$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: pvCApV0CUQQ3H5Goq1+i4WuUHHVSkCNmud+lDmf4kv0= Subject key identifier: 06:37:2A:6B:FF:FA:B4:A0:F7:6A:8F:3A:E8:A7:22:1D:AC:59:0A:66 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 01987C7806A98C6B8750A9C7CF2CF8858BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0C80 Signing time: Tue 05 Aug 2025 23:01:37 +0000 Manifest this update: Tue 05 Aug 2025 23:01:37 +0000 Manifest next update: Wed 06 Aug 2025 23:01:37 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: 7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa (hash: mR7T3WuKSbdAtTzSYp0E3OKslQutZqhI3l0DzsTdKEc=) 3: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 4: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 5: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 6: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: uONM9Ni7v7GNxtwtnKElf5h5zc0YWC3KSIDScVgYmUI=) 7: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 8: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 9: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 10: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 11: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 12: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) 13: ny_FOqKdcKxW2aMlHbVAlwWW-0g.roa (hash: bVovQUFF5/cCoKkjWHFqwVp9ffYI5r3hMJ9pZsZnKpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 17:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:78:06:a9:8c:6b:87:50:a9:c7:cf:2c:f8:85:8b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Aug 5 23:01:37 2025 GMT Not After : Aug 6 23:01:37 2025 GMT Subject: CN=06372a6bfffab4a0f76a8f3ae8a7221dac590a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:33:e9:db:2a:4e:57:f6:9f:b3:9f:7a:cf: 62:ef:3d:3a:83:b6:b6:37:8c:7f:5a:3b:b7:5c:21: e8:d6:45:47:15:b1:bf:27:a2:c9:5d:d3:0f:8a:dc: ea:c4:ba:97:4e:08:3f:26:39:38:05:20:a7:fe:16: 4d:31:86:5a:30:bd:0f:6b:64:b3:9f:0a:f9:45:30: a4:4b:6f:13:a2:01:d1:5b:5a:eb:56:f6:6d:b6:c5: 90:64:cd:db:c4:9c:2f:f9:29:8e:c0:3a:c4:4d:f2: 67:63:37:52:15:cf:4a:22:15:4d:2a:3b:23:a8:c3: 0a:aa:9c:7e:93:33:e7:7a:93:c2:06:69:f2:80:00: c3:0d:24:3b:46:eb:0c:59:41:59:71:1c:15:4a:08: e1:d4:53:22:b8:c4:d2:e5:5f:18:94:62:a3:5b:d5: 6a:65:38:9a:c2:11:3a:45:8f:9e:15:c5:9b:c0:fb: c4:0c:1e:b2:c7:f0:e2:15:e9:bb:12:ce:0f:fc:aa: 2b:1a:2f:f1:a6:1e:37:fa:86:6f:54:92:30:0b:e9: 21:2f:bc:69:59:a5:19:0c:46:f2:68:6a:57:b8:ae: b6:69:95:10:f2:4b:14:0d:44:b0:36:ca:76:8d:e0: e1:5e:a8:57:8f:ba:7a:61:e2:b7:99:28:32:4f:35: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:37:2A:6B:FF:FA:B4:A0:F7:6A:8F:3A:E8:A7:22:1D:AC:59:0A:66 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2e:57:e8:60:ff:eb:82:16:18:86:e6:7c:95:92:a6:cd:ea: 06:89:30:7c:51:9d:4f:6a:16:ae:c2:60:30:19:ff:fe:fb:b6: 05:bf:1d:13:66:58:9e:30:e1:ef:ca:05:fa:4e:5b:d6:48:86: 42:16:6c:68:96:a0:33:9a:8c:26:ca:b1:94:eb:f2:dc:de:3b: 8f:c7:76:a1:23:c4:f6:2f:67:5c:9f:bd:1c:02:f9:c6:51:a2: 29:90:02:54:d2:1c:95:8f:98:8e:df:a1:70:d3:3f:c6:82:fe: 06:0b:d6:45:bc:0d:85:3f:74:7b:91:c2:0b:80:32:d8:19:50: c2:cb:c8:7d:b6:24:c9:0e:ff:42:ba:5b:0a:f9:ee:40:06:22: 67:0c:64:05:41:f4:f6:cf:83:a0:c5:2b:34:f0:1b:33:73:5a: 39:ab:3f:c9:6e:cd:77:5f:4c:92:ec:af:15:d7:f2:38:bf:ca: 72:4c:97:59:59:38:8d:90:9c:bf:5a:30:ea:cf:56:a3:73:9f: e5:31:82:20:10:b9:ab:37:8d:b4:87:1c:71:84:af:5f:ea:e5: b0:a7:82:a9:e5:e4:a3:b9:e3:3f:48:d5:72:f6:c6:71:8f:56: 11:31:79:83:6f:96:ce:e9:af:98:6b:77:2f:6b:e5:a2:0a:ee: 5d:ba:ac:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh8eAapjGuHUKnHzyz4hYumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUwODA1MjMwMTM3WhcNMjUwODA2MjMwMTM3WjAzMTEwLwYDVQQD EygwNjM3MmE2YmZmZmFiNGEwZjc2YThmM2FlOGE3MjIxZGFjNTkwYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5gz6dsqTlf2n7Ofes9i7z06g7a2 N4x/Wju3XCHo1kVHFbG/J6LJXdMPitzqxLqXTgg/Jjk4BSCn/hZNMYZaML0Pa2Sz nwr5RTCkS28TogHRW1rrVvZttsWQZM3bxJwv+SmOwDrETfJnYzdSFc9KIhVNKjsj qMMKqpx+kzPnepPCBmnygADDDSQ7RusMWUFZcRwVSgjh1FMiuMTS5V8YlGKjW9Vq ZTiawhE6RY+eFcWbwPvEDB6yx/DiFem7Es4P/KorGi/xph43+oZvVJIwC+khL7xp WaUZDEbyaGpXuK62aZUQ8ksUDUSwNsp2jeDhXqhXj7p6YeK3mSgyTzXYrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY3Kmv/+rSg92qPOuinIh2sWQpmMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy5X6GD/ 64IWGIbmfJWSps3qBokwfFGdT2oWrsJgMBn//vu2Bb8dE2ZYnjDh78oF+k5b1kiG QhZsaJagM5qMJsqxlOvy3N47j8d2oSPE9i9nXJ+9HAL5xlGiKZACVNIclY+Yjt+h cNM/xoL+BgvWRbwNhT90e5HCC4Ay2BlQwsvIfbYkyQ7/QrpbCvnuQAYiZwxkBUH0 9s+DoMUrNPAbM3NaOas/yW7Nd19MkuyvFdfyOL/KckyXWVk4jZCcv1ow6s9Wo3Of 5TGCIBC5qzeNtIcccYSvX+rlsKeCqeXko7njP0jVcvbGcY9WETF5g2+WzumvmGt3 L2vlogruXbqsuA== -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:12 2025 by rpki-client