$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: vWGnUwWfDYX4FsRdSrG8eH7T2XMVsFhZcYhNK9gh7y0= Subject key identifier: A7:53:2F:A7:D0:92:C1:60:27:21:CB:10:4D:A5:E4:4E:12:4C:F0:32 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 0197C5380ECB8193E9A208B72D3A20547F10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 1194 Signing time: Tue 01 Jul 2025 09:01:14 +0000 Manifest this update: Tue 01 Jul 2025 09:01:14 +0000 Manifest next update: Wed 02 Jul 2025 09:01:14 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 3: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: +d+LpopquLcmWwRJObu5NbT9mMrScalhWXwU3Q6qK78=) 4: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 5: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 6: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 7: YpiZDj15UQloSo6Ej-P-5_wLmX0.roa (hash: U0LGxcrLnRjidOqQnFEuAvzeubqh8HZ24iVIBxmVgMY=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c5:38:0e:cb:81:93:e9:a2:08:b7:2d:3a:20:54:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jul 1 09:01:14 2025 GMT Not After : Jul 2 09:01:14 2025 GMT Subject: CN=a7532fa7d092c1602721cb104da5e44e124cf032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:88:54:fb:22:62:1a:51:ff:c2:d7:ea:4c: 15:25:5e:4b:96:28:79:1d:12:bc:25:16:a0:30:36: 77:e2:35:c3:d4:c9:7f:c9:3a:e0:32:0e:5c:f1:08: d9:10:9d:fe:6c:4e:d7:1b:28:9a:ea:c8:51:12:b6: 81:2e:9d:97:ca:18:bf:f0:72:3c:e2:17:2e:fe:5b: 59:38:44:ab:54:c4:b5:f8:1a:df:fd:ca:80:89:be: 3d:df:1c:94:3f:77:f3:ac:01:94:4e:4b:d5:11:16: dd:3c:4f:14:da:19:fc:f1:78:d7:2d:a9:af:f1:9e: 23:43:df:6e:a1:10:fb:32:8f:0d:9e:f2:06:95:74: 8b:14:46:59:db:91:1e:f8:af:57:d0:ac:f5:5b:aa: d2:83:9a:ca:ba:e1:e6:fa:30:2f:e6:b3:27:f6:70: 77:1d:46:7b:04:99:58:98:17:50:33:0c:fd:53:98: 17:89:5d:53:b2:3b:91:4d:43:76:13:d2:a8:ed:c9: a3:25:14:d7:5c:69:ea:82:3c:65:19:01:1e:56:3b: c3:67:b6:4f:61:00:31:86:c5:a5:71:4e:b0:65:6a: e2:45:0d:78:d0:f2:aa:27:ff:35:9d:46:f5:57:26: cb:f2:f7:dc:32:7b:fd:99:7d:91:06:db:c6:fc:70: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:53:2F:A7:D0:92:C1:60:27:21:CB:10:4D:A5:E4:4E:12:4C:F0:32 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4f:c0:f1:b1:5c:4d:d1:26:d5:e0:40:53:be:83:8b:5c:7b: 1e:e4:83:d7:05:41:7d:28:dd:95:cf:b7:05:9f:ec:50:61:74: ae:64:4d:1f:e7:cd:1f:82:ce:77:e1:c8:bb:66:63:6f:5f:b1: bd:43:9c:91:74:dc:75:f5:7a:ba:dd:f9:b9:fb:25:55:a1:f9: 3d:f2:bb:fe:6b:6f:a2:ad:3d:f6:14:da:27:23:38:c4:ae:33: f5:54:49:0d:f4:69:94:09:c6:74:d9:74:82:77:95:57:90:89: 59:05:ba:02:85:59:f3:b0:99:63:91:5e:69:55:3a:e0:82:f9: ee:48:1c:fa:ad:73:03:38:d7:ff:dc:00:ea:de:f1:82:4f:14: 90:10:27:15:5c:5c:a6:39:e8:1c:5a:ed:17:db:7c:6f:a3:58: f0:36:27:0d:aa:3f:52:e5:1d:3e:e1:02:50:76:3c:05:bc:c7: ac:45:3e:4e:ed:75:7b:4b:d9:2c:81:43:61:9e:29:86:ce:f9: 2f:74:8a:ed:da:0f:dc:70:00:94:92:bc:9d:74:72:1a:a4:0a: 17:10:0e:a5:ef:b6:99:f6:aa:ce:cb:3f:1b:6f:49:c6:50:5c: a4:de:4f:12:60:63:31:d6:2c:0d:95:ec:7b:6d:34:b4:16:8a: fc:5f:d0:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfFOA7LgZPpogi3LTogVH8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwNzAxMDkwMTE0WhcNMjUwNzAyMDkwMTE0WjAzMTEwLwYDVQQD EyhhNzUzMmZhN2QwOTJjMTYwMjcyMWNiMTA0ZGE1ZTQ0ZTEyNGNmMDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTaIVPsiYhpR/8LX6kwVJV5Llih5 HRK8JRagMDZ34jXD1Ml/yTrgMg5c8QjZEJ3+bE7XGyia6shREraBLp2Xyhi/8HI8 4hcu/ltZOESrVMS1+Brf/cqAib493xyUP3fzrAGUTkvVERbdPE8U2hn88XjXLamv 8Z4jQ99uoRD7Mo8NnvIGlXSLFEZZ25Ee+K9X0Kz1W6rSg5rKuuHm+jAv5rMn9nB3 HUZ7BJlYmBdQMwz9U5gXiV1TsjuRTUN2E9Ko7cmjJRTXXGnqgjxlGQEeVjvDZ7ZP YQAxhsWlcU6wZWriRQ140PKqJ/81nUb1VybL8vfcMnv9mX2RBtvG/HBvQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdTL6fQksFgJyHLEE2l5E4STPAyMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtk/A8bFc TdEm1eBAU76Di1x7HuSD1wVBfSjdlc+3BZ/sUGF0rmRNH+fNH4LOd+HIu2Zjb1+x vUOckXTcdfV6ut35ufslVaH5PfK7/mtvoq099hTaJyM4xK4z9VRJDfRplAnGdNl0 gneVV5CJWQW6AoVZ87CZY5FeaVU64IL57kgc+q1zAzjX/9wA6t7xgk8UkBAnFVxc pjnoHFrtF9t8b6NY8DYnDao/UuUdPuECUHY8BbzHrEU+Tu11e0vZLIFDYZ4phs75 L3SK7doP3HAAlJK8nXRyGqQKFxAOpe+2mfaqzss/G29JxlBcpN5PEmBjMdYsDZXs e200tBaK/F/Q9w== -----END CERTIFICATE-----Generated at Tue Jul 1 16:15:37 2025 by rpki-client