$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft File: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json) Hash identifier: UvMjtaZG3TYWHq5FjzmTd6ydHoEyV0BAtvfhApAVICk= Subject key identifier: 74:3A:70:A0:4D:08:0E:02:D7:01:56:41:2E:4C:C0:5E:02:3E:3D:46 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019602D2B009617E81B87234D3BE6C34803A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft Manifest number: 016E Signing time: Fri 04 Apr 2025 22:01:24 +0000 Manifest this update: Fri 04 Apr 2025 22:01:24 +0000 Manifest next update: Sat 05 Apr 2025 22:01:24 +0000 Files and hashes: 1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=) 2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=) 3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=) 4: 7BNQ2WRC9mqVcxGKa4gOpXhAtQM.roa (hash: HEjXNQhd/XucaxVi3N/EqUYQF92/C6SM89pPfjxWOkY=) 5: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=) 6: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=) 7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=) 8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=) 9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=) 10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=) 11: Ljre19ORDYBEFOUyuoXkd9jD1u0.roa (hash: 33uPuD1w4+oML7b32Q7jZgXZW5mXNe1nA9o+6OKAxEI=) 12: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=) 13: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=) 14: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=) 15: VLwqTH6B4TPTYv5s-MUcft_BZ5o.roa (hash: rOh8jDOcKV3CEf7D3OD8TY+btsFrLhBc0HKI0Z0kPDU=) 16: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=) 17: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=) 18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: 7v31H5MmFHSWH02YvRaV30vOYOxnkepw74Ij0ebXBBo=) 19: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=) 20: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=) 21: rLFXbl__3TAOb3S5Cx0KvKn5se8.roa (hash: JoWfelx8Wab0+mon7O7zO9ngmwLQkIC05SIGqXCeWe8=) 22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=) 23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=) 24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:d2:b0:09:61:7e:81:b8:72:34:d3:be:6c:34:80:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Apr 4 22:01:24 2025 GMT Not After : Apr 5 22:01:24 2025 GMT Subject: CN=743a70a04d080e02d70156412e4cc05e023e3d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:cc:62:83:29:1a:f0:9d:ce:35:e9:27:14: 2b:53:3a:84:94:37:02:e4:29:16:3b:97:66:74:59: 5d:ba:c3:80:41:eb:b2:8e:67:75:da:2d:2b:15:6e: ca:e3:d2:0d:32:b2:9e:65:08:ce:ce:30:83:f8:7a: a6:09:2d:b3:94:f2:76:72:5b:e7:7d:ab:3f:1c:36: 3c:7c:26:b7:5d:d4:40:59:78:9a:c9:01:ad:74:02: 5a:bb:53:d9:13:1b:eb:1c:00:54:01:ba:46:84:10: b5:38:dd:da:5c:c0:81:f9:c0:f3:47:9f:e1:81:3d: 3c:18:38:87:73:aa:d8:6a:d2:a5:5d:af:7a:c0:cf: 59:9d:43:1a:8c:86:ef:3e:95:83:88:c0:33:b5:19: 6f:00:1b:0f:a5:8b:a2:d6:02:a6:41:dc:22:78:16: 0b:0a:33:ec:12:cc:ea:ed:6f:b7:f0:b9:5f:28:4d: ca:99:5b:93:4b:bb:95:7d:38:6c:e1:db:89:68:52: db:3b:f0:5a:4e:bb:c8:62:18:ae:b3:82:36:62:b0: 05:ee:10:9f:89:07:e2:97:0a:63:6b:22:ff:24:c0: a4:11:b3:29:ff:1a:f9:bc:b9:b9:ad:33:52:fa:d3: f0:9c:b8:49:b2:a1:c6:5a:39:8c:56:09:44:e6:08: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3A:70:A0:4D:08:0E:02:D7:01:56:41:2E:4C:C0:5E:02:3E:3D:46 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4d:5c:3e:c2:fa:90:b9:05:12:e1:c9:a5:bb:eb:65:7b:0a: 1e:08:1a:ee:44:68:36:21:26:27:26:7f:17:1b:5c:c5:0a:60: 95:7a:61:9c:65:8a:cb:41:ab:ec:ac:22:86:00:45:8a:72:eb: 5c:d7:7a:91:42:f9:77:ca:9e:92:75:7b:e4:48:6e:37:73:0c: 2e:11:29:0b:0e:37:e0:6d:23:1e:57:35:12:12:bd:e0:37:21: 8a:80:bb:45:66:d0:32:70:16:fa:94:d7:3a:70:fe:3e:4b:4f: df:14:28:71:bf:f0:68:07:41:e0:6c:30:a9:68:97:67:56:8a: 9d:83:a1:7c:1e:c8:a5:a9:32:b0:4e:c6:3c:af:8c:0c:30:67: 5f:05:ae:71:2c:77:c9:c0:f8:7d:c5:89:28:8e:f4:d8:5b:f3: f4:da:0d:3f:61:65:d5:c9:eb:ec:2d:43:f5:a2:53:48:35:5d: bf:44:c5:f3:5b:78:e6:1e:3e:45:fb:e6:93:de:61:10:e4:1d: 7e:fb:c6:c8:91:1e:a6:5f:1b:9c:7a:62:5a:d3:fa:c0:15:59: 62:f9:c3:ca:53:54:d5:fb:8b:ec:82:dc:7e:89:9b:84:fb:86: 69:7c:99:32:7f:ed:84:4f:9f:61:f1:5c:ec:ef:a2:39:2e:a4: 12:a6:5a:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYC0rAJYX6BuHI0075sNIA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjUwNDA0MjIwMTI0WhcNMjUwNDA1MjIwMTI0WjAzMTEwLwYDVQQD Eyg3NDNhNzBhMDRkMDgwZTAyZDcwMTU2NDEyZTRjYzA1ZTAyM2UzZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeHMYoMpGvCdzjXpJxQrUzqElDcC 5CkWO5dmdFldusOAQeuyjmd12i0rFW7K49INMrKeZQjOzjCD+HqmCS2zlPJ2clvn fas/HDY8fCa3XdRAWXiayQGtdAJau1PZExvrHABUAbpGhBC1ON3aXMCB+cDzR5/h gT08GDiHc6rYatKlXa96wM9ZnUMajIbvPpWDiMAztRlvABsPpYui1gKmQdwieBYL CjPsEszq7W+38LlfKE3KmVuTS7uVfThs4duJaFLbO/BaTrvIYhius4I2YrAF7hCf iQfilwpjayL/JMCkEbMp/xr5vLm5rTNS+tPwnLhJsqHGWjmMVglE5gisCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQ6cKBNCA4C1wFWQS5MwF4CPj1GMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU1cPsL6 kLkFEuHJpbvrZXsKHgga7kRoNiEmJyZ/FxtcxQpglXphnGWKy0Gr7KwihgBFinLr XNd6kUL5d8qeknV75EhuN3MMLhEpCw434G0jHlc1EhK94DchioC7RWbQMnAW+pTX OnD+PktP3xQocb/waAdB4GwwqWiXZ1aKnYOhfB7IpakysE7GPK+MDDBnXwWucSx3 ycD4fcWJKI702Fvz9NoNP2Fl1cnr7C1D9aJTSDVdv0TF81t45h4+Rfvmk95hEOQd fvvGyJEepl8bnHpiWtP6wBVZYvnDylNU1fuL7ILcfombhPuGaXyZMn/thE+fYfFc 7O+iOS6kEqZafw== -----END CERTIFICATE-----Generated at Sat Apr 5 00:30:10 2025 by rpki-client