$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: ozualz4EUmDEw8CgkSkm1jF3x2mUyTKP8SavFmtsF5g= Subject key identifier: D7:62:BE:54:44:DF:D5:BF:A0:82:E2:5A:3C:54:8F:4B:AC:89:A8:AA Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 0197673BB296A87EFD4FE8E1A0F217731D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1590 Signing time: Fri 13 Jun 2025 03:00:55 +0000 Manifest this update: Fri 13 Jun 2025 03:00:55 +0000 Manifest next update: Sat 14 Jun 2025 03:00:55 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: yp5/n3w9YGehFRk2UhaDXKMqpp060NJdZKb4sh9zvVY=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:67:3b:b2:96:a8:7e:fd:4f:e8:e1:a0:f2:17:73:1d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jun 13 03:00:55 2025 GMT Not After : Jun 14 03:00:55 2025 GMT Subject: CN=d762be5444dfd5bfa082e25a3c548f4bac89a8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:fe:ef:53:09:00:68:f7:65:b5:02:fc:3e: 04:70:56:9c:36:60:77:51:12:bc:6d:d2:a5:cd:06: 4e:c8:3e:79:ac:13:ee:40:4b:d7:e7:82:7a:a3:2d: 58:3e:e2:59:1a:c3:21:8d:30:dd:97:18:2b:86:31: 43:d2:bd:f5:1a:30:ca:d3:db:5a:75:e6:aa:af:ab: 76:2f:d7:60:21:a7:98:b1:8f:ee:10:d4:30:53:db: 46:7e:92:fe:6c:d0:98:34:83:9a:8a:34:3b:23:25: 22:27:74:bb:6c:2a:d5:c6:bd:13:f3:8c:a5:38:a3: a4:76:cf:80:ba:7e:e8:1a:25:55:f5:03:4e:ec:0e: 1f:fc:b3:b9:e7:a8:bd:49:e8:b7:24:97:5d:5a:1c: d4:9b:04:ee:f5:d7:dc:45:c5:98:b4:84:62:f2:b3: b4:e2:8f:f1:40:60:92:8a:fc:5b:b3:26:ef:c1:74: 11:9e:66:43:32:78:db:b3:a6:53:0a:4c:52:80:ba: b5:7b:b0:b7:2f:4f:62:b2:89:b7:02:47:cb:06:1d: 75:bc:2f:64:cb:1d:cd:91:23:d3:1a:08:59:51:09: cf:24:80:29:c4:65:f1:43:ac:4d:7a:f7:3f:8a:45: 31:28:37:52:d2:ce:85:4a:00:f1:11:23:1e:f4:7a: b8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:62:BE:54:44:DF:D5:BF:A0:82:E2:5A:3C:54:8F:4B:AC:89:A8:AA X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d7:04:6b:9f:28:23:2f:b8:66:cd:bd:14:32:ba:4f:99:6a: f7:0e:b6:d1:60:43:f8:1c:e5:de:16:dd:c0:cf:0c:9a:5c:44: a0:3f:07:38:3a:db:e1:f4:12:95:74:7d:5c:f4:20:ee:dc:e1: c8:e4:7d:f4:38:59:40:27:19:bc:76:6e:f0:cf:5c:ac:81:d8: 03:aa:4f:30:9d:ea:83:b2:0d:bb:c4:5c:65:ae:fc:2e:99:24: d4:59:cb:59:a2:2e:f0:41:92:3f:f3:98:ba:17:d6:e5:52:7c: 70:c6:16:d2:48:31:5b:39:71:94:99:fd:69:44:43:08:71:4d: 51:f8:25:10:6a:4d:ed:0d:c8:02:f5:f9:26:19:86:ad:37:a3: 7e:a1:02:20:b1:6d:d2:37:c0:3e:47:84:68:13:8f:7d:a2:59: 73:52:7c:be:5f:c0:7b:6d:90:0f:7c:6e:c5:64:e4:c6:6c:dd: e8:42:7f:f4:3b:e6:d6:9d:9e:ff:ee:ea:8a:31:e2:82:b8:2a: 6a:6f:37:cc:23:5c:8d:16:90:8a:2d:ec:37:6c:fd:1a:45:71: ce:f1:08:a9:5d:62:e6:a1:1b:90:70:23:6a:60:dd:5b:86:4b: 62:f1:cd:b2:63:a2:48:d6:b2:46:39:77:03:a8:3e:17:79:cc: 3a:7a:00:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdnO7KWqH79T+jhoPIXcx03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwNjEzMDMwMDU1WhcNMjUwNjE0MDMwMDU1WjAzMTEwLwYDVQQD EyhkNzYyYmU1NDQ0ZGZkNWJmYTA4MmUyNWEzYzU0OGY0YmFjODlhOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYP+71MJAGj3ZbUC/D4EcFacNmB3 URK8bdKlzQZOyD55rBPuQEvX54J6oy1YPuJZGsMhjTDdlxgrhjFD0r31GjDK09ta deaqr6t2L9dgIaeYsY/uENQwU9tGfpL+bNCYNIOaijQ7IyUiJ3S7bCrVxr0T84yl OKOkds+Aun7oGiVV9QNO7A4f/LO556i9Sei3JJddWhzUmwTu9dfcRcWYtIRi8rO0 4o/xQGCSivxbsybvwXQRnmZDMnjbs6ZTCkxSgLq1e7C3L09isom3AkfLBh11vC9k yx3NkSPTGghZUQnPJIApxGXxQ6xNevc/ikUxKDdS0s6FSgDxESMe9Hq4BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdivlRE39W/oILiWjxUj0usiaiqMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9cEa58o Iy+4Zs29FDK6T5lq9w620WBD+Bzl3hbdwM8MmlxEoD8HODrb4fQSlXR9XPQg7tzh yOR99DhZQCcZvHZu8M9crIHYA6pPMJ3qg7INu8RcZa78Lpkk1FnLWaIu8EGSP/OY uhfW5VJ8cMYW0kgxWzlxlJn9aURDCHFNUfglEGpN7Q3IAvX5JhmGrTejfqECILFt 0jfAPkeEaBOPfaJZc1J8vl/Ae22QD3xuxWTkxmzd6EJ/9Dvm1p2e/+7qijHigrgq am83zCNcjRaQii3sN2z9GkVxzvEIqV1i5qEbkHAjamDdW4ZLYvHNsmOiSNayRjl3 A6g+F3nMOnoA8Q== -----END CERTIFICATE-----Generated at Fri Jun 13 13:00:16 2025 by rpki-client