:46:9a:b0:be:da:ed:0a:5e:01:8f:3a:eb:7e:7f:5c: 95:7b:7b:11:f1:42:89:54:a1:b6:f9:7b:af:12:31:a5:51:a8: e8:d1:06:54:1a:8e:e7:6d:06:75:92:8b:64:3b:07:51:a5:8d: 97:fa:a9:31:c7:57:18:29:82:b7:70:20:7f:b6:74:f9:76:02: 68:15:db:88:ce:89:e3:7b:28:79:d2:5c:f1:86:74:75:76:ee: 3a:9d:18:20:7e:52:ff:3c:72:04:93:b1:24:5d:09:19:94:c3: 12:6e:ba:fc:a2:f8:02:75:98:b3:90:39:26:77:b4:82:6c:e2: cf:ff:6d:cf:eb:0f:be:9c:04:27:63:fb:ea:c7:b0:5f:5a:18: d7:68:ea:7e:7a:1f:a3:65:12:66:a1:7f:77:d0:5d:9f:e4:5b: 02:cc:79:12:b9:0a:96:4a:08:5f:8d:0d:7d:8d:d5:79:91:c1: 0c:fa:7e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxinCpF0j4F7PksWdU+CeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwNDI2MTAwMDIwWhcNMjUwNDI3MTAwMDIwWjAzMTEwLwYDVQQD EygyNDE0YmZlMGZkYjg5MzEwYTFmMTAyZGNkNWU0MzUzYjhhM2YwN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEaqDhYIwF0uI+9t2aI75TNEmDwN 227er5OyLNQGhgcmQTdsX+IY9cc38ejhPmeuYi2tTjlLLXW9UOHJ03dm5Rf4vQAH aaH4pgtUp3G4BhoRaoH9XzRwOXhSG5QYklbCVzRToiv+FRrJZHAiJlUpJJPUmFxJ MZBLo2nIf7+Tvy+93kEBrtqwWVpkydxcCkIpUoWd21q7goVJH4qtUlutoIG5iJUJ dUS7+OJym6CpIFSbVqOZEPuyq4THo14IW3o7bJ51JGznvNUDPZ/Vo/ORvWfQgfGu ds6aRfxNGNy93PZN8aiJ3uDvRIJZlV2dlZxqRmddK4gdZcmijSAMFNONkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQUv+D9uJMQofEC3NXkNTuKPwfHMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqGjqauc gznvGirA0UlT1rDZitXpC2JQHE51K2kmFM546tcy/BaYJcfpms2DbIsDcBCjHbpG f8OM0YDL9sNE/B8/Spn2C5FeecAsRpqwvtrtCl4Bjzrrfn9clXt7EfFCiVShtvl7 rxIxpVGo6NEGVBqO520GdZKLZDsHUaWNl/qpMcdXGCmCt3Agf7Z0+XYCaBXbiM6J 43soedJc8YZ0dXbuOp0YIH5S/zxyBJOxJF0JGZTDEm66/KL4AnWYs5A5Jne0gmzi z/9tz+sPvpwEJ2P76sewX1oY12jqfnofo2USZqF/d9Bdn+RbAsx5ErkKlkoIX40N fY3VeZHBDPp+Mg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:33 2025 by rpki-client