$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: HDuonbB669XMoVR8m11pL0SwUfym9DC2s1g7I9CXBew= Subject key identifier: 29:99:14:C4:2F:E1:41:DC:13:EA:18:80:E9:32:0A:0B:9B:EF:E8:3A Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 01969CAC5F93125B260BB0B09097751A2842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 126F Signing time: Sun 04 May 2025 19:01:04 +0000 Manifest this update: Sun 04 May 2025 19:01:04 +0000 Manifest next update: Mon 05 May 2025 19:01:04 +0000 Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 2: 7qgBk_4RUI1MPuqUIAwp1I5WNpI.roa (hash: CqCYQkxSgRHLg2aJogxlDFvCDM48HenYHcuqXlXw1zo=) 3: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 4: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=) 5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: MVDoFq3abyeUrpsDwoq7r9d/mTPThATqI9HK44643Vw=) 6: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 7: NojFSrrS5JKJQebH50O-Sn9xxis.roa (hash: 99amkQAhCwzYf+SSxz6XlFlKrJhhJL3h7GCB1tqsJIA=) 8: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 9: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=) 10: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 11: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 12: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9c:ac:5f:93:12:5b:26:0b:b0:b0:90:97:75:1a:28:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: May 4 19:01:04 2025 GMT Not After : May 5 19:01:04 2025 GMT Subject: CN=299914c42fe141dc13ea1880e9320a0b9befe83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:2d:3f:9e:f3:2f:11:60:04:a1:a2:ee:da: 18:1e:d5:f0:32:54:61:75:5d:a1:25:e3:cf:a3:a1: 01:81:24:a4:4c:20:cf:cf:b4:73:57:df:56:df:f8: de:b7:71:35:6b:4f:0b:5a:68:55:7c:b4:79:46:63: 67:ad:98:15:cb:bc:7e:79:be:32:6a:e2:5f:12:04: 2f:ce:85:d8:fa:75:5f:6a:63:40:d8:37:6b:21:a9: 21:77:e0:00:1e:dc:77:62:7e:fe:fd:69:87:e0:f0: f9:d7:b3:5a:c7:f1:8b:bb:f1:96:58:08:8a:dd:20: e5:7a:b3:ae:88:af:5e:7c:b3:38:bc:07:a8:24:87: d3:7b:2a:f2:70:45:3e:a0:db:52:06:75:f5:8b:a3: a4:73:4b:70:70:45:35:35:73:d9:55:20:80:fc:d0: ad:89:53:40:ef:5e:dc:12:2f:8e:05:b9:79:a0:a0: 9f:53:40:8d:d3:ee:3b:d3:80:cc:62:21:cc:76:3d: c0:93:d5:31:63:ad:6b:58:db:e8:19:5b:81:e4:d2: a4:ac:96:3d:5f:83:b4:31:96:9d:b8:26:64:28:00: c4:f5:ef:1c:b8:64:a8:49:88:9c:d0:94:a0:29:36: a7:3b:da:03:88:33:08:20:63:8a:0a:15:20:be:03: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:99:14:C4:2F:E1:41:DC:13:EA:18:80:E9:32:0A:0B:9B:EF:E8:3A X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:57:67:63:5b:da:4d:b1:71:dc:46:eb:ed:64:89:dc:21:d7: 1d:53:9c:3a:ea:10:d2:0e:1a:a3:1c:e4:c2:8d:9e:a4:98:99: ff:36:1a:c0:af:5b:2b:fa:b6:04:2d:f1:5a:04:9d:7b:d7:c5: fb:3a:09:2b:70:75:41:82:f3:2d:09:e7:cb:ca:da:d4:e0:ab: 59:68:c8:8a:69:5d:b5:42:2d:34:76:90:c0:a6:aa:b6:1e:5a: 20:2e:8f:85:77:38:53:c3:4e:ee:61:b2:f5:22:37:6c:42:8d: ed:22:f6:6e:f7:eb:b7:b0:32:0d:90:ef:c6:ef:0d:32:8d:d9: fc:85:b1:4c:5c:6a:ec:55:6e:3b:9d:8d:f6:8c:a5:fa:ba:2e: 7d:9c:63:7c:36:48:2a:ed:91:eb:ec:e5:fd:cd:57:4f:65:4a: 86:08:02:c9:d2:d4:3a:dd:cf:6b:0f:2f:da:f6:81:37:7d:07: df:40:27:b9:a5:19:06:43:7c:96:29:03:00:aa:e7:23:83:58: ca:bf:ab:bc:1f:3b:71:d9:2f:90:6b:39:5e:5c:e4:c8:a8:21: d2:1c:b9:be:42:35:83:7f:67:5b:4f:ea:4b:dd:3f:7b:d5:f4: 2f:78:1b:31:4e:62:23:3b:21:d0:85:a4:f8:b4:eb:77:d9:2a: 69:a5:80:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZacrF+TElsmC7CwkJd1GihCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUwNTA0MTkwMTA0WhcNMjUwNTA1MTkwMTA0WjAzMTEwLwYDVQQD EygyOTk5MTRjNDJmZTE0MWRjMTNlYTE4ODBlOTMyMGEwYjliZWZlODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzYtP57zLxFgBKGi7toYHtXwMlRh dV2hJePPo6EBgSSkTCDPz7RzV99W3/jet3E1a08LWmhVfLR5RmNnrZgVy7x+eb4y auJfEgQvzoXY+nVfamNA2DdrIakhd+AAHtx3Yn7+/WmH4PD517Nax/GLu/GWWAiK 3SDlerOuiK9efLM4vAeoJIfTeyrycEU+oNtSBnX1i6Okc0twcEU1NXPZVSCA/NCt iVNA717cEi+OBbl5oKCfU0CN0+4704DMYiHMdj3Ak9UxY61rWNvoGVuB5NKkrJY9 X4O0MZaduCZkKADE9e8cuGSoSYic0JSgKTanO9oDiDMIIGOKChUgvgMOaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmZFMQv4UHcE+oYgOkyCgub7+g6MB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1dnY1va TbFx3Ebr7WSJ3CHXHVOcOuoQ0g4aoxzkwo2epJiZ/zYawK9bK/q2BC3xWgSde9fF +zoJK3B1QYLzLQnny8ra1OCrWWjIimldtUItNHaQwKaqth5aIC6PhXc4U8NO7mGy 9SI3bEKN7SL2bvfrt7AyDZDvxu8NMo3Z/IWxTFxq7FVuO52N9oyl+roufZxjfDZI Ku2R6+zl/c1XT2VKhggCydLUOt3Paw8v2vaBN30H30AnuaUZBkN8likDAKrnI4NY yr+rvB87cdkvkGs5XlzkyKgh0hy5vkI1g39nW0/qS90/e9X0L3gbMU5iIzsh0IWk +LTrd9kqaaWAMA== -----END CERTIFICATE-----Generated at Mon May 5 05:03:22 2025 by rpki-client