$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: REtIa814FkD/pGVgJANl3xWy7S0pKSarOCoWVxJ1TCs= Subject key identifier: F1:CC:80:44:CD:1E:F9:44:7D:13:5E:4A:F8:1C:BB:B9:2A:A6:8B:F6 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 0196767A75188D2C8920BF8FA7BEF25C9E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0B71 Signing time: Sun 27 Apr 2025 09:00:58 +0000 Manifest this update: Sun 27 Apr 2025 09:00:58 +0000 Manifest next update: Mon 28 Apr 2025 09:00:58 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: 7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa (hash: mR7T3WuKSbdAtTzSYp0E3OKslQutZqhI3l0DzsTdKEc=) 3: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 4: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 5: LB_t08DPTNyxU120z1nclHuMwMI.roa (hash: tD2v/rZHmdopAY/iPcE41q7HJJs5sc+Muz0vNadXByE=) 6: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 7: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: weTSSBF7lg0iKFYzNQILrpVB/5yCT/IZjNQoZfGTWOg=) 8: NzO5JHHrowrlOrfRmJ6rlCKWAiI.roa (hash: mEn+H0KcivRIVdMWKafr2JpXW+KPhxm6nmi6vgCsBn4=) 9: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 10: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 11: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 12: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 13: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 14: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:7a:75:18:8d:2c:89:20:bf:8f:a7:be:f2:5c:9e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Apr 27 09:00:58 2025 GMT Not After : Apr 28 09:00:58 2025 GMT Subject: CN=f1cc8044cd1ef9447d135e4af81cbbb92aa68bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:94:73:0f:95:f5:e2:07:df:27:98:56:96: 3b:79:86:76:d4:1c:8e:d1:e1:eb:dc:a4:1e:ed:db: dc:09:5a:ae:7b:a6:e6:d6:eb:33:4c:4f:81:55:48: b1:a3:80:09:d6:ab:40:e5:6f:12:3c:72:1a:c0:9c: 03:ec:9a:57:e4:50:e0:46:4c:9a:c6:62:bf:8d:99: de:64:a8:ed:ff:7a:de:b3:4b:90:b9:12:5d:ec:0e: 91:21:35:b0:79:95:1d:02:f2:19:be:05:44:eb:1d: aa:dc:1b:5c:d1:8c:50:96:ca:e7:c3:d1:73:72:17: b0:a1:16:66:a3:c6:10:27:17:18:ad:0f:c3:87:7c: 9e:67:ca:c8:99:74:a5:db:e2:05:46:27:46:01:07: 45:0c:73:95:09:72:7d:69:ad:f0:2e:b7:c2:cc:f2: 5c:2a:de:9a:5d:5f:13:08:fa:eb:13:6a:de:45:99: 24:6b:a3:cd:1d:9f:38:1e:8b:20:9c:8a:ed:03:38: 8c:1a:72:ef:41:81:e1:5e:eb:12:d7:4b:b6:52:6e: a2:fb:fe:27:40:24:61:52:0a:2e:ec:21:65:5a:fb: 12:a2:c7:d1:85:ca:8a:db:82:63:1f:4b:71:4d:6d: cb:14:77:b2:d9:9f:cc:ff:50:b3:5b:4d:bc:0a:a7: 34:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CC:80:44:CD:1E:F9:44:7D:13:5E:4A:F8:1C:BB:B9:2A:A6:8B:F6 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:91:6d:84:4b:45:cf:76:41:7f:d8:ae:04:ff:46:f3:1c:ec: 6f:8e:42:ea:bb:ff:59:8e:dc:6d:75:14:6e:4e:d1:b3:e2:78: f9:07:5f:4c:3b:47:e6:5c:d6:a3:e1:43:30:b7:de:1f:36:6e: 2b:bf:41:39:e9:6c:17:67:e0:4d:5f:2c:d5:e1:fb:bc:3c:a5: 17:95:86:d9:88:52:42:14:f1:0e:48:63:8a:20:2e:2a:c9:0c: ad:f9:eb:70:9e:95:31:9a:98:b3:4c:b3:db:9b:e1:87:7a:fc: 73:da:12:2e:ec:f5:c3:ae:a3:5e:39:c5:1c:fc:a5:8a:5f:44: 74:a6:40:d4:ca:2f:68:3f:4f:9e:f7:65:79:81:1a:6d:8e:08: f7:5e:8d:85:69:57:d2:96:8b:69:de:74:e1:4e:2a:2d:d4:2b: a0:3d:f6:e3:ac:c6:0c:3f:13:b4:d0:e6:88:bd:16:2e:b1:87: ae:80:aa:4d:81:79:26:d3:70:b5:d8:34:0f:d0:c6:1c:3c:e6: fc:cb:c2:be:9f:8e:e5:a3:7e:8b:3b:e0:48:b0:39:d9:98:05: 8c:b9:23:8d:23:61:69:16:40:f5:12:d5:c1:db:91:7b:f1:d5: af:28:65:4d:fe:2b:16:00:f5:ad:98:0e:62:9a:11:4d:44:c1: 93:81:e4:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2enUYjSyJIL+Pp77yXJ57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUwNDI3MDkwMDU4WhcNMjUwNDI4MDkwMDU4WjAzMTEwLwYDVQQD EyhmMWNjODA0NGNkMWVmOTQ0N2QxMzVlNGFmODFjYmJiOTJhYTY4YmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWKUcw+V9eIH3yeYVpY7eYZ21ByO 0eHr3KQe7dvcCVque6bm1uszTE+BVUixo4AJ1qtA5W8SPHIawJwD7JpX5FDgRkya xmK/jZneZKjt/3res0uQuRJd7A6RITWweZUdAvIZvgVE6x2q3Btc0YxQlsrnw9Fz chewoRZmo8YQJxcYrQ/Dh3yeZ8rImXSl2+IFRidGAQdFDHOVCXJ9aa3wLrfCzPJc Kt6aXV8TCPrrE2reRZkka6PNHZ84HosgnIrtAziMGnLvQYHhXusS10u2Um6i+/4n QCRhUgou7CFlWvsSosfRhcqK24JjH0txTW3LFHey2Z/M/1CzW028Cqc0KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHMgETNHvlEfRNeSvgcu7kqpov2MB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZFthEtF z3ZBf9iuBP9G8xzsb45C6rv/WY7cbXUUbk7Rs+J4+QdfTDtH5lzWo+FDMLfeHzZu K79BOelsF2fgTV8s1eH7vDylF5WG2YhSQhTxDkhjiiAuKskMrfnrcJ6VMZqYs0yz 25vhh3r8c9oSLuz1w66jXjnFHPylil9EdKZA1MovaD9PnvdleYEabY4I916NhWlX 0paLad504U4qLdQroD3246zGDD8TtNDmiL0WLrGHroCqTYF5JtNwtdg0D9DGHDzm /MvCvp+O5aN+izvgSLA52ZgFjLkjjSNhaRZA9RLVwduRe/HVryhlTf4rFgD1rZgO YpoRTUTBk4HkyA== -----END CERTIFICATE-----Generated at Sun Apr 27 11:33:29 2025 by rpki-client