$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json) Hash identifier: imQzD0OuKNqLzuOusF7yPfOJM32nxxc7UmrEpGAuOIk= Subject key identifier: 57:4B:2E:A3:AF:5F:8F:6A:4B:F5:82:21:B4:28:30:33:E6:5C:97:8B Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 0197BA7D418ACE2E67B350D91D1151E132C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft Manifest number: 13B0 Signing time: Sun 29 Jun 2025 07:01:00 +0000 Manifest this update: Sun 29 Jun 2025 07:01:00 +0000 Manifest next update: Mon 30 Jun 2025 07:01:00 +0000 Files and hashes: 1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=) 2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=) 3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=) 4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=) 5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=) 6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=) 7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=) 8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=) 9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: vWphfcoHlGXbLSdU22ZV961F6zP/QGw0lt7Nv9i6c6E=) 10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ba:7d:41:8a:ce:2e:67:b3:50:d9:1d:11:51:e1:32:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Jun 29 07:01:00 2025 GMT Not After : Jun 30 07:01:00 2025 GMT Subject: CN=574b2ea3af5f8f6a4bf58221b4283033e65c978b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:14:fd:d6:c2:c4:59:40:9d:40:e5:55:a6: 8f:4d:7a:c2:56:d0:ca:55:0d:e7:b5:db:2f:32:21: be:fb:62:38:19:a7:a2:59:a3:72:86:3d:77:07:6d: 91:e7:9f:89:ba:8e:3c:07:7b:84:a9:03:c0:a4:22: dd:99:85:f1:ba:45:86:60:99:80:ce:d3:c8:06:fd: dd:d0:4d:87:4b:24:ef:d9:17:6a:d2:3e:13:a4:ef: fe:78:68:ba:af:5b:02:a2:d2:dc:56:3b:04:c9:53: 50:45:a1:a5:cc:25:52:b3:07:76:ed:b0:ba:b0:03: fb:14:7f:71:28:52:b7:5d:c8:71:e4:90:5b:a9:c8: 15:70:a4:88:0e:93:56:7c:c2:a7:b8:12:67:f8:c5: 03:7e:9d:1f:0a:10:f3:5a:f9:4f:68:69:95:37:95: be:35:54:0b:a3:25:0d:48:ba:a4:4d:2b:7b:13:f7: bf:58:2e:80:53:86:30:0e:ec:2e:b3:01:02:b4:3b: d1:09:60:a9:22:96:ff:7e:0c:d9:37:35:98:52:e6: 22:ad:8f:d7:71:37:f1:19:34:b7:0a:b7:61:75:87: b9:1e:3e:49:72:86:55:a0:6a:ce:e2:bf:60:71:6d: 33:5f:82:1e:ef:eb:2c:44:10:01:34:03:47:c0:9e: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4B:2E:A3:AF:5F:8F:6A:4B:F5:82:21:B4:28:30:33:E6:5C:97:8B X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:73:fb:24:d5:ce:7a:3e:86:32:fd:26:39:5c:3a:2c:c0:5f: ef:21:a7:89:f7:2a:13:1d:35:b1:8a:e2:a6:d0:82:43:a7:18: 6d:f3:47:9b:ad:d1:6e:8d:64:e2:f1:20:00:99:e8:3e:e3:b8: ac:ed:cc:36:7e:c7:c6:c2:c1:96:f2:08:3a:85:b2:3f:69:56: a8:b8:62:7e:e8:15:08:5b:c4:6f:d1:9d:47:2c:f9:46:5a:fd: 9d:8f:30:a3:49:e9:5a:8d:20:09:c4:76:d5:47:ae:5c:57:87: c0:9c:37:bd:90:8d:ee:e7:0b:c4:3d:ba:54:fb:c6:8b:9a:6a: eb:20:5f:e4:68:86:66:bd:c4:8b:39:0e:26:4f:31:22:d0:b6: 74:d6:58:fa:96:d4:81:91:b9:34:d8:eb:4c:42:db:c0:c8:60: 0b:28:60:f7:d4:a2:33:c1:d0:fc:d6:78:5f:f2:c6:c5:76:72: 1b:49:85:ff:57:64:a0:42:f5:89:93:7d:b6:e2:ce:4a:c4:dd: e8:b1:3c:4f:07:47:c5:f0:b5:81:0c:19:94:90:c8:fc:2b:56: 64:84:5a:c0:4e:98:36:25:04:8d:a7:24:e6:1a:43:60:a5:16: 14:40:99:09:a9:f5:b2:5c:8c:47:8b:c9:64:24:ed:12:62:6e: 9a:5f:37:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe6fUGKzi5ns1DZHRFR4TLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjUwNjI5MDcwMTAwWhcNMjUwNjMwMDcwMTAwWjAzMTEwLwYDVQQD Eyg1NzRiMmVhM2FmNWY4ZjZhNGJmNTgyMjFiNDI4MzAzM2U2NWM5NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0cU/dbCxFlAnUDlVaaPTXrCVtDK VQ3ntdsvMiG++2I4GaeiWaNyhj13B22R55+Juo48B3uEqQPApCLdmYXxukWGYJmA ztPIBv3d0E2HSyTv2Rdq0j4TpO/+eGi6r1sCotLcVjsEyVNQRaGlzCVSswd27bC6 sAP7FH9xKFK3Xchx5JBbqcgVcKSIDpNWfMKnuBJn+MUDfp0fChDzWvlPaGmVN5W+ NVQLoyUNSLqkTSt7E/e/WC6AU4YwDuwuswECtDvRCWCpIpb/fgzZNzWYUuYirY/X cTfxGTS3CrdhdYe5Hj5JcoZVoGrO4r9gcW0zX4Ie7+ssRBABNANHwJ66DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdLLqOvX49qS/WCIbQoMDPmXJeLMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHP7JNXO ej6GMv0mOVw6LMBf7yGnifcqEx01sYriptCCQ6cYbfNHm63Rbo1k4vEgAJnoPuO4 rO3MNn7HxsLBlvIIOoWyP2lWqLhifugVCFvEb9GdRyz5Rlr9nY8wo0npWo0gCcR2 1UeuXFeHwJw3vZCN7ucLxD26VPvGi5pq6yBf5GiGZr3EizkOJk8xItC2dNZY+pbU gZG5NNjrTELbwMhgCyhg99SiM8HQ/NZ4X/LGxXZyG0mF/1dkoEL1iZN9tuLOSsTd 6LE8TwdHxfC1gQwZlJDI/CtWZIRawE6YNiUEjack5hpDYKUWFECZCan1slyMR4vJ ZCTtEmJuml83LA== -----END CERTIFICATE-----Generated at Sun Jun 29 09:28:43 2025 by rpki-client