$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: 6P2Sq+j/jnfH6wim7Lv2N6ogoyGqLfKpvRJbzWCDIjI= Subject key identifier: 17:D0:99:6D:66:53:A6:79:AB:80:61:DC:48:E5:E9:6B:45:60:FE:1B Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 0197CBE04BB3A506302D06BEBFDB34C394FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 15C4 Signing time: Wed 02 Jul 2025 16:02:43 +0000 Manifest this update: Wed 02 Jul 2025 16:02:43 +0000 Manifest next update: Thu 03 Jul 2025 16:02:43 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: O6GE2fDNJbhoSDhVnKJ4r9KaIU9284txrHaoz9RrvEI=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 16:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cb:e0:4b:b3:a5:06:30:2d:06:be:bf:db:34:c3:94:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jul 2 16:02:43 2025 GMT Not After : Jul 3 16:02:43 2025 GMT Subject: CN=17d0996d6653a679ab8061dc48e5e96b4560fe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:ef:c9:bb:96:aa:c9:b5:d3:67:ec:57:01: e8:78:76:60:2a:c2:db:13:d9:83:98:1c:5a:9f:5b: c7:74:81:32:e6:d5:70:5a:80:2d:20:a8:2e:98:50: bd:d2:98:04:3d:01:cb:4a:c2:09:f1:b8:ac:d9:aa: 29:fc:10:bd:98:58:86:80:8f:fa:56:8b:af:58:05: 3d:eb:2e:df:6f:37:f4:d6:55:75:06:00:d1:f1:f4: c1:77:89:40:4a:16:03:f4:54:d7:39:08:c6:e7:97: 78:20:db:36:49:8c:8b:16:b1:12:63:8e:2d:c4:15: e8:69:54:d9:6a:03:cc:91:57:b7:bd:c1:3e:3e:5b: e1:54:e5:98:ec:58:97:ff:6b:aa:b1:c0:57:a3:db: f7:c8:76:8f:f1:eb:68:af:82:f1:7a:eb:aa:1a:ae: 9a:29:de:63:cd:b2:7d:ed:e7:a6:20:74:68:48:a2: a1:75:87:4d:d4:c2:dd:a1:ac:30:92:21:9e:36:6e: 98:86:24:b0:f1:01:7d:80:e3:1e:ba:99:66:99:a1: 7e:f9:46:5a:50:fd:f2:3b:76:75:12:4d:dc:90:18: 4a:e6:06:ff:cf:8c:58:a9:18:7d:9c:19:25:26:19: 3a:f2:0c:9b:e1:8b:64:14:2c:5c:36:56:41:aa:3a: 9f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D0:99:6D:66:53:A6:79:AB:80:61:DC:48:E5:E9:6B:45:60:FE:1B X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d8:26:c5:65:9f:23:42:db:6f:89:69:0b:9c:fc:b8:08:7c: 65:05:d2:24:1b:34:30:2d:e1:6f:15:8e:db:55:20:e6:e7:4d: 14:c9:a2:a0:b1:d3:a1:72:32:ac:89:48:8f:bf:c5:6d:12:5e: 7b:08:e8:c2:2e:46:db:ed:43:9e:24:da:6d:b0:1a:ff:1e:9e: b8:db:03:ac:3d:4a:1b:4a:5e:1d:c9:ab:4c:3d:f0:35:9d:92: b2:d1:b1:e1:ed:75:f6:6a:7e:fd:10:84:7d:61:8d:69:7f:83: 92:eb:77:ce:0c:57:c9:bb:68:32:4c:6d:90:96:fa:b0:87:0e: cf:ba:8d:c8:16:c3:bb:64:33:d8:f3:d4:f9:4f:ec:38:82:1c: db:af:f2:e5:3f:1e:75:ce:93:e5:79:8d:b8:8d:24:73:57:a3: 53:4a:12:a0:9f:18:b7:df:54:58:b2:45:77:4f:e7:a1:bf:14: 7d:1a:e9:bf:92:d4:5e:89:55:81:19:ce:21:18:87:41:02:85: 72:ef:a5:7f:d6:95:5a:2d:90:06:4f:c4:ae:44:30:d1:e8:47: 36:56:95:10:6e:ed:ef:3e:58:26:e7:b9:13:13:08:84:16:82: 75:1e:4e:d9:fa:1d:d6:79:14:fd:44:d4:00:f1:ba:98:1a:d7: 0a:fb:8f:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfL4EuzpQYwLQa+v9s0w5T/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwNzAyMTYwMjQzWhcNMjUwNzAzMTYwMjQzWjAzMTEwLwYDVQQD EygxN2QwOTk2ZDY2NTNhNjc5YWI4MDYxZGM0OGU1ZTk2YjQ1NjBmZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/fvybuWqsm102fsVwHoeHZgKsLb E9mDmBxan1vHdIEy5tVwWoAtIKgumFC90pgEPQHLSsIJ8bis2aop/BC9mFiGgI/6 VouvWAU96y7fbzf01lV1BgDR8fTBd4lAShYD9FTXOQjG55d4INs2SYyLFrESY44t xBXoaVTZagPMkVe3vcE+PlvhVOWY7FiX/2uqscBXo9v3yHaP8etor4LxeuuqGq6a Kd5jzbJ97eemIHRoSKKhdYdN1MLdoawwkiGeNm6YhiSw8QF9gOMeuplmmaF++UZa UP3yO3Z1Ek3ckBhK5gb/z4xYqRh9nBklJhk68gyb4YtkFCxcNlZBqjqf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfQmW1mU6Z5q4Bh3Ejl6WtFYP4bMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtgmxWWf I0Lbb4lpC5z8uAh8ZQXSJBs0MC3hbxWO21Ug5udNFMmioLHToXIyrIlIj7/FbRJe ewjowi5G2+1DniTabbAa/x6euNsDrD1KG0peHcmrTD3wNZ2SstGx4e119mp+/RCE fWGNaX+Dkut3zgxXybtoMkxtkJb6sIcOz7qNyBbDu2Qz2PPU+U/sOIIc26/y5T8e dc6T5XmNuI0kc1ejU0oSoJ8Yt99UWLJFd0/nob8UfRrpv5LUXolVgRnOIRiHQQKF cu+lf9aVWi2QBk/ErkQw0ehHNlaVEG7t7z5YJue5ExMIhBaCdR5O2fod1nkU/UTU APG6mBrXCvuPpQ== -----END CERTIFICATE-----Generated at Thu Jul 3 00:53:46 2025 by rpki-client