$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: LV/eBq+bEqvwWfewY79fPNSgHwAkjbWy6N2NeybNPOM= Subject key identifier: 9B:49:D8:21:07:EF:0E:77:84:B6:D1:D5:A1:E0:85:47:25:F8:DB:09 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 0197B88F8953CA6D8413BBCBC8BC8C4B5246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 1307 Signing time: Sat 28 Jun 2025 22:01:43 +0000 Manifest this update: Sat 28 Jun 2025 22:01:43 +0000 Manifest next update: Sun 29 Jun 2025 22:01:43 +0000 Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 2: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 3: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=) 4: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: mKnWeIfyE3pBnPQ30j9oEIr6ASbeQImm162HG2fBnrM=) 5: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 6: NojFSrrS5JKJQebH50O-Sn9xxis.roa (hash: 99amkQAhCwzYf+SSxz6XlFlKrJhhJL3h7GCB1tqsJIA=) 7: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 8: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=) 9: YaicB_OOi5EW-gKC6JoYl28PzLQ.roa (hash: qfLaG4KQWd6C25QxiPcjO1Twne57/Sd7uQzmgG9dqKA=) 10: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 11: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 12: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 13: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 22:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:8f:89:53:ca:6d:84:13:bb:cb:c8:bc:8c:4b:52:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jun 28 22:01:43 2025 GMT Not After : Jun 29 22:01:43 2025 GMT Subject: CN=9b49d82107ef0e7784b6d1d5a1e0854725f8db09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:d5:da:bf:53:fa:18:05:28:25:98:4d:0d: f0:d2:3f:23:69:88:20:bd:a3:67:92:a6:7c:0b:5d: 96:27:b4:3a:dc:de:29:85:d4:88:1b:7c:de:65:85: 94:d0:4a:40:94:f2:ce:4e:04:3a:fb:e5:00:0b:2b: 61:86:c1:f6:69:9f:cb:08:6a:43:df:03:16:83:d7: 5f:17:08:c5:40:2c:87:2a:00:ea:4e:07:14:cd:65: 6f:29:fd:3e:05:e9:61:ef:2e:1b:7b:4c:30:85:87: 7b:a1:2f:ea:98:dc:7d:f3:72:1f:4e:85:69:4c:4e: 96:5e:cd:85:e9:18:eb:0e:03:c9:e3:11:37:89:64: cd:b1:c2:4a:96:0d:40:d1:fd:61:da:43:4b:ca:6f: e9:ec:4b:f8:17:de:a8:d9:55:c2:10:69:4d:20:6a: 63:25:27:df:3a:69:6f:1c:17:f5:e7:a4:e0:64:21: 8f:79:ef:68:34:37:9d:95:10:5b:be:be:eb:55:6c: b4:c7:5b:cb:2b:2b:b3:ad:f0:89:05:f6:33:7e:6f: df:8e:03:e3:4a:ee:2a:e1:6d:a4:81:45:1c:0d:b2: 2b:21:77:a8:ef:6d:50:b2:e1:a1:e8:33:45:a5:ae: e5:f7:ee:ac:28:cb:36:3d:7c:91:ef:b2:a3:68:bc: 48:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:49:D8:21:07:EF:0E:77:84:B6:D1:D5:A1:E0:85:47:25:F8:DB:09 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:64:95:ef:7c:fc:63:77:8b:ec:96:de:13:06:1b:4d:c5:c5: 13:00:5e:74:14:b0:d5:d7:1f:01:ee:a8:ea:8f:a9:8c:62:d2: f6:bc:29:37:cc:e7:b8:ab:fe:b6:1e:0f:09:ae:40:e3:8c:7b: 6e:9c:de:38:13:92:33:83:a3:7c:cb:bb:d1:4e:95:f5:a3:65: 19:25:86:51:53:cb:e9:48:4f:fd:89:44:62:74:d1:30:67:2a: 2f:65:fa:64:a3:89:c3:c8:86:81:04:63:00:84:dd:c0:66:75: 46:25:fc:97:21:8f:25:01:09:bb:ab:0c:f4:7a:e0:b1:1c:bd: 53:6a:e3:ef:98:83:6e:97:e4:03:a1:f7:3c:32:a3:34:bf:bf: e7:ab:ff:e7:0e:0e:84:de:a2:de:6b:86:6e:3e:56:01:1d:5d: 3b:0c:7f:e7:22:91:ba:ab:31:f1:fc:c0:8e:cb:55:d6:8b:d0: fd:a7:19:bd:98:f4:da:f7:8f:36:c4:20:d2:ed:be:e6:1b:9d: a8:01:be:85:86:18:33:1e:b9:d5:3b:6d:3e:52:df:d8:4e:2d: 49:7a:fe:3a:71:c6:5f:4a:8d:c8:f0:76:25:d7:83:ae:d0:73: 0f:88:01:16:d9:70:6d:cf:12:22:4a:2a:97:2e:c5:15:45:9a: 8d:6f:f9:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4j4lTym2EE7vLyLyMS1JGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUwNjI4MjIwMTQzWhcNMjUwNjI5MjIwMTQzWjAzMTEwLwYDVQQD Eyg5YjQ5ZDgyMTA3ZWYwZTc3ODRiNmQxZDVhMWUwODU0NzI1ZjhkYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbbV2r9T+hgFKCWYTQ3w0j8jaYgg vaNnkqZ8C12WJ7Q63N4phdSIG3zeZYWU0EpAlPLOTgQ6++UACythhsH2aZ/LCGpD 3wMWg9dfFwjFQCyHKgDqTgcUzWVvKf0+Belh7y4be0wwhYd7oS/qmNx983IfToVp TE6WXs2F6RjrDgPJ4xE3iWTNscJKlg1A0f1h2kNLym/p7Ev4F96o2VXCEGlNIGpj JSffOmlvHBf156TgZCGPee9oNDedlRBbvr7rVWy0x1vLKyuzrfCJBfYzfm/fjgPj Su4q4W2kgUUcDbIrIXeo721QsuGh6DNFpa7l9+6sKMs2PXyR77KjaLxIywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtJ2CEH7w53hLbR1aHghUcl+NsJMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimSV73z8 Y3eL7JbeEwYbTcXFEwBedBSw1dcfAe6o6o+pjGLS9rwpN8znuKv+th4PCa5A44x7 bpzeOBOSM4OjfMu70U6V9aNlGSWGUVPL6UhP/YlEYnTRMGcqL2X6ZKOJw8iGgQRj AITdwGZ1RiX8lyGPJQEJu6sM9HrgsRy9U2rj75iDbpfkA6H3PDKjNL+/56v/5w4O hN6i3muGbj5WAR1dOwx/5yKRuqsx8fzAjstV1ovQ/acZvZj02vePNsQg0u2+5hud qAG+hYYYMx651TttPlLf2E4tSXr+OnHGX0qNyPB2JdeDrtBzD4gBFtlwbc8SIkoq ly7FFUWajW/5SQ== -----END CERTIFICATE-----Generated at Sun Jun 29 06:29:14 2025 by rpki-client