$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: B4iJLwqw64dKuzx9jV4wWYtDE84IL3WowYhUoGCT224= Subject key identifier: B8:32:4D:9B:27:FA:1F:65:B0:21:45:AA:5C:B6:DF:6B:C9:87:A1:11 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 0197481E3353B83BBB8A43B3992F02555BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 15A1 Signing time: Sat 07 Jun 2025 02:00:28 +0000 Manifest this update: Sat 07 Jun 2025 02:00:28 +0000 Manifest next update: Sun 08 Jun 2025 02:00:28 +0000 Files and hashes: 1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=) 2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=) 3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=) 4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=) 5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=) 6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=) 7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=) 8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=) 9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=) 10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=) 11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=) 12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: eBgOA0ESh+lfwtJPy8jLUJDQzKJUfUMWp14ElSKWnAg=) 13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=) 14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=) 15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=) 16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=) 17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=) 18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=) 19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=) 20: YEVEq99x_S8XcneTMoUBT-1bOQ4.roa (hash: F8Z7UVtZrPgGB9ZgJgtyNBtPC1IwzWMX6y3YHLUTLFI=) 21: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=) 22: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=) 23: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=) 24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=) 25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=) 26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=) 27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=) 28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=) 29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=) 30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:1e:33:53:b8:3b:bb:8a:43:b3:99:2f:02:55:5b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jun 7 02:00:28 2025 GMT Not After : Jun 8 02:00:28 2025 GMT Subject: CN=b8324d9b27fa1f65b02145aa5cb6df6bc987a111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:7b:e6:53:2a:99:e5:cb:83:e7:a1:52:e8: 96:51:e7:24:16:e3:3a:9c:2e:24:dc:b4:92:f7:aa: 6d:b0:44:68:79:40:50:05:3f:bd:66:0a:20:bc:22: 35:92:a0:6b:b0:40:98:a5:49:bf:85:c2:09:9a:61: b0:84:80:75:57:f2:66:f1:18:f4:1e:e4:70:b6:e2: 31:4d:e2:7c:23:a9:50:a6:13:c8:6e:1a:7e:a7:49: 6b:48:53:2f:13:e0:1a:31:9b:d3:14:ba:ee:7b:05: 35:fd:19:82:a5:26:aa:1f:39:4f:7e:b0:be:80:87: 4b:f5:08:aa:6c:4f:65:36:3d:69:2f:06:6a:95:0c: 09:3e:28:19:28:a5:88:60:a0:dc:2c:7f:52:be:7f: 9e:a2:f7:bb:80:8f:38:88:aa:71:1f:32:17:21:79: 2a:f3:eb:29:a3:31:4a:ee:88:17:5f:84:ce:14:28: 21:cd:f3:e7:c3:b4:d8:ce:f2:09:72:4d:6d:63:5a: 25:15:ca:b1:87:d0:2a:9a:5f:4a:76:a6:ae:bc:65: 23:94:08:38:9f:98:19:af:c8:9c:58:64:01:37:90: a5:bc:0c:d7:ac:f5:69:bb:85:89:2c:eb:14:6c:a6: db:8e:19:75:60:44:ee:f3:70:80:e4:79:2f:4d:fd: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:32:4D:9B:27:FA:1F:65:B0:21:45:AA:5C:B6:DF:6B:C9:87:A1:11 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ac:c0:fa:d3:c4:9d:5f:32:d6:5e:b7:c8:bc:37:80:3e:8c: 8f:4f:83:15:fa:17:3e:d6:7c:59:73:ab:ac:69:b5:0c:01:d0: 17:68:46:ca:3b:e1:ed:78:35:52:b9:a3:96:14:c1:21:62:aa: 25:ec:a5:f3:c1:24:11:f5:a9:6b:3a:d5:36:bb:f7:14:7a:25: 95:16:25:1f:db:85:e7:ac:cf:60:7c:11:52:16:2f:8b:18:21: ff:89:7d:6a:03:5e:a3:3b:55:70:88:06:f4:a5:0f:ba:2d:94: e2:03:14:47:73:f4:8b:35:4e:9f:d3:35:a8:cf:5a:ac:28:85: d8:4e:4a:0d:12:a5:f4:b8:14:e2:09:1b:e6:57:70:c0:c5:1a: 06:d3:d5:a3:a5:47:c4:60:39:8a:16:bc:8f:88:4a:f5:fa:ec: 13:4d:2d:3a:5a:bf:f2:8b:9f:93:1a:1b:fb:91:d7:6f:75:cf: 37:a4:fb:d3:e9:9c:54:43:ab:0c:88:7a:af:02:87:21:1b:fc: 5e:fc:88:36:54:c5:ba:f1:53:66:56:ae:93:be:44:1a:8f:6b: ac:92:54:b3:f2:51:fe:5f:24:11:6b:4b:1e:6c:cd:45:43:99: 46:18:59:5d:7e:cc:66:18:eb:ae:08:da:40:5a:0e:a1:d9:50: 3e:3e:a5:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIHjNTuDu7ikOzmS8CVVv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjUwNjA3MDIwMDI4WhcNMjUwNjA4MDIwMDI4WjAzMTEwLwYDVQQD EyhiODMyNGQ5YjI3ZmExZjY1YjAyMTQ1YWE1Y2I2ZGY2YmM5ODdhMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrl75lMqmeXLg+ehUuiWUeckFuM6 nC4k3LSS96ptsERoeUBQBT+9ZgogvCI1kqBrsECYpUm/hcIJmmGwhIB1V/Jm8Rj0 HuRwtuIxTeJ8I6lQphPIbhp+p0lrSFMvE+AaMZvTFLruewU1/RmCpSaqHzlPfrC+ gIdL9QiqbE9lNj1pLwZqlQwJPigZKKWIYKDcLH9Svn+eove7gI84iKpxHzIXIXkq 8+spozFK7ogXX4TOFCghzfPnw7TYzvIJck1tY1olFcqxh9Aqml9KdqauvGUjlAg4 n5gZr8icWGQBN5ClvAzXrPVpu4WJLOsUbKbbjhl1YETu83CA5HkvTf307QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgyTZsn+h9lsCFFqly232vJh6ERMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKzA+tPE nV8y1l63yLw3gD6Mj0+DFfoXPtZ8WXOrrGm1DAHQF2hGyjvh7Xg1UrmjlhTBIWKq Jeyl88EkEfWpazrVNrv3FHollRYlH9uF56zPYHwRUhYvixgh/4l9agNeoztVcIgG 9KUPui2U4gMUR3P0izVOn9M1qM9arCiF2E5KDRKl9LgU4gkb5ldwwMUaBtPVo6VH xGA5iha8j4hK9frsE00tOlq/8oufkxob+5HXb3XPN6T70+mcVEOrDIh6rwKHIRv8 XvyINlTFuvFTZlauk75EGo9rrJJUs/JR/l8kEWtLHmzNRUOZRhhZXX7MZhjrrgja QFoOodlQPj6l/g== -----END CERTIFICATE-----Generated at Sat Jun 7 09:15:30 2025 by rpki-client