$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: nQnwUYmaSWvkByVTY6atBGi489Mrk9bGM7z19qW5aBM= Subject key identifier: 85:67:5C:37:FF:A7:E6:D3:1A:12:46:62:22:B9:D1:39:18:03:A0:80 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 01976D743D1957D1449D3228151A7AF59EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 15B7 Signing time: Sat 14 Jun 2025 08:00:23 +0000 Manifest this update: Sat 14 Jun 2025 08:00:23 +0000 Manifest next update: Sun 15 Jun 2025 08:00:23 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: K38hiAFbaYjOEYyRFTbUch8B7wY.roa (hash: 31zMtO1y1o6k5IZqjvDfJAnA0Cm9rKJm+VuP2mPceec=) 7: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 8: R0-mbrlkQj2Gy6Nt6WDL988hyv8.roa (hash: TNdehcbateMNki61iSUqlN2sgtl/UwdBnEcO8z3cSF0=) 9: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 10: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 11: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 12: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 13: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 14: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: ok39b5mC6/AlJ1FfWvdOAR2/nOQ3j05Pai3t3W7DlHc=) 16: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 17: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 18: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 19: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:74:3d:19:57:d1:44:9d:32:28:15:1a:7a:f5:9e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jun 14 08:00:23 2025 GMT Not After : Jun 15 08:00:23 2025 GMT Subject: CN=85675c37ffa7e6d31a12466222b9d1391803a080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:82:3a:fe:94:be:94:f1:e0:24:dc:25:3c: 6b:08:95:ac:15:a0:6c:f0:b8:38:7c:28:45:b0:ff: 9b:ad:04:0f:48:03:14:1a:56:d5:70:0c:7b:71:4e: 08:4d:46:2f:27:71:2f:12:51:8d:a7:0d:34:65:6a: 73:95:51:97:b1:32:49:0a:9b:ae:07:d7:10:f7:7f: 49:81:b2:9a:ef:19:31:58:24:3d:c8:6f:49:42:a4: d0:6a:78:1e:78:58:97:47:9b:b4:96:86:cb:84:70: 7f:75:21:d1:e0:b6:b9:cd:1f:8c:62:36:df:d0:54: 3e:c3:3e:8f:af:d4:c4:31:8b:b3:cb:3a:34:24:1b: cd:ba:ee:9d:7f:4d:de:6e:64:f3:30:b4:47:b6:10: 29:1b:10:13:8a:67:e5:13:a7:53:1e:59:8b:44:4a: 51:9c:e6:57:d1:c5:fc:93:a7:e8:fe:4f:52:0e:14: e9:a5:d9:93:b5:34:0a:9c:50:76:c3:6f:ae:e8:ca: 79:1e:f8:89:0e:6a:eb:ad:d7:5b:42:7c:46:84:67: 09:c3:79:b1:0c:3b:0a:8b:14:79:ad:a5:5d:0a:23: 13:ea:f2:73:20:1c:08:c9:80:c1:cf:8b:bb:24:b3: 9d:ce:a0:5e:01:2c:86:06:3f:46:26:ab:b4:75:00: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:67:5C:37:FF:A7:E6:D3:1A:12:46:62:22:B9:D1:39:18:03:A0:80 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:03:82:dd:93:27:51:89:51:b1:44:09:4b:10:1d:ca:79:54: 44:b0:c8:dc:0e:33:39:fd:68:34:4e:28:89:e4:3b:98:4d:1f: 6c:28:2b:0c:57:7d:d1:b9:e4:19:fa:34:c3:d6:02:07:11:7c: af:e7:f1:14:0c:3b:35:93:d7:ae:c1:dc:06:8d:e9:62:df:58: 97:e5:d0:d9:c2:df:8d:b4:b5:0f:ee:6a:9a:9a:4f:a3:13:78: 5b:4d:91:50:31:a0:48:6a:5f:7d:02:13:2b:c9:b0:03:11:45: 0d:26:de:d7:e3:ec:e0:b8:64:2d:f8:a8:f1:1b:8e:8c:67:67: 90:d6:42:c1:7a:3b:ac:d7:65:23:6f:7a:fb:d9:4d:37:4e:67: 65:89:98:cf:10:fe:93:c7:87:6b:65:51:c1:81:d3:9d:aa:aa: 03:86:81:1f:02:83:98:50:a9:6e:30:05:0b:a2:a9:95:d0:9e: dc:d7:bb:a4:17:70:84:27:25:db:72:d2:c6:4a:31:0a:7b:da: 3d:ac:9b:b6:eb:94:eb:2b:c8:0f:5f:cd:95:db:8c:a7:96:3f: 02:13:56:2a:d6:98:fd:92:e8:b4:3e:ca:97:b1:b1:c2:06:64: 72:98:0c:81:49:97:05:23:cb:22:f6:1a:ac:ff:cb:17:71:ed: 5d:64:6b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtdD0ZV9FEnTIoFRp69Z6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUwNjE0MDgwMDIzWhcNMjUwNjE1MDgwMDIzWjAzMTEwLwYDVQQD Eyg4NTY3NWMzN2ZmYTdlNmQzMWExMjQ2NjIyMmI5ZDEzOTE4MDNhMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZqCOv6UvpTx4CTcJTxrCJWsFaBs 8Lg4fChFsP+brQQPSAMUGlbVcAx7cU4ITUYvJ3EvElGNpw00ZWpzlVGXsTJJCpuu B9cQ939JgbKa7xkxWCQ9yG9JQqTQangeeFiXR5u0lobLhHB/dSHR4La5zR+MYjbf 0FQ+wz6Pr9TEMYuzyzo0JBvNuu6df03ebmTzMLRHthApGxATimflE6dTHlmLREpR nOZX0cX8k6fo/k9SDhTppdmTtTQKnFB2w2+u6Mp5HviJDmrrrddbQnxGhGcJw3mx DDsKixR5raVdCiMT6vJzIBwIyYDBz4u7JLOdzqBeASyGBj9GJqu0dQBORQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVnXDf/p+bTGhJGYiK50TkYA6CAMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAOC3ZMn UYlRsUQJSxAdynlURLDI3A4zOf1oNE4oieQ7mE0fbCgrDFd90bnkGfo0w9YCBxF8 r+fxFAw7NZPXrsHcBo3pYt9Yl+XQ2cLfjbS1D+5qmppPoxN4W02RUDGgSGpffQIT K8mwAxFFDSbe1+Ps4LhkLfio8RuOjGdnkNZCwXo7rNdlI296+9lNN05nZYmYzxD+ k8eHa2VRwYHTnaqqA4aBHwKDmFCpbjAFC6KpldCe3Ne7pBdwhCcl23LSxkoxCnva PaybtuuU6yvID1/NlduMp5Y/AhNWKtaY/ZLotD7Kl7GxwgZkcpgMgUmXBSPLIvYa rP/LF3HtXWRrxg== -----END CERTIFICATE-----Generated at Sat Jun 14 10:16:44 2025 by rpki-client