$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: mHn7ilZMuWem5lK/1Wvvv6LoZw1gujOGySfrR2IxaKU= Subject key identifier: 55:2E:2C:13:A6:F3:F0:57:56:6F:BF:06:CB:8E:37:1C:2E:86:04:24 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 0197CCF14D7BBAA3BA7506622D565F0B7FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 1128 Signing time: Wed 02 Jul 2025 21:00:55 +0000 Manifest this update: Wed 02 Jul 2025 21:00:55 +0000 Manifest next update: Thu 03 Jul 2025 21:00:55 +0000 Files and hashes: 1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=) 2: 1-SD58DvCs7ya-7E2FpTU4fI87Ow.roa (hash: HUsbSacmCFroTzSN4bvsRHu/98AfJF8ghdyReaEsmzs=) 3: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=) 4: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=) 5: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=) 6: DthOD_kxSHI_yAmMQURpyHdQPX8.roa (hash: 8Uu1LNAmsaRUJ+QbM5XSgI4iAjEHIEeippuJeVtKzew=) 7: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: vBl1CEUl20L8j70JWkiJn0E+fC42EVR/7fxem77FKPc=) 8: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=) 9: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=) 10: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=) 11: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=) 12: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=) 13: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=) 14: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=) 15: _2Z2DCyP8AoFTrwYYnrTE8duSKk.roa (hash: 9BjH2YLT3BThs3wwk+jwBx3zqx+MMwKVuJzuVbVoQIE=) 16: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=) 17: hqAa-HGl9YYSVOAZse-mATGGJYM.roa (hash: KOeloEwv9QnlDfRaZ27Ece4epTiFo9JQL3WkmnmhezQ=) 18: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=) 19: zBCnMJFWnMXKgz_j_g57vjHzFUk.roa (hash: 4csBVOwSYwoxyrDsoROei21hUJZS/HdqdCvpTaBSh6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 19:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cc:f1:4d:7b:ba:a3:ba:75:06:62:2d:56:5f:0b:7f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jul 2 21:00:55 2025 GMT Not After : Jul 3 21:00:55 2025 GMT Subject: CN=552e2c13a6f3f057566fbf06cb8e371c2e860424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:e2:4d:87:25:02:68:8f:3a:8c:0c:98:d4: f4:7f:f8:98:80:dd:8f:7b:f2:d5:e6:6e:56:d8:52: da:b3:97:7d:a8:82:09:d0:19:89:14:b0:c2:9f:c8: 17:a3:6b:b1:97:8b:6e:c2:eb:66:84:d7:d5:40:16: ca:f8:0e:04:be:0f:74:e6:f7:c5:cf:fe:28:7d:78: c7:17:5a:eb:47:c3:52:44:bb:74:20:17:b0:2f:7d: d6:9e:ad:3b:a1:e3:90:1d:82:a1:2e:c7:b8:93:c9: 7a:1f:e8:a8:7f:b5:d2:ab:22:a6:53:39:c2:3e:38: 45:f7:2d:9e:a7:f3:c0:18:9b:fc:02:1e:db:1e:24: a4:e3:21:22:68:66:4d:f0:f0:17:3c:6f:f6:99:24: e9:a4:da:3d:c3:f3:bb:56:79:79:31:94:6b:a1:f2: 4d:c4:2e:a4:35:b7:4a:0e:8b:58:c0:df:28:81:62: 99:c3:05:4b:ea:ec:c2:53:5b:b5:fe:34:93:2b:59: 67:9d:7e:83:fd:f8:20:12:8f:1a:e2:d6:d4:19:b5: 97:49:03:d0:41:3f:71:11:65:28:ff:0e:ad:5d:80: 60:ac:b8:1d:85:6d:58:22:d3:9b:58:11:53:17:4f: b3:43:15:75:1e:fd:28:54:f8:4e:5c:55:ad:be:6c: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2E:2C:13:A6:F3:F0:57:56:6F:BF:06:CB:8E:37:1C:2E:86:04:24 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:70:e0:35:b2:3f:5b:a4:9c:11:2e:69:ae:31:89:4e:f8:44: 99:75:56:71:16:a5:99:55:54:21:3f:c4:6b:41:b2:af:bb:15: 06:78:67:b2:cc:2e:71:5e:dd:55:d0:c1:fa:eb:3e:7b:d0:61: ed:a4:49:99:4c:f0:61:05:be:60:fc:b9:53:1f:4b:36:67:d5: 5f:5d:68:c4:3c:56:57:af:5f:f2:ef:88:78:02:62:f1:66:0d: 7f:70:66:5a:20:ba:ae:87:e3:d5:59:70:1e:1d:f3:3c:73:8e: 7e:82:60:f5:c3:75:b0:c9:83:93:49:98:02:1f:e8:3a:cc:0f: fd:22:a0:0f:1b:58:fa:a6:7f:f9:08:a0:3f:68:0e:dc:d5:83: bf:66:61:f2:9a:a5:0f:a9:37:03:b5:2d:25:96:e8:67:ec:13: 4c:f3:46:a5:05:09:f2:4f:7e:f6:5a:9f:bf:3b:21:24:a9:7d: b8:75:5c:1e:ff:51:fd:7b:8e:75:93:7f:61:7d:64:cd:3b:19: 77:63:52:0f:ef:97:7e:0e:1c:bb:64:c6:d9:0e:dd:e6:4c:61: ad:db:3a:37:8a:d5:59:a7:b1:f0:18:70:bd:ef:3c:1a:d7:21: 66:cf:8e:73:e3:06:51:1a:05:9b:ae:48:6f:b3:72:5a:e5:ff: 86:c5:52:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfM8U17uqO6dQZiLVZfC3/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjUwNzAyMjEwMDU1WhcNMjUwNzAzMjEwMDU1WjAzMTEwLwYDVQQD Eyg1NTJlMmMxM2E2ZjNmMDU3NTY2ZmJmMDZjYjhlMzcxYzJlODYwNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSHiTYclAmiPOowMmNT0f/iYgN2P e/LV5m5W2FLas5d9qIIJ0BmJFLDCn8gXo2uxl4tuwutmhNfVQBbK+A4Evg905vfF z/4ofXjHF1rrR8NSRLt0IBewL33Wnq07oeOQHYKhLse4k8l6H+iof7XSqyKmUznC PjhF9y2ep/PAGJv8Ah7bHiSk4yEiaGZN8PAXPG/2mSTppNo9w/O7Vnl5MZRrofJN xC6kNbdKDotYwN8ogWKZwwVL6uzCU1u1/jSTK1lnnX6D/fggEo8a4tbUGbWXSQPQ QT9xEWUo/w6tXYBgrLgdhW1YItObWBFTF0+zQxV1Hv0oVPhOXFWtvmzPGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUuLBOm8/BXVm+/BsuONxwuhgQkMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXDgNbI/ W6ScES5prjGJTvhEmXVWcRalmVVUIT/Ea0Gyr7sVBnhnsswucV7dVdDB+us+e9Bh 7aRJmUzwYQW+YPy5Ux9LNmfVX11oxDxWV69f8u+IeAJi8WYNf3BmWiC6rofj1Vlw Hh3zPHOOfoJg9cN1sMmDk0mYAh/oOswP/SKgDxtY+qZ/+QigP2gO3NWDv2Zh8pql D6k3A7UtJZboZ+wTTPNGpQUJ8k9+9lqfvzshJKl9uHVcHv9R/XuOdZN/YX1kzTsZ d2NSD++Xfg4cu2TG2Q7d5kxhrds6N4rVWaex8Bhwve88GtchZs+Oc+MGURoFm65I b7NyWuX/hsVS6w== -----END CERTIFICATE-----Generated at Wed Jul 2 22:36:09 2025 by rpki-client