$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: CXoCjKtIEJRI3y6574KUb+j6MGN4FheiRygZAzcPPMU= Subject key identifier: 3E:2C:FA:01:D9:5F:2E:6C:8E:1F:05:FB:F3:E1:05:34:F3:54:A0:6E Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 01977B9E2B71D7D2EC355161385D17111CCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 1358 Signing time: Tue 17 Jun 2025 02:00:52 +0000 Manifest this update: Tue 17 Jun 2025 02:00:52 +0000 Manifest next update: Wed 18 Jun 2025 02:00:52 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: fbvdZaTeo00XS7hSDc3OtPxwoLt9hVlqttZrATzjhIo=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: auh8PiwrTf2v6lpf50WPxKXXVeY.roa (hash: mQnueIBK5DtLGO9VF25YUU0TKwd0Wbv6zpM4STDhWvE=) 7: eeJQTXzJRG74gLZzvmSazKWdeSk.roa (hash: apRxPLkLu+OXbwhl6Vtb7LX5Cws2a7TltcG+TguzTP8=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7b:9e:2b:71:d7:d2:ec:35:51:61:38:5d:17:11:1c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jun 17 02:00:52 2025 GMT Not After : Jun 18 02:00:52 2025 GMT Subject: CN=3e2cfa01d95f2e6c8e1f05fbf3e10534f354a06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:38:5a:07:77:01:42:7d:24:6c:d9:76:67: e7:29:e3:70:f4:87:b5:9d:44:54:b6:02:52:f3:5d: fa:f8:b9:a8:63:f5:4e:9c:87:c4:4c:c9:15:25:03: 8a:39:d3:d6:bd:12:6a:6e:b9:ac:77:30:01:57:77: 7f:d3:48:7b:03:e0:3b:fb:e9:7b:80:c7:4e:54:02: 46:c6:a0:68:50:a4:0d:39:43:b1:cb:7e:d5:ed:91: fd:75:e2:66:ec:48:f3:a8:d9:50:89:8c:77:50:f4: 7f:e1:70:d4:59:11:e7:6b:4c:65:48:12:d8:45:08: 39:a3:5f:2a:23:99:c3:27:22:33:23:eb:1c:38:64: a0:d0:07:52:b8:74:bf:bf:16:47:d9:80:88:f4:22: 2e:ae:14:b2:f9:2e:cb:2b:ac:b0:a6:37:d1:51:2a: dd:e9:65:ca:7b:06:b9:bb:5d:a0:1d:9d:c9:df:5c: dd:55:b9:9d:b4:e1:fa:45:56:6f:7a:d0:cd:04:d0: 9d:5a:82:5e:15:d7:f1:f8:2e:1f:86:32:5e:8c:64: 7d:c9:2d:b1:74:f7:87:d6:37:84:59:00:82:80:fa: e9:da:dd:49:e4:2c:e7:c5:21:84:ff:0b:fe:90:76: 4f:d5:92:ad:b1:50:8a:d4:df:d4:d3:74:5e:e6:87: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2C:FA:01:D9:5F:2E:6C:8E:1F:05:FB:F3:E1:05:34:F3:54:A0:6E X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:52:3e:72:d8:7f:8d:38:0b:dd:90:93:16:d6:07:1f:1e: 60:14:ac:a2:71:38:be:b1:17:fe:89:ae:60:22:01:6a:d1:19: de:4f:35:d4:93:f3:85:35:0e:c3:22:4c:c7:3e:2f:39:88:ad: a0:98:d7:87:ee:2b:2a:d3:28:f6:a3:1e:c4:8e:59:f5:74:02: 13:7b:16:cd:35:7c:3a:25:e3:8e:49:01:f3:58:81:ee:4c:dd: 92:56:cb:38:ad:0c:b6:5b:e1:02:94:45:f5:84:b7:d0:16:42: 54:c6:5c:5f:e0:2b:4a:f5:e9:0d:52:50:af:92:a0:2b:c0:ae: 4d:f7:57:55:00:63:78:b7:79:eb:49:fd:0b:c9:f5:3a:37:94: 60:dc:f6:d1:17:fc:6a:7a:20:fb:86:b8:18:0d:01:70:5d:5b: c4:04:a4:d3:0a:b4:0f:2e:54:ee:e8:59:c9:a5:8e:fe:c2:67: 10:0b:b1:e9:d5:05:4e:f5:66:a1:b5:0a:aa:2f:82:0b:45:3b: 36:51:7e:7a:69:11:a3:02:8c:56:22:67:42:a7:ad:b6:52:a8: e1:1f:fc:6a:76:9c:11:6c:68:8f:f6:4c:ce:73:65:10:0b:3d: 96:21:a3:aa:4e:24:04:2f:8a:d3:ef:df:dd:10:09:40:09:12: f9:70:2b:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd7nitx19LsNVFhOF0XERzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUwNjE3MDIwMDUyWhcNMjUwNjE4MDIwMDUyWjAzMTEwLwYDVQQD EygzZTJjZmEwMWQ5NWYyZTZjOGUxZjA1ZmJmM2UxMDUzNGYzNTRhMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6w4Wgd3AUJ9JGzZdmfnKeNw9Ie1 nURUtgJS8136+LmoY/VOnIfETMkVJQOKOdPWvRJqbrmsdzABV3d/00h7A+A7++l7 gMdOVAJGxqBoUKQNOUOxy37V7ZH9deJm7EjzqNlQiYx3UPR/4XDUWRHna0xlSBLY RQg5o18qI5nDJyIzI+scOGSg0AdSuHS/vxZH2YCI9CIurhSy+S7LK6ywpjfRUSrd 6WXKewa5u12gHZ3J31zdVbmdtOH6RVZvetDNBNCdWoJeFdfx+C4fhjJejGR9yS2x dPeH1jeEWQCCgPrp2t1J5CznxSGE/wv+kHZP1ZKtsVCK1N/U03Re5odqcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4s+gHZXy5sjh8F+/PhBTTzVKBuMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZL5SPnLY f404C92QkxbWBx8eYBSsonE4vrEX/omuYCIBatEZ3k811JPzhTUOwyJMxz4vOYit oJjXh+4rKtMo9qMexI5Z9XQCE3sWzTV8OiXjjkkB81iB7kzdklbLOK0MtlvhApRF 9YS30BZCVMZcX+ArSvXpDVJQr5KgK8CuTfdXVQBjeLd560n9C8n1OjeUYNz20Rf8 anog+4a4GA0BcF1bxASk0wq0Dy5U7uhZyaWO/sJnEAux6dUFTvVmobUKqi+CC0U7 NlF+emkRowKMViJnQqettlKo4R/8anacEWxoj/ZMznNlEAs9liGjqk4kBC+K0+/f 3RAJQAkS+XArjg== -----END CERTIFICATE-----Generated at Tue Jun 17 12:09:25 2025 by rpki-client