$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft File: iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json) Hash identifier: SrtjfQuAHk3LzCRV+WHqopDTD3pBxCQcOFlqX+hV07k= Subject key identifier: 60:10:5E:E9:E8:31:F8:55:56:FE:FB:06:F4:57:82:1F:2E:30:B8:2A Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019745C21C3CDE503B894D88EAB61530DFB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft Manifest number: 1590 Signing time: Fri 06 Jun 2025 15:00:38 +0000 Manifest this update: Fri 06 Jun 2025 15:00:38 +0000 Manifest next update: Sat 07 Jun 2025 15:00:38 +0000 Files and hashes: 1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=) 2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=) 3: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=) 4: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=) 5: CSCVpnD9UZcOY9dh51GQDiQtUDY.roa (hash: HjUHDCqkZKlp4khp1k6PV1nRwKGQqNvxyYIzG+YWGAo=) 6: FUSDgc58t7U4fuucmEPuEjO5Yhg.roa (hash: aS1RV6Hjz0mszrBpJALZA+zpAxzsSz5luvIAMzBTdPk=) 7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=) 8: SyMnl-k5UucfnTeo_SQYwZ82xYs.roa (hash: IFFK24iMwjJA7VBKRvD/UabtondGciIM3nxVgegj8qk=) 9: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=) 10: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=) 11: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=) 12: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=) 13: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=) 14: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=) 15: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=) 16: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: 4Q+0j6yz/LUdoUZh0o0uKDer+S0IFhV9tV/h6eAH7K8=) 17: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=) 18: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (hash: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=) 19: rupNQnzVXpHhZGo4k4orZsL9fsI.roa (hash: Sef19YxuD467IYWmHT5hBmXK8CI1St5Uce/fkYmJFrI=) 20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=) 21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=) 22: uxI2Ko7sj2iN5f5a8uCii1hDBSw.roa (hash: lh9JEVycjwO2JOZAXH6/OskJCw09FDKHU4kXtolx/mg=) 23: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=) 24: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (hash: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=) 25: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (hash: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=) 26: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:c2:1c:3c:de:50:3b:89:4d:88:ea:b6:15:30:df:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jun 6 15:00:38 2025 GMT Not After : Jun 7 15:00:38 2025 GMT Subject: CN=60105ee9e831f85556fefb06f457821f2e30b82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:cf:da:69:5c:6e:8e:f6:d7:d3:39:2f:d5: 3d:ab:aa:81:5f:fc:b3:d5:ef:69:2a:ab:18:51:f4: 07:f2:87:04:8f:4f:4a:56:e3:2c:d3:1c:2e:c4:17: 78:b8:2f:43:a8:2a:64:67:56:7c:e3:e6:f7:83:e3: ab:e1:01:ce:d1:ea:4b:b1:7e:60:f5:38:76:42:5f: d2:70:c8:6e:a0:99:a1:7b:2a:6a:3c:f6:48:cc:b5: 2c:2a:9c:10:52:6e:51:c8:c8:02:52:aa:f8:63:a1: 2b:c6:12:20:9d:fd:86:cb:50:53:ca:f5:67:f4:71: 73:6a:af:da:46:d4:7e:5b:87:44:c1:37:90:82:fc: d1:74:75:4a:48:03:c6:f8:e9:d7:fb:9e:5f:08:ca: e4:ba:38:82:3e:b5:6e:32:5c:be:45:39:e2:b5:00: 99:33:75:73:37:4b:0b:a9:e5:80:57:56:3c:37:bf: 52:50:1e:d1:e1:1a:c1:6e:d9:b1:ee:e0:66:9e:13: a0:b5:52:78:4f:c2:c2:61:a8:16:9f:41:fe:8c:b1: ec:ef:56:a0:db:a1:a0:8d:43:b8:45:3c:bb:4b:dc: be:90:03:16:97:a6:86:db:86:7c:2d:aa:bd:b3:d5: 73:31:42:e4:30:db:85:10:c6:8d:8c:35:45:73:d7: a1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:10:5E:E9:E8:31:F8:55:56:FE:FB:06:F4:57:82:1F:2E:30:B8:2A X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e9:64:75:34:14:bd:46:af:76:19:dd:21:3e:43:eb:4c:ef: ed:e2:0e:dc:47:fa:94:88:c4:45:ac:b1:97:b7:79:56:d0:01: c1:21:7e:79:4d:7e:04:37:a5:09:67:f6:55:64:f9:ee:e7:42: 57:3e:f4:99:df:b3:46:e9:c3:bf:93:28:3b:e6:12:92:d4:c3: 59:30:72:0b:4c:1b:27:55:20:e0:1d:79:1b:7c:76:03:04:ae: ca:09:ff:5d:d1:21:4d:71:55:3b:0d:fb:32:a1:70:05:1c:09: 02:e9:27:03:06:54:2e:60:92:74:c0:33:01:19:21:92:bc:2f: cd:fc:62:c4:d0:3c:40:8d:7e:14:04:5a:8c:ff:c4:45:bc:53: f7:37:d0:f6:51:50:df:22:4f:83:f7:7b:2c:00:7e:9c:c6:bc: 0b:f9:31:13:14:bc:57:68:f0:55:84:da:0f:4b:9a:16:f6:48: 44:28:13:00:90:2a:2b:fb:8c:4f:0b:d7:69:4a:ea:96:1e:0b: 73:cf:ce:dc:64:ae:7b:61:f2:65:3b:f4:13:ab:9c:27:ee:64: 85:cf:da:4c:69:72:1a:ca:29:14:72:8b:c9:2a:0b:a4:2a:9a: c4:25:17:d7:73:f1:8d:73:1b:67:2e:20:eb:45:af:9d:67:98: bd:59:19:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdFwhw83lA7iU2I6rYVMN+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUwNjA2MTUwMDM4WhcNMjUwNjA3MTUwMDM4WjAzMTEwLwYDVQQD Eyg2MDEwNWVlOWU4MzFmODU1NTZmZWZiMDZmNDU3ODIxZjJlMzBiODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmTP2mlcbo7219M5L9U9q6qBX/yz 1e9pKqsYUfQH8ocEj09KVuMs0xwuxBd4uC9DqCpkZ1Z84+b3g+Or4QHO0epLsX5g 9Th2Ql/ScMhuoJmheypqPPZIzLUsKpwQUm5RyMgCUqr4Y6ErxhIgnf2Gy1BTyvVn 9HFzaq/aRtR+W4dEwTeQgvzRdHVKSAPG+OnX+55fCMrkujiCPrVuMly+RTnitQCZ M3VzN0sLqeWAV1Y8N79SUB7R4RrBbtmx7uBmnhOgtVJ4T8LCYagWn0H+jLHs71ag 26GgjUO4RTy7S9y+kAMWl6aG24Z8Laq9s9VzMULkMNuFEMaNjDVFc9ehswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAQXunoMfhVVv77BvRXgh8uMLgqMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcelkdTQU vUavdhndIT5D60zv7eIO3Ef6lIjERayxl7d5VtABwSF+eU1+BDelCWf2VWT57udC Vz70md+zRunDv5MoO+YSktTDWTByC0wbJ1Ug4B15G3x2AwSuygn/XdEhTXFVOw37 MqFwBRwJAuknAwZULmCSdMAzARkhkrwvzfxixNA8QI1+FARajP/ERbxT9zfQ9lFQ 3yJPg/d7LAB+nMa8C/kxExS8V2jwVYTaD0uaFvZIRCgTAJAqK/uMTwvXaUrqlh4L c8/O3GSue2HyZTv0E6ucJ+5khc/aTGlyGsopFHKLySoLpCqaxCUX13PxjXMbZy4g 60WvnWeYvVkZig== -----END CERTIFICATE-----Generated at Sat Jun 7 01:03:53 2025 by rpki-client