$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: gWBHD1yT8F7Oqa+VFLERTJFsGSpi0ZAPqWr+x74+iBU= Subject key identifier: 22:ED:3D:F1:07:89:89:ED:77:BA:EC:85:1B:00:AE:BB:65:87:52:7E Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 0196C502FB25A0503AE0AF2222A60831557D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 153C Signing time: Mon 12 May 2025 15:00:28 +0000 Manifest this update: Mon 12 May 2025 15:00:28 +0000 Manifest next update: Tue 13 May 2025 15:00:28 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: jwy+CJWoNc5f1kyGyvowLmO5y+8m9yb0qma9QKmE3KY=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 14:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c5:02:fb:25:a0:50:3a:e0:af:22:22:a6:08:31:55:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: May 12 15:00:28 2025 GMT Not After : May 13 15:00:28 2025 GMT Subject: CN=22ed3df1078989ed77baec851b00aebb6587527e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:ff:fe:ac:ee:d2:e0:bf:30:82:94:cb:a4: 54:a8:60:5c:6c:80:39:b9:da:fd:2f:4a:1b:67:90: 9a:8b:82:cf:3b:2c:e2:97:eb:33:58:34:5b:f0:ae: 9a:92:97:85:f9:fe:53:45:83:3f:1c:b3:65:b7:4d: 47:04:5a:9f:f6:5e:98:6a:08:4c:b2:25:a0:d0:fc: f4:d6:73:dc:88:9d:7c:8d:a1:b9:a9:43:8b:be:14: 7d:94:fb:0a:12:3f:60:25:79:e3:fe:cc:2d:f3:3f: 3d:a2:a7:75:37:93:70:a3:0e:01:7c:bc:98:1f:23: 46:89:63:86:d1:63:df:7a:a8:be:34:92:ed:73:8c: d5:27:cb:42:69:e2:e6:a9:20:9d:f2:c5:5a:18:25: 5a:63:ce:a3:79:da:ab:81:13:0b:04:90:ba:65:e4: 79:5f:34:a2:31:67:45:f0:cd:37:7a:f0:1e:c6:0d: d6:2e:9e:a0:80:0d:d6:10:0b:20:6c:83:70:4a:cf: 2c:a5:ec:14:5a:f8:92:66:5b:bd:15:9b:45:6f:48: e2:79:53:04:e3:de:81:ba:48:4b:a6:95:bf:74:c2: 43:44:77:8b:f4:aa:31:99:5f:a5:93:1c:68:ed:42: bf:05:33:89:3e:21:6b:71:e8:71:18:33:a7:25:0c: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:ED:3D:F1:07:89:89:ED:77:BA:EC:85:1B:00:AE:BB:65:87:52:7E X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e3:54:37:22:19:1e:ad:ee:f1:0a:0c:de:ad:2d:0c:dc:d2: 8e:c8:ef:bf:c5:06:7d:f0:97:c0:83:a7:4e:f1:20:d1:67:05: 70:8b:3f:75:d6:d9:45:d0:c6:f5:04:e9:34:60:00:f5:46:d5: fa:1e:68:6a:4f:f0:9b:b8:e2:c9:1b:4a:56:4b:d8:73:e8:f2: 44:5d:86:a2:ca:c8:cb:4a:71:9f:9b:ba:18:08:6b:40:8a:cd: 9e:69:b8:32:53:3f:45:e7:0e:18:48:43:9c:1c:c5:29:47:6a: 85:6f:20:c6:b9:44:d6:b0:50:cb:59:49:ea:3e:f3:4d:84:48: 91:d2:45:7c:c5:1f:fc:4d:9f:8a:02:5a:a3:3c:db:d7:40:35: a1:ca:1f:1b:13:06:2c:8a:95:e0:76:23:2c:42:6b:ca:fe:eb: b5:7f:87:63:5d:ab:6e:aa:26:68:aa:e1:de:f1:04:48:3d:00: 56:d9:26:86:51:c5:7b:20:34:7f:b7:ef:ba:8e:6c:2c:49:a4: ae:b3:72:16:3a:fa:59:ea:0f:ef:1b:d5:ae:17:c2:46:27:46: d1:c1:fb:2a:04:d9:f3:a2:6d:29:10:34:16:97:86:2d:89:d4: a0:28:0c:0e:99:5b:a0:c7:ef:dd:27:94:53:2a:5a:ca:b8:90: 32:d1:44:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbFAvsloFA64K8iIqYIMVV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwNTEyMTUwMDI4WhcNMjUwNTEzMTUwMDI4WjAzMTEwLwYDVQQD EygyMmVkM2RmMTA3ODk4OWVkNzdiYWVjODUxYjAwYWViYjY1ODc1MjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwH//qzu0uC/MIKUy6RUqGBcbIA5 udr9L0obZ5Cai4LPOyzil+szWDRb8K6akpeF+f5TRYM/HLNlt01HBFqf9l6YaghM siWg0Pz01nPciJ18jaG5qUOLvhR9lPsKEj9gJXnj/swt8z89oqd1N5Nwow4BfLyY HyNGiWOG0WPfeqi+NJLtc4zVJ8tCaeLmqSCd8sVaGCVaY86jedqrgRMLBJC6ZeR5 XzSiMWdF8M03evAexg3WLp6ggA3WEAsgbINwSs8spewUWviSZlu9FZtFb0jieVME 496BukhLppW/dMJDRHeL9KoxmV+lkxxo7UK/BTOJPiFrcehxGDOnJQw4uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLtPfEHiYntd7rshRsArrtlh1J+MB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgONUNyIZ Hq3u8QoM3q0tDNzSjsjvv8UGffCXwIOnTvEg0WcFcIs/ddbZRdDG9QTpNGAA9UbV +h5oak/wm7jiyRtKVkvYc+jyRF2GosrIy0pxn5u6GAhrQIrNnmm4MlM/RecOGEhD nBzFKUdqhW8gxrlE1rBQy1lJ6j7zTYRIkdJFfMUf/E2figJaozzb10A1ocofGxMG LIqV4HYjLEJryv7rtX+HY12rbqomaKrh3vEESD0AVtkmhlHFeyA0f7fvuo5sLEmk rrNyFjr6WeoP7xvVrhfCRidG0cH7KgTZ86JtKRA0FpeGLYnUoCgMDplboMfv3SeU UypayriQMtFE2g== -----END CERTIFICATE-----Generated at Mon May 12 19:31:30 2025 by rpki-client