$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: RzTConEPiARLuvW/z8ceEXmBc56G1Pf/1c6Rh689B2k= Subject key identifier: 65:EF:8D:A7:E3:AF:91:6C:5E:BE:0F:22:64:12:CF:30:74:25:88:4E Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 0196B8FF17DE896D3C4342EB36204155AC6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 01CD Signing time: Sat 10 May 2025 07:00:47 +0000 Manifest this update: Sat 10 May 2025 07:00:47 +0000 Manifest next update: Sun 11 May 2025 07:00:47 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 4: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 5: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 11: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (hash: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: QNqAaRvM2msUDMDwqlz2Vl4ZR7WEeqOpiOTbptf79BQ=) 19: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 20: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 21: rLFXbl__3TAOb3S5Cx0KvKn5se8.roa (hash: JoWfelx8Wab0+mon7O7zO9ngmwLQkIC05SIGqXCeWe8=) 22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:ff:17:de:89:6d:3c:43:42:eb:36:20:41:55:ac:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: May 10 07:00:47 2025 GMT Not After : May 11 07:00:47 2025 GMT Subject: CN=65ef8da7e3af916c5ebe0f226412cf307425884e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:c5:68:bf:3a:ae:33:80:c8:ff:e7:d0:6e: fe:92:41:dc:3e:98:55:86:c7:b2:1e:37:ad:2d:b6: 93:7b:83:46:2f:b2:b4:9f:c9:95:d6:fe:91:51:92: ec:95:a9:22:fe:9c:fe:07:91:c3:3b:a4:da:ae:b5: 82:74:35:5d:47:33:16:f7:09:6d:bf:7d:59:00:dc: 66:2a:af:30:d6:9e:f1:49:6a:a8:99:08:f7:a7:ca: 38:8b:01:da:c4:f1:ee:dc:7c:47:67:65:f3:f5:09: c0:8c:ad:ab:bb:0e:af:d6:46:49:f2:0e:37:e5:33: e1:cc:85:1c:80:c3:b7:6c:52:b1:2a:03:02:1c:aa: fb:38:e9:c3:de:51:0e:52:0b:7e:56:45:e1:f7:18: b9:26:51:36:9b:2a:3d:b6:cf:63:ff:c0:27:f9:46: e4:42:07:27:a2:a1:02:62:f0:91:64:3a:9d:e7:ec: e0:4b:46:71:0a:2a:ec:b1:9f:ab:be:a9:86:2b:9c: a2:59:af:47:1b:be:72:3f:56:1b:74:6a:6e:ae:c3: b2:0f:8e:1a:df:db:1d:be:3d:c7:ad:6f:be:6d:56: 72:f4:6d:67:71:84:cb:5f:73:ea:cb:bd:d1:47:4c: 4e:b8:47:8c:ee:d2:51:b3:d7:29:fa:00:9c:bb:05: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EF:8D:A7:E3:AF:91:6C:5E:BE:0F:22:64:12:CF:30:74:25:88:4E X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:62:e4:bb:69:21:00:1d:ff:4e:ba:58:c3:04:9a:9f:e5:60: ef:0f:14:02:ae:78:41:cf:1f:ce:9c:c6:59:f8:4a:24:37:02: 5b:af:51:a9:a8:18:26:2a:33:d5:66:91:cc:50:be:6e:1d:7d: 40:34:12:84:45:2e:58:4e:eb:3e:77:09:42:c2:f0:85:10:54: 76:44:05:e5:bd:ce:53:cd:27:1a:7b:d3:9a:62:0e:3e:f8:c8: 22:9a:d0:55:90:08:70:9c:3d:75:fa:ab:3e:c7:98:fa:f7:13: 33:ce:81:38:ad:b8:fd:af:cb:7a:e2:18:3f:fd:c3:06:aa:90: 7f:bd:aa:80:51:17:e8:89:96:2b:51:9d:16:ec:48:06:7b:08: ce:d2:2b:4f:a0:b8:78:c7:bf:ea:2f:87:5f:b5:45:82:56:28: 8c:00:7a:3d:e8:c6:ee:95:cb:49:d8:c2:f5:a9:e2:b6:82:91: db:1f:87:1f:ba:fc:f9:df:d8:a5:80:20:df:3d:27:e0:99:10: 95:2e:b0:95:52:a1:87:23:e0:81:4a:ba:73:90:b5:a8:17:fb: c8:b8:67:c1:75:5e:91:31:4a:24:a0:f8:6c:6b:e5:06:cc:41: 6d:20:01:dd:11:46:5f:5f:d8:77:50:bf:a4:d5:8f:9f:32:07: 48:a3:ef:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4/xfeiW08Q0LrNiBBVaxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwNTEwMDcwMDQ3WhcNMjUwNTExMDcwMDQ3WjAzMTEwLwYDVQQD Eyg2NWVmOGRhN2UzYWY5MTZjNWViZTBmMjI2NDEyY2YzMDc0MjU4ODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWzFaL86rjOAyP/n0G7+kkHcPphV hseyHjetLbaTe4NGL7K0n8mV1v6RUZLslaki/pz+B5HDO6TarrWCdDVdRzMW9wlt v31ZANxmKq8w1p7xSWqomQj3p8o4iwHaxPHu3HxHZ2Xz9QnAjK2ruw6v1kZJ8g43 5TPhzIUcgMO3bFKxKgMCHKr7OOnD3lEOUgt+VkXh9xi5JlE2myo9ts9j/8An+Ubk QgcnoqECYvCRZDqd5+zgS0ZxCirssZ+rvqmGK5yiWa9HG75yP1YbdGpursOyD44a 39sdvj3HrW++bVZy9G1ncYTLX3Pqy73RR0xOuEeM7tJRs9cp+gCcuwX39wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXvjafjr5FsXr4PImQSzzB0JYhOMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGLku2kh AB3/TrpYwwSan+Vg7w8UAq54Qc8fzpzGWfhKJDcCW69RqagYJioz1WaRzFC+bh19 QDQShEUuWE7rPncJQsLwhRBUdkQF5b3OU80nGnvTmmIOPvjIIprQVZAIcJw9dfqr PseY+vcTM86BOK24/a/LeuIYP/3DBqqQf72qgFEX6ImWK1GdFuxIBnsIztIrT6C4 eMe/6i+HX7VFglYojAB6PejG7pXLSdjC9anitoKR2x+HH7r8+d/YpYAg3z0n4JkQ lS6wlVKhhyPggUq6c5C1qBf7yLhnwXVekTFKJKD4bGvlBsxBbSAB3RFGX1/Yd1C/ pNWPnzIHSKPvGA== -----END CERTIFICATE-----Generated at Sat May 10 13:18:33 2025 by rpki-client