$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: HlLAiX2ax510z/if6tqpG2K1U9G5d0FMBVyj1Vi8PW8= Subject key identifier: 7C:6B:8A:88:38:5E:F2:B1:B8:2B:0F:5D:86:34:80:4A:82:78:C0:85 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 0196AA30991E7F211F945BB9D0677C5A4523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 151C Signing time: Wed 07 May 2025 10:00:33 +0000 Manifest this update: Wed 07 May 2025 10:00:33 +0000 Manifest next update: Thu 08 May 2025 10:00:33 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: dIpLBUDb6P3gGLqwasCURd3vWszmcdWXZu7NLNeybs4=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:aa:30:99:1e:7f:21:1f:94:5b:b9:d0:67:7c:5a:45:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: May 7 10:00:33 2025 GMT Not After : May 8 10:00:33 2025 GMT Subject: CN=7c6b8a88385ef2b1b82b0f5d8634804a8278c085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:f9:44:a2:1f:d4:67:3f:bd:5c:c4:90:71: cb:0a:1b:46:af:15:c2:80:af:94:a8:02:f8:37:98: 84:d4:85:df:68:54:17:6a:31:f1:c1:c5:15:77:30: cf:fc:c1:54:c0:a8:72:07:01:d6:1a:26:e5:b3:49: 83:d8:ff:cf:f1:c7:8b:ea:43:3d:b5:a5:c6:d9:c8: d4:0d:9e:f7:2c:f1:22:2a:d4:b4:b5:85:00:5a:ee: c2:97:4d:05:cf:25:97:5c:21:1d:37:f4:fe:a1:04: f8:9d:43:21:5e:54:b5:a2:88:4b:b3:01:4b:52:f2: 78:84:d1:3e:96:2e:c1:07:3e:32:04:6f:ea:03:96: 01:47:15:84:a5:d2:8f:32:fd:35:16:6b:a0:6f:5c: 5d:36:67:eb:d2:5d:cc:28:1a:38:97:ef:21:19:40: 78:07:ea:a6:b9:97:61:53:c7:52:5a:46:40:3d:66: 50:44:d2:d8:89:e8:6a:65:4e:6e:a8:04:f0:19:5c: c0:a9:8a:b5:7e:e4:64:49:13:ab:1c:07:73:63:92: 6f:bb:f9:4f:72:31:11:16:b7:dd:86:95:a9:a4:b0: a3:5d:06:00:61:b2:59:e0:75:3e:ba:18:7f:08:07: 15:e3:22:77:94:02:f0:ca:48:15:3f:af:e3:a1:08: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6B:8A:88:38:5E:F2:B1:B8:2B:0F:5D:86:34:80:4A:82:78:C0:85 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:71:8c:b7:70:23:9d:11:a3:73:8c:cf:ac:fd:eb:f5:f1:99: e3:43:bd:8d:42:ee:7e:e6:62:1b:3b:a6:98:c9:6f:40:7b:71: 91:35:a4:3c:3a:c6:7f:72:68:57:8b:e0:b0:75:63:41:b7:f5: ce:6a:40:6d:e4:b2:5d:78:cd:22:a2:48:19:e3:97:05:ce:45: 7f:4f:1b:77:08:da:c6:13:0c:61:47:f4:34:ec:55:1c:93:4c: 91:ce:ab:1f:50:42:66:77:6c:92:31:23:a2:27:41:08:38:e2: 30:a0:ab:ad:dd:89:a0:ae:85:bf:9a:3e:a1:97:78:7b:7c:0a: 9f:52:09:df:fb:6e:a8:ce:af:56:ab:12:ce:20:79:2f:20:5e: 59:d1:e9:a0:fc:e1:cc:97:30:92:f6:ea:67:81:f8:4e:24:cb: da:96:4c:cc:f9:6a:a0:3b:68:31:15:45:15:f9:ce:1c:99:ec: 15:8b:0f:0b:eb:f8:b7:ca:a6:d6:fc:fb:d6:46:cf:26:69:ef: 3a:f9:85:2e:7e:3a:35:5e:c5:b8:c2:e1:75:7e:9e:08:17:a4: 7c:24:9d:9d:50:59:c3:bd:b1:a5:86:dc:c6:23:bc:54:1e:22: 10:d5:76:72:6a:08:18:21:35:4e:77:20:68:7f:68:4c:31:bc: 61:b4:cd:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaqMJkefyEflFu50Gd8WkUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwNTA3MTAwMDMzWhcNMjUwNTA4MTAwMDMzWjAzMTEwLwYDVQQD Eyg3YzZiOGE4ODM4NWVmMmIxYjgyYjBmNWQ4NjM0ODA0YTgyNzhjMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C75RKIf1Gc/vVzEkHHLChtGrxXC gK+UqAL4N5iE1IXfaFQXajHxwcUVdzDP/MFUwKhyBwHWGibls0mD2P/P8ceL6kM9 taXG2cjUDZ73LPEiKtS0tYUAWu7Cl00FzyWXXCEdN/T+oQT4nUMhXlS1oohLswFL UvJ4hNE+li7BBz4yBG/qA5YBRxWEpdKPMv01Fmugb1xdNmfr0l3MKBo4l+8hGUB4 B+qmuZdhU8dSWkZAPWZQRNLYiehqZU5uqATwGVzAqYq1fuRkSROrHAdzY5Jvu/lP cjERFrfdhpWppLCjXQYAYbJZ4HU+uhh/CAcV4yJ3lALwykgVP6/joQgoLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxriog4XvKxuCsPXYY0gEqCeMCFMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3GMt3Aj nRGjc4zPrP3r9fGZ40O9jULufuZiGzummMlvQHtxkTWkPDrGf3JoV4vgsHVjQbf1 zmpAbeSyXXjNIqJIGeOXBc5Ff08bdwjaxhMMYUf0NOxVHJNMkc6rH1BCZndskjEj oidBCDjiMKCrrd2JoK6Fv5o+oZd4e3wKn1IJ3/tuqM6vVqsSziB5LyBeWdHpoPzh zJcwkvbqZ4H4TiTL2pZMzPlqoDtoMRVFFfnOHJnsFYsPC+v4t8qm1vz71kbPJmnv OvmFLn46NV7FuMLhdX6eCBekfCSdnVBZw72xpYbcxiO8VB4iENV2cmoIGCE1Tncg aH9oTDG8YbTNCg== -----END CERTIFICATE-----Generated at Wed May 7 19:15:55 2025 by rpki-client