$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: T1/By868ft+//qDsYml+iPxA1mplvcXOOlauDaJsHJA= Subject key identifier: AF:A4:44:A8:18:71:74:D1:33:31:A3:04:D3:15:C5:CB:E9:24:81:60 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 0196BAED79A348E65FD84E9FE25BB89D9BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 110A Signing time: Sat 10 May 2025 16:00:47 +0000 Manifest this update: Sat 10 May 2025 16:00:47 +0000 Manifest next update: Sun 11 May 2025 16:00:47 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: 9uepVP8jCNblGgDml0purQuCeuI.roa (hash: krAEUA7J3c4hHlcNHTYBnr7lBIoDvqw3IUws2vLaSSg=) 3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: p2WnhUqxA8rzDRmvtlDLWu9lb0cFEqjnkMSz1GC1UJQ=) 5: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 6: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 7: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:ed:79:a3:48:e6:5f:d8:4e:9f:e2:5b:b8:9d:9b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: May 10 16:00:47 2025 GMT Not After : May 11 16:00:47 2025 GMT Subject: CN=afa444a8187174d13331a304d315c5cbe9248160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:8f:c2:ad:7f:b7:c2:c4:0b:e4:27:c0:2c: c3:e2:c6:84:d3:d0:44:d1:ea:be:c8:b5:ca:48:a1: cf:35:eb:9a:83:9c:88:12:1e:c2:4f:be:7e:20:42: d9:1b:4f:63:58:f8:4d:6b:a9:06:c1:18:54:4a:ef: ad:33:f7:5c:43:81:bb:70:8e:74:2e:99:64:5a:c7: 7e:36:b6:22:6f:d8:1c:7f:45:ec:e7:9a:4e:9c:8f: ca:c5:9e:64:89:d6:b0:eb:a1:6c:8a:a9:d3:36:f8: 7d:ad:b4:76:cf:43:b9:c1:12:5a:be:c1:b3:7e:7b: c5:46:2d:c5:32:26:76:d4:db:f9:f3:92:e7:a3:2f: b7:e9:81:4f:ef:23:4a:2b:ef:37:1e:a3:92:13:af: 46:82:74:af:a2:45:5f:30:7b:0d:e5:45:04:16:0c: 85:2a:56:16:ec:32:28:48:82:8a:d0:d9:3e:57:43: a3:a7:3a:2a:90:9a:b5:26:be:c6:3e:02:c3:3f:1d: 90:71:20:38:0d:55:c2:c0:8a:ea:3e:fb:75:c2:0b: c6:86:d2:05:3e:3e:f2:23:21:a1:fe:3f:ca:5e:36: 2b:bb:35:f6:a8:e5:ed:6d:e9:80:4d:01:55:9e:8f: aa:40:33:45:cc:45:40:d5:6f:f0:0f:3a:0b:2b:9a: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A4:44:A8:18:71:74:D1:33:31:A3:04:D3:15:C5:CB:E9:24:81:60 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ce:ed:c3:24:76:46:da:d1:a7:86:e7:81:08:64:bc:4d:63: 8b:19:20:55:99:c5:75:52:6f:b1:4f:07:e8:81:b3:ce:9e:39: 0b:25:1f:73:5b:32:ff:8f:2b:d8:a0:49:51:cd:5a:f2:f5:41: 06:47:f4:3e:bd:4e:98:1c:cd:98:e4:6d:00:87:24:5d:f9:2d: 4f:d1:7b:58:5e:53:af:e1:95:e3:49:88:86:26:f4:5e:c3:7c: 6c:e0:ce:fb:21:f7:1d:9a:63:48:59:5d:20:13:2c:e2:04:ea: 89:6a:f3:d8:20:4d:43:ab:2b:d4:98:7e:fa:81:b7:1f:ba:b9: 2d:4f:61:a1:b6:08:3b:22:8a:d4:f8:f1:44:b4:1e:c5:3b:c6: 49:0b:59:6e:fb:1e:32:64:5b:d9:91:b7:5c:c9:d8:84:a9:fb: 22:6e:e4:c0:b6:fd:6c:0f:ec:a6:a9:c1:98:f0:f7:45:73:94: d3:8a:56:94:51:db:d6:28:bf:73:ec:10:a2:1d:41:36:17:c1: c3:57:fc:51:13:77:73:44:83:a3:1c:84:22:c6:5e:a8:d3:56: 6d:7f:3d:1d:df:b4:11:ac:69:50:2f:3c:e9:22:0f:6f:4a:1e: 02:95:40:64:bc:a3:7b:15:ef:3b:59:94:59:70:ea:ec:c3:49: d0:43:1f:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa67XmjSOZf2E6f4lu4nZumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwNTEwMTYwMDQ3WhcNMjUwNTExMTYwMDQ3WjAzMTEwLwYDVQQD EyhhZmE0NDRhODE4NzE3NGQxMzMzMWEzMDRkMzE1YzVjYmU5MjQ4MTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQuPwq1/t8LEC+QnwCzD4saE09BE 0eq+yLXKSKHPNeuag5yIEh7CT75+IELZG09jWPhNa6kGwRhUSu+tM/dcQ4G7cI50 LplkWsd+NrYib9gcf0Xs55pOnI/KxZ5kidaw66FsiqnTNvh9rbR2z0O5wRJavsGz fnvFRi3FMiZ21Nv585Lnoy+36YFP7yNKK+83HqOSE69GgnSvokVfMHsN5UUEFgyF KlYW7DIoSIKK0Nk+V0OjpzoqkJq1Jr7GPgLDPx2QcSA4DVXCwIrqPvt1wgvGhtIF Pj7yIyGh/j/KXjYruzX2qOXtbemATQFVno+qQDNFzEVA1W/wDzoLK5rYGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+kRKgYcXTRMzGjBNMVxcvpJIFgMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq87twyR2 RtrRp4bngQhkvE1jixkgVZnFdVJvsU8H6IGzzp45CyUfc1sy/48r2KBJUc1a8vVB Bkf0Pr1OmBzNmORtAIckXfktT9F7WF5Tr+GV40mIhib0XsN8bODO+yH3HZpjSFld IBMs4gTqiWrz2CBNQ6sr1Jh++oG3H7q5LU9hobYIOyKK1PjxRLQexTvGSQtZbvse MmRb2ZG3XMnYhKn7Im7kwLb9bA/spqnBmPD3RXOU04pWlFHb1ii/c+wQoh1BNhfB w1f8URN3c0SDoxyEIsZeqNNWbX89Hd+0EaxpUC886SIPb0oeApVAZLyjexXvO1mU WXDq7MNJ0EMfPQ== -----END CERTIFICATE-----Generated at Sun May 11 00:46:41 2025 by rpki-client