$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: 4BC9sl6KICCRAk5Us+ffy1eXK4Vh4STwFVMFd9G88GQ= Subject key identifier: 78:8A:F2:54:35:7C:B7:19:6C:58:E4:23:17:FE:F5:A7:D6:F0:74:5C Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 0196BA11B0A61080AA9529100338BBE7B0B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 153E Signing time: Sat 10 May 2025 12:00:43 +0000 Manifest this update: Sat 10 May 2025 12:00:43 +0000 Manifest next update: Sun 11 May 2025 12:00:43 +0000 Files and hashes: 1: 54YZLFfQTtdtKQTXNV_vCc9pRQc.roa (hash: Q097sEG/tVqfzt58HSoAVC6EIFd3hWWbatqTDySeYEM=) 2: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: nIlinfz0cTnHWFOneiYWhoiZKYOz36DLmr+8pe1dS2w=) 3: JjcnCrAAiOsbtS7AQ5Vn8A4gz1M.roa (hash: Bl/z5aP7DAGwrycXozMkXlfeTf64sYGT5hnwhdq38jQ=) 4: Mlh1OUvdMvBOzqjOSbLyZKTH_2c.roa (hash: yCEdCTCJqqvCW5+LOgXVNkg5W1DuVkh3vuL3mSHNHSQ=) 5: O4pIscar-T5J7wN4zdwq7SCw37o.roa (hash: vINaa0L+6gqqQWj7X6CWh0AhbZ33Gs5iMEtG/RPtaW4=) 6: RHTgJJC8qpvMfj8eUatfxfhezWA.roa (hash: ofcXjVh/NZbvKJndtnjeeh4aHwmeKnUVYyFaL9vHuqs=) 7: TgKFslseYsCcxq6hrybuWIYEhgE.roa (hash: +vMPxdsdJB0rdmiczN+V/eLqs7K7ErkjymCEJGzYw2Y=) 8: eOgvquigvzDPj-8dhQt95xkui_E.roa (hash: zEpy4lJB9tJ5de8zvRSwkcXfAVk3pin2iihLqa8DHd8=) 9: gTSl0s8ecjgcIAeVeUFH15zCuTo.roa (hash: NI2Bkr1fj2ydaK7ynlfqI3wFAzEUjTgFHJwBlzpASFI=) 10: s6l73Ozc9G__irpTpPlNucOT8bs.roa (hash: GqBwmeoAuFCGB9Y+I57QWriPb1mo81JmyaYf7vUIrHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:11:b0:a6:10:80:aa:95:29:10:03:38:bb:e7:b0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: May 10 12:00:43 2025 GMT Not After : May 11 12:00:43 2025 GMT Subject: CN=788af254357cb7196c58e42317fef5a7d6f0745c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:25:bd:c7:be:56:34:32:4e:02:a5:f9:97: 34:31:8e:ff:bd:b9:a2:c4:10:27:6e:fd:50:93:d7: af:03:bc:71:52:5d:ff:66:2f:99:6f:1d:33:ff:1c: b4:ec:d5:ef:8e:4d:a6:ea:71:b8:f1:e4:d8:2d:23: 6b:aa:f7:c2:c8:33:6a:6c:25:a5:95:83:b4:93:ce: 53:30:b8:82:2f:c0:5c:55:55:ec:35:5c:48:22:09: 0d:e6:ca:3a:64:ad:7e:d6:82:38:86:03:77:3d:93: 84:9d:90:92:d8:f9:e6:ec:9e:1b:26:48:ba:cc:fb: d2:5f:26:78:09:be:e4:d3:5c:a7:55:40:67:af:38: 37:0a:90:82:18:5c:3d:c6:72:13:37:10:57:c7:06: 45:e0:43:26:c1:9d:a7:5d:3c:4d:b9:7b:e5:32:65: 0f:cf:2b:7e:c6:43:a3:2c:e8:9c:3a:0d:85:d9:c4: 16:08:90:2a:ea:b8:8f:02:2a:5d:ba:f7:ad:03:86: 9a:02:57:30:34:24:59:5c:70:db:ab:5c:6c:88:34: 55:12:2d:3b:bb:e3:0c:7b:b3:5b:e3:1c:f3:e1:5c: d4:0f:b4:88:a0:8b:cd:cd:17:2a:d4:3d:50:4d:81: e3:58:7b:a4:a2:a2:88:f5:59:40:65:7c:65:ea:03: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8A:F2:54:35:7C:B7:19:6C:58:E4:23:17:FE:F5:A7:D6:F0:74:5C X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e7:4e:47:c0:3f:b1:94:45:57:45:f4:43:8d:54:f7:c4:1b: ed:eb:9d:ef:d8:1a:69:1d:84:75:8f:16:f2:6f:a1:3f:42:ca: 43:4e:a2:16:e9:8b:87:2b:9c:70:e8:24:20:f2:e1:db:66:3a: f5:86:8b:e4:4c:fd:67:73:ee:61:14:83:b3:8f:56:a6:11:cb: 1f:0e:d0:94:15:53:fc:64:52:47:29:e3:49:80:4f:80:94:7e: 0e:f3:7e:05:4a:23:fc:83:4a:f4:b8:0a:92:68:13:55:ac:60: f4:88:c6:6c:ac:0c:94:4a:77:cf:85:47:32:44:7d:4c:4b:5f: 7d:e2:57:30:f6:4f:2b:9b:3b:90:1c:2e:c5:a4:9a:0b:d3:6e: 9f:92:00:4b:34:74:59:d4:60:b1:82:07:33:fd:b7:2d:d3:4b: 56:f3:7a:4b:fb:fd:ea:c2:7b:91:3a:86:ae:02:82:1a:a7:a6: 42:49:8c:9a:dd:53:90:73:9a:f5:88:34:b7:e5:68:7e:b5:0e: 66:a6:1c:24:bc:5b:30:55:2d:f8:05:08:4a:55:20:d2:20:53: d9:5a:45:7f:1f:dc:e1:1d:51:c4:a8:fe:b6:54:77:3c:e0:de: da:bc:bf:a1:58:a8:50:4a:d8:44:ab:be:4b:0e:0f:93:da:fc: 5f:1b:e8:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa6EbCmEICqlSkQAzi757CwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjUwNTEwMTIwMDQzWhcNMjUwNTExMTIwMDQzWjAzMTEwLwYDVQQD Eyg3ODhhZjI1NDM1N2NiNzE5NmM1OGU0MjMxN2ZlZjVhN2Q2ZjA3NDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylAlvce+VjQyTgKl+Zc0MY7/vbmi xBAnbv1Qk9evA7xxUl3/Zi+Zbx0z/xy07NXvjk2m6nG48eTYLSNrqvfCyDNqbCWl lYO0k85TMLiCL8BcVVXsNVxIIgkN5so6ZK1+1oI4hgN3PZOEnZCS2Pnm7J4bJki6 zPvSXyZ4Cb7k01ynVUBnrzg3CpCCGFw9xnITNxBXxwZF4EMmwZ2nXTxNuXvlMmUP zyt+xkOjLOicOg2F2cQWCJAq6riPAipduvetA4aaAlcwNCRZXHDbq1xsiDRVEi07 u+MMe7Nb4xzz4VzUD7SIoIvNzRcq1D1QTYHjWHukoqKI9VlAZXxl6gMIjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiK8lQ1fLcZbFjkIxf+9afW8HRcMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQudOR8A/ sZRFV0X0Q41U98Qb7eud79gaaR2EdY8W8m+hP0LKQ06iFumLhyuccOgkIPLh22Y6 9YaL5Ez9Z3PuYRSDs49WphHLHw7QlBVT/GRSRynjSYBPgJR+DvN+BUoj/INK9LgK kmgTVaxg9IjGbKwMlEp3z4VHMkR9TEtffeJXMPZPK5s7kBwuxaSaC9Nun5IASzR0 WdRgsYIHM/23LdNLVvN6S/v96sJ7kTqGrgKCGqemQkmMmt1TkHOa9Yg0t+VofrUO ZqYcJLxbMFUt+AUISlUg0iBT2VpFfx/c4R1RxKj+tlR3PODe2ry/oVioUErYRKu+ Sw4Pk9r8XxvoUw== -----END CERTIFICATE-----Generated at Sat May 10 19:49:06 2025 by rpki-client