$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft File: L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft (raw, json) Hash identifier: 9krYItwhIYfhba/JvU6gt61O8ulf9Gli9u2+8eN4tuY= Subject key identifier: 32:7D:05:AD:27:60:16:8F:4B:FD:77:D0:05:96:17:48:40:B7:F7:61 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019676E825F813F7871042D40A2603E1BE98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft Manifest number: 120F Signing time: Sun 27 Apr 2025 11:00:47 +0000 Manifest this update: Sun 27 Apr 2025 11:00:47 +0000 Manifest next update: Mon 28 Apr 2025 11:00:47 +0000 Files and hashes: 1: 1-6TUZdeaWuUfZoHz4FAGkpYPc4I.roa (hash: 0J2OSGJwBb5kAz+zyMm7vxWi9lhbUdLxvf6hoAONtig=) 2: 1L_vRC22IqYIH-VtViOIg4_tymc.roa (hash: EvSKqGAubmErHbQtHBeRFHADCc+76FT9AdKU1Tq406k=) 3: 1baR2TH2bkZJjYvndMUokyAPqQA.roa (hash: E0FwqtUkTcGf61m3Plhzzdm2PvOTZwBlWw4O6jp45Sw=) 4: 46TJpMAMKtKtiPKhzv5N3feHRq8.roa (hash: dujtOMCU+2WZqLSqMypgTKImwrRcaOi7kuB75rD2Cb8=) 5: 6iMaTHFTsqUj9C6N3n1kNSre4jY.roa (hash: kA+UJLoF1RPJVX0sIZK0dbgoCX7eXwgY8Eh7cxBhopQ=) 6: 7EKI8p6PMJObDFV0trfc180wlJk.roa (hash: PnKiqGQTgx/WF0ITX+g4HnQ7tRuvb0lmVC/xx2F+YKg=) 7: 7apJOyp0LATwvU2j5dIsjEWpC7g.roa (hash: PD+79uf5qzQQkUCfuXokELiusnktAp9x8YalY9Zh2Qo=) 8: AK-GXP22Mq6LrqTXeQb829qG3Ns.roa (hash: I9tR8b4bJ3xHN4Fn13ueJzF93f0zIpN/pK+/JDHI3XI=) 9: B6Itk7Uf7eBUE8vqL-Uyrcy9RGQ.roa (hash: 13h2MUXXvKWvbHRapuNi0DhkSEUd3tM8HWLBR3PYcOE=) 10: BoW2by1lN0g2YBGtk82GxuU6N7A.roa (hash: yruHTpQJiVTW71spIvzrVqpCkH7Qc9ckx2fSF4NvFOQ=) 11: CYA45jvCbEO2l0W0K4Yvuhonu7I.roa (hash: Z5HUS2DoouZlFaN9FRCtoYgwYCuLzEGUPo5jQZ0EKqc=) 12: DF9yRFAWYaxLwT3ruOrYKO1I2Ik.roa (hash: kTs4UQdxYwKyY0uupJ+G2/gOGPpzBvQfEDYM3ZB2yso=) 13: Eu3IYJJEEDfEARAjq0xcRGwEiac.roa (hash: hQP52oJBN+nDKWnkaeLIX6phrdLiLJI3Ha4/1ywF1zw=) 14: FrduA3d9hf8zRluB-LvsugAyZvE.roa (hash: crntf7vwfmq2JQSzVDLM15sjjrNW70Qx5rAXBtWknhs=) 15: HLSexlRS7cRMXGxrZKl2JJ0EIzY.roa (hash: oQQNe7K5/IbchAEMzcOhto4Vsr2KGH4LuGs1SxEGQIo=) 16: HbsyO5Ut_ka88PCOgvDpSMFZyq8.roa (hash: jCtFWPN5pcUn2iLSUbvpLI7JdhumMbRU/0oC6bbWKPU=) 17: L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl (hash: ZYdYdraxQsFjd06+Rd9t8DiqaftvQDlOeDUmrmzErzo=) 18: NYnTizXFf9F5HjKEvVAjXL7QL6I.roa (hash: fL33AJ4Ztl+pJzTGhHEI4tsqu3omS4AmMkxrxDRIKDo=) 19: NqXCTZLTQXiSirfU-JwehZTKoUo.roa (hash: Kn4cS2F4vXs96yjsH3h7V2HudZgt+xsxLImjfAfogvQ=) 20: PwHJZqekQGT1s20w37UBZbNwAug.roa (hash: ub/DAIcc6aVmEp+1ENRdQAlH9vQln9luF2+xviDdJZc=) 21: R93z7OB-7WREdE4V4BJbcBZ0VZE.roa (hash: R7MzzBh1v5Zg/xA+W0OHL25SLo/YagNekZBwX4TbWjQ=) 22: TCbobbp8FEBN_ibPMGgdPkoernw.roa (hash: Fk4KxvR5D2CmdrIDDLm/YTIgqnE8NkNgsK01+BVHxc0=) 23: TRb8pyi7Cuvhki1ZqhqyxguwWG4.roa (hash: kaRufk49tf+Opw8NLMJMjIb6AtSq5hMvYNyNYVlrtM8=) 24: UDbRypNOgOcwvK8XFvXDSmDZHmU.roa (hash: jhU1h7QJBrJh+xhr5fqliwF2zzB+GqGDZaPJlZO5TFc=) 25: VxB5wyEPMMHGsIgrTMnn0ta0TXg.roa (hash: dF01qJOvlqCUQfX3+m/1EpYD4bi83TnY1UObrlr43Qg=) 26: X62IC3DFH05KyHmdzIC5ZeS7uVY.roa (hash: oEKXfbiimVzIZVWp+Y85Pe11G1e46yPqO2i9gP4jxro=) 27: _Jt2cq-dgcIR8JCb6TIGQHCstiI.roa (hash: HheoHhkZF998Fh2qrnQYSKa5rHl2Nsopnd2pzxjannE=) 28: af4ObNKlTAQY3WJ6Z9MSMi9goec.roa (hash: 5yMEUCv4NX9QrdRcocOQ4y/BXPnbWhjlvU3aM23dUo8=) 29: agpfIzMH4Xp6DihM1ocjIcz1sAE.roa (hash: bZWY0+Wnaub75TqMLscGHpR1//+odcKr6qFclgBDckw=) 30: d24hcpvufBaQCH0AT3eyB2irC5Q.roa (hash: M+PAmsh5lroGoGNELrG+cFrgaEUIFZBuxcJ32Xq2rnQ=) 31: eb9wjOmz5kPPmuCQtsN1cn-klyE.roa (hash: erOQcOZWKsgViqrNUApVtSuFJsW2DxTD2hQnRRc4um0=) 32: hOVs8GGNWnmAIq2SoQvUfF5WJDo.roa (hash: U+uMEedSAfXbzbJQ3timT2D+Xt35jjJYcQm0n0kPf30=) 33: lV-JGGATot_O-owJIANA-p9iKog.roa (hash: b76ypLh8buKG/VNlGwh1rjnzYlLOOyxjF0ggOL+WBrE=) 34: q_A8SW_SmjBDzHI_LjhYX-_4wHE.roa (hash: SEL+UiOhXiSWfO5V8bPYfvzRrJrPu7DrmYvZMWDlcf4=) 35: qnV5Hej_TUgtUkVr50QeYituGsM.roa (hash: /uHwrUUizwAaJwUeauRQidUpOz8OR3evFbNnOMHVoFM=) 36: rkB6ZT4GVIEcFUggvDsLXXKKsP4.roa (hash: 1cWx6TTKEhhXNoJyxGva8yTvgB9y6I2MuAM6qLMtCZA=) 37: sFOCi_en07HfzmbiIWb04QiO-xU.roa (hash: rntI6vDplHfMbFLXqncHJ3hWl/CcnP07w3jHzsTuv2s=) 38: shuB_C4LkSlqcOa9sbrz-kg4IL8.roa (hash: 7PhaGPimF68NWyA4IO29W8QrZVKFS7qmrUs2JEilRqs=) 39: xJNMjhcs2CKF4gs7s3cSjihbPHE.roa (hash: WtXCqqQ+mN0THoRsM/EjcP4ikErJu04+eSqVNsrQ9BE=) 40: xbOTFEcYpBS54HTwxLkkwCMgw2w.roa (hash: deqlV11P7iIGL6/OPj5/QL/dXfo5BX5+SsvEYgpxEj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:e8:25:f8:13:f7:87:10:42:d4:0a:26:03:e1:be:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Apr 27 11:00:47 2025 GMT Not After : Apr 28 11:00:47 2025 GMT Subject: CN=327d05ad2760168f4bfd77d00596174840b7f761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:8d:0f:ab:89:90:de:74:a6:dd:dd:3f:b0: 6a:90:7f:ff:9c:6c:85:c4:9a:a5:5d:49:56:f6:10: 96:78:40:44:b4:5c:1e:7a:e3:3d:07:9f:0f:ec:f1: 38:74:f2:40:2c:83:a6:4a:3a:42:ab:47:76:64:54: 0e:4d:db:94:4b:84:a0:5f:58:17:c7:c8:3a:0e:22: 80:14:a6:8c:c2:70:7b:4d:6f:ab:28:e1:61:46:eb: bb:a1:ae:51:ba:50:c5:65:48:dd:20:c4:0f:77:02: 6e:89:7c:de:34:51:1d:bb:54:9e:6a:da:18:9c:3e: 3d:4c:92:77:01:84:1f:ef:3e:8d:bc:bb:29:5f:0d: 12:a2:08:f7:54:dc:da:5a:2a:ad:ec:8a:91:7e:2e: 38:8b:24:ea:d6:62:80:0c:9b:b1:1f:fa:b0:38:bb: eb:2d:ae:5b:50:66:bf:54:5f:92:e1:2e:3f:6b:ef: b3:f5:4c:33:c7:24:f9:57:17:1f:3c:c7:4d:3a:4b: e0:16:1b:c9:89:4a:cc:59:11:0a:f6:0f:a0:1a:fe: a1:bd:8c:54:37:f1:17:da:24:69:db:a7:44:a3:91: ca:01:ee:8e:9f:8a:c2:89:25:ce:39:71:3b:3e:09: d9:70:2e:6d:73:0f:89:17:58:73:01:12:21:55:2a: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:05:AD:27:60:16:8F:4B:FD:77:D0:05:96:17:48:40:B7:F7:61 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a4:ff:45:a5:84:7f:f3:55:c1:c8:f2:7c:bc:2e:ce:60:1b: d6:a4:45:e4:b1:5f:5c:ec:02:a7:42:0c:c0:df:30:ca:9c:02: 30:21:c2:0f:4b:3e:cc:45:b5:71:ed:ae:f9:5a:e8:fb:3f:71: f1:31:78:03:e6:72:d2:4e:1a:b1:64:e5:b1:24:d4:34:c0:3e: 4d:25:3b:cd:49:e9:64:b8:a4:91:80:3e:6f:81:09:7a:2a:62: 0b:8f:b1:68:58:27:ab:ba:e0:23:9b:c4:ba:84:7d:d9:d2:2d: 24:5b:c8:a8:97:cf:4d:0f:da:66:8a:1f:b5:cc:26:1f:d9:e8: f7:8a:d2:9c:90:9c:c0:7a:bb:b4:16:54:20:e2:7b:55:b9:65: c3:0c:bd:5c:22:28:0c:0b:f9:77:96:aa:4b:5c:4b:ca:9e:81: 0f:12:0b:fc:22:01:a1:8c:72:f9:07:33:12:0b:c7:28:ac:8b: 0d:1c:06:d8:0d:a0:a9:1e:86:79:86:93:86:28:81:6d:a2:c1: e5:76:8f:1a:47:ad:c9:03:b9:0d:02:46:e4:df:20:f0:a9:71: 3a:a5:e9:d7:d8:55:7c:5e:5a:99:2b:95:ad:7d:d6:51:8e:b4: 6c:3e:8b:d6:ad:92:3a:e5:d6:ce:aa:e2:cd:fb:5b:68:02:3b: 42:81:d0:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ26CX4E/eHEELUCiYD4b6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjUwNDI3MTEwMDQ3WhcNMjUwNDI4MTEwMDQ3WjAzMTEwLwYDVQQD EygzMjdkMDVhZDI3NjAxNjhmNGJmZDc3ZDAwNTk2MTc0ODQwYjdmNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6yND6uJkN50pt3dP7BqkH//nGyF xJqlXUlW9hCWeEBEtFweeuM9B58P7PE4dPJALIOmSjpCq0d2ZFQOTduUS4SgX1gX x8g6DiKAFKaMwnB7TW+rKOFhRuu7oa5RulDFZUjdIMQPdwJuiXzeNFEdu1SeatoY nD49TJJ3AYQf7z6NvLspXw0Sogj3VNzaWiqt7IqRfi44iyTq1mKADJuxH/qwOLvr La5bUGa/VF+S4S4/a++z9UwzxyT5VxcfPMdNOkvgFhvJiUrMWREK9g+gGv6hvYxU N/EX2iRp26dEo5HKAe6On4rCiSXOOXE7PgnZcC5tcw+JF1hzARIhVSohLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ9Ba0nYBaPS/130AWWF0hAt/dhMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKT/RaWE f/NVwcjyfLwuzmAb1qRF5LFfXOwCp0IMwN8wypwCMCHCD0s+zEW1ce2u+Vro+z9x 8TF4A+Zy0k4asWTlsSTUNMA+TSU7zUnpZLikkYA+b4EJeipiC4+xaFgnq7rgI5vE uoR92dItJFvIqJfPTQ/aZooftcwmH9no94rSnJCcwHq7tBZUIOJ7Vbllwwy9XCIo DAv5d5aqS1xLyp6BDxIL/CIBoYxy+QczEgvHKKyLDRwG2A2gqR6GeYaThiiBbaLB 5XaPGketyQO5DQJG5N8g8KlxOqXp19hVfF5amSuVrX3WUY60bD6L1q2SOuXWzqri zftbaAI7QoHQ7A== -----END CERTIFICATE-----Generated at Sun Apr 27 20:29:17 2025 by rpki-client