$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: DsDo3lm5Kv3Wc1/znz1Jg5+yk+Qida97C4Qfu9lo2e4= Subject key identifier: 13:29:44:45:13:09:11:C8:7C:DD:9E:F0:5E:31:47:3B:1E:F3:0F:4F Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 01987CAEA7A65D5D8FF0772935738D55835E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 11F3 Signing time: Wed 06 Aug 2025 00:01:17 +0000 Manifest this update: Wed 06 Aug 2025 00:01:17 +0000 Manifest next update: Thu 07 Aug 2025 00:01:17 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 3: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: Ff8vYYolsY5zHmg6h9s4T+nvdfEsytQ0fqnf80k4XFw=) 4: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 5: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 6: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 7: YpiZDj15UQloSo6Ej-P-5_wLmX0.roa (hash: U0LGxcrLnRjidOqQnFEuAvzeubqh8HZ24iVIBxmVgMY=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:ae:a7:a6:5d:5d:8f:f0:77:29:35:73:8d:55:83:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Aug 6 00:01:17 2025 GMT Not After : Aug 7 00:01:17 2025 GMT Subject: CN=13294445130911c87cdd9ef05e31473b1ef30f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:80:e9:17:40:4d:ae:e6:8a:1c:9d:60:28: 4e:04:52:f3:41:6b:c1:06:88:49:ad:46:80:18:76: 7f:d4:b5:43:a3:12:06:75:fd:0e:23:bd:b7:cc:5d: 07:76:68:77:b6:08:33:82:a4:fa:80:79:3b:0d:06: 9a:89:61:84:7d:72:96:21:f6:3c:eb:18:7a:c1:e9: b1:ae:88:ee:f0:db:a4:31:25:21:cc:d4:81:68:fe: 37:db:b3:9a:b8:e4:82:a8:96:4d:d9:c0:65:83:50: ab:c1:b6:08:4c:28:a5:c0:ef:c6:32:9a:bf:3b:75: f2:64:2e:f0:6c:a1:78:70:be:b2:58:d3:0e:ff:33: 5b:73:c9:f6:7f:f9:83:59:1b:b8:9e:15:e0:72:44: 67:8e:b6:73:ee:39:c4:f8:f6:8e:e3:12:32:3a:3d: 8f:d0:56:75:a6:b2:de:e0:bf:f9:b7:f5:31:57:2b: a8:18:13:77:55:a3:94:05:58:e3:ba:2c:5f:c2:40: 67:a1:b1:c1:b6:1d:1a:34:bc:99:ed:df:2b:ca:0c: c3:4c:06:e6:46:61:a4:55:95:da:36:3f:ec:2d:8f: 28:f1:08:4c:44:bf:86:76:c7:fc:de:62:a1:89:08: e8:8c:8c:e5:ee:43:b9:aa:09:17:b5:e1:66:9c:8f: 6d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:29:44:45:13:09:11:C8:7C:DD:9E:F0:5E:31:47:3B:1E:F3:0F:4F X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:4a:5a:3d:9c:49:9f:78:e4:e1:af:70:8f:04:3b:dc:42:8f: be:81:b3:47:ac:51:df:08:54:a7:74:c8:57:29:28:a5:4f:a8: e2:7f:13:ff:be:d8:3a:7a:8e:fe:5d:82:2e:47:8f:25:b2:02: 3c:d0:e4:01:f7:3d:53:52:06:31:c9:37:5e:fa:bd:7a:e0:81: 40:ea:ef:c0:ad:53:08:11:12:8b:69:ea:e0:8a:50:98:7a:35: 47:43:62:0b:08:33:15:1c:50:0b:c1:67:e0:0f:a5:8b:7e:be: 2c:bf:62:07:8a:3e:d8:bc:ab:32:0a:53:79:18:62:f8:8b:77: 0e:de:bd:ec:ef:5c:95:a7:91:36:95:1e:34:70:60:c1:9d:85: 49:23:e5:cf:04:02:85:1f:0d:e9:c9:78:d5:0b:64:6b:8f:8c: 99:93:f1:db:b3:af:97:aa:ab:78:22:0c:0c:d9:7d:18:0e:f5: 01:22:80:a2:69:d1:ea:ee:62:dd:43:4b:f2:03:f8:1c:a9:74: f5:ed:7a:ed:25:88:9e:7d:b5:bd:06:79:67:79:e1:ed:3b:87: 0b:34:73:97:04:76:49:73:d7:b7:c5:07:73:93:96:7d:5c:73: 4a:ca:e4:e9:46:5c:c9:95:81:ef:c8:5a:7f:35:95:3a:87:84: c9:4e:be:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8rqemXV2P8HcpNXONVYNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwODA2MDAwMTE3WhcNMjUwODA3MDAwMTE3WjAzMTEwLwYDVQQD EygxMzI5NDQ0NTEzMDkxMWM4N2NkZDllZjA1ZTMxNDczYjFlZjMwZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoViA6RdATa7mihydYChOBFLzQWvB BohJrUaAGHZ/1LVDoxIGdf0OI723zF0Hdmh3tggzgqT6gHk7DQaaiWGEfXKWIfY8 6xh6wemxroju8NukMSUhzNSBaP4327OauOSCqJZN2cBlg1CrwbYITCilwO/GMpq/ O3XyZC7wbKF4cL6yWNMO/zNbc8n2f/mDWRu4nhXgckRnjrZz7jnE+PaO4xIyOj2P 0FZ1prLe4L/5t/UxVyuoGBN3VaOUBVjjuixfwkBnobHBth0aNLyZ7d8rygzDTAbm RmGkVZXaNj/sLY8o8QhMRL+Gdsf83mKhiQjojIzl7kO5qgkXteFmnI9tkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMpREUTCRHIfN2e8F4xRzse8w9PMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0paPZxJ n3jk4a9wjwQ73EKPvoGzR6xR3whUp3TIVykopU+o4n8T/77YOnqO/l2CLkePJbIC PNDkAfc9U1IGMck3Xvq9euCBQOrvwK1TCBESi2nq4IpQmHo1R0NiCwgzFRxQC8Fn 4A+li36+LL9iB4o+2LyrMgpTeRhi+It3Dt697O9claeRNpUeNHBgwZ2FSSPlzwQC hR8N6cl41Qtka4+MmZPx27Ovl6qreCIMDNl9GA71ASKAomnR6u5i3UNL8gP4HKl0 9e167SWInn21vQZ5Z3nh7TuHCzRzlwR2SXPXt8UHc5OWfVxzSsrk6UZcyZWB78ha fzWVOoeEyU6+cA== -----END CERTIFICATE-----Generated at Wed Aug 6 11:17:33 2025 by rpki-client