$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: fZfQObk+plrl68r4fixPBC57KjazWTTuxa+xekuv/Q4= Subject key identifier: 6A:E1:EA:DB:37:53:DE:FA:08:02:CE:DB:92:A1:D1:0E:47:9F:B7:01 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019745F96BB61A344A7BFA595B946E1CA497 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 0216 Signing time: Fri 06 Jun 2025 16:01:03 +0000 Manifest this update: Fri 06 Jun 2025 16:01:03 +0000 Manifest next update: Sat 07 Jun 2025 16:01:03 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 4: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 5: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 11: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (hash: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 17: dQFzxDl8wpWYm4T2jJSs9WUCcAY.roa (hash: r2kQ53HaLn0AeVHSBwXCWWUEat4nqLZvUWPyfBVscGQ=) 18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: IGfjj3ZOexrVcskSQYJkk7LOxAgq7xXcsf1Y2z3yLE8=) 19: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 20: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 21: rLFXbl__3TAOb3S5Cx0KvKn5se8.roa (hash: JoWfelx8Wab0+mon7O7zO9ngmwLQkIC05SIGqXCeWe8=) 22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:f9:6b:b6:1a:34:4a:7b:fa:59:5b:94:6e:1c:a4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jun 6 16:01:03 2025 GMT Not After : Jun 7 16:01:03 2025 GMT Subject: CN=6ae1eadb3753defa0802cedb92a1d10e479fb701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:cb:39:61:d9:fa:80:93:0e:68:7b:c4:f9: 33:91:f2:17:5b:44:79:d9:43:a1:36:4d:46:d3:e6: 1d:33:64:76:59:1f:93:29:bb:d3:9c:fb:49:29:54: 45:cf:3b:32:31:d5:cb:c8:11:08:51:7c:ca:4a:6b: c5:3a:10:cc:d6:53:5b:8d:46:11:a7:b8:cd:a2:46: 1c:65:f3:26:f3:c9:e1:9c:66:7b:55:e1:51:8c:16: 1a:1c:77:7e:bc:98:4c:c2:03:db:f9:9b:65:0f:a5: 11:26:23:49:cc:86:0d:a2:e3:a0:cb:7e:a0:9b:98: ad:cf:ff:49:1d:71:34:e2:3b:13:4d:b6:2f:f3:32: 9d:b5:3a:35:bf:e0:07:be:40:b9:b9:22:09:eb:06: d9:1d:0a:98:fd:13:d7:37:1c:fd:e2:1e:42:d7:e7: d3:d1:0e:18:aa:c7:1c:8d:21:7a:b4:3e:a4:c9:ff: 21:14:3c:44:8d:90:63:c1:69:7b:70:2f:e9:14:d4: 55:71:b1:2a:44:27:22:09:72:01:4c:dd:33:b3:fa: a6:d4:55:de:d6:e2:1e:ae:0b:fd:17:c7:b0:04:6e: fd:f5:e1:30:6e:29:fd:2b:77:43:66:10:68:be:8b: 87:49:8a:a2:50:f5:b5:1c:07:ac:21:c1:41:1c:a3: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:EA:DB:37:53:DE:FA:08:02:CE:DB:92:A1:D1:0E:47:9F:B7:01 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:30:49:86:2f:e3:a0:02:9d:4c:29:0c:b2:70:fd:17:e4:fd: 0b:72:af:9b:e8:46:a4:09:99:62:f2:8e:37:c3:89:b0:56:2a: 81:58:da:b3:5f:48:ec:c5:e1:b8:7d:3a:65:c5:7b:fe:96:8a: 02:38:6f:6f:dc:a2:2a:a3:24:3c:ec:39:25:59:3e:15:7a:2f: 03:22:3f:8a:7f:2a:6f:f0:24:74:74:4f:f4:73:47:06:f2:e0: 16:e7:db:e6:f3:d2:7f:b2:27:f6:90:7d:f7:06:83:01:16:cc: eb:3a:33:af:7b:2e:89:18:2e:33:4d:73:96:a2:a4:e2:f1:e5: 72:7f:6f:fb:be:38:cb:e6:2b:58:0b:db:bd:7f:fe:fd:3c:75: ff:41:f0:3a:e5:09:cd:a8:c5:20:81:02:49:3c:02:16:33:b1: 1c:b4:cd:37:6c:83:02:66:64:dd:cc:56:a2:78:4a:35:a2:58: ae:ec:cd:af:89:9a:a9:a1:cb:0a:6f:04:d5:66:cf:2e:ab:e4: 4d:b3:e4:cd:54:a8:60:c0:e8:6b:ed:94:37:bf:15:58:43:39: be:a1:1b:61:9f:4a:ba:73:a0:4d:c6:c2:4c:fc:08:18:96:ca: d4:35:c4:62:9a:37:e2:5f:0c:d5:bc:b7:a5:f1:d2:06:bc:76: 73:31:f2:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdF+Wu2GjRKe/pZW5RuHKSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwNjA2MTYwMTAzWhcNMjUwNjA3MTYwMTAzWjAzMTEwLwYDVQQD Eyg2YWUxZWFkYjM3NTNkZWZhMDgwMmNlZGI5MmExZDEwZTQ3OWZiNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFnLOWHZ+oCTDmh7xPkzkfIXW0R5 2UOhNk1G0+YdM2R2WR+TKbvTnPtJKVRFzzsyMdXLyBEIUXzKSmvFOhDM1lNbjUYR p7jNokYcZfMm88nhnGZ7VeFRjBYaHHd+vJhMwgPb+ZtlD6URJiNJzIYNouOgy36g m5itz/9JHXE04jsTTbYv8zKdtTo1v+AHvkC5uSIJ6wbZHQqY/RPXNxz94h5C1+fT 0Q4YqsccjSF6tD6kyf8hFDxEjZBjwWl7cC/pFNRVcbEqRCciCXIBTN0zs/qm1FXe 1uIergv9F8ewBG799eEwbin9K3dDZhBovouHSYqiUPW1HAesIcFBHKMI6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrh6ts3U976CALO25Kh0Q5Hn7cBMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDBJhi/j oAKdTCkMsnD9F+T9C3Kvm+hGpAmZYvKON8OJsFYqgVjas19I7MXhuH06ZcV7/paK Ajhvb9yiKqMkPOw5JVk+FXovAyI/in8qb/AkdHRP9HNHBvLgFufb5vPSf7In9pB9 9waDARbM6zozr3suiRguM01zlqKk4vHlcn9v+744y+YrWAvbvX/+/Tx1/0HwOuUJ zajFIIECSTwCFjOxHLTNN2yDAmZk3cxWonhKNaJYruzNr4maqaHLCm8E1WbPLqvk TbPkzVSoYMDoa+2UN78VWEM5vqEbYZ9KunOgTcbCTPwIGJbK1DXEYpo34l8M1by3 pfHSBrx2czHySQ== -----END CERTIFICATE-----Generated at Fri Jun 6 20:43:40 2025 by rpki-client