$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: qiaU1azAmdoMwMyvrjXyVSswWbJOTvn2ipWlhJ6xwos= Subject key identifier: 5D:A5:5B:B1:E5:3C:3F:9E:08:73:00:55:A6:8C:21:2C:EB:62:2A:0D Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 0197703EB588354492697466FE2B363ED406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 1168 Signing time: Sat 14 Jun 2025 21:00:47 +0000 Manifest this update: Sat 14 Jun 2025 21:00:47 +0000 Manifest next update: Sun 15 Jun 2025 21:00:47 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 3: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: +DlG191HOgU7LtylqyOurnb9jRsQzQforSQd3RLzT7Q=) 4: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 5: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 6: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 7: YpiZDj15UQloSo6Ej-P-5_wLmX0.roa (hash: U0LGxcrLnRjidOqQnFEuAvzeubqh8HZ24iVIBxmVgMY=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:70:3e:b5:88:35:44:92:69:74:66:fe:2b:36:3e:d4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jun 14 21:00:47 2025 GMT Not After : Jun 15 21:00:47 2025 GMT Subject: CN=5da55bb1e53c3f9e08730055a68c212ceb622a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:07:bb:62:4f:b5:e1:b7:67:c1:65:04:54: e9:7c:5d:27:be:be:4e:02:76:d4:4f:aa:6e:29:68: 96:f9:82:a4:46:78:6f:98:fb:01:db:ee:49:43:f4: ea:ed:bc:1c:4d:65:d9:40:02:c5:cd:46:f6:80:50: 58:d3:2d:97:7b:00:03:6f:39:c0:28:c5:12:f6:e5: ba:98:8e:0b:d2:82:9c:f6:4b:48:f2:fe:c5:0a:78: 70:d6:27:fc:72:d6:7a:88:7f:e1:48:87:56:2e:c7: 77:bd:5c:fe:5f:c0:3e:db:a0:e4:14:d2:f9:00:b0: 62:96:a3:94:aa:b2:eb:ba:08:fe:f0:c0:7b:b4:a2: 27:0a:d5:70:b4:71:61:f0:16:61:29:74:3a:dc:82: 49:bc:93:9e:70:b4:95:da:14:5d:dd:5a:de:85:24: f9:4f:82:eb:d9:3c:7d:be:4c:cd:d0:30:b8:d9:6b: ab:99:95:5a:d9:b8:dd:ef:34:3b:ea:f1:63:f5:16: 01:b3:a9:4c:5c:d0:6a:0b:1b:a4:a4:82:53:92:bb: c1:9d:b4:9e:66:84:ef:68:53:af:52:b9:88:ae:f9: 1e:29:00:a4:c3:a8:d1:87:be:9c:c8:dd:ac:08:ae: b1:c3:c1:89:16:93:b2:ef:20:a8:26:61:43:1a:5b: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:5B:B1:E5:3C:3F:9E:08:73:00:55:A6:8C:21:2C:EB:62:2A:0D X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:af:92:d0:9b:9a:5f:65:f1:23:f0:8d:7d:de:08:0e:2b:0a: ad:ec:d4:67:1f:f9:46:02:dd:c0:61:2c:10:a0:6e:3d:2b:3e: 92:6f:15:17:86:87:fc:88:e6:6c:0e:6d:c4:d3:a0:14:a0:1e: e7:fc:56:bb:29:77:8c:f5:bb:45:28:f5:6e:ff:ea:5c:66:4b: 9f:b2:28:8c:08:8b:e3:98:7a:52:a7:ec:54:bf:c3:e9:3f:67: a3:ae:88:21:05:0c:5a:c3:b0:6d:0f:c7:39:87:c2:65:1a:06: cf:94:6b:d8:4b:b8:df:27:16:84:da:ea:8f:1b:d2:b8:9a:c4: f6:e7:25:2b:b2:10:73:c3:54:cb:58:0d:c0:93:e6:8d:4e:02: 7c:22:47:1a:08:c9:94:3c:c2:90:a9:3c:92:51:03:35:fe:62: 07:65:36:fd:84:08:4f:0e:eb:0e:22:57:db:21:fe:99:14:8e: 4a:72:38:ab:67:3e:45:2a:81:94:d3:05:2f:9e:6d:9e:53:5e: ec:b7:ad:37:29:3b:8c:4a:58:6b:53:2a:41:80:05:e5:53:1b: de:62:a3:88:2a:1e:cb:37:e4:24:8e:71:ca:f8:61:2d:f6:4c: 31:1c:d7:e4:55:f6:a3:c5:84:2b:04:da:4f:d0:ea:41:35:13: 29:79:ea:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdwPrWINUSSaXRm/is2PtQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwNjE0MjEwMDQ3WhcNMjUwNjE1MjEwMDQ3WjAzMTEwLwYDVQQD Eyg1ZGE1NWJiMWU1M2MzZjllMDg3MzAwNTVhNjhjMjEyY2ViNjIyYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNwHu2JPteG3Z8FlBFTpfF0nvr5O AnbUT6puKWiW+YKkRnhvmPsB2+5JQ/Tq7bwcTWXZQALFzUb2gFBY0y2XewADbznA KMUS9uW6mI4L0oKc9ktI8v7FCnhw1if8ctZ6iH/hSIdWLsd3vVz+X8A+26DkFNL5 ALBilqOUqrLrugj+8MB7tKInCtVwtHFh8BZhKXQ63IJJvJOecLSV2hRd3VrehST5 T4Lr2Tx9vkzN0DC42WurmZVa2bjd7zQ76vFj9RYBs6lMXNBqCxukpIJTkrvBnbSe ZoTvaFOvUrmIrvkeKQCkw6jRh76cyN2sCK6xw8GJFpOy7yCoJmFDGltplwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2lW7HlPD+eCHMAVaaMISzrYioNMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK+S0Jua X2XxI/CNfd4IDisKrezUZx/5RgLdwGEsEKBuPSs+km8VF4aH/IjmbA5txNOgFKAe 5/xWuyl3jPW7RSj1bv/qXGZLn7IojAiL45h6UqfsVL/D6T9no66IIQUMWsOwbQ/H OYfCZRoGz5Rr2Eu43ycWhNrqjxvSuJrE9uclK7IQc8NUy1gNwJPmjU4CfCJHGgjJ lDzCkKk8klEDNf5iB2U2/YQITw7rDiJX2yH+mRSOSnI4q2c+RSqBlNMFL55tnlNe 7LetNyk7jEpYa1MqQYAF5VMb3mKjiCoeyzfkJI5xyvhhLfZMMRzX5FX2o8WEKwTa T9DqQTUTKXnqRw== -----END CERTIFICATE-----Generated at Sun Jun 15 03:21:15 2025 by rpki-client