$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: W3SXq8r4JYv1CyABepBR5McLlLCdbmSBXNIQN2+TZxU= Subject key identifier: 73:C4:08:D6:C5:73:3D:38:0A:6C:6F:12:81:7E:F1:6B:F6:EA:24:AB Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 0197B7B34D2E2FBA3F6E499CC987F1828D4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 0F0C Signing time: Sat 28 Jun 2025 18:01:10 +0000 Manifest this update: Sat 28 Jun 2025 18:01:10 +0000 Manifest next update: Sun 29 Jun 2025 18:01:10 +0000 Files and hashes: 1: 1-YME93lc1AWh4-bMqvVDZYenQg0.roa (hash: Euu0W5ctvY2bfvnvaMrD1zBWGCi2DVPvkYQ6p9zTjts=) 2: B-5_egLdEl752iv9qxYdq8eosj8.roa (hash: Cdvp7KAkC+/9T90gVhhsMGICo5DVTrNIRp6EnoCK4JA=) 3: HdvJhluj0mmgaFdPVm0s0ofNMQM.roa (hash: p1LONhiWBtnwDM/uG7ENsu+2YSQKoESJAbc98yta6C4=) 4: N7j1ZhYZ0T5QddVWxbE14vo2CcA.roa (hash: cqjBrKmZI9mIPuouhRB7VhgV5e28yJ3zyhcZAGu++aE=) 5: PG5DPUzHhisMDmHNMi2OiyC4Krk.roa (hash: 5vgSE6xpOM3tTVvShPg0nfAqcYxZUDm3VYRogPEs1nM=) 6: QWifAQ3dSu8nhEAeOh_F1BphWro.roa (hash: itO7AV5EF/O+Sl0fYRa8cl6eA4q/nRa0iBG6sGElFQI=) 7: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: wvf0OR+GuCXbhUBOQMKRBzk7z/nUPT3Ka5gZQoCwsP4=) 8: Z6ubH84vQbgEnifkNYkjjYx5LIg.roa (hash: A5Iyh12sixazcVNr3007j9RNY5bFIJZSLARvNvwI0hI=) 9: cWGszmobGgkTRu82roBLKR9vgkE.roa (hash: bXFzT/7+8yagPIwyKl0fdIxc7uJ/wfFRRzbV8w0a7yI=) 10: flrC_8zXbr01pJXgtmy__huZXOA.roa (hash: vzxZLPURPSKJVHe6QAWg0rqm4QhuQOuF7VBOWspThjA=) 11: nGntDaqcmONxUi1sd87UMvT9x4I.roa (hash: JUPdqbOgdaD6LXB1MI+aJwuym5PZcQO3ILLdGvRsfU8=) 12: p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa (hash: iKYw9dWKEOaAlzn5AmL4rdC2+rWU6FDA6bFijDgxb2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:4d:2e:2f:ba:3f:6e:49:9c:c9:87:f1:82:8d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jun 28 18:01:10 2025 GMT Not After : Jun 29 18:01:10 2025 GMT Subject: CN=73c408d6c5733d380a6c6f12817ef16bf6ea24ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:90:a2:22:18:72:de:d1:30:ca:b6:02:53: 71:70:ba:ca:ca:bc:15:02:1a:31:02:72:da:37:c3: 06:25:6c:ef:c7:cf:65:95:24:3e:b0:8e:c0:0c:8e: e1:62:71:6b:b7:3c:34:85:27:8c:e2:07:33:fd:04: 4e:b1:71:43:ea:f3:26:37:32:cb:8a:8c:71:25:9e: 4b:6c:7b:b8:d1:d0:af:4f:ed:91:32:37:c7:5a:81: 4d:d1:a1:ab:01:3d:65:0e:0c:61:8a:87:d9:98:b5: c6:cc:25:79:1b:36:50:01:3d:cb:2f:b0:15:0b:80: b3:0c:c3:8b:49:6a:ac:f7:ba:1b:cc:e5:2d:a2:30: 2c:98:f1:c0:1f:b9:5a:83:35:57:ec:db:a7:01:1b: fd:06:ef:87:71:90:3b:fb:16:20:83:e1:01:dd:6e: 27:c1:7f:69:9c:e1:f3:c1:42:e6:ec:34:45:35:2a: fa:1a:7a:67:35:e4:00:18:d6:e6:a6:fd:f8:96:95: a1:0f:56:97:c3:e1:f9:41:01:e5:30:dd:8e:77:f0: c8:af:82:bf:02:ed:17:f4:f1:b7:fc:8c:88:11:26: ab:b8:72:6e:66:b5:62:43:a1:99:b1:7b:d5:38:b0: 9c:77:8e:22:17:84:3d:92:a5:e9:84:43:0d:e2:e0: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C4:08:D6:C5:73:3D:38:0A:6C:6F:12:81:7E:F1:6B:F6:EA:24:AB X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:16:3b:40:43:22:65:19:9b:78:a7:bc:45:05:d7:c8:94:a4: 60:a8:94:4e:0c:f3:61:81:95:0a:ec:27:df:af:76:0f:d7:8d: 50:21:d7:9c:d9:ee:29:04:50:99:d4:43:fb:02:63:1a:17:10: 60:82:df:61:ed:4b:3a:d3:7f:8a:d8:7d:ce:76:f5:7a:93:ef: 6e:53:5f:55:16:ec:a1:6b:5a:c2:b5:5e:c9:76:87:71:02:ba: 9d:46:59:33:26:c7:8a:ab:c8:29:19:f9:34:ab:8f:4f:d9:83: 13:b1:1e:3b:5d:52:2f:82:86:e5:34:4f:08:af:dc:13:9e:95: 7a:dc:9b:3f:ef:70:92:01:0a:1a:eb:6f:9a:ab:07:c9:54:06: a6:e9:83:a5:6c:de:6c:74:8e:a2:7d:4f:2f:d6:f9:2b:14:ee: 51:22:26:76:21:84:fb:b3:8c:da:1f:c8:db:30:20:88:02:32: 52:46:b5:08:ea:fa:2c:4b:3c:72:49:ea:68:e0:81:a6:eb:d6: 27:7a:6c:d3:e2:ec:8e:a9:17:3e:58:10:da:9f:f7:bf:29:23: 97:28:4e:9e:6d:a4:18:49:69:2d:04:ac:d7:1d:ce:2a:9c:8d: b7:17:5b:10:43:a8:1a:b0:d1:af:48:87:63:25:63:e7:15:f0: 44:4d:e6:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s00uL7o/bkmcyYfxgo1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjUwNjI4MTgwMTEwWhcNMjUwNjI5MTgwMTEwWjAzMTEwLwYDVQQD Eyg3M2M0MDhkNmM1NzMzZDM4MGE2YzZmMTI4MTdlZjE2YmY2ZWEyNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbCQoiIYct7RMMq2AlNxcLrKyrwV AhoxAnLaN8MGJWzvx89llSQ+sI7ADI7hYnFrtzw0hSeM4gcz/QROsXFD6vMmNzLL ioxxJZ5LbHu40dCvT+2RMjfHWoFN0aGrAT1lDgxhiofZmLXGzCV5GzZQAT3LL7AV C4CzDMOLSWqs97obzOUtojAsmPHAH7lagzVX7NunARv9Bu+HcZA7+xYgg+EB3W4n wX9pnOHzwULm7DRFNSr6GnpnNeQAGNbmpv34lpWhD1aXw+H5QQHlMN2Od/DIr4K/ Au0X9PG3/IyIESaruHJuZrViQ6GZsXvVOLCcd44iF4Q9kqXphEMN4uDtkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPECNbFcz04CmxvEoF+8Wv26iSrMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBY7QEMi ZRmbeKe8RQXXyJSkYKiUTgzzYYGVCuwn3692D9eNUCHXnNnuKQRQmdRD+wJjGhcQ YILfYe1LOtN/ith9znb1epPvblNfVRbsoWtawrVeyXaHcQK6nUZZMybHiqvIKRn5 NKuPT9mDE7EeO11SL4KG5TRPCK/cE56VetybP+9wkgEKGutvmqsHyVQGpumDpWze bHSOon1PL9b5KxTuUSImdiGE+7OM2h/I2zAgiAIyUka1COr6LEs8cknqaOCBpuvW J3ps0+LsjqkXPlgQ2p/3vykjlyhOnm2kGElpLQSs1x3OKpyNtxdbEEOoGrDRr0iH YyVj5xXwRE3m3Q== -----END CERTIFICATE-----Generated at Sat Jun 28 21:27:02 2025 by rpki-client