$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft File: IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json) Hash identifier: XDxZufDq3iTFamov3I5KF3ODvrxtafQoCh1zF1Y4ypk= Subject key identifier: 42:68:41:1F:DB:B8:4A:10:21:06:4A:04:1A:81:DC:40:37:7F:12:40 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019827B57D0097D2B61EEC63095D473A42F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft Manifest number: 11C7 Signing time: Sun 20 Jul 2025 12:01:02 +0000 Manifest this update: Sun 20 Jul 2025 12:01:02 +0000 Manifest next update: Mon 21 Jul 2025 12:01:02 +0000 Files and hashes: 1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=) 2: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=) 3: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: eWDuqKv5REazV3sS2ktrtedtIa0/ij2B3ZNPAw//q3M=) 4: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=) 5: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=) 6: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=) 7: YpiZDj15UQloSo6Ej-P-5_wLmX0.roa (hash: U0LGxcrLnRjidOqQnFEuAvzeubqh8HZ24iVIBxmVgMY=) 8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=) 9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=) 10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=) 11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=) 12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:7d:00:97:d2:b6:1e:ec:63:09:5d:47:3a:42:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jul 20 12:01:02 2025 GMT Not After : Jul 21 12:01:02 2025 GMT Subject: CN=4268411fdbb84a1021064a041a81dc40377f1240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:1c:1c:5c:b1:fb:73:58:06:72:68:ec:18: 01:d4:4c:7f:ef:a9:11:71:06:c9:02:6d:6a:1d:58: 6f:eb:eb:d2:e9:8f:01:fd:aa:db:77:39:e9:46:ec: d1:b3:b9:e2:06:06:e4:dd:21:9e:b7:eb:ec:99:59: 45:71:2a:1d:1e:b2:8f:f8:70:d7:36:43:d9:f9:83: 64:62:de:1f:b9:d1:75:74:3c:58:09:9e:47:16:a5: 95:e4:65:7c:49:2b:11:71:a2:6a:de:cf:ae:8b:ef: 0a:3e:8e:61:6d:9b:a3:58:c9:89:c4:db:41:90:56: 1e:e9:62:98:94:d9:b5:ab:9e:c5:19:8b:da:7e:c0: 72:c7:2c:9f:c9:15:32:68:39:e3:59:a6:0b:5d:23: cd:f8:bd:8e:df:48:fd:bf:ae:7b:d3:b5:52:cf:7e: 48:25:ec:d5:ed:9e:fd:dc:a1:21:dc:20:48:70:a5: 39:02:03:9a:e9:67:f5:b8:88:84:09:cd:95:68:01: 10:01:9e:86:94:bd:48:8f:98:96:49:82:60:8b:e5: c8:ab:11:d7:fc:26:32:37:3f:90:70:de:ae:03:af: ba:c8:ff:52:7d:af:6a:c4:dc:f8:05:03:c1:3a:84: 6c:a0:bf:79:d5:dd:a6:9b:5e:a1:6b:25:1d:97:9f: 5e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:68:41:1F:DB:B8:4A:10:21:06:4A:04:1A:81:DC:40:37:7F:12:40 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f5:36:e1:be:9b:35:a1:f9:33:4d:58:c8:8e:67:59:cc:47: d7:44:20:fa:5f:48:01:a9:1d:c7:e8:30:73:fc:ee:42:26:0c: 44:fb:41:d7:66:ac:ee:7f:e0:97:73:a0:a4:21:99:ce:79:f7: ed:4c:f9:32:26:d5:97:2d:b8:d9:f0:dd:35:d5:02:4a:b4:b5: 02:a1:31:2c:46:c2:35:cd:2a:8a:e9:79:04:62:6a:44:63:5f: 6f:2d:1d:09:8b:8a:f8:30:f2:7b:74:76:26:57:cc:cf:b0:18: b0:de:ed:a7:c5:99:9b:14:a5:0f:43:34:1b:7e:c8:93:8d:ec: 77:a1:69:ce:51:4e:49:84:70:b1:51:39:86:69:61:4b:f4:f8: 71:37:00:6f:6a:32:67:50:2c:c8:37:3d:45:aa:a9:8f:5f:20: 0a:17:68:17:d3:29:c7:88:4a:f9:ce:61:70:0d:77:14:32:89: 19:2f:23:9d:5f:f4:44:90:28:ba:3b:e6:48:7e:b3:42:15:44: 7b:87:3e:70:1e:92:43:0d:12:77:63:d3:03:97:8d:5c:58:58: 6b:88:d2:3c:9c:f3:9c:f7:76:25:16:04:96:41:35:6a:8d:96: 2f:0f:66:e1:92:45:79:0b:ad:76:55:09:80:c7:78:7b:83:fb: 35:d0:91:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntX0Al9K2HuxjCV1HOkL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjUwNzIwMTIwMTAyWhcNMjUwNzIxMTIwMTAyWjAzMTEwLwYDVQQD Eyg0MjY4NDExZmRiYjg0YTEwMjEwNjRhMDQxYTgxZGM0MDM3N2YxMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4IcHFyx+3NYBnJo7BgB1Ex/76kR cQbJAm1qHVhv6+vS6Y8B/arbdznpRuzRs7niBgbk3SGet+vsmVlFcSodHrKP+HDX NkPZ+YNkYt4fudF1dDxYCZ5HFqWV5GV8SSsRcaJq3s+ui+8KPo5hbZujWMmJxNtB kFYe6WKYlNm1q57FGYvafsByxyyfyRUyaDnjWaYLXSPN+L2O30j9v65707VSz35I JezV7Z793KEh3CBIcKU5AgOa6Wf1uIiECc2VaAEQAZ6GlL1Ij5iWSYJgi+XIqxHX /CYyNz+QcN6uA6+6yP9Sfa9qxNz4BQPBOoRsoL951d2mm16hayUdl59ecQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJoQR/buEoQIQZKBBqB3EA3fxJAMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/U24b6b NaH5M01YyI5nWcxH10Qg+l9IAakdx+gwc/zuQiYMRPtB12as7n/gl3OgpCGZznn3 7Uz5MibVly242fDdNdUCSrS1AqExLEbCNc0qiul5BGJqRGNfby0dCYuK+DDye3R2 JlfMz7AYsN7tp8WZmxSlD0M0G37Ik43sd6FpzlFOSYRwsVE5hmlhS/T4cTcAb2oy Z1AsyDc9Raqpj18gChdoF9Mpx4hK+c5hcA13FDKJGS8jnV/0RJAoujvmSH6zQhVE e4c+cB6SQw0Sd2PTA5eNXFhYa4jSPJzznPd2JRYElkE1ao2WLw9m4ZJFeQutdlUJ gMd4e4P7NdCR5Q== -----END CERTIFICATE-----Generated at Sun Jul 20 18:22:33 2025 by rpki-client