$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: 0dvzzANVn4dfi2viM5OQPa11yQqxnp6sGm4GSxj4L8k= Subject key identifier: 18:55:2F:8F:0D:AD:C5:2A:8D:C8:C2:03:C7:63:23:15:69:22:79:CC Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 0197B6A16CB47C3B18A61C2855228281D255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 15C2 Signing time: Sat 28 Jun 2025 13:02:01 +0000 Manifest this update: Sat 28 Jun 2025 13:02:01 +0000 Manifest next update: Sun 29 Jun 2025 13:02:01 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 3: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (hash: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=) 4: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 5: YVY9nIlUnxzvYvUHcuswYdgv-5c.roa (hash: de7Nhke3BR4RbsVq7LgDRBaPDz0mhJShPdisp8UZut0=) 6: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 7: fRZWH_M0OyQ2q7C3l2YZBzviPzY.roa (hash: F07+RgoevJOf1u0ML2Jb2xCzFrPFpbtH07Gxnbmp3Hg=) 8: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 9: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: MEkQnTSzsBrw7nw3+k+JHiOsdPgXPyfol6eyMnX/5xU=) 10: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 11: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:6c:b4:7c:3b:18:a6:1c:28:55:22:82:81:d2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jun 28 13:02:01 2025 GMT Not After : Jun 29 13:02:01 2025 GMT Subject: CN=18552f8f0dadc52a8dc8c203c7632315692279cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:e0:76:70:44:b2:12:30:97:44:1a:6c:a4: ab:9f:c2:fb:08:0f:98:17:42:4f:20:69:88:73:35: 47:32:2d:1a:4c:b4:75:60:96:34:9d:61:a8:b6:3d: 9c:c1:ca:4d:5e:28:42:80:bc:c6:6c:81:3b:80:2f: bd:16:6e:5a:c0:83:2d:18:ef:a0:09:4d:83:c4:6c: 73:d9:1f:20:8c:96:a0:5b:60:21:da:28:00:6a:ba: 16:a0:c0:f2:6a:d7:96:9c:2c:c6:4c:4f:33:37:76: f2:36:92:be:6b:94:74:fd:f7:ff:bb:e8:15:f6:11: 67:d5:7a:9a:44:f5:39:05:18:d9:d3:c7:9e:47:d3: f7:5a:b6:1b:46:6d:fb:62:2f:15:e7:02:0e:89:b3: 5f:cf:e9:e4:02:67:16:08:03:00:e6:69:f1:c1:c9: eb:76:3c:c7:f0:1d:b2:b5:7f:4f:7b:cf:70:8e:e6: 83:31:c8:58:fd:e9:a3:99:54:03:fa:ae:15:bc:84: 2c:af:07:8a:81:15:32:35:2d:a0:fe:c9:7e:cb:a0: 17:15:a9:43:52:d9:57:02:b9:e5:88:66:92:1d:6b: 70:5c:5c:25:d9:d9:62:be:9f:18:72:69:d0:6b:4a: d0:01:ab:6a:a3:ac:de:cb:04:c6:cc:61:9d:61:83: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:55:2F:8F:0D:AD:C5:2A:8D:C8:C2:03:C7:63:23:15:69:22:79:CC X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:5a:18:b0:21:26:2b:e2:b3:17:b2:ba:41:80:62:e9:a2:29: 4e:f3:aa:71:e7:54:d3:1f:16:bb:10:78:97:b3:23:3f:6d:b7: ff:f1:68:5b:21:bb:04:e3:34:9f:f4:fc:db:b2:01:13:e9:e6: 97:44:90:48:53:93:6f:da:56:df:04:a4:f4:b4:5d:41:6e:5f: 54:c0:9f:52:bf:f5:e9:93:77:8c:f1:b0:9a:ed:8f:fc:8e:33: 22:77:56:b1:98:6b:43:fa:0d:74:15:0e:49:52:c0:ca:46:35: a5:58:b3:e4:44:7c:54:b5:11:b0:ff:1f:c4:a1:9f:8a:69:ce: 54:5b:53:92:84:20:f4:ea:b2:93:53:7c:18:51:d1:5f:23:db: 1d:7a:4a:59:00:04:32:81:34:6a:f7:4e:c5:fc:27:5f:77:73: 43:10:82:d6:20:46:4d:72:de:8c:02:16:6e:58:2d:e2:01:ef: 3c:cf:b4:f2:34:62:6e:0a:ae:98:2f:7b:d2:a4:be:d2:2e:a8: 1e:40:87:44:38:b2:bb:88:df:5a:9b:09:b3:67:07:8b:8c:86: 31:55:b6:82:1a:86:03:11:8b:03:5b:3b:16:e2:63:72:cc:81: ca:2c:6e:2a:ad:9b:87:72:3c:df:67:79:4b:3f:22:58:f2:b3: 54:8e:94:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oWy0fDsYphwoVSKCgdJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUwNjI4MTMwMjAxWhcNMjUwNjI5MTMwMjAxWjAzMTEwLwYDVQQD EygxODU1MmY4ZjBkYWRjNTJhOGRjOGMyMDNjNzYzMjMxNTY5MjI3OWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSXgdnBEshIwl0QabKSrn8L7CA+Y F0JPIGmIczVHMi0aTLR1YJY0nWGotj2cwcpNXihCgLzGbIE7gC+9Fm5awIMtGO+g CU2DxGxz2R8gjJagW2Ah2igAaroWoMDyateWnCzGTE8zN3byNpK+a5R0/ff/u+gV 9hFn1XqaRPU5BRjZ08eeR9P3WrYbRm37Yi8V5wIOibNfz+nkAmcWCAMA5mnxwcnr djzH8B2ytX9Pe89wjuaDMchY/emjmVQD+q4VvIQsrweKgRUyNS2g/sl+y6AXFalD UtlXArnliGaSHWtwXFwl2dlivp8YcmnQa0rQAatqo6zeywTGzGGdYYN95QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhVL48NrcUqjcjCA8djIxVpInnMMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyloYsCEm K+KzF7K6QYBi6aIpTvOqcedU0x8WuxB4l7MjP223//FoWyG7BOM0n/T827IBE+nm l0SQSFOTb9pW3wSk9LRdQW5fVMCfUr/16ZN3jPGwmu2P/I4zIndWsZhrQ/oNdBUO SVLAykY1pViz5ER8VLURsP8fxKGfimnOVFtTkoQg9Oqyk1N8GFHRXyPbHXpKWQAE MoE0avdOxfwnX3dzQxCC1iBGTXLejAIWblgt4gHvPM+08jRibgqumC970qS+0i6o HkCHRDiyu4jfWpsJs2cHi4yGMVW2ghqGAxGLA1s7FuJjcsyByixuKq2bh3I832d5 Sz8iWPKzVI6U7Q== -----END CERTIFICATE-----Generated at Sat Jun 28 23:07:21 2025 by rpki-client