$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: 1xa1Y28T/FvLzsihc+wPul4SWIN921T9pSNt45hAMds= Subject key identifier: 7B:51:D8:7E:AB:1C:79:49:C1:3F:D9:9D:C3:7E:8E:40:34:E2:6D:64 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019769CEF6FB82BC97809ABB5953AC43943A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0BEF Signing time: Fri 13 Jun 2025 15:01:00 +0000 Manifest this update: Fri 13 Jun 2025 15:01:00 +0000 Manifest next update: Sat 14 Jun 2025 15:01:00 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: 7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa (hash: mR7T3WuKSbdAtTzSYp0E3OKslQutZqhI3l0DzsTdKEc=) 3: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 4: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 5: LB_t08DPTNyxU120z1nclHuMwMI.roa (hash: tD2v/rZHmdopAY/iPcE41q7HJJs5sc+Muz0vNadXByE=) 6: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 7: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: t1CJ1puoKIB1Z/Fw1KQ/AiAj7djA3m+yC0SdrEw6q8w=) 8: NzO5JHHrowrlOrfRmJ6rlCKWAiI.roa (hash: mEn+H0KcivRIVdMWKafr2JpXW+KPhxm6nmi6vgCsBn4=) 9: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 10: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 11: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 12: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 13: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 14: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:ce:f6:fb:82:bc:97:80:9a:bb:59:53:ac:43:94:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Jun 13 15:01:00 2025 GMT Not After : Jun 14 15:01:00 2025 GMT Subject: CN=7b51d87eab1c7949c13fd99dc37e8e4034e26d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:f2:5e:44:4e:dc:36:88:6d:74:90:14:0c: 53:b8:27:d3:bf:d2:21:eb:b0:b4:7e:07:b1:61:67: b8:64:64:e5:25:1c:a8:ab:f9:1b:c2:b3:04:e4:0e: ac:1a:6c:29:6c:36:8d:43:0f:4c:e3:a9:42:cc:09: f3:6f:65:b0:65:29:1a:56:f3:d0:5d:87:02:53:43: 73:9e:12:e9:d3:24:e6:e2:b3:c1:e9:8d:9c:57:f1: d1:d3:f0:9a:b7:cb:9a:df:d2:95:3c:65:61:6c:27: 25:1f:cc:f5:d7:a2:25:ce:9d:d7:47:d9:70:a5:db: 94:b4:3a:ff:b7:01:9d:4c:9b:cd:46:b6:66:f1:d7: ca:a5:d5:fa:e6:72:d5:bc:40:41:09:af:33:8c:6e: ba:2f:46:96:cb:38:c3:c7:6f:5d:f2:75:a5:19:3e: f4:a2:3d:45:6f:a1:8c:76:3a:1d:42:b0:3e:a8:ff: ea:24:e0:eb:37:55:8d:e9:d9:29:45:9f:ec:21:c8: f8:93:22:9f:e0:ad:3b:3e:99:66:28:be:c6:b8:ac: 2d:25:24:ed:cb:5a:f1:99:34:97:38:e4:17:cc:a0: e2:f4:cd:a2:5d:4d:61:dd:9f:33:4c:69:2d:90:47: 05:f4:da:d7:44:e1:7b:c7:3f:58:2d:87:69:22:19: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:51:D8:7E:AB:1C:79:49:C1:3F:D9:9D:C3:7E:8E:40:34:E2:6D:64 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fe:d2:0e:e4:f3:8f:4a:7c:ec:73:b8:74:5c:58:ee:16:09: 86:0d:2a:34:12:e4:7d:68:f7:2c:d3:a3:da:39:f1:b5:07:5d: c7:a3:b2:46:a3:8b:b0:73:0d:8d:31:26:5a:c5:df:e1:e4:d2: d2:c4:a8:1a:de:13:10:b7:31:69:1d:3b:60:50:b6:af:33:6a: 53:52:e4:a0:52:49:66:53:65:b2:1d:89:24:e4:38:e5:aa:f3: ff:04:dc:6e:6a:b4:77:c6:5b:45:09:31:bd:79:ee:cf:f0:16: ca:37:a0:3f:fe:7c:f7:70:ed:ef:b8:59:f5:9e:1b:83:75:98: 30:d9:06:68:ec:c1:c6:ae:b1:17:20:47:8b:cb:38:b5:e2:94: 5e:24:b4:05:13:2b:3e:35:eb:49:d2:82:9a:3f:d7:54:b8:d5: 73:01:ba:17:0f:72:7e:16:7c:dc:f1:1f:e9:66:09:3d:2b:40: d0:01:bc:0a:96:d3:c0:ed:ab:2b:a8:d4:f6:1a:2d:d2:49:97: cf:6f:02:e6:27:c2:c8:75:20:df:8f:57:c2:55:a7:b2:a9:78: 4b:af:5e:08:14:53:00:d1:6a:14:eb:22:8f:dc:f4:b1:e3:18: 21:d0:d4:f2:1f:c9:fd:72:4b:85:e9:33:f1:4e:0a:f8:c1:c7: 91:07:8a:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpzvb7gryXgJq7WVOsQ5Q6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUwNjEzMTUwMTAwWhcNMjUwNjE0MTUwMTAwWjAzMTEwLwYDVQQD Eyg3YjUxZDg3ZWFiMWM3OTQ5YzEzZmQ5OWRjMzdlOGU0MDM0ZTI2ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrnyXkRO3DaIbXSQFAxTuCfTv9Ih 67C0fgexYWe4ZGTlJRyoq/kbwrME5A6sGmwpbDaNQw9M46lCzAnzb2WwZSkaVvPQ XYcCU0NznhLp0yTm4rPB6Y2cV/HR0/Cat8ua39KVPGVhbCclH8z116Ilzp3XR9lw pduUtDr/twGdTJvNRrZm8dfKpdX65nLVvEBBCa8zjG66L0aWyzjDx29d8nWlGT70 oj1Fb6GMdjodQrA+qP/qJODrN1WN6dkpRZ/sIcj4kyKf4K07PplmKL7GuKwtJSTt y1rxmTSXOOQXzKDi9M2iXU1h3Z8zTGktkEcF9NrXROF7xz9YLYdpIhlb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtR2H6rHHlJwT/ZncN+jkA04m1kMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXf7SDuTz j0p87HO4dFxY7hYJhg0qNBLkfWj3LNOj2jnxtQddx6OyRqOLsHMNjTEmWsXf4eTS 0sSoGt4TELcxaR07YFC2rzNqU1LkoFJJZlNlsh2JJOQ45arz/wTcbmq0d8ZbRQkx vXnuz/AWyjegP/5893Dt77hZ9Z4bg3WYMNkGaOzBxq6xFyBHi8s4teKUXiS0BRMr PjXrSdKCmj/XVLjVcwG6Fw9yfhZ83PEf6WYJPStA0AG8CpbTwO2rK6jU9hot0kmX z28C5ifCyHUg349XwlWnsql4S69eCBRTANFqFOsij9z0seMYIdDU8h/J/XJLhekz 8U4K+MHHkQeKVQ== -----END CERTIFICATE-----Generated at Fri Jun 13 19:27:25 2025 by rpki-client