$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: OpOhP+nujodYvJT/zzYIMkqEqPdJNN9SBEMFUISkO3k= Subject key identifier: 83:4F:65:C2:48:A7:46:F0:F4:EA:44:6A:D2:25:57:60:87:94:02:4B Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019874509A01AFFA631767419E8AEB662EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 06F7 Signing time: Mon 04 Aug 2025 09:01:35 +0000 Manifest this update: Mon 04 Aug 2025 09:01:35 +0000 Manifest next update: Tue 05 Aug 2025 09:01:35 +0000 Files and hashes: 1: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=) 2: RoTtigifINsixxIV_70QGvQ5BxY.roa (hash: plE7goAwFCfjJgbZot+4It6KwTroueBaFRIiGneV7rw=) 3: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=) 4: VN5ojuAnFRlItFJUN1HhyLhUOjc.roa (hash: VYiIZW/eoPqi7U3Fkl9T92J2c6UJvlwURwxGsvrFuvI=) 5: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=) 6: Z7WkjqluVcJx8TKOWpd-979l9Hs.roa (hash: G1RaFstXsXGfvVLHVI1mOVOghLjcLKzS1h9oV51+lXs=) 7: __x5Ic-9bwQ1SbZ8epBuTBTo8j4.roa (hash: f7wZGJuveG3jCNyR/mvzX8qDCmg/cdnCEqkzqJwo/p4=) 8: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=) 9: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=) 10: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=) 11: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=) 12: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: E066MQ66fal76s+4aN4e4EgdttTfqBsSI/4GxbzgUCk=) 13: lhSh68FljrO7wEKZo-qXGTfhzlE.roa (hash: I914mCRjyHYm2Pwd9b34kWk8XH3x42fFqaYwN5Q9h50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:50:9a:01:af:fa:63:17:67:41:9e:8a:eb:66:2e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Aug 4 09:01:35 2025 GMT Not After : Aug 5 09:01:35 2025 GMT Subject: CN=834f65c248a746f0f4ea446ad22557608794024b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:d8:29:e0:a7:f0:5e:db:30:e7:6a:af:2c: 2f:d1:d2:75:04:99:47:6c:9a:ce:16:a8:b2:ac:09: 9f:b0:fc:ba:42:11:6a:a5:69:9f:72:2e:e0:21:bb: 37:de:35:4b:8d:5b:ad:5e:a6:b0:ea:5c:8b:1b:0a: c7:c6:79:64:83:9a:82:f8:99:61:01:e5:af:b3:90: fe:90:d7:b8:80:1d:35:19:b4:5d:01:84:77:7b:04: 8a:16:90:60:ea:83:81:af:4b:c0:74:5e:ab:91:fa: 5b:bd:0d:ae:7f:f0:dd:1e:fd:55:ad:9a:3d:6e:f1: 2b:39:7d:a2:2d:b6:b6:28:16:61:df:4c:1f:4d:59: 3f:91:b9:62:97:87:3e:a1:42:98:10:15:cb:b9:06: 1f:07:cd:98:76:d5:c1:62:8b:4d:4c:87:ae:4f:01: f3:6a:ac:6a:45:0b:fe:d9:a8:eb:8b:ab:3f:dd:01: 01:51:c7:bf:04:36:eb:a7:13:02:07:d7:4b:fb:14: 6f:88:74:82:3c:03:a6:df:f2:8a:55:b5:63:1a:6b: 1d:5f:4d:0d:d5:9f:64:cc:fd:0a:af:ea:cd:b6:60: b0:4e:cb:9e:bb:db:d3:ca:82:a0:dc:a1:75:6f:08: 07:a0:dc:86:e8:9e:db:b0:d9:c4:66:22:93:ad:d2: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4F:65:C2:48:A7:46:F0:F4:EA:44:6A:D2:25:57:60:87:94:02:4B X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3a:65:8f:fd:2d:c5:15:c5:1c:4a:fa:02:61:09:69:d1:03: 57:2c:6c:ca:90:f4:77:34:d6:c3:bd:44:57:5b:cb:fa:dc:6d: bc:3c:bd:b4:c9:56:75:fb:07:e9:d5:f4:40:69:e2:5b:4a:a1: 03:a4:bb:8e:b8:10:dc:ac:50:6e:20:d7:f8:71:e5:95:95:7a: b6:24:3b:b8:81:68:73:61:d9:7e:13:75:5a:a2:85:ca:2f:30: 9a:88:7f:47:2a:ff:b4:32:c7:49:c7:ae:1b:98:d4:5a:48:0d: 97:3f:1c:aa:8a:55:ad:6d:8c:c0:9b:a9:8f:e8:fd:ce:50:2d: 07:62:59:66:62:09:dd:68:71:2c:b2:cf:77:1d:c0:8e:d4:d0: cf:92:a2:25:fb:ec:49:bb:79:f0:cc:65:4a:d0:fe:d2:af:a0: 3e:0c:e6:ac:59:29:5b:d8:1d:a7:47:7e:fe:c6:70:c9:8c:ea: 97:65:4f:2e:8b:7e:76:8e:99:f9:d8:ab:4d:62:23:5a:e9:16: 38:db:64:e6:61:0d:f8:d3:11:b2:06:a5:4b:7d:7c:9f:fe:3e: b6:2e:e4:29:ca:92:65:9e:35:f6:dc:28:93:10:56:9c:20:06: 63:17:33:25:c2:6e:38:b4:4b:ce:92:08:03:73:9c:ac:da:45: 04:19:bd:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0UJoBr/pjF2dBnorrZi62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUwODA0MDkwMTM1WhcNMjUwODA1MDkwMTM1WjAzMTEwLwYDVQQD Eyg4MzRmNjVjMjQ4YTc0NmYwZjRlYTQ0NmFkMjI1NTc2MDg3OTQwMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPrYKeCn8F7bMOdqrywv0dJ1BJlH bJrOFqiyrAmfsPy6QhFqpWmfci7gIbs33jVLjVutXqaw6lyLGwrHxnlkg5qC+Jlh AeWvs5D+kNe4gB01GbRdAYR3ewSKFpBg6oOBr0vAdF6rkfpbvQ2uf/DdHv1VrZo9 bvErOX2iLba2KBZh30wfTVk/kblil4c+oUKYEBXLuQYfB82YdtXBYotNTIeuTwHz aqxqRQv+2ajri6s/3QEBUce/BDbrpxMCB9dL+xRviHSCPAOm3/KKVbVjGmsdX00N 1Z9kzP0Kr+rNtmCwTsueu9vTyoKg3KF1bwgHoNyG6J7bsNnEZiKTrdL5+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINPZcJIp0bw9OpEatIlV2CHlAJLMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTplj/0t xRXFHEr6AmEJadEDVyxsypD0dzTWw71EV1vL+txtvDy9tMlWdfsH6dX0QGniW0qh A6S7jrgQ3KxQbiDX+HHllZV6tiQ7uIFoc2HZfhN1WqKFyi8wmoh/Ryr/tDLHSceu G5jUWkgNlz8cqopVrW2MwJupj+j9zlAtB2JZZmIJ3WhxLLLPdx3AjtTQz5KiJfvs Sbt58MxlStD+0q+gPgzmrFkpW9gdp0d+/sZwyYzql2VPLot+do6Z+dirTWIjWukW ONtk5mEN+NMRsgalS318n/4+ti7kKcqSZZ419twokxBWnCAGYxczJcJuOLRLzpII A3OcrNpFBBm9tw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:46 2025 by rpki-client