$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: KUT4SlmxfsepKy3qxI5SI1wH+BL1D/mUMmglq5dl/+s= Subject key identifier: B0:7A:31:D3:12:7F:6B:91:11:75:BF:92:17:35:0E:68:CE:F7:FF:14 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019674C277BF55582A2007E00C3A3D3EBB1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 05EC Signing time: Sun 27 Apr 2025 01:00:23 +0000 Manifest this update: Sun 27 Apr 2025 01:00:23 +0000 Manifest next update: Mon 28 Apr 2025 01:00:23 +0000 Files and hashes: 1: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=) 2: D6jFbkqHYmfBUO-NiDAUQ68UyIo.roa (hash: w3KhAWQlARV/M31ue9uDn8EjMyV0tfnsDAPEqthHKBI=) 3: DmdZirH8wcWnW5zYYUR5leLKxe8.roa (hash: hx6zA2N9TKsc5Jie2Z1vdSmK9L1McLQ+3QD/drh38sI=) 4: GUjvsT11NwmP7HaNG7Xjc0a1oUA.roa (hash: XFqsKKOYJeZJfhitB3mAa0IsuaFQxFWAs/MA5Ah1E1g=) 5: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=) 6: WohBgOePqR35hSMfPj1Zz5dH6l4.roa (hash: ufiBhx+UbH8IqJmmi8avlRIHO79c7baFJfbTCVFvmvc=) 7: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=) 8: Z7WkjqluVcJx8TKOWpd-979l9Hs.roa (hash: G1RaFstXsXGfvVLHVI1mOVOghLjcLKzS1h9oV51+lXs=) 9: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=) 10: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=) 11: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=) 12: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=) 13: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: qlPEly3PmvN0KJFe28ZcXYLvZoGZbjckbVMeuK1dcbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:c2:77:bf:55:58:2a:20:07:e0:0c:3a:3d:3e:bb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Apr 27 01:00:23 2025 GMT Not After : Apr 28 01:00:23 2025 GMT Subject: CN=b07a31d3127f6b911175bf9217350e68cef7ff14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:4e:24:09:9f:4b:8f:68:84:70:ae:5b:60: 3f:51:21:20:54:cf:f8:ca:93:e5:24:da:2e:5b:91: f3:b4:ce:68:b9:0f:0d:cb:bd:54:3e:20:66:01:08: 87:b2:d4:19:e7:6d:12:40:da:a1:84:dc:a0:fe:52: db:81:5a:36:b0:47:c1:ce:11:d8:54:39:6d:2e:5f: c5:e3:3e:56:f3:92:4e:fa:da:ca:98:94:9c:17:46: 8c:6c:14:6c:bb:34:00:2f:37:dd:30:48:3b:ba:51: 89:28:a1:57:de:ee:10:5b:a8:d9:97:d0:54:8f:59: 0e:ca:fd:c2:f2:50:58:9a:92:e8:ed:0d:c1:8a:f5: b7:a6:23:f1:df:76:7d:4b:2a:aa:7c:a9:27:28:3a: 53:3c:e3:c1:a7:d1:59:9c:65:b1:2a:81:e6:14:9b: 1d:31:1b:54:cc:50:04:59:a9:d4:62:fc:0d:ac:ea: e0:46:c1:0b:e8:4c:93:2b:f7:89:06:0b:1f:ef:e4: 4a:7b:fb:ed:1d:8e:55:17:9d:de:1f:63:e3:be:0c: 08:90:d3:4a:ac:29:c0:f7:70:b0:14:56:63:91:b8: ba:e5:03:7f:c9:ee:63:e9:c2:2c:e4:bf:9d:11:03: 48:aa:4c:35:a9:e7:27:bc:50:ca:cf:46:ec:88:c2: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7A:31:D3:12:7F:6B:91:11:75:BF:92:17:35:0E:68:CE:F7:FF:14 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c6:fb:c3:de:46:d1:30:7c:66:be:2e:d1:ca:cb:37:aa:98: 4a:fe:5c:34:79:e1:c5:0b:06:6d:3e:b3:74:eb:b4:4f:93:60: 69:8d:0a:e3:da:d9:44:e0:a6:c4:5d:19:90:1d:b9:0e:9a:84: 86:2f:3a:c4:69:e4:4b:9f:a7:b8:a9:af:42:18:e0:f0:3f:e4: a7:a1:9e:3c:24:b3:cd:ee:2d:66:78:42:94:a3:0e:f7:e9:40: 0b:df:a1:ec:fa:cc:a6:29:82:c1:46:2d:6f:ad:92:7a:75:7e: 5f:68:98:4e:2d:4f:e7:ed:3d:70:62:9e:f1:c5:18:d6:2b:88: 93:fd:50:3c:ad:09:d1:9f:09:7a:f7:95:95:f0:76:03:63:ef: 05:08:d1:0a:fa:55:e4:92:66:a5:8c:36:ab:ca:fc:ac:9a:08: 47:ed:a0:da:10:61:21:5d:80:c6:f2:b3:73:86:34:fb:f5:26: 34:2f:ae:ba:a7:9c:ca:9d:2f:fc:86:2e:53:4d:3c:aa:34:55: e8:fc:45:7c:c8:f1:1d:e0:fe:2e:48:01:18:74:e3:02:77:5b: 2b:12:0c:18:cf:54:d0:66:e1:ae:e9:14:c5:69:33:28:02:a1: eb:a3:96:eb:e5:16:f8:b1:df:6c:72:a3:f8:72:03:71:31:49: a0:e7:ba:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0wne/VVgqIAfgDDo9PrsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUwNDI3MDEwMDIzWhcNMjUwNDI4MDEwMDIzWjAzMTEwLwYDVQQD EyhiMDdhMzFkMzEyN2Y2YjkxMTE3NWJmOTIxNzM1MGU2OGNlZjdmZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VtOJAmfS49ohHCuW2A/USEgVM/4 ypPlJNouW5HztM5ouQ8Ny71UPiBmAQiHstQZ520SQNqhhNyg/lLbgVo2sEfBzhHY VDltLl/F4z5W85JO+trKmJScF0aMbBRsuzQALzfdMEg7ulGJKKFX3u4QW6jZl9BU j1kOyv3C8lBYmpLo7Q3BivW3piPx33Z9SyqqfKknKDpTPOPBp9FZnGWxKoHmFJsd MRtUzFAEWanUYvwNrOrgRsEL6EyTK/eJBgsf7+RKe/vtHY5VF53eH2PjvgwIkNNK rCnA93CwFFZjkbi65QN/ye5j6cIs5L+dEQNIqkw1qecnvFDKz0bsiMLbaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB6MdMSf2uREXW/khc1DmjO9/8UMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsb7w95G 0TB8Zr4u0crLN6qYSv5cNHnhxQsGbT6zdOu0T5NgaY0K49rZROCmxF0ZkB25DpqE hi86xGnkS5+nuKmvQhjg8D/kp6GePCSzze4tZnhClKMO9+lAC9+h7PrMpimCwUYt b62SenV+X2iYTi1P5+09cGKe8cUY1iuIk/1QPK0J0Z8JeveVlfB2A2PvBQjRCvpV 5JJmpYw2q8r8rJoIR+2g2hBhIV2AxvKzc4Y0+/UmNC+uuqecyp0v/IYuU008qjRV 6PxFfMjxHeD+LkgBGHTjAndbKxIMGM9U0GbhrukUxWkzKAKh66OW6+UW+LHfbHKj +HIDcTFJoOe67Q== -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:34 2025 by rpki-client