$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: TgzfPPtBvQpBcGXXU96GzDciOiJapWpKjvNyYNorYBo= Subject key identifier: 7A:9B:28:04:0A:56:20:A0:A5:11:1C:5E:0A:65:CC:97:59:C3:73:68 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 0197B7B2F05CC704E26C60E3770787536830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 15CB Signing time: Sat 28 Jun 2025 18:00:46 +0000 Manifest this update: Sat 28 Jun 2025 18:00:46 +0000 Manifest next update: Sun 29 Jun 2025 18:00:46 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: FUSDgc58t7U4fuucmEPuEjO5Yhg.roa (hash: aS1RV6Hjz0mszrBpJALZA+zpAxzsSz5luvIAMzBTdPk=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: SyMnl-k5UucfnTeo_SQYwZ82xYs.roa (hash: IFFK24iMwjJA7VBKRvD/UabtondGciIM3nxVgegj8qk=) 9: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 10: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 11: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 12: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 13: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 14: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 15: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 16: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: qA72QomisNhEXChBE73zCMDX3CT+MFW/KefYWENND90=) 17: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 18: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 19: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 22: uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa (hash: lh9JEVycjwO2JOZAXH6/OskJCw09FDKHU4kXtolx/mg=) 23: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 24: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 25: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (hash: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=) 26: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b2:f0:5c:c7:04:e2:6c:60:e3:77:07:87:53:68:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jun 28 18:00:46 2025 GMT Not After : Jun 29 18:00:46 2025 GMT Subject: CN=7a9b28040a5620a0a5111c5e0a65cc9759c37368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:dd:99:07:9c:7c:05:ba:85:09:ce:ea:7a: 85:a8:74:b1:b9:1f:20:4d:9b:77:5b:63:55:42:e3: d4:10:2e:9e:86:18:a2:86:83:71:35:25:68:5c:ac: f8:30:cc:71:36:df:c3:54:f9:3a:45:5e:8f:d6:b2: 4a:e4:a4:b8:29:a3:f1:ec:30:2a:5f:01:93:5b:70: c8:00:b9:3d:c7:df:1a:ae:db:0f:bc:06:5a:87:c5: f9:22:a4:89:9a:a4:c4:c9:a9:dd:21:60:f8:63:8e: 55:ff:28:89:7b:95:77:c7:94:d0:8e:73:13:8f:93: eb:cf:d5:00:d7:43:7a:fd:a2:8a:75:7b:7e:dc:7b: b3:33:2b:8b:c1:7f:08:1a:63:ba:70:1f:d8:1a:38: bc:65:a9:dd:ea:c7:45:ac:61:d8:be:3e:b7:df:b4: ed:4e:49:22:11:14:3f:b0:ff:18:ea:8f:1b:a2:38: a9:f6:d3:77:f2:bc:d2:e3:08:f7:66:41:88:ae:4e: 8f:e6:12:fd:2e:cd:3f:a7:ec:99:c9:1e:99:90:75: e7:bf:b1:5b:8a:97:1a:58:66:8c:a4:c6:2c:b9:3b: d3:71:6d:50:44:a6:b4:97:4e:1e:52:02:15:97:41: 14:3c:69:91:29:a0:44:18:25:3d:05:83:17:af:e7: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9B:28:04:0A:56:20:A0:A5:11:1C:5E:0A:65:CC:97:59:C3:73:68 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:48:93:9e:9b:2a:6d:13:25:e9:76:ea:a1:ab:86:9d:d3:d0: 6c:d1:ae:c6:89:ba:1f:52:73:62:89:94:a4:10:fa:a4:0a:1b: 41:d7:cb:27:49:57:5c:01:90:99:4c:84:7d:21:23:5f:9a:72: 81:cf:d3:ef:bf:7c:63:0a:03:b6:42:53:5a:b1:0b:53:7d:f1: 48:71:59:17:3c:48:26:fd:c7:45:f3:99:d9:77:ba:fe:67:2a: 95:2a:94:51:7d:de:9b:95:cc:af:e9:5f:b9:ab:fa:44:a2:4f: 72:42:7e:6f:a7:90:af:e9:3b:ae:a8:99:d9:ca:9e:67:b4:0f: c1:a5:6c:dd:dd:ef:c6:57:f4:52:c2:ac:a1:5c:92:4e:10:27: 3f:73:75:a2:14:63:0c:16:1d:d0:10:fc:53:94:61:84:9b:ad: ab:31:90:ff:2a:2a:00:89:2c:56:d5:68:ab:92:8f:32:8e:e2: 74:5c:19:f1:7b:e6:12:dc:60:07:08:cd:aa:5b:a2:b2:1c:96: c3:09:0b:76:e9:e4:19:c3:85:1e:1c:8c:60:01:64:83:11:b5: 2a:23:81:50:e3:aa:69:00:0b:7a:2d:bc:df:13:4a:5e:a3:94: bc:ec:5a:46:5e:9f:33:a0:5d:e4:14:6c:1b:01:18:44:18:5a: 4b:9a:b5:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3svBcxwTibGDjdweHU2gwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwNjI4MTgwMDQ2WhcNMjUwNjI5MTgwMDQ2WjAzMTEwLwYDVQQD Eyg3YTliMjgwNDBhNTYyMGEwYTUxMTFjNWUwYTY1Y2M5NzU5YzM3MzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1fdmQecfAW6hQnO6nqFqHSxuR8g TZt3W2NVQuPUEC6ehhiihoNxNSVoXKz4MMxxNt/DVPk6RV6P1rJK5KS4KaPx7DAq XwGTW3DIALk9x98artsPvAZah8X5IqSJmqTEyandIWD4Y45V/yiJe5V3x5TQjnMT j5Prz9UA10N6/aKKdXt+3HuzMyuLwX8IGmO6cB/YGji8Zand6sdFrGHYvj6337Tt TkkiERQ/sP8Y6o8bojip9tN38rzS4wj3ZkGIrk6P5hL9Ls0/p+yZyR6ZkHXnv7Fb ipcaWGaMpMYsuTvTcW1QRKa0l04eUgIVl0EUPGmRKaBEGCU9BYMXr+codwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqbKAQKViCgpREcXgplzJdZw3NoMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEiTnpsq bRMl6XbqoauGndPQbNGuxom6H1JzYomUpBD6pAobQdfLJ0lXXAGQmUyEfSEjX5py gc/T7798YwoDtkJTWrELU33xSHFZFzxIJv3HRfOZ2Xe6/mcqlSqUUX3em5XMr+lf uav6RKJPckJ+b6eQr+k7rqiZ2cqeZ7QPwaVs3d3vxlf0UsKsoVySThAnP3N1ohRj DBYd0BD8U5RhhJutqzGQ/yoqAIksVtVoq5KPMo7idFwZ8XvmEtxgBwjNqluishyW wwkLdunkGcOFHhyMYAFkgxG1KiOBUOOqaQALei283xNKXqOUvOxaRl6fM6Bd5BRs GwEYRBhaS5q1ZQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:47:34 2025 by rpki-client