$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json) Hash identifier: kmBWQmtpE9S2RyZBlMtRZrt2PeFTs6EB8hGbFPIDflg= Subject key identifier: 33:07:82:54:C5:DE:99:4A:84:E7:D3:B7:11:97:4B:FC:60:7B:C1:2F Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 0196B7EC287461C567FDB803231AB4D95974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft Manifest number: 1540 Signing time: Sat 10 May 2025 02:00:29 +0000 Manifest this update: Sat 10 May 2025 02:00:29 +0000 Manifest next update: Sun 11 May 2025 02:00:29 +0000 Files and hashes: 1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=) 2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=) 3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=) 4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=) 5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=) 6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: B5ClxKLqdwvAFKzneDAEvjm5pDEjdAWoJLpCez1ZDWo=) 7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=) 8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=) 9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=) 10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=) 11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=) 12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=) 13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=) 14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=) 15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=) 16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=) 17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=) 18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=) 19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=) 20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b7:ec:28:74:61:c5:67:fd:b8:03:23:1a:b4:d9:59:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: May 10 02:00:29 2025 GMT Not After : May 11 02:00:29 2025 GMT Subject: CN=33078254c5de994a84e7d3b711974bfc607bc12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:03:eb:3a:aa:94:52:43:27:07:b0:36:20: ed:b6:19:4e:bf:07:e2:eb:c0:0a:01:75:11:78:81: 3c:db:19:22:8f:8f:fe:f0:c7:71:83:f7:77:bc:fb: fd:a5:2f:e3:45:e2:1a:d0:11:46:56:21:4b:a4:3c: aa:44:ef:39:f8:25:82:fa:ca:5b:5f:40:24:5e:6f: 3d:83:46:26:9a:24:93:35:75:ba:bc:6f:e1:39:b5: bf:38:41:1e:fd:43:8d:fc:20:da:bb:99:8f:07:0b: d3:d2:d9:b8:57:b1:44:25:a7:fe:5d:d4:bf:ce:0d: e1:98:05:88:76:86:12:8e:54:93:93:13:6a:50:2e: c9:b3:5f:5e:09:5e:ef:94:9f:f9:f8:7e:70:d9:ac: fd:10:2b:5e:56:1a:d2:d4:1a:82:2c:d7:78:a7:d1: da:c2:5a:9d:c6:37:7f:78:0b:1c:49:b4:c2:78:0b: ca:b8:71:6e:bf:2e:77:ba:46:05:d4:68:6a:16:7d: 57:d0:d1:ec:c2:fa:24:f7:eb:bf:d7:37:07:ff:13: bc:ed:c5:1d:61:5b:ac:e3:80:ca:cd:b8:df:f4:29: 19:18:9e:0d:16:82:80:dc:4b:3a:3f:96:f5:af:3e: 7c:2f:76:90:57:26:d3:13:a6:d4:bc:26:fd:ef:84: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:07:82:54:C5:DE:99:4A:84:E7:D3:B7:11:97:4B:FC:60:7B:C1:2F X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e9:df:8a:56:4e:e2:e2:12:e6:3d:69:9f:f3:13:ea:58:f1: e0:dc:8f:7c:f5:1c:67:47:f2:d0:6b:90:e9:fb:51:5b:4e:53: 0c:12:26:47:99:54:86:16:0f:26:7b:9a:0f:99:c7:d9:30:1b: e6:3c:40:09:a8:0d:68:cc:db:09:3e:89:1e:fd:6d:c9:f5:1f: 10:9e:aa:eb:10:1a:62:52:35:21:96:66:cc:95:60:f9:03:1e: 67:a5:bc:c8:f2:52:8f:13:ef:fb:1b:24:69:87:6e:65:7d:b8: 18:66:50:ab:ee:0f:91:e7:33:1b:cc:f5:c9:7b:7f:8f:92:9e: 17:0f:8d:c9:f7:6b:0c:d1:04:50:f6:d4:28:7e:20:ae:ff:1b: 7b:b5:37:cb:90:fc:a4:ac:83:f6:52:ab:35:53:5a:bc:74:d5: 40:2d:bb:db:1c:c6:78:42:25:a0:08:a7:a0:ea:8f:f0:c6:cd: 5d:1d:74:b2:7d:03:61:26:b6:d7:e5:17:c9:58:09:77:2b:0f: 60:59:bb:77:60:14:21:12:56:b3:67:77:a8:75:01:0c:60:f1: b3:d6:74:51:92:52:ae:c3:a2:e9:ce:e4:b1:ad:a4:3a:fc:a4: 5f:82:c7:b4:71:69:39:76:d0:00:00:7a:f9:ca:49:46:1f:cf: e2:b0:93:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa37Ch0YcVn/bgDIxq02Vl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjUwNTEwMDIwMDI5WhcNMjUwNTExMDIwMDI5WjAzMTEwLwYDVQQD EygzMzA3ODI1NGM1ZGU5OTRhODRlN2QzYjcxMTk3NGJmYzYwN2JjMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2sD6zqqlFJDJwewNiDtthlOvwfi 68AKAXUReIE82xkij4/+8Mdxg/d3vPv9pS/jReIa0BFGViFLpDyqRO85+CWC+spb X0AkXm89g0YmmiSTNXW6vG/hObW/OEEe/UON/CDau5mPBwvT0tm4V7FEJaf+XdS/ zg3hmAWIdoYSjlSTkxNqUC7Js19eCV7vlJ/5+H5w2az9ECteVhrS1BqCLNd4p9Ha wlqdxjd/eAscSbTCeAvKuHFuvy53ukYF1GhqFn1X0NHswvok9+u/1zcH/xO87cUd YVus44DKzbjf9CkZGJ4NFoKA3Es6P5b1rz58L3aQVybTE6bUvCb974ThpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMHglTF3plKhOfTtxGXS/xge8EvMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+nfilZO 4uIS5j1pn/MT6ljx4NyPfPUcZ0fy0GuQ6ftRW05TDBImR5lUhhYPJnuaD5nH2TAb 5jxACagNaMzbCT6JHv1tyfUfEJ6q6xAaYlI1IZZmzJVg+QMeZ6W8yPJSjxPv+xsk aYduZX24GGZQq+4PkeczG8z1yXt/j5KeFw+NyfdrDNEEUPbUKH4grv8be7U3y5D8 pKyD9lKrNVNavHTVQC272xzGeEIloAinoOqP8MbNXR10sn0DYSa21+UXyVgJdysP YFm7d2AUIRJWs2d3qHUBDGDxs9Z0UZJSrsOi6c7ksa2kOvykX4LHtHFpOXbQAAB6 +cpJRh/P4rCThQ== -----END CERTIFICATE-----Generated at Sat May 10 08:03:10 2025 by rpki-client