$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: ZG/QzeG6eox/MqeTvMRMscCD9U6BUxwi/glsiJm/Dp8= Subject key identifier: 85:10:97:93:C7:B5:E9:FE:7B:82:B3:60:DF:04:FE:D0:5E:F1:EA:7F Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 0197B63296391AB43090EC218612D6FEB950 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 15DA Signing time: Sat 28 Jun 2025 11:00:57 +0000 Manifest this update: Sat 28 Jun 2025 11:00:57 +0000 Manifest next update: Sun 29 Jun 2025 11:00:57 +0000 Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=) 2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=) 3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=) 4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=) 5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=) 6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=) 7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=) 8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=) 9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=) 10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=) 11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=) 12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: HRLvbn9WL8XLvGJnvU4P1sY9AFsbGDVk7V4E0A4uuj0=) 13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=) 14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=) 15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=) 16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=) 17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=) 18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=) 19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=) 20: YEVEq99x_S8XcneTMoUBT-1bOQ4.roa (hash: F8Z7UVtZrPgGB9ZgJgtyNBtPC1IwzWMX6y3YHLUTLFI=) 21: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=) 22: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=) 23: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=) 24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=) 25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=) 26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=) 27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=) 28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=) 29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=) 30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:96:39:1a:b4:30:90:ec:21:86:12:d6:fe:b9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jun 28 11:00:57 2025 GMT Not After : Jun 29 11:00:57 2025 GMT Subject: CN=85109793c7b5e9fe7b82b360df04fed05ef1ea7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:9e:4b:ae:85:0c:e1:69:a5:50:23:e8:11: 55:70:10:e3:84:c9:2d:16:8e:73:0c:34:dd:5d:6c: 5d:8b:b4:7d:81:9d:2d:d8:40:b9:49:ba:90:81:8c: a7:07:a0:fc:1f:6d:f8:c6:af:6d:72:69:69:12:bf: 01:83:13:27:58:b8:20:7f:3a:4e:fe:22:c0:a1:90: af:17:0a:11:f7:33:0f:2d:27:af:ba:4a:5a:7d:8c: c2:f1:a7:84:1c:2c:71:41:a1:a4:ed:b4:2d:3a:10: 38:dc:f7:0b:80:3c:8e:2a:75:cf:84:d1:74:b0:64: 3b:58:3a:f1:9d:81:38:61:9c:51:53:45:c2:df:c8: 63:da:44:f7:11:09:af:3c:49:4d:32:44:4e:11:43: 1d:61:3f:6c:43:29:98:e5:d4:cc:1c:34:a8:b8:ee: ff:29:14:92:2c:d7:40:9d:71:f0:d1:ca:bb:bc:33: 63:91:93:a3:3b:44:64:2a:40:11:af:79:6e:c0:54: ab:17:b8:0c:81:26:7c:51:6b:ea:05:9e:b7:10:ca: 75:76:83:be:c2:83:e8:5b:b2:8c:bb:24:fd:e1:4f: 23:6f:ef:80:3f:74:9b:8f:2f:7f:08:33:80:4e:06: 6d:a0:4f:37:bc:d6:8c:3a:77:4b:ae:09:be:ed:75: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:10:97:93:C7:B5:E9:FE:7B:82:B3:60:DF:04:FE:D0:5E:F1:EA:7F X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f8:92:61:8d:3a:da:f2:6b:c4:a3:5e:4f:c8:5e:a5:e2:9c: ea:28:3f:b7:27:69:e0:89:54:d4:2a:89:72:6b:fa:3b:f5:8a: ea:6c:43:5d:d0:73:c1:2a:18:de:8b:40:bb:05:b0:24:3e:67: c4:01:c1:8e:52:2b:54:d0:f9:ab:14:61:9e:df:ab:a8:77:7b: d7:2b:1f:4f:37:c6:34:e0:e4:85:8d:0a:06:44:e8:63:ca:8d: 5a:3e:b8:5d:d8:fa:c3:2c:ca:a9:b6:0a:84:d4:3d:82:05:6c: a2:f3:3c:05:83:96:41:a3:c1:e3:7d:21:3d:2a:f3:76:5e:83: 6e:fd:48:69:ef:c0:a3:eb:79:18:86:96:e5:85:21:6f:d3:e0: 26:92:87:56:0a:df:9a:cb:b7:6a:4f:9a:3e:1c:c1:a0:ef:a9: 22:93:bf:ad:9f:bf:44:bd:cc:ff:24:a5:9a:8e:9a:b5:58:19: 45:b5:fc:b5:b1:e7:f2:c1:76:d6:2b:b1:59:7a:de:91:7c:98: 60:54:81:49:8d:f6:8c:95:0d:d6:64:15:af:dd:e0:c6:34:61: 9f:d1:c7:c0:ee:ab:e9:c5:0e:a3:ed:12:5b:93:89:29:2d:49: 8f:52:ae:39:72:3e:58:cc:d7:47:e7:16:57:83:ca:80:7b:7f: 57:50:8f:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MpY5GrQwkOwhhhLW/rlQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjUwNjI4MTEwMDU3WhcNMjUwNjI5MTEwMDU3WjAzMTEwLwYDVQQD Eyg4NTEwOTc5M2M3YjVlOWZlN2I4MmIzNjBkZjA0ZmVkMDVlZjFlYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr86eS66FDOFppVAj6BFVcBDjhMkt Fo5zDDTdXWxdi7R9gZ0t2EC5SbqQgYynB6D8H234xq9tcmlpEr8BgxMnWLggfzpO /iLAoZCvFwoR9zMPLSevukpafYzC8aeEHCxxQaGk7bQtOhA43PcLgDyOKnXPhNF0 sGQ7WDrxnYE4YZxRU0XC38hj2kT3EQmvPElNMkROEUMdYT9sQymY5dTMHDSouO7/ KRSSLNdAnXHw0cq7vDNjkZOjO0RkKkARr3luwFSrF7gMgSZ8UWvqBZ63EMp1doO+ woPoW7KMuyT94U8jb++AP3Sbjy9/CDOATgZtoE83vNaMOndLrgm+7XWfaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUQl5PHten+e4KzYN8E/tBe8ep/MB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPiSYY06 2vJrxKNeT8hepeKc6ig/tydp4IlU1CqJcmv6O/WK6mxDXdBzwSoY3otAuwWwJD5n xAHBjlIrVND5qxRhnt+rqHd71ysfTzfGNODkhY0KBkToY8qNWj64Xdj6wyzKqbYK hNQ9ggVsovM8BYOWQaPB430hPSrzdl6Dbv1Iae/Ao+t5GIaW5YUhb9PgJpKHVgrf msu3ak+aPhzBoO+pIpO/rZ+/RL3M/ySlmo6atVgZRbX8tbHn8sF21iuxWXrekXyY YFSBSY32jJUN1mQVr93gxjRhn9HHwO6r6cUOo+0SW5OJKS1Jj1KuOXI+WMzXR+cW V4PKgHt/V1CPaw== -----END CERTIFICATE-----Generated at Sat Jun 28 20:02:00 2025 by rpki-client