$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: u6fniHDcs+vh9pszADUu03tpHopaRjZdfqnzaTOe/fk= Subject key identifier: 89:09:45:D2:F0:64:4C:D1:D6:E6:74:0F:E6:D1:F9:8E:BB:AE:CE:40 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 0197B6A0C0C00292F783103EA0D94B85E851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 15A7 Signing time: Sat 28 Jun 2025 13:01:17 +0000 Manifest this update: Sat 28 Jun 2025 13:01:17 +0000 Manifest next update: Sun 29 Jun 2025 13:01:17 +0000 Files and hashes: 1: 92XnD0AmYRTKMauy0c_EF97G3og.roa (hash: MrifYSUDPEYri018G6VdUWx5qltH5sT6dD86AeAMMW8=) 2: 9VN0sy50HSODEHZbX66L-b8deHc.roa (hash: jP7k3YgnbTl3KFJPn2E0Kcls6tmGu0Fkbos1usVNkL4=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: z1ut+Fslf64lil/X4/11cYH52jz2VJEswNRlzWlVng0=) 4: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (hash: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=) 5: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (hash: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=) 6: bz-D4SDkYNJX3doa4B8jZgURHwo.roa (hash: VAiwBxvkCmw7A0ZcRk66dwA9/yhNQQmsm9xLmf72FPw=) 7: fVxfwM9B5VBSi1mDilErv7rAMqM.roa (hash: sQt0nBxjibOU9oVspM2yL21b4yN44vBB+LhWqrA9yfI=) 8: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (hash: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=) 9: w8SgMjTPngdFlsiriqc6rouveAs.roa (hash: W2I4MarE7Y4LUFVg/ELUk+Y5slY545rHs7dpxV6jMBw=) 10: wDv3HPwcvHfcTTRaZ1O4gsTavXk.roa (hash: Y9GaInWk9YVCI1lH2KeBgQ0e9lnon/jVvzQhDZFCMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:c0:c0:02:92:f7:83:10:3e:a0:d9:4b:85:e8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jun 28 13:01:17 2025 GMT Not After : Jun 29 13:01:17 2025 GMT Subject: CN=890945d2f0644cd1d6e6740fe6d1f98ebbaece40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5a:60:aa:c1:3a:1b:30:21:00:f5:93:d6:59: 0c:00:83:69:fd:a7:12:25:1e:e9:a8:bf:e2:fc:7b: d5:5e:bc:ea:77:54:7a:fe:67:4e:3b:70:70:23:6f: 21:48:65:1d:3d:a0:06:c1:38:fb:75:95:74:d9:37: 40:8f:45:ed:02:ea:80:72:ae:d5:61:b0:99:10:b6: 2f:17:dd:73:e1:7a:b9:04:f8:e7:38:15:78:f3:86: 81:c9:71:95:78:7e:ea:a2:ed:83:d5:26:f8:f4:60: d8:29:ac:45:57:91:8f:7f:5e:26:42:b8:ed:7e:c6: f7:a4:7c:23:c0:ab:2a:3d:94:bc:51:f6:5e:fe:97: 96:9c:61:19:e3:96:04:7e:83:4d:49:08:07:a2:53: 99:63:24:09:e1:f0:b9:e5:fa:02:0e:b3:c5:5a:cd: 6e:ec:08:95:ef:16:5e:09:a1:bb:f7:39:59:57:56: 1a:45:95:c5:d0:8f:e5:fa:3d:09:7b:97:f7:2a:a8: eb:57:fa:62:08:b3:85:9b:22:03:61:70:02:63:28: 55:03:75:86:6d:76:0e:1c:28:37:18:cd:46:95:f6: b5:f0:a3:aa:3f:eb:da:bf:36:dd:1c:68:75:cc:31: 9c:2d:28:fb:f0:c3:21:b5:73:46:72:ff:c0:9e:68: 3e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:09:45:D2:F0:64:4C:D1:D6:E6:74:0F:E6:D1:F9:8E:BB:AE:CE:40 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9b:7a:b8:0c:d4:bb:c5:9e:7c:a6:28:19:93:07:12:53:ad: cb:1e:95:2a:af:d3:8a:ee:7b:09:a3:9a:2b:bf:cc:bb:0e:bf: 70:be:61:cb:f9:ed:ef:ac:55:21:02:4c:83:26:2c:f4:ac:49: 6b:56:eb:f9:26:0f:d0:e9:d9:35:01:5f:74:62:7c:1e:11:59: 7a:e0:c6:dd:d3:dd:ef:85:9d:81:3e:eb:59:b7:1f:1a:b2:ee: 68:57:0e:d3:98:e5:bf:7d:e5:cc:91:54:8a:49:99:33:5c:56: 31:38:a9:28:57:1d:c7:4b:c8:b1:9d:93:21:a0:0d:94:ab:27: 9e:5b:a2:9d:7a:51:26:46:c6:44:00:63:7c:06:17:10:8e:90: 90:45:6f:6b:ab:14:61:77:6a:66:ca:f5:88:86:b6:f9:00:a2: 1e:e0:83:e3:af:c1:05:1c:18:69:d1:f3:7a:d5:58:91:f5:56: 6a:91:26:5e:59:d8:27:ee:09:69:7b:8e:05:cb:8e:16:e1:cc: fe:30:80:d0:31:a3:1d:5f:72:0e:6f:8d:d6:76:e6:2c:b6:dc: 60:92:1c:a0:41:c3:fd:18:76:ac:ac:db:07:aa:76:54:f2:40: e4:ba:69:f0:e4:09:b3:4c:61:1c:2a:7a:ff:03:82:b0:6f:48: 94:ce:35:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oMDAApL3gxA+oNlLhehRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjUwNjI4MTMwMTE3WhcNMjUwNjI5MTMwMTE3WjAzMTEwLwYDVQQD Eyg4OTA5NDVkMmYwNjQ0Y2QxZDZlNjc0MGZlNmQxZjk4ZWJiYWVjZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1pgqsE6GzAhAPWT1lkMAINp/acS JR7pqL/i/HvVXrzqd1R6/mdOO3BwI28hSGUdPaAGwTj7dZV02TdAj0XtAuqAcq7V YbCZELYvF91z4Xq5BPjnOBV484aByXGVeH7qou2D1Sb49GDYKaxFV5GPf14mQrjt fsb3pHwjwKsqPZS8UfZe/peWnGEZ45YEfoNNSQgHolOZYyQJ4fC55foCDrPFWs1u 7AiV7xZeCaG79zlZV1YaRZXF0I/l+j0Je5f3KqjrV/piCLOFmyIDYXACYyhVA3WG bXYOHCg3GM1Glfa18KOqP+vavzbdHGh1zDGcLSj78MMhtXNGcv/Anmg+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkJRdLwZEzR1uZ0D+bR+Y67rs5AMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJt6uAzU u8WefKYoGZMHElOtyx6VKq/Tiu57CaOaK7/Muw6/cL5hy/nt76xVIQJMgyYs9KxJ a1br+SYP0OnZNQFfdGJ8HhFZeuDG3dPd74WdgT7rWbcfGrLuaFcO05jlv33lzJFU ikmZM1xWMTipKFcdx0vIsZ2TIaANlKsnnluinXpRJkbGRABjfAYXEI6QkEVva6sU YXdqZsr1iIa2+QCiHuCD46/BBRwYadHzetVYkfVWapEmXlnYJ+4JaXuOBcuOFuHM /jCA0DGjHV9yDm+N1nbmLLbcYJIcoEHD/Rh2rKzbB6p2VPJA5Lpp8OQJs0xhHCp6 /wOCsG9IlM41HA== -----END CERTIFICATE-----Generated at Sat Jun 28 20:12:41 2025 by rpki-client