$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: lT5dgpq89ZmiyvKibjHi7GFNU/pnrELeWei5OJwtGnM= Subject key identifier: A3:03:80:76:79:11:5A:42:36:84:35:C8:DA:41:18:A8:FE:9B:58:08 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019777F88607B9300936CB93D76E3F0FB1C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 15A2 Signing time: Mon 16 Jun 2025 09:01:05 +0000 Manifest this update: Mon 16 Jun 2025 09:01:05 +0000 Manifest next update: Tue 17 Jun 2025 09:01:05 +0000 Files and hashes: 1: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: lytUIqSb2gGlQHqdSuY4FgCam8tPHdJ8/zsZPKGihEI=) 2: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 3: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 4: NlD60E7lLlgKw-PAVTBiBt31h5g.roa (hash: Be7pkoxW5md2fMzfMMkXfWt3s8AQ9PfjTdxxsGL6hhM=) 5: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 6: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 8: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=) 9: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) 10: s6l73Ozc9G__irpTpPlNucOT8bs.roa (hash: GqBwmeoAuFCGB9Y+I57QWriPb1mo81JmyaYf7vUIrHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:77:f8:86:07:b9:30:09:36:cb:93:d7:6e:3f:0f:b1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jun 16 09:01:05 2025 GMT Not After : Jun 17 09:01:05 2025 GMT Subject: CN=a303807679115a42368435c8da4118a8fe9b5808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:d7:28:03:f5:ed:e3:61:76:37:47:44:03: 98:74:ec:eb:36:ff:66:af:cb:f2:18:f9:ed:98:07: b9:bd:6d:12:11:76:66:be:e7:14:4a:fb:b3:2a:cd: 5b:2a:43:91:09:4e:ca:91:51:45:e9:b0:ad:8f:3e: 2f:7b:93:d4:8b:ba:6c:f5:df:80:cd:89:21:d2:9a: 44:43:c5:3b:d7:13:f2:04:8e:07:f3:a4:fe:de:0c: 08:93:51:a9:25:85:08:bf:0c:71:6c:08:48:a5:eb: 68:c8:a2:1e:2e:83:40:cf:d4:18:62:c7:e2:e2:24: 7b:37:a3:13:22:19:c9:4b:5d:58:95:da:82:95:d4: de:5a:90:26:7d:76:06:4a:c8:44:d4:d3:77:94:1c: 2e:c5:b5:17:8b:d4:23:9d:ac:67:7c:29:6c:ec:f4: f8:8f:dc:64:d0:ea:f9:29:56:21:d4:9e:4c:ac:3d: b4:c9:b4:a4:bf:d3:a0:39:8a:54:f1:56:3d:9b:46: b1:dd:30:4c:f9:d6:3c:8c:ad:00:35:01:72:cb:e6: 0a:0e:ba:89:ea:a6:f8:d8:c7:4f:89:1a:90:43:cd: 6c:37:82:fb:d6:17:2e:9a:44:7f:aa:0f:49:ea:b2: 72:e3:51:a9:cf:d7:c4:c8:bd:6b:0c:ad:57:aa:18: 85:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:03:80:76:79:11:5A:42:36:84:35:C8:DA:41:18:A8:FE:9B:58:08 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:50:37:13:e5:c4:65:5e:6b:4e:ce:86:5a:6a:a1:8b:df:05: 21:47:74:50:db:7d:a5:5d:d8:8d:7c:9d:26:9e:3f:59:f9:d2: 69:ff:a1:1d:33:a5:c6:51:06:3b:a2:b7:2f:76:02:cc:6c:93: 91:37:98:99:d4:8d:23:2d:b3:d4:4b:bf:91:5f:2d:a6:10:33: 5b:7d:fe:91:cd:6f:8f:95:ef:eb:0e:25:7e:f1:52:13:e4:b4: a1:86:af:ae:01:fa:fb:c1:b3:c4:0f:ed:87:6f:aa:55:4a:55: 75:39:62:01:7b:d1:62:15:1a:3f:43:84:53:98:6c:85:8c:02: 2f:f6:45:3a:34:d4:f8:78:14:b0:f5:37:c7:92:e4:4b:c0:83: cf:72:6a:8f:3f:4f:91:05:13:ea:6e:e7:49:7a:02:d2:3b:5b: 5c:33:c6:c4:7a:29:bf:fb:82:a1:bd:93:6a:29:40:6a:d8:d6: f9:eb:ce:16:04:f4:9a:d4:d1:84:53:96:5d:31:ff:cf:49:6e: ac:2a:65:ba:7c:e2:08:d5:75:8b:ff:35:26:b5:3b:91:ee:1c: ba:e4:d8:7a:5d:ee:e1:b1:ba:3e:66:54:f8:bf:58:43:50:30: d6:e8:3a:17:9c:f9:fb:19:fc:69:a6:db:2e:88:5f:25:28:b5: 34:fa:46:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd3+IYHuTAJNsuT124/D7HFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUwNjE2MDkwMTA1WhcNMjUwNjE3MDkwMTA1WjAzMTEwLwYDVQQD EyhhMzAzODA3Njc5MTE1YTQyMzY4NDM1YzhkYTQxMThhOGZlOWI1ODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA7XKAP17eNhdjdHRAOYdOzrNv9m r8vyGPntmAe5vW0SEXZmvucUSvuzKs1bKkORCU7KkVFF6bCtjz4ve5PUi7ps9d+A zYkh0ppEQ8U71xPyBI4H86T+3gwIk1GpJYUIvwxxbAhIpetoyKIeLoNAz9QYYsfi 4iR7N6MTIhnJS11YldqCldTeWpAmfXYGSshE1NN3lBwuxbUXi9QjnaxnfCls7PT4 j9xk0Or5KVYh1J5MrD20ybSkv9OgOYpU8VY9m0ax3TBM+dY8jK0ANQFyy+YKDrqJ 6qb42MdPiRqQQ81sN4L71hcumkR/qg9J6rJy41Gpz9fEyL1rDK1XqhiFowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMDgHZ5EVpCNoQ1yNpBGKj+m1gIMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1A3E+XE ZV5rTs6GWmqhi98FIUd0UNt9pV3YjXydJp4/WfnSaf+hHTOlxlEGO6K3L3YCzGyT kTeYmdSNIy2z1Eu/kV8tphAzW33+kc1vj5Xv6w4lfvFSE+S0oYavrgH6+8GzxA/t h2+qVUpVdTliAXvRYhUaP0OEU5hshYwCL/ZFOjTU+HgUsPU3x5LkS8CDz3Jqjz9P kQUT6m7nSXoC0jtbXDPGxHopv/uCob2TailAatjW+evOFgT0mtTRhFOWXTH/z0lu rCplunziCNV1i/81JrU7ke4cuuTYel3u4bG6PmZU+L9YQ1Aw1ug6F5z5+xn8aabb LohfJSi1NPpGgQ== -----END CERTIFICATE-----Generated at Mon Jun 16 14:52:46 2025 by rpki-client