$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: 92oA++5kcvF+Pu84e+TcV+ETid9d+eixdMXsL957ZVk= Subject key identifier: CA:94:3A:41:7B:49:F3:E2:ED:01:AE:61:BC:82:D4:05:D0:79:05:18 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019827B509FEC6C2561E7949A7CDEC2E4CEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 1157 Signing time: Sun 20 Jul 2025 12:00:32 +0000 Manifest this update: Sun 20 Jul 2025 12:00:32 +0000 Manifest next update: Mon 21 Jul 2025 12:00:32 +0000 Files and hashes: 1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=) 2: 1-SD58DvCs7ya-7E2FpTU4fI87Ow.roa (hash: HUsbSacmCFroTzSN4bvsRHu/98AfJF8ghdyReaEsmzs=) 3: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=) 4: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=) 5: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=) 6: DthOD_kxSHI_yAmMQURpyHdQPX8.roa (hash: 8Uu1LNAmsaRUJ+QbM5XSgI4iAjEHIEeippuJeVtKzew=) 7: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: BwLjGHs12ZPknnct6idFXwpMzgQeNJkR93ei/rJdabw=) 8: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=) 9: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=) 10: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=) 11: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=) 12: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=) 13: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=) 14: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=) 15: _2Z2DCyP8AoFTrwYYnrTE8duSKk.roa (hash: 9BjH2YLT3BThs3wwk+jwBx3zqx+MMwKVuJzuVbVoQIE=) 16: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=) 17: hqAa-HGl9YYSVOAZse-mATGGJYM.roa (hash: KOeloEwv9QnlDfRaZ27Ece4epTiFo9JQL3WkmnmhezQ=) 18: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=) 19: zBCnMJFWnMXKgz_j_g57vjHzFUk.roa (hash: 4csBVOwSYwoxyrDsoROei21hUJZS/HdqdCvpTaBSh6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:09:fe:c6:c2:56:1e:79:49:a7:cd:ec:2e:4c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jul 20 12:00:32 2025 GMT Not After : Jul 21 12:00:32 2025 GMT Subject: CN=ca943a417b49f3e2ed01ae61bc82d405d0790518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:6b:9d:52:df:a0:b7:3a:47:4a:b2:c5:c5: 49:58:43:fc:38:2e:d6:6f:d7:5f:99:e0:ae:56:2c: 66:50:99:2b:ee:b2:9f:31:b7:0e:54:7b:03:79:46: 36:c2:3f:23:53:c5:6f:e2:9f:a2:14:ae:c7:76:bb: ba:68:c4:3f:be:f3:02:0f:8b:a9:9e:9d:b5:31:a7: ba:f6:1f:35:59:6d:db:dc:47:2b:0c:bb:49:52:ec: 6b:35:d0:f8:14:82:5a:45:e6:7f:f9:a2:18:63:2d: d4:84:65:f2:0c:2e:ab:f8:e6:bc:8c:db:e5:3b:99: c6:a2:88:57:11:f1:7a:35:de:1a:14:c2:9b:a9:ca: 58:a5:cf:11:2f:22:7c:c4:46:4c:3b:e7:4e:25:b0: 5f:d7:ad:42:47:58:25:5a:4b:cb:4b:7f:92:9e:2c: 6a:d0:3b:83:89:fb:c8:6a:b2:0d:e7:f3:53:58:d0: 55:bf:fc:59:81:ef:eb:21:69:2d:5d:9a:97:a8:3c: ac:70:86:d0:e4:e8:ff:58:1f:f6:65:a8:d0:6d:24: 5a:60:3b:db:e1:7a:d7:c9:87:26:ea:d1:e9:07:ad: df:27:fb:4c:6d:88:89:c8:f7:34:e0:60:8d:06:91: 7e:1e:61:c6:bd:45:bd:1c:a5:35:f9:59:31:a7:67: d0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:94:3A:41:7B:49:F3:E2:ED:01:AE:61:BC:82:D4:05:D0:79:05:18 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3a:3c:e5:8c:c1:51:70:0d:04:3e:60:18:ca:6d:c6:75:ff: 11:0a:3d:48:1c:f4:f9:60:d2:87:26:5f:d7:66:b9:a0:9b:57: 4e:19:aa:32:d5:17:c0:fd:c6:95:67:21:2d:5d:f4:2a:de:c0: 6d:58:a8:d5:7b:1a:7b:b0:90:0e:85:3d:60:10:67:a5:f5:d2: ce:8b:83:e3:3c:08:e8:de:15:e5:38:39:66:21:9e:48:97:57: c8:41:a1:0a:c1:85:d6:67:4f:23:18:a3:eb:53:29:33:0b:00: 68:bb:34:fe:c5:75:66:b5:5e:20:a4:d7:8e:84:b7:de:5e:1b: f2:a9:f2:ce:c8:b1:b7:72:26:01:8c:6a:6a:c6:48:64:f4:fa: 6e:5e:4e:bb:06:46:d2:ca:cb:4c:95:73:a2:98:30:53:23:29: e7:6f:48:3f:d3:b5:30:b6:75:d1:b5:e5:75:a1:1e:0d:b8:03: d3:04:2b:d2:82:4c:16:e5:2c:9b:f5:a0:46:be:d2:14:a7:f0: e1:66:f2:74:9d:4d:d7:ea:86:58:86:10:ca:ba:38:32:91:55: 57:b6:4c:37:2a:b6:8e:b4:0a:91:37:76:a3:0b:5b:97:ba:e7: cd:ff:c7:77:8c:96:01:c3:34:73:60:51:b9:46:e1:95:87:98: 1b:d0:d1:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntQn+xsJWHnlJp83sLkzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjUwNzIwMTIwMDMyWhcNMjUwNzIxMTIwMDMyWjAzMTEwLwYDVQQD EyhjYTk0M2E0MTdiNDlmM2UyZWQwMWFlNjFiYzgyZDQwNWQwNzkwNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp75rnVLfoLc6R0qyxcVJWEP8OC7W b9dfmeCuVixmUJkr7rKfMbcOVHsDeUY2wj8jU8Vv4p+iFK7Hdru6aMQ/vvMCD4up np21Mae69h81WW3b3EcrDLtJUuxrNdD4FIJaReZ/+aIYYy3UhGXyDC6r+Oa8jNvl O5nGoohXEfF6Nd4aFMKbqcpYpc8RLyJ8xEZMO+dOJbBf161CR1glWkvLS3+Snixq 0DuDifvIarIN5/NTWNBVv/xZge/rIWktXZqXqDyscIbQ5Oj/WB/2ZajQbSRaYDvb 4XrXyYcm6tHpB63fJ/tMbYiJyPc04GCNBpF+HmHGvUW9HKU1+Vkxp2fQmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqUOkF7SfPi7QGuYbyC1AXQeQUYMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDo85YzB UXANBD5gGMptxnX/EQo9SBz0+WDShyZf12a5oJtXThmqMtUXwP3GlWchLV30Kt7A bVio1Xsae7CQDoU9YBBnpfXSzouD4zwI6N4V5Tg5ZiGeSJdXyEGhCsGF1mdPIxij 61MpMwsAaLs0/sV1ZrVeIKTXjoS33l4b8qnyzsixt3ImAYxqasZIZPT6bl5OuwZG 0srLTJVzopgwUyMp529IP9O1MLZ10bXldaEeDbgD0wQr0oJMFuUsm/WgRr7SFKfw 4WbydJ1N1+qGWIYQyro4MpFVV7ZMNyq2jrQKkTd2owtbl7rnzf/Hd4yWAcM0c2BR uUbhlYeYG9DRKQ== -----END CERTIFICATE-----Generated at Sun Jul 20 14:30:13 2025 by rpki-client