$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: CQhuxiYbP/1AlbTa1HkJ84MsSYOhQh/5L/EU+z7C5kM= Subject key identifier: 69:7E:4B:77:A3:4E:CA:C0:91:1B:C4:D9:89:BA:A9:52:52:71:1A:94 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 0196C83AED889FC05CCE63595C56F1A57A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 10A1 Signing time: Tue 13 May 2025 06:00:27 +0000 Manifest this update: Tue 13 May 2025 06:00:27 +0000 Manifest next update: Wed 14 May 2025 06:00:27 +0000 Files and hashes: 1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=) 2: 1-SD58DvCs7ya-7E2FpTU4fI87Ow.roa (hash: HUsbSacmCFroTzSN4bvsRHu/98AfJF8ghdyReaEsmzs=) 3: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=) 4: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=) 5: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=) 6: DthOD_kxSHI_yAmMQURpyHdQPX8.roa (hash: 8Uu1LNAmsaRUJ+QbM5XSgI4iAjEHIEeippuJeVtKzew=) 7: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: 9Q7A4r6FIyefG4VeNHa4qZLJZcMLPKCaRXphhlPXvR0=) 8: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=) 9: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=) 10: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=) 11: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=) 12: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=) 13: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=) 14: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=) 15: _2Z2DCyP8AoFTrwYYnrTE8duSKk.roa (hash: 9BjH2YLT3BThs3wwk+jwBx3zqx+MMwKVuJzuVbVoQIE=) 16: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=) 17: hqAa-HGl9YYSVOAZse-mATGGJYM.roa (hash: KOeloEwv9QnlDfRaZ27Ece4epTiFo9JQL3WkmnmhezQ=) 18: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=) 19: zBCnMJFWnMXKgz_j_g57vjHzFUk.roa (hash: 4csBVOwSYwoxyrDsoROei21hUJZS/HdqdCvpTaBSh6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c8:3a:ed:88:9f:c0:5c:ce:63:59:5c:56:f1:a5:7a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: May 13 06:00:27 2025 GMT Not After : May 14 06:00:27 2025 GMT Subject: CN=697e4b77a34ecac0911bc4d989baa95252711a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ec:48:d1:76:21:cd:36:ee:87:e2:33:b9:ef: 77:32:0a:6c:29:1b:48:e8:1d:81:13:a9:97:5e:98: 7c:32:58:a6:02:f7:81:25:13:7b:a4:ba:31:9d:ea: 7c:5f:7d:e4:38:6c:9d:dd:14:f6:26:48:3c:bd:79: f3:40:12:5f:1a:f8:28:d7:b9:01:c9:39:0b:78:42: c1:05:e3:aa:7d:7c:3d:b8:41:b4:3b:4a:94:83:3d: be:77:49:0f:13:07:79:87:ef:48:5c:83:58:20:c6: 93:a0:8e:62:7a:04:e6:25:0d:75:48:4f:08:9a:c5: 10:12:b6:d1:36:42:92:90:70:b0:7c:d5:32:69:ff: c0:24:23:1e:3c:81:1c:66:c3:f4:51:a4:72:ff:22: 34:69:13:9c:76:16:13:21:58:0b:88:91:08:8f:ec: a1:bd:c6:f0:71:6a:1a:d9:6e:8d:6d:f4:59:68:88: b8:08:1e:ea:b1:ef:57:a6:49:d7:81:52:54:b9:f8: 32:cc:61:cd:12:af:80:80:a9:1d:c1:38:a1:b2:6b: 6b:d7:27:17:ea:42:0f:03:cc:49:f3:97:6a:54:3a: 5b:d0:5f:27:8c:ba:b7:04:a7:e7:98:36:4f:f8:af: 6a:64:43:e6:f7:b0:24:70:07:f3:3e:b6:30:e4:d1: 35:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7E:4B:77:A3:4E:CA:C0:91:1B:C4:D9:89:BA:A9:52:52:71:1A:94 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:29:cc:b9:60:9c:2c:b4:9d:c5:ee:ad:57:33:8e:45:10:1f: 9b:d7:b0:fb:5f:b5:08:81:3c:c3:33:27:ae:fe:8d:2e:9c:23: 64:72:49:ae:20:99:22:90:5a:ab:03:42:3c:02:71:ec:b1:f3: 57:1d:90:3d:ce:83:b3:76:ce:50:12:c1:ae:87:ca:80:b9:c6: 97:44:24:5f:32:2a:2f:62:fc:ec:8d:dd:77:76:fc:11:eb:e4: 52:ea:4c:ab:d1:ab:fc:22:d0:42:3a:13:ef:6a:c0:61:ab:fe: 72:80:27:92:8a:8d:31:ec:9a:5c:d3:0a:e2:53:15:90:cd:82: e0:27:b8:d7:fa:ac:4b:8f:b9:97:ab:bf:9d:71:f8:17:84:18: 40:3c:1c:8f:f6:bd:59:79:68:85:3b:ae:52:01:de:2b:59:82: b0:59:73:67:2e:74:c9:05:f4:e4:a6:15:cb:ac:b6:7c:95:5e: 47:ec:a7:b1:25:7b:0f:04:25:47:f6:99:83:29:75:a8:59:c9: 37:33:19:06:10:6d:ae:08:15:be:e4:f5:82:a2:f2:bc:f9:f2: 13:f9:29:52:a8:1b:7f:1c:c2:07:cd:6f:3c:b3:e3:e9:db:0c: da:5b:32:9a:f0:5b:e4:03:77:a3:2f:d4:dc:2b:31:a1:95:d2: a4:8c:a0:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbIOu2In8BczmNZXFbxpXpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjUwNTEzMDYwMDI3WhcNMjUwNTE0MDYwMDI3WjAzMTEwLwYDVQQD Eyg2OTdlNGI3N2EzNGVjYWMwOTExYmM0ZDk4OWJhYTk1MjUyNzExYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OxI0XYhzTbuh+Izue93MgpsKRtI 6B2BE6mXXph8MlimAveBJRN7pLoxnep8X33kOGyd3RT2Jkg8vXnzQBJfGvgo17kB yTkLeELBBeOqfXw9uEG0O0qUgz2+d0kPEwd5h+9IXINYIMaToI5iegTmJQ11SE8I msUQErbRNkKSkHCwfNUyaf/AJCMePIEcZsP0UaRy/yI0aROcdhYTIVgLiJEIj+yh vcbwcWoa2W6NbfRZaIi4CB7qse9XpknXgVJUufgyzGHNEq+AgKkdwTihsmtr1ycX 6kIPA8xJ85dqVDpb0F8njLq3BKfnmDZP+K9qZEPm97AkcAfzPrYw5NE1hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGl+S3ejTsrAkRvE2Ym6qVJScRqUMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGynMuWCc LLSdxe6tVzOORRAfm9ew+1+1CIE8wzMnrv6NLpwjZHJJriCZIpBaqwNCPAJx7LHz Vx2QPc6Ds3bOUBLBrofKgLnGl0QkXzIqL2L87I3dd3b8EevkUupMq9Gr/CLQQjoT 72rAYav+coAnkoqNMeyaXNMK4lMVkM2C4Ce41/qsS4+5l6u/nXH4F4QYQDwcj/a9 WXlohTuuUgHeK1mCsFlzZy50yQX05KYVy6y2fJVeR+ynsSV7DwQlR/aZgyl1qFnJ NzMZBhBtrggVvuT1gqLyvPnyE/kpUqgbfxzCB81vPLPj6dsM2lsymvBb5AN3oy/U 3CsxoZXSpIygYQ== -----END CERTIFICATE-----Generated at Tue May 13 15:32:45 2025 by rpki-client