$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: k2COdgcDGdL9H61hSuoknI4smfLmZYn73EcGPgrfJB8= Subject key identifier: 43:AD:94:20:26:CA:0A:FC:95:86:C5:7E:EB:EC:C4:FE:CE:ED:32:2C Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 0196C04A917B682D8585B19F48081E281B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 1544 Signing time: Sun 11 May 2025 17:00:34 +0000 Manifest this update: Sun 11 May 2025 17:00:34 +0000 Manifest next update: Mon 12 May 2025 17:00:34 +0000 Files and hashes: 1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=) 2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=) 3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=) 4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=) 5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=) 6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=) 7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: ATg3U1UgFUwWwabLXoZyqg/eumLBq89UPeyZvNaeTGY=) 8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=) 9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=) 10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=) 11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c0:4a:91:7b:68:2d:85:85:b1:9f:48:08:1e:28:1b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: May 11 17:00:34 2025 GMT Not After : May 12 17:00:34 2025 GMT Subject: CN=43ad942026ca0afc9586c57eebecc4feceed322c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:1d:8e:83:6f:0d:d1:f5:66:9c:d9:ff:1c: 08:69:9d:c4:53:9a:76:e1:2b:1f:e0:a9:f3:d9:3b: 7b:6c:4a:50:7a:12:40:ff:91:86:24:3e:38:b6:ec: 04:41:d0:d8:a5:74:56:cb:f0:60:c1:7b:70:49:a0: 1f:9f:c9:7c:f3:ae:07:01:0e:df:a4:10:fc:8d:35: f6:d5:98:8b:c8:ba:65:f5:3c:44:60:4a:b1:af:da: f0:65:e7:af:38:a8:cd:49:5a:46:d5:e6:33:f9:e7: 41:53:f5:04:99:c6:dc:e6:6a:f9:0d:48:1a:33:6b: 5b:60:c6:d7:b6:f2:40:6a:44:de:e9:1e:45:d5:ca: 7e:07:89:f3:15:14:3a:23:e7:09:d1:39:28:b5:16: 16:37:d1:fe:26:53:a1:2a:ee:0d:8f:20:06:fc:e5: 74:30:3d:6b:35:a1:40:dc:3d:a3:fa:c9:38:3d:7f: 83:79:e7:6a:53:e5:62:da:8d:fd:f2:5a:2a:3d:96: dc:c8:d2:aa:fb:dd:e4:23:70:53:93:bc:f5:5a:27: 22:3f:19:e7:66:c0:91:90:0a:15:ac:9a:21:82:7f: 87:f8:43:4a:c8:a9:d9:11:37:20:b0:99:9f:5b:34: 11:ec:1a:fa:c9:22:b2:9b:28:76:0f:93:2a:f7:15: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AD:94:20:26:CA:0A:FC:95:86:C5:7E:EB:EC:C4:FE:CE:ED:32:2C X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:80:24:f6:43:54:f3:93:ad:3a:19:22:6c:92:92:5d:7f:b8: a4:f0:bd:35:d9:1b:2f:10:ea:d9:88:d0:58:e9:71:a7:20:b7: 1f:97:15:1c:3f:8c:1e:2a:75:be:34:4e:59:ec:a4:1f:30:7c: e7:7a:00:58:18:f9:bd:ec:ab:08:0a:e4:f1:03:5d:b2:b8:63: ab:e1:57:5e:54:40:d7:37:4c:ea:85:a5:7d:81:15:61:c4:5b: f3:9d:c3:8d:f4:99:40:12:81:70:d7:80:3d:29:66:4f:d1:0e: ac:87:8c:95:0d:b3:d6:21:4d:14:2b:d3:9b:a0:68:08:99:0a: 5d:74:68:4f:be:89:bf:f8:16:be:61:e8:bd:f9:d4:c1:da:21: cd:3f:ad:17:67:35:a0:40:c3:cb:4d:0d:2e:00:34:87:8f:6f: e5:0f:94:15:57:4c:0a:c7:a9:94:d4:e4:42:53:ad:0e:d0:33: 57:dc:16:4b:5e:95:41:d9:e8:6b:45:a0:6e:5c:25:79:87:60: 74:06:75:1d:77:fa:22:54:74:ec:49:b5:fb:a8:b1:92:19:16: b5:36:f1:65:9f:7a:0c:b3:c0:80:89:f6:25:96:ec:7d:07:e3: d2:49:df:27:ff:3a:98:66:0d:96:db:92:9d:41:a8:22:8d:e3: 77:71:7b:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbASpF7aC2FhbGfSAgeKBsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjUwNTExMTcwMDM0WhcNMjUwNTEyMTcwMDM0WjAzMTEwLwYDVQQD Eyg0M2FkOTQyMDI2Y2EwYWZjOTU4NmM1N2VlYmVjYzRmZWNlZWQzMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LAdjoNvDdH1ZpzZ/xwIaZ3EU5p2 4Ssf4Knz2Tt7bEpQehJA/5GGJD44tuwEQdDYpXRWy/BgwXtwSaAfn8l8864HAQ7f pBD8jTX21ZiLyLpl9TxEYEqxr9rwZeevOKjNSVpG1eYz+edBU/UEmcbc5mr5DUga M2tbYMbXtvJAakTe6R5F1cp+B4nzFRQ6I+cJ0TkotRYWN9H+JlOhKu4NjyAG/OV0 MD1rNaFA3D2j+sk4PX+DeedqU+Vi2o398loqPZbcyNKq+93kI3BTk7z1WiciPxnn ZsCRkAoVrJohgn+H+ENKyKnZETcgsJmfWzQR7Br6ySKymyh2D5Mq9xVuCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOtlCAmygr8lYbFfuvsxP7O7TIsMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIAk9kNU 85OtOhkibJKSXX+4pPC9NdkbLxDq2YjQWOlxpyC3H5cVHD+MHip1vjROWeykHzB8 53oAWBj5veyrCArk8QNdsrhjq+FXXlRA1zdM6oWlfYEVYcRb853DjfSZQBKBcNeA PSlmT9EOrIeMlQ2z1iFNFCvTm6BoCJkKXXRoT76Jv/gWvmHovfnUwdohzT+tF2c1 oEDDy00NLgA0h49v5Q+UFVdMCseplNTkQlOtDtAzV9wWS16VQdnoa0WgblwleYdg dAZ1HXf6IlR07Em1+6ixkhkWtTbxZZ96DLPAgIn2JZbsfQfj0knfJ/86mGYNltuS nUGoIo3jd3F7ug== -----END CERTIFICATE-----Generated at Mon May 12 02:14:43 2025 by rpki-client