$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft File: LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft (raw, json) Hash identifier: RPnPij+KFv3bT6VJiALF2Uyj8HOndRyxoAUiPrV+RGI= Subject key identifier: 8C:C9:C5:89:72:6A:09:31:71:8A:C3:71:D2:22:53:FD:E7:61:00:78 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019788483D31362856A975D4A79530666B01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft Manifest number: 01E5 Signing time: Thu 19 Jun 2025 13:02:04 +0000 Manifest this update: Thu 19 Jun 2025 13:02:04 +0000 Manifest next update: Fri 20 Jun 2025 13:02:04 +0000 Files and hashes: 1: 3-eMi9JT7hPc3NDPKynwHnHwGvg.roa (hash: oSIP6BTgdOLnonKZ26sBvhO6MiVPEpNSBESIrEziWKI=) 2: Ew2u4fx_aQ9zMEtqOWMhDa5V7nE.roa (hash: x28lvMc0qdwGJwKWszESdc/fXn/X5nd+KMthC+H7owI=) 3: LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl (hash: VuJemDLbYiDsSXE96qSCqDMXaxS8UxzJaAGuDduLNR0=) 4: RVYgvNvLSEwae2gfgrn4pSY99rQ.roa (hash: 7zxbVWcnsKTEz5YJl0Lu/xSHIaOqwlZhiMmkg2NjjQI=) 5: VWXUtPP-EA7bklFBJKhwAHylxdI.roa (hash: uo05tkwCR+OwjX2SQhG6kgZeLpSiB4XzGba/1RV5qI4=) 6: ZKCq0MRIz_wY-is4Esg_Ap8VvJA.roa (hash: tvwe6Drbodo79eA+J+7zMlQ1/tHVaUTCyJ/+D5sX2Hs=) 7: aP6x0mnXwzfZLwiif13FeJYJ6Cs.roa (hash: jaCT4KMVTUAXhnBI+VJ4oOwFfylT0EP2yI4v4NRhrfk=) 8: dNm1rES2Zl08JygLPN3BuGwOCUM.roa (hash: 7raxOyAsZMXqdmIt6IsBRfrs2D9ul1H2Zd2ogF8bwNk=) 9: iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa (hash: pEFIpnuch1qRnOFnkvakcOhoMdolz6e61+pO/vjQc1g=) 10: mOZNGctp3EsvRu4hpTryr_uaewA.roa (hash: puhCKO+m+eBOV3k1DR7imdSPzQ9zEzyyXVrCFpI9spg=) 11: o75SZJQB7BDg8jN7-wCLVZZU43Q.roa (hash: YoHLDv7i0DiKAwLzD3DQQKrRMEjj+3O1YcFwumNi5CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 10:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:88:48:3d:31:36:28:56:a9:75:d4:a7:95:30:66:6b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jun 19 13:02:04 2025 GMT Not After : Jun 20 13:02:04 2025 GMT Subject: CN=8cc9c589726a0931718ac371d22253fde7610078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:07:76:7d:c2:e2:18:3a:c2:8b:29:01:09:13: a9:11:d6:1c:46:a3:bf:5b:1f:bc:35:cc:36:ee:e2: ea:4e:81:5d:4f:f4:3e:d6:fd:bf:e9:e5:18:cb:6e: 31:2f:a6:79:9a:3d:ef:2c:63:87:82:2e:ea:a7:81: a3:bd:61:e2:13:86:78:bb:c7:e5:99:a5:a1:33:b2: e3:3e:1b:61:ee:d6:98:ea:6d:d3:6e:99:e4:b9:80: 9d:8d:e3:21:85:6d:e2:a7:ac:0e:39:bf:93:ca:62: 32:e2:cb:52:29:d7:3d:a9:9c:b6:a2:73:4e:d0:51: 38:39:7e:99:26:03:ec:71:c8:80:e8:b5:5b:14:72: 23:2a:2b:a3:2c:3e:be:ee:69:75:1a:64:26:ae:42: d9:2d:7e:22:bc:19:de:89:7e:76:f3:cb:00:f2:55: 34:26:61:a0:79:70:78:6d:04:29:3f:cf:f8:34:20: 65:04:8e:84:c6:6a:66:75:7b:64:8c:1a:02:c9:3c: df:d4:87:90:fd:76:47:02:cc:cc:82:41:e1:4c:04: c0:4d:fc:d6:9c:9e:28:2b:b4:2e:4b:9c:5b:97:37: 93:df:3c:77:08:6d:2c:b7:fc:56:b0:57:e8:20:5b: b1:c1:62:82:40:24:9d:1a:85:36:17:8c:93:b7:d0: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C9:C5:89:72:6A:09:31:71:8A:C3:71:D2:22:53:FD:E7:61:00:78 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3e:bf:73:9e:df:44:b1:ce:17:a0:ff:9b:01:49:90:af:fc: 6f:90:12:d4:4e:83:8f:18:b0:73:7e:0b:d3:37:22:97:2b:1c: c5:63:dc:f5:09:f0:cf:20:ef:17:c5:ed:33:07:32:40:4f:43: 37:ec:bb:1a:2b:68:1d:95:a7:4a:28:3f:c9:c6:45:5e:7b:ba: 3f:f7:a1:58:97:12:be:e5:ae:bf:f9:8d:65:46:d8:54:ca:57: 07:a5:34:51:0e:04:1c:32:42:2e:ea:f3:d6:6c:ca:20:8d:2a: 6d:3b:12:cb:8c:0e:f0:6f:2b:a4:14:3b:e2:e1:54:11:5b:50: 1e:5f:42:c2:8b:8b:d8:d5:4c:fa:08:b0:af:f4:dc:75:7f:1e: 16:97:b2:aa:0e:46:02:51:bb:c4:34:9f:81:0c:85:d2:09:c6: bd:60:86:55:97:b6:fb:a9:8a:c5:c3:cf:52:11:91:fa:1e:f9: 70:f0:c7:d2:96:40:d1:e0:0b:b8:14:ec:82:ac:b3:79:da:3e: 8f:77:cc:d9:c7:45:2a:7c:7c:d2:f6:be:66:78:66:99:4c:f9: 4f:bb:1d:23:d1:5e:45:7a:87:35:2f:67:67:83:a0:17:da:06: ee:32:55:1a:89:ef:d4:6b:2d:f2:7c:0f:d6:80:39:ef:08:2b: cf:79:45:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeISD0xNihWqXXUp5UwZmsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUwNjE5MTMwMjA0WhcNMjUwNjIwMTMwMjA0WjAzMTEwLwYDVQQD Eyg4Y2M5YzU4OTcyNmEwOTMxNzE4YWMzNzFkMjIyNTNmZGU3NjEwMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAd2fcLiGDrCiykBCROpEdYcRqO/ Wx+8Ncw27uLqToFdT/Q+1v2/6eUYy24xL6Z5mj3vLGOHgi7qp4GjvWHiE4Z4u8fl maWhM7LjPhth7taY6m3TbpnkuYCdjeMhhW3ip6wOOb+TymIy4stSKdc9qZy2onNO 0FE4OX6ZJgPscciA6LVbFHIjKiujLD6+7ml1GmQmrkLZLX4ivBneiX5288sA8lU0 JmGgeXB4bQQpP8/4NCBlBI6ExmpmdXtkjBoCyTzf1IeQ/XZHAszMgkHhTATATfzW nJ4oK7QuS5xblzeT3zx3CG0st/xWsFfoIFuxwWKCQCSdGoU2F4yTt9DH9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzJxYlyagkxcYrDcdIiU/3nYQB4MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUD6/c57f RLHOF6D/mwFJkK/8b5AS1E6Djxiwc34L0zcilyscxWPc9QnwzyDvF8XtMwcyQE9D N+y7GitoHZWnSig/ycZFXnu6P/ehWJcSvuWuv/mNZUbYVMpXB6U0UQ4EHDJCLurz 1mzKII0qbTsSy4wO8G8rpBQ74uFUEVtQHl9CwouL2NVM+giwr/TcdX8eFpeyqg5G AlG7xDSfgQyF0gnGvWCGVZe2+6mKxcPPUhGR+h75cPDH0pZA0eALuBTsgqyzedo+ j3fM2cdFKnx80va+ZnhmmUz5T7sdI9FeRXqHNS9nZ4OgF9oG7jJVGonv1Gst8nwP 1oA57wgrz3lFbw== -----END CERTIFICATE-----Generated at Thu Jun 19 19:33:42 2025 by rpki-client