$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: QqmEt0OJOqtPNhXcxlLApOZvntxIpGveyqWvHQLqq2U= Subject key identifier: 5B:6E:3D:97:64:1B:11:39:4E:F2:49:33:85:15:3B:59:FA:D4:22:1F Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 0196B7B5EBC3ACA0E84D657D272672515224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 132A Signing time: Sat 10 May 2025 01:01:14 +0000 Manifest this update: Sat 10 May 2025 01:01:14 +0000 Manifest next update: Sun 11 May 2025 01:01:14 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: ieh8LqfEsDTbzOnwohbdFBWeOdHar4LM9/UDllLLjfk=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b7:b5:eb:c3:ac:a0:e8:4d:65:7d:27:26:72:51:52:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: May 10 01:01:14 2025 GMT Not After : May 11 01:01:14 2025 GMT Subject: CN=5b6e3d97641b11394ef2493385153b59fad4221f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:cb:31:d9:70:b2:8f:c9:c8:02:c1:04:95: b2:32:23:18:0d:1d:e7:46:ec:36:f6:cd:ae:c6:7a: 5a:c4:6d:33:02:d1:79:55:85:62:74:f4:4e:62:52: 60:66:a9:1d:7e:34:e8:64:f5:c4:a5:52:a7:af:18: a5:5b:cb:45:97:e7:09:41:57:8e:1f:51:97:ec:ac: 19:c1:92:b3:2b:5a:53:e4:22:ef:84:35:28:57:a1: 9f:31:b4:82:a0:55:27:47:ca:40:de:87:19:a2:f3: 84:a7:ae:0d:27:b8:54:88:84:67:bf:a3:fa:ec:a5: fc:c4:b3:99:5d:42:03:6a:de:e3:76:45:14:73:c1: d1:ac:da:62:ee:fa:0d:54:52:d1:fa:37:9d:3a:4b: 49:5a:17:09:60:0d:a6:c3:d2:e9:21:dd:00:bb:0a: e8:24:fe:a9:b7:59:35:16:df:6c:77:2b:cb:03:3f: db:aa:03:7c:c6:19:d9:08:c2:32:f9:f1:45:b3:6b: f6:ba:f7:f7:e4:35:41:a9:1c:50:32:12:51:d7:61: 11:86:e0:89:04:04:b1:a3:8e:02:60:86:f6:33:47: 3e:9c:f7:50:3b:3c:bf:86:db:cb:ec:08:49:95:29: 90:7d:35:bf:98:79:7b:ae:7c:e1:1e:90:23:b6:aa: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6E:3D:97:64:1B:11:39:4E:F2:49:33:85:15:3B:59:FA:D4:22:1F X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:77:10:e2:30:be:63:20:0a:0f:91:a4:2e:47:93:f4:d4:a4: 15:ce:0a:6e:31:6a:c5:17:e1:fa:c9:55:fc:89:53:d7:fb:fb: dc:ef:e7:a8:84:94:80:32:9d:1f:0e:43:47:35:2a:e7:40:7e: da:16:88:93:8e:a6:38:94:13:d6:53:c1:60:8a:e0:14:f2:05: ea:f0:45:1a:21:9c:93:fd:32:bc:1d:28:1e:49:e6:90:46:de: 26:68:9e:11:77:92:b0:a2:10:90:38:a5:e9:e0:5b:95:54:19: b6:ed:d6:0b:96:57:e2:6a:97:cd:38:b1:29:c3:ca:92:31:70: a7:94:bd:97:a0:c0:30:76:eb:2c:92:2d:4d:9a:bc:6b:ba:48: aa:67:c1:71:aa:e0:52:51:be:35:d4:0e:a7:b2:9e:8b:ad:f6: 9f:c5:60:4c:a5:f7:9c:4e:25:83:c3:55:36:7f:f5:da:fa:15: 83:ad:ff:81:47:63:3d:ba:57:fa:24:3f:80:3c:81:ee:e3:ef: 23:5c:71:1b:95:d5:37:d1:18:5a:60:cf:7e:49:ed:77:ee:0c: 8f:b4:ad:c7:3f:39:1e:07:58:ce:c2:d3:ed:fd:14:b8:41:83: dc:1e:55:75:96:ac:28:2f:bc:4e:00:98:68:6f:27:ba:df:ee: a5:20:40:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa3tevDrKDoTWV9JyZyUVIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUwNTEwMDEwMTE0WhcNMjUwNTExMDEwMTE0WjAzMTEwLwYDVQQD Eyg1YjZlM2Q5NzY0MWIxMTM5NGVmMjQ5MzM4NTE1M2I1OWZhZDQyMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFPLMdlwso/JyALBBJWyMiMYDR3n Ruw29s2uxnpaxG0zAtF5VYVidPROYlJgZqkdfjToZPXEpVKnrxilW8tFl+cJQVeO H1GX7KwZwZKzK1pT5CLvhDUoV6GfMbSCoFUnR8pA3ocZovOEp64NJ7hUiIRnv6P6 7KX8xLOZXUIDat7jdkUUc8HRrNpi7voNVFLR+jedOktJWhcJYA2mw9LpId0Auwro JP6pt1k1Ft9sdyvLAz/bqgN8xhnZCMIy+fFFs2v2uvf35DVBqRxQMhJR12ERhuCJ BASxo44CYIb2M0c+nPdQOzy/htvL7AhJlSmQfTW/mHl7rnzhHpAjtqrzvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtuPZdkGxE5TvJJM4UVO1n61CIfMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAencQ4jC+ YyAKD5GkLkeT9NSkFc4KbjFqxRfh+slV/IlT1/v73O/nqISUgDKdHw5DRzUq50B+ 2haIk46mOJQT1lPBYIrgFPIF6vBFGiGck/0yvB0oHknmkEbeJmieEXeSsKIQkDil 6eBblVQZtu3WC5ZX4mqXzTixKcPKkjFwp5S9l6DAMHbrLJItTZq8a7pIqmfBcarg UlG+NdQOp7Kei632n8VgTKX3nE4lg8NVNn/12voVg63/gUdjPbpX+iQ/gDyB7uPv I1xxG5XVN9EYWmDPfkntd+4Mj7Stxz85HgdYzsLT7f0UuEGD3B5VdZasKC+8TgCY aG8nut/upSBA6g== -----END CERTIFICATE-----Generated at Sat May 10 04:42:02 2025 by rpki-client