$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: rhYH8b/4oZLtqy53fha9g80nKiAXaXxfT0zoxgmRP8o= Subject key identifier: 4A:7A:20:D3:BD:C0:CC:EF:6C:BA:7B:27:B0:66:66:BD:21:29:82:CE Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 0197458AF7EB419B01AEBBEA28DF9B665F65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 1589 Signing time: Fri 06 Jun 2025 14:00:24 +0000 Manifest this update: Fri 06 Jun 2025 14:00:24 +0000 Manifest next update: Sat 07 Jun 2025 14:00:24 +0000 Files and hashes: 1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=) 2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=) 3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=) 4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=) 5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=) 6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=) 7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: Dqj6E9ni6V9/b8FwyCVaJAYOteoHsEOXYEmYK360Skw=) 8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=) 9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=) 10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=) 11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:8a:f7:eb:41:9b:01:ae:bb:ea:28:df:9b:66:5f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jun 6 14:00:24 2025 GMT Not After : Jun 7 14:00:24 2025 GMT Subject: CN=4a7a20d3bdc0ccef6cba7b27b06666bd212982ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:a5:2d:57:7c:ac:01:30:0d:78:79:f9:aa: bc:d6:0a:ef:8c:f1:1c:81:db:41:8f:97:0d:95:31: d6:a2:e9:45:f0:b9:71:f2:1d:93:fa:ba:f2:72:7c: 78:25:90:ab:23:b2:cb:9e:3a:e8:74:05:1c:90:f8: 72:1e:85:f6:30:f0:3a:94:4b:3e:00:ac:59:89:b3: 9d:7b:b9:c1:17:de:a5:ff:0a:f5:52:a5:ce:5b:91: 05:7e:09:78:31:d3:5f:22:47:64:da:9b:b5:11:24: a3:63:e4:fb:47:74:5d:b5:3f:35:fc:4c:27:e2:b2: 9c:73:de:29:20:57:30:7b:71:73:03:0e:1e:e2:df: 77:d3:78:1d:48:f6:7c:11:6f:29:6f:5d:d7:cb:cb: 0a:aa:6e:46:86:4f:1e:e9:b5:69:42:7c:be:1a:01: f7:75:bc:7c:cd:06:aa:47:7b:88:c1:5d:58:47:0e: d6:07:3d:43:f5:64:2e:0a:dd:e0:8c:11:1e:c4:19: d2:ea:39:a5:86:76:45:7d:c7:c7:ea:18:b7:a3:7b: 4e:69:53:07:89:23:a1:51:5b:02:bf:08:2e:ef:b1: b7:ef:74:7b:48:eb:21:4f:e4:e6:4d:a9:8b:40:9c: 98:cf:58:02:17:cd:20:4b:46:07:29:6a:8c:89:4a: 2d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:20:D3:BD:C0:CC:EF:6C:BA:7B:27:B0:66:66:BD:21:29:82:CE X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:87:fc:c2:18:46:7d:a8:b6:b6:88:1c:42:bc:bc:43:97:3d: 76:fc:cb:f2:39:79:d0:b6:c1:e9:b2:f1:0e:6d:eb:9b:3d:8f: 0f:41:88:95:5f:79:a6:6a:bb:e0:ad:27:8a:01:bc:f4:6b:d8: 6e:e7:6d:8d:2c:97:0e:5a:d5:14:5e:0c:fd:15:28:7a:2a:37: 40:e1:92:c5:30:c8:2d:f5:02:f5:a9:48:6a:23:7c:2b:a3:09: e7:ec:c1:4f:13:34:5a:79:9b:8a:92:5e:82:77:d1:68:fb:44: 3e:b3:f1:7b:93:01:49:85:a2:ad:dc:a3:70:08:4b:54:3b:3e: 0a:a8:e3:3f:ed:b5:0d:6f:e7:b0:4f:88:70:d8:27:27:41:cf: b7:6f:32:f3:a4:f5:52:72:00:7a:b9:74:0c:af:fd:87:ae:51: 13:22:16:f3:35:99:99:29:f4:25:eb:6e:7a:c4:7d:4e:e5:bc: 29:45:be:21:a4:18:5a:82:52:8a:4c:66:cc:5d:bf:83:c8:7b: 45:34:88:4d:fe:53:d3:30:5b:56:0b:fa:f3:0b:f7:4a:dd:34: 41:14:59:ad:13:43:80:7e:51:56:7d:9a:42:a8:f4:09:1f:31: 3c:f5:d7:ce:73:86:07:9c:01:13:3b:43:78:14:b1:66:be:e9: 77:8e:17:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdFivfrQZsBrrvqKN+bZl9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjUwNjA2MTQwMDI0WhcNMjUwNjA3MTQwMDI0WjAzMTEwLwYDVQQD Eyg0YTdhMjBkM2JkYzBjY2VmNmNiYTdiMjdiMDY2NjZiZDIxMjk4MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBulLVd8rAEwDXh5+aq81grvjPEc gdtBj5cNlTHWoulF8Llx8h2T+rrycnx4JZCrI7LLnjrodAUckPhyHoX2MPA6lEs+ AKxZibOde7nBF96l/wr1UqXOW5EFfgl4MdNfIkdk2pu1ESSjY+T7R3RdtT81/Ewn 4rKcc94pIFcwe3FzAw4e4t9303gdSPZ8EW8pb13Xy8sKqm5Ghk8e6bVpQny+GgH3 dbx8zQaqR3uIwV1YRw7WBz1D9WQuCt3gjBEexBnS6jmlhnZFfcfH6hi3o3tOaVMH iSOhUVsCvwgu77G373R7SOshT+TmTamLQJyYz1gCF80gS0YHKWqMiUotUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEp6INO9wMzvbLp7J7BmZr0hKYLOMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Yf8whhG fai2togcQry8Q5c9dvzL8jl50LbB6bLxDm3rmz2PD0GIlV95pmq74K0nigG89GvY budtjSyXDlrVFF4M/RUoeio3QOGSxTDILfUC9alIaiN8K6MJ5+zBTxM0WnmbipJe gnfRaPtEPrPxe5MBSYWirdyjcAhLVDs+CqjjP+21DW/nsE+IcNgnJ0HPt28y86T1 UnIAerl0DK/9h65REyIW8zWZmSn0JetuesR9TuW8KUW+IaQYWoJSikxmzF2/g8h7 RTSITf5T0zBbVgv68wv3St00QRRZrRNDgH5RVn2aQqj0CR8xPPXXznOGB5wBEztD eBSxZr7pd44XZQ== -----END CERTIFICATE-----Generated at Fri Jun 6 18:06:41 2025 by rpki-client