$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: g1NCKzDZYK6g3VmaSXnkvqvArz8JUHsG2yhtCvoD8EU= Subject key identifier: 67:A4:49:14:89:0D:6F:D0:55:A9:82:BA:04:C3:7C:1D:DC:F7:C9:62 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 01988BEA6122340817042731D0DBC2B19167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 13E9 Signing time: Fri 08 Aug 2025 23:00:49 +0000 Manifest this update: Fri 08 Aug 2025 23:00:49 +0000 Manifest next update: Sat 09 Aug 2025 23:00:49 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 5nXJsXS_dpKafNzYuUWOwTJcqns.roa (hash: 81+L+Fn0DpdmRR6n9IejP9I94PV32SnSNym+QIx285g=) 3: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 4: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: +fxu5ZEx9qYuLSVfEnOthZ7NlaxszrXctdo3rOTiMVI=) 6: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 7: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 8: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 9: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 10: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 11: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8b:ea:61:22:34:08:17:04:27:31:d0:db:c2:b1:91:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Aug 8 23:00:49 2025 GMT Not After : Aug 9 23:00:49 2025 GMT Subject: CN=67a44914890d6fd055a982ba04c37c1ddcf7c962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:69:74:e7:11:b3:f4:d9:49:34:2d:73:d0: 41:70:da:e8:6b:45:a9:53:a4:79:8e:26:97:21:43: dd:b9:4e:f6:12:39:b9:91:87:61:bb:31:b6:84:30: 49:f9:6a:d7:37:8b:2a:da:61:22:ab:b1:c0:44:5e: de:a9:01:78:1b:25:59:79:4c:e8:3d:9d:87:6d:09: b1:06:76:4a:bb:04:ce:bc:39:2c:12:55:c7:30:80: 8b:a6:c2:84:6f:66:a0:49:2d:3d:5f:3f:2d:66:a9: 94:47:d1:66:00:c6:cc:aa:c3:d4:2a:4e:9c:eb:c2: af:29:24:14:db:2d:d1:31:be:e1:4e:4b:0a:5f:af: d4:42:5f:d6:18:9d:fd:f4:3c:47:60:5f:d1:b2:c3: 3d:59:aa:54:93:b2:c2:4f:71:3e:7b:5e:3b:76:ce: 07:df:aa:ce:cc:ff:37:4c:06:35:a4:c0:f0:3d:01: d9:8d:16:c1:b1:74:3d:8e:b4:e9:5d:f7:5a:2f:91: 4f:0b:eb:f2:c9:42:f4:bf:f1:ed:06:ab:12:f8:43: 3a:62:1c:3a:b0:64:ff:6d:b3:90:e6:2e:34:c2:32: f3:e4:45:c9:77:cc:ff:2e:07:8c:f3:33:f8:d7:c5: 86:06:a5:11:6b:04:45:6e:55:40:1e:34:d7:b8:3f: 95:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A4:49:14:89:0D:6F:D0:55:A9:82:BA:04:C3:7C:1D:DC:F7:C9:62 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d8:40:66:e9:00:01:1c:dd:9d:74:3d:92:39:a4:97:47:fe: 2e:7d:91:b3:f3:8a:d0:14:eb:af:23:ca:4a:8b:4d:6e:fc:6f: bc:0c:ab:7a:16:2c:33:6c:bd:5c:fb:7d:49:ef:9f:3c:a7:24: af:e5:b9:4d:9d:6b:41:a5:1f:ca:55:a0:66:e4:00:b7:d2:16: e3:15:c8:03:1a:0b:ba:e8:08:31:83:cd:d4:20:52:f4:dc:eb: ea:0d:0f:80:47:00:e6:6c:f7:e9:90:df:8d:3b:1c:b6:7d:12: 9a:60:25:f7:f9:54:3b:5d:dd:ed:43:04:fe:e4:35:45:0f:10: 2a:7c:08:86:48:b1:ec:8c:93:a2:b4:b5:35:2d:33:86:70:23: c5:6f:c0:8e:03:3b:03:13:06:04:3d:f4:91:e2:44:98:c7:79: 46:ea:a2:12:fc:d0:4f:48:d9:d5:f1:10:fa:0c:d9:71:4d:45: cf:61:8c:f1:29:30:51:aa:e1:c3:d5:c9:eb:a0:63:f2:0e:af: fb:9e:9b:86:52:dd:35:6e:73:5c:4e:fd:62:11:2e:8e:31:5b: 7d:df:7e:73:26:a6:84:07:68:29:20:52:b1:e0:44:9d:9e:f5: 2f:dd:3e:7f:15:5e:c7:ba:03:10:a5:98:bd:ee:3f:88:2a:09: c8:f0:56:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiL6mEiNAgXBCcx0NvCsZFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUwODA4MjMwMDQ5WhcNMjUwODA5MjMwMDQ5WjAzMTEwLwYDVQQD Eyg2N2E0NDkxNDg5MGQ2ZmQwNTVhOTgyYmEwNGMzN2MxZGRjZjdjOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhZpdOcRs/TZSTQtc9BBcNroa0Wp U6R5jiaXIUPduU72Ejm5kYdhuzG2hDBJ+WrXN4sq2mEiq7HARF7eqQF4GyVZeUzo PZ2HbQmxBnZKuwTOvDksElXHMICLpsKEb2agSS09Xz8tZqmUR9FmAMbMqsPUKk6c 68KvKSQU2y3RMb7hTksKX6/UQl/WGJ399DxHYF/RssM9WapUk7LCT3E+e147ds4H 36rOzP83TAY1pMDwPQHZjRbBsXQ9jrTpXfdaL5FPC+vyyUL0v/HtBqsS+EM6Yhw6 sGT/bbOQ5i40wjLz5EXJd8z/LgeM8zP418WGBqURawRFblVAHjTXuD+V0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGekSRSJDW/QVamCugTDfB3c98liMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPthAZukA ARzdnXQ9kjmkl0f+Ln2Rs/OK0BTrryPKSotNbvxvvAyrehYsM2y9XPt9Se+fPKck r+W5TZ1rQaUfylWgZuQAt9IW4xXIAxoLuugIMYPN1CBS9Nzr6g0PgEcA5mz36ZDf jTsctn0SmmAl9/lUO13d7UME/uQ1RQ8QKnwIhkix7IyTorS1NS0zhnAjxW/AjgM7 AxMGBD30keJEmMd5RuqiEvzQT0jZ1fEQ+gzZcU1Fz2GM8SkwUarhw9XJ66Bj8g6v +56bhlLdNW5zXE79YhEujjFbfd9+cyamhAdoKSBSseBEnZ71L90+fxVex7oDEKWY ve4/iCoJyPBW0A== -----END CERTIFICATE-----Generated at Sat Aug 9 01:19:05 2025 by rpki-client