$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: HMn974xcstAGqw6OrB19G3QzhCf08IXT1aMkCQiD7Sg= Subject key identifier: E7:A9:48:15:81:0A:35:55:B4:4D:87:E5:39:A6:46:08:5D:EF:1A:73 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 0197BBC7484E94E23D489BEECB53A5221349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 0253 Signing time: Sun 29 Jun 2025 13:01:28 +0000 Manifest this update: Sun 29 Jun 2025 13:01:28 +0000 Manifest next update: Mon 30 Jun 2025 13:01:28 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 4: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 5: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 11: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (hash: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: bZdv81KTr6k/6Qfdw8/tgQQOY4FbylbWpVeqJY763UE=) 19: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 20: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 21: rLFXbl__3TAOb3S5Cx0KvKn5se8.roa (hash: JoWfelx8Wab0+mon7O7zO9ngmwLQkIC05SIGqXCeWe8=) 22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:bb:c7:48:4e:94:e2:3d:48:9b:ee:cb:53:a5:22:13:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jun 29 13:01:28 2025 GMT Not After : Jun 30 13:01:28 2025 GMT Subject: CN=e7a94815810a3555b44d87e539a646085def1a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:93:ad:0e:bd:15:f6:eb:6f:6e:63:7b:2d: 6f:40:03:d2:cc:4a:83:bf:41:8e:58:29:cc:04:6d: 80:d7:b6:1c:48:ea:46:c2:54:8e:25:87:17:d3:77: 9e:9c:7d:a7:78:3d:cb:b8:23:5a:4f:81:9e:4e:b3: 90:c5:d4:81:58:f6:7c:38:99:4f:77:e9:66:da:2d: df:c9:66:f5:21:c0:21:11:d1:40:93:0c:7a:0d:8d: ed:0a:34:ca:fe:ed:ab:e0:86:7b:d9:c9:25:c5:06: cd:8b:d8:6c:7b:7b:bb:88:29:0d:66:8d:2f:c1:8b: 1d:bb:87:00:c9:68:00:ba:30:ea:41:61:fd:f7:98: 53:1f:0f:41:44:67:cd:8a:a2:fa:2d:48:bd:4c:9d: bc:e3:9e:dc:29:7b:f2:69:f6:37:28:c5:34:5a:b2: 7b:66:4f:d4:86:fc:56:3b:74:31:cb:5a:d9:19:82: e4:85:6f:25:ac:6f:18:87:6f:cb:b9:c3:e2:36:9d: 74:fb:75:77:39:5e:ba:dc:b1:ef:b6:b5:41:91:cd: 4e:61:a5:46:09:b8:8f:f0:24:64:e0:16:00:59:ad: 8e:f5:f7:7b:82:bd:d5:33:42:e2:ea:b3:f8:bd:ab: c2:c6:c0:b8:be:17:41:a1:ce:8b:1c:a3:07:d5:ef: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A9:48:15:81:0A:35:55:B4:4D:87:E5:39:A6:46:08:5D:EF:1A:73 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:67:5d:c4:0a:d9:05:b4:46:fc:38:7e:2b:fc:f2:21:54:16: ce:f6:66:b8:fc:2a:a0:50:59:77:94:4f:95:1c:4c:57:8e:cf: b8:b3:48:a4:44:78:a8:85:6e:ac:eb:c9:6b:65:4d:71:16:c5: 9f:d9:11:4d:25:8d:3d:11:57:a0:91:65:ec:c2:76:f6:cd:7b: 9a:8f:57:7e:c3:ca:df:b3:e7:74:7a:ad:e3:8d:6d:a5:71:de: f0:7d:18:4d:4f:bf:8f:92:5d:74:b4:d3:06:79:c0:fc:2d:91: df:8e:39:8a:c9:ee:e3:42:5a:3d:71:b6:34:81:57:61:54:3c: 04:3c:53:98:de:c0:d1:89:90:bb:f0:8e:76:4b:ce:e9:0b:05: aa:cd:22:f6:8f:ca:9a:f4:8f:08:ad:3a:9f:bc:13:ec:9b:a7: 74:b4:4c:c5:fd:15:40:6e:61:c6:fb:6a:85:9b:f5:f6:b7:8f: 6e:5e:7d:f0:56:b3:9c:b4:90:c2:73:57:4c:c9:f5:2b:cf:41: 5b:84:1f:5c:95:e9:b7:7a:7e:41:04:cd:14:dd:32:f2:5d:ea: 20:d6:85:02:76:cc:cf:36:c1:a8:e3:6d:81:48:8a:0d:37:c8: 63:2e:61:e1:04:e4:87:68:25:5a:10:da:92:d2:10:64:88:bd: 70:c8:8e:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe7x0hOlOI9SJvuy1OlIhNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwNjI5MTMwMTI4WhcNMjUwNjMwMTMwMTI4WjAzMTEwLwYDVQQD EyhlN2E5NDgxNTgxMGEzNTU1YjQ0ZDg3ZTUzOWE2NDYwODVkZWYxYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FaTrQ69Ffbrb25jey1vQAPSzEqD v0GOWCnMBG2A17YcSOpGwlSOJYcX03eenH2neD3LuCNaT4GeTrOQxdSBWPZ8OJlP d+lm2i3fyWb1IcAhEdFAkwx6DY3tCjTK/u2r4IZ72cklxQbNi9hse3u7iCkNZo0v wYsdu4cAyWgAujDqQWH995hTHw9BRGfNiqL6LUi9TJ28457cKXvyafY3KMU0WrJ7 Zk/UhvxWO3Qxy1rZGYLkhW8lrG8Yh2/LucPiNp10+3V3OV663LHvtrVBkc1OYaVG CbiP8CRk4BYAWa2O9fd7gr3VM0Li6rP4vavCxsC4vhdBoc6LHKMH1e9JgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOepSBWBCjVVtE2H5TmmRghd7xpzMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmddxArZ BbRG/Dh+K/zyIVQWzvZmuPwqoFBZd5RPlRxMV47PuLNIpER4qIVurOvJa2VNcRbF n9kRTSWNPRFXoJFl7MJ29s17mo9XfsPK37PndHqt441tpXHe8H0YTU+/j5JddLTT BnnA/C2R3445isnu40JaPXG2NIFXYVQ8BDxTmN7A0YmQu/COdkvO6QsFqs0i9o/K mvSPCK06n7wT7JundLRMxf0VQG5hxvtqhZv19rePbl598FaznLSQwnNXTMn1K89B W4QfXJXpt3p+QQTNFN0y8l3qINaFAnbMzzbBqONtgUiKDTfIYy5h4QTkh2glWhDa ktIQZIi9cMiOhg== -----END CERTIFICATE-----Generated at Sun Jun 29 21:09:24 2025 by rpki-client