$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json) Hash identifier: f3SvGJu88GLgo11jJtiIMu6hXdJe3/VRSGeJzpvgADM= Subject key identifier: 50:6A:73:35:CA:A7:6E:F2:43:BC:A6:5D:65:FB:DC:7F:16:F3:9D:E1 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 01973D9ABA20C638BF9CE56498C8D57C2022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft Manifest number: 12C5 Signing time: Thu 05 Jun 2025 01:00:39 +0000 Manifest this update: Thu 05 Jun 2025 01:00:39 +0000 Manifest next update: Fri 06 Jun 2025 01:00:39 +0000 Files and hashes: 1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=) 2: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=) 3: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=) 4: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: vtvf0L05qtKWXq3QQ9mtT15U0iLt4lQgfwO2qKscyKI=) 5: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=) 6: NojFSrrS5JKJQebH50O-Sn9xxis.roa (hash: 99amkQAhCwzYf+SSxz6XlFlKrJhhJL3h7GCB1tqsJIA=) 7: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=) 8: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=) 9: kdaSrzmnDVsM0RIoAgjgbrOtDPw.roa (hash: rqvV8WO0X2/bRdhoVD7e6+BEeyw0vjX6G9hkFrs+9Pk=) 10: vj_Rx3DB5-xDUqDlrBJ7IxL_21w.roa (hash: MTWWugX6ksDRRG983kctzCkaVVEPY1cdhe4ngzPqXI4=) 11: y88-XlX3iJ__DzfIGS5r5m0TLBs.roa (hash: XnV7xzm/iXlPi3I2M7gT2rIanQMocQ1jqhKZYjxglqk=) 12: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3d:9a:ba:20:c6:38:bf:9c:e5:64:98:c8:d5:7c:20:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jun 5 01:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=506a7335caa76ef243bca65d65fbdc7f16f39de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:5b:bb:0a:c7:3a:26:a2:ae:c9:cd:bf:fe: a4:4b:4d:be:d5:fe:38:95:01:c8:7f:b5:0b:c7:4c: 82:74:9c:bc:2b:de:3f:ef:2a:69:b6:8c:8f:62:9e: 01:29:94:57:28:0c:fc:b5:1b:96:fa:3e:9c:32:d2: 9a:5f:30:25:55:7d:6f:09:b4:8e:b7:f1:4b:e3:17: 98:e1:a5:7b:c4:37:30:a5:05:36:e2:ab:8b:c6:c3: 02:b8:9a:fc:65:6c:e5:1b:da:d9:b1:42:af:09:ee: 6f:b0:c1:7a:d3:8e:13:00:e3:e3:ea:9f:bc:93:40: b7:40:15:8e:f7:58:ab:8c:93:c8:4a:7c:bf:45:69: 1b:9f:70:bd:4e:f6:31:22:d2:76:8a:7f:93:2e:27: 2a:83:00:81:03:f4:ca:3e:3a:27:bc:db:bf:b2:c7: 06:32:13:b6:55:c3:ec:6e:a1:2d:d8:88:e6:ba:7a: fc:1e:b4:3b:18:71:07:d0:3e:4b:2e:87:82:54:77: 3c:eb:c0:b2:1b:bd:3c:9f:45:76:eb:22:1a:27:b8: ea:0d:9a:94:60:90:ae:50:f4:a6:6a:b0:55:a2:37: e5:04:88:71:75:52:2f:01:9b:a1:87:90:fb:3c:be: 11:e7:42:e3:84:06:0b:32:ad:fa:94:09:9e:76:6d: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6A:73:35:CA:A7:6E:F2:43:BC:A6:5D:65:FB:DC:7F:16:F3:9D:E1 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6e:84:82:d4:9e:c7:54:1f:14:f4:bc:16:6d:43:48:e9:85: 3a:3b:8d:c9:8c:0e:b9:bf:a9:7e:55:40:e6:f8:6a:25:bc:8d: 8e:8b:23:09:39:9c:79:d4:f4:d9:73:20:86:d6:e1:16:58:61: 57:d5:86:8a:de:d6:eb:a3:df:1c:9d:ac:39:eb:65:0a:a7:b2: a5:83:49:8c:c5:64:2e:01:3b:bf:66:b9:45:ab:40:67:1d:fe: 6c:ab:41:5b:29:51:2f:55:b5:81:99:50:a9:08:2c:89:db:b9: b1:45:df:39:e3:c8:4a:5d:e0:ea:3f:10:fb:23:a7:20:dc:c4: fc:2f:ce:cb:d2:af:d8:4d:c0:e8:30:79:a6:3b:75:f2:3f:28: 88:5b:c5:ed:48:be:dc:99:97:03:e2:fc:66:09:02:e9:9f:c0: fd:27:84:64:ef:aa:2b:53:68:33:6e:b1:3f:8a:8b:60:4a:09: fd:32:b7:48:50:2d:0d:ec:96:97:0e:0b:9a:9f:b9:6b:b8:33: e7:d0:c9:49:fb:b8:b1:2c:28:05:8f:bf:09:3c:8b:ed:e3:13: 47:c8:45:5c:0e:84:a1:3d:e1:90:60:b3:7b:7a:fb:0f:14:e2: b5:a6:c7:66:c4:6f:ea:63:40:06:32:47:9b:ed:1b:1d:f0:3f: a4:0e:cc:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc9mrogxji/nOVkmMjVfCAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUwNjA1MDEwMDM5WhcNMjUwNjA2MDEwMDM5WjAzMTEwLwYDVQQD Eyg1MDZhNzMzNWNhYTc2ZWYyNDNiY2E2NWQ2NWZiZGM3ZjE2ZjM5ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQRbuwrHOiairsnNv/6kS02+1f44 lQHIf7ULx0yCdJy8K94/7ypptoyPYp4BKZRXKAz8tRuW+j6cMtKaXzAlVX1vCbSO t/FL4xeY4aV7xDcwpQU24quLxsMCuJr8ZWzlG9rZsUKvCe5vsMF6044TAOPj6p+8 k0C3QBWO91irjJPISny/RWkbn3C9TvYxItJ2in+TLicqgwCBA/TKPjonvNu/sscG MhO2VcPsbqEt2Ijmunr8HrQ7GHEH0D5LLoeCVHc868CyG708n0V26yIaJ7jqDZqU YJCuUPSmarBVojflBIhxdVIvAZuhh5D7PL4R50LjhAYLMq36lAmedm1VaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBqczXKp27yQ7ymXWX73H8W853hMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADG6EgtSe x1QfFPS8Fm1DSOmFOjuNyYwOub+pflVA5vhqJbyNjosjCTmcedT02XMghtbhFlhh V9WGit7W66PfHJ2sOetlCqeypYNJjMVkLgE7v2a5RatAZx3+bKtBWylRL1W1gZlQ qQgsidu5sUXfOePISl3g6j8Q+yOnINzE/C/Oy9Kv2E3A6DB5pjt18j8oiFvF7Ui+ 3JmXA+L8ZgkC6Z/A/SeEZO+qK1NoM26xP4qLYEoJ/TK3SFAtDeyWlw4Lmp+5a7gz 59DJSfu4sSwoBY+/CTyL7eMTR8hFXA6EoT3hkGCze3r7DxTitabHZsRv6mNABjJH m+0bHfA/pA7MYw== -----END CERTIFICATE-----Generated at Thu Jun 5 06:54:17 2025 by rpki-client