$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: LqbZrgaMcsnLN9rkhCIF5KuwdF+XBPLr8yUCk7kffxA= Subject key identifier: 06:B4:73:24:5A:53:DD:94:02:17:50:80:58:CB:A2:DD:FE:FC:2C:26 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 0196718AC408EC7853637070E3BB89C107BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 10E4 Signing time: Sat 26 Apr 2025 10:00:41 +0000 Manifest this update: Sat 26 Apr 2025 10:00:41 +0000 Manifest next update: Sun 27 Apr 2025 10:00:41 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: 9uepVP8jCNblGgDml0purQuCeuI.roa (hash: krAEUA7J3c4hHlcNHTYBnr7lBIoDvqw3IUws2vLaSSg=) 3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: KZ9RiZUTIz4f/fwXPonVE+Qb9RiQ1/3FiyajW5c0W3A=) 5: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 6: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 7: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:8a:c4:08:ec:78:53:63:70:70:e3:bb:89:c1:07:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Apr 26 10:00:41 2025 GMT Not After : Apr 27 10:00:41 2025 GMT Subject: CN=06b473245a53dd940217508058cba2ddfefc2c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:02:ee:d7:b7:83:23:1f:9b:29:72:8f:91: 89:2c:09:ef:a6:83:46:ad:98:fd:a2:4f:93:ac:e5: 9e:29:85:cf:5b:44:e2:03:a9:57:df:83:29:fd:fe: f3:8b:ab:33:01:67:5d:cd:e8:33:4a:98:8f:d8:9c: dc:12:eb:8c:9e:ba:9e:7c:96:31:bd:a5:19:c6:fa: c5:f6:0a:eb:e2:90:34:6c:5f:f2:39:69:26:41:f3: 21:cd:15:7e:f5:77:15:22:ba:b3:d4:79:d1:7d:e9: f6:9d:17:2d:04:39:61:9a:42:0a:cf:46:a0:47:1c: be:88:fa:a7:fa:13:ab:0b:34:97:eb:ae:18:fb:45: 6c:b7:47:bd:35:3c:cb:a9:5f:d8:1e:a7:b7:22:a6: 69:9d:43:8b:96:06:a2:bb:ef:f6:a3:99:df:db:27: 4a:12:b0:78:2f:78:ee:72:01:67:b3:e0:d1:5d:38: f8:e8:13:53:0d:49:cf:b5:3b:50:19:9f:05:cb:27: 88:26:5e:bc:57:ed:6e:80:80:0f:4e:98:bb:aa:9e: 16:34:56:2f:4e:3c:75:43:12:38:7f:d0:6b:97:48: bd:bd:5f:8d:61:2a:4e:96:44:da:a7:eb:e4:c9:6e: 0b:05:f8:af:b6:d2:62:0b:86:4b:07:7d:97:85:14: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B4:73:24:5A:53:DD:94:02:17:50:80:58:CB:A2:DD:FE:FC:2C:26 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a3:b5:df:9d:12:e4:c1:64:ed:5d:53:38:a2:f2:6e:69:f3: a7:7b:7a:2c:0e:4a:e1:ad:d5:2a:dd:25:e4:07:21:61:f7:83: cd:df:a4:63:31:fc:e9:b5:aa:d8:ad:6f:40:20:a3:61:43:c3: 6d:f9:a8:56:af:50:3d:0d:29:36:89:0d:85:48:e4:50:3c:2c: b4:8a:63:5b:9b:28:ec:cd:a2:43:b9:f6:ef:02:e9:a3:4a:01: 71:ec:b4:f9:10:2c:a6:21:64:ef:ca:d7:f5:e9:2f:25:c1:e2: c6:80:28:41:40:a4:48:66:4c:d0:c8:38:64:bd:64:e5:81:3c: b2:f0:23:2a:ae:52:8c:52:9d:14:b8:46:5c:99:92:fc:e6:03: 45:37:74:c6:95:eb:c3:68:38:22:47:72:a7:3b:e0:ac:2a:b2: c4:85:9f:28:0e:3a:c3:d5:a3:dc:1b:d1:69:03:5a:67:92:0b: b7:7f:2b:03:a9:f0:a6:9f:3e:f9:9d:93:15:1d:a3:8e:5b:c4: b1:63:aa:98:17:2e:ae:0a:d7:22:5a:f5:d5:a8:a2:6e:50:83: f2:1e:9c:0d:56:88:2f:bc:5d:f0:96:e3:24:4b:1d:34:f0:4f: 64:92:0a:f0:d4:46:c9:38:5a:a8:5d:31:f1:e3:cb:29:db:25: 6d:fe:65:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxisQI7HhTY3Bw47uJwQe9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwNDI2MTAwMDQxWhcNMjUwNDI3MTAwMDQxWjAzMTEwLwYDVQQD EygwNmI0NzMyNDVhNTNkZDk0MDIxNzUwODA1OGNiYTJkZGZlZmMyYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv8C7te3gyMfmylyj5GJLAnvpoNG rZj9ok+TrOWeKYXPW0TiA6lX34Mp/f7zi6szAWddzegzSpiP2JzcEuuMnrqefJYx vaUZxvrF9grr4pA0bF/yOWkmQfMhzRV+9XcVIrqz1HnRfen2nRctBDlhmkIKz0ag Rxy+iPqn+hOrCzSX664Y+0Vst0e9NTzLqV/YHqe3IqZpnUOLlgaiu+/2o5nf2ydK ErB4L3jucgFns+DRXTj46BNTDUnPtTtQGZ8FyyeIJl68V+1ugIAPTpi7qp4WNFYv Tjx1QxI4f9Brl0i9vV+NYSpOlkTap+vkyW4LBfivttJiC4ZLB32XhRTMpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAa0cyRaU92UAhdQgFjLot3+/CwmMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqO1350S 5MFk7V1TOKLybmnzp3t6LA5K4a3VKt0l5AchYfeDzd+kYzH86bWq2K1vQCCjYUPD bfmoVq9QPQ0pNokNhUjkUDwstIpjW5so7M2iQ7n27wLpo0oBcey0+RAspiFk78rX 9ekvJcHixoAoQUCkSGZM0Mg4ZL1k5YE8svAjKq5SjFKdFLhGXJmS/OYDRTd0xpXr w2g4IkdypzvgrCqyxIWfKA46w9Wj3BvRaQNaZ5ILt38rA6nwpp8++Z2TFR2jjlvE sWOqmBcurgrXIlr11aiiblCD8h6cDVaIL7xd8JbjJEsdNPBPZJIK8NRGyThaqF0x 8ePLKdslbf5lJg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:26:29 2025 by rpki-client