$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: jmQMywk2FLuMrebk837rKDLJm1BfF/jFegqoRz5JYXk= Subject key identifier: 2C:D8:E3:69:0B:C6:A2:52:D5:6C:EF:6E:16:2D:B1:80:8A:FA:30:6D Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019677FAA3653187A42B7B939ED21B2C0E75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0732 Signing time: Sun 27 Apr 2025 16:00:36 +0000 Manifest this update: Sun 27 Apr 2025 16:00:36 +0000 Manifest next update: Mon 28 Apr 2025 16:00:36 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: adyYmsZW5s5DQ9MSRhWlKuY46WWmJeOHqkVs4Khqq28=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: CdQL_rNfT4mruJeuRhVd0hpPdps.roa (hash: Z/uUo7J+RuPWC8u1ha2F9ldd1L0f2IgJnPvQNnlMC1w=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: IZB5fE3vCYPzm412fZZk7uYbwgE.roa (hash: cWCrnSM11F8k4l8vziWTFuB3S6ERgGRGnqCvZnuNDXk=) 6: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 7: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 8: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 9: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 10: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 11: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 12: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 13: fp7iaq3w3IK7xxC4hTxOHXlgQdo.roa (hash: IIdoboRyB6xVt9Ub/S//LkCzsgiZ4eA93ZNjm/kWoFw=) 14: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 15: lSpQXF77aOd5aaWL7y9AyYlQaWs.roa (hash: k9FWEbwffQtuSyIeXa8qgZ8XemL3dT9nYO5Khh1P6zU=) 16: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 17: tcp-Msodt7Yoyc_U-JzWb4RQflg.roa (hash: 2O16WNiH/chbI3skghuISKeRLWAnGH5be6qCPHCOEPw=) 18: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 19: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:77:fa:a3:65:31:87:a4:2b:7b:93:9e:d2:1b:2c:0e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Apr 27 16:00:36 2025 GMT Not After : Apr 28 16:00:36 2025 GMT Subject: CN=2cd8e3690bc6a252d56cef6e162db1808afa306d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:39:bf:61:14:ca:98:e8:eb:8d:06:ce:cd: a0:1b:fb:99:b5:cd:70:46:cd:39:ad:b6:59:7a:bf: 09:1b:27:94:53:6f:53:64:3b:88:ca:89:05:64:7e: 8f:9f:9e:b2:8d:61:14:1c:f1:fd:03:74:83:5f:f5: 57:4e:a3:4f:24:6c:fd:53:77:43:34:87:95:b0:54: 2c:4b:16:96:05:77:4b:56:45:bf:1c:d2:ce:3d:12: 5a:18:fe:6a:42:c7:c3:d6:16:c8:55:79:f4:23:6d: 05:10:15:5b:f7:c7:3b:9f:15:3a:83:43:fe:1e:15: d3:49:75:c0:72:0e:e2:0e:de:33:61:7a:f4:a4:2f: 8d:16:8a:1f:f2:eb:b9:4e:78:19:71:e5:b3:ac:a7: 7a:03:67:cc:7e:8e:0a:15:8b:47:8d:d3:29:c9:f5: 23:30:47:13:06:82:10:0f:66:9a:a8:cf:6d:59:34: a0:0a:fa:39:aa:d0:40:75:d6:01:2a:96:f7:22:45: 8e:89:d7:76:f6:02:d0:a6:a2:d0:b6:c3:66:14:93: 2f:7d:03:7c:1a:56:d3:39:48:be:31:45:7b:8b:13: bf:f0:f5:30:43:ad:95:8e:36:d6:01:cb:06:08:9c: 5c:ee:9c:3c:ae:42:ec:5f:db:35:dd:51:45:b0:39: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D8:E3:69:0B:C6:A2:52:D5:6C:EF:6E:16:2D:B1:80:8A:FA:30:6D X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3b:cf:5f:86:8c:b9:c5:4d:6f:c1:c5:d0:59:56:c2:49:47: 11:57:44:fd:2b:df:a9:e0:6f:57:13:0f:46:8a:2e:42:ac:90: 11:3b:7d:d0:0e:af:2c:82:77:59:24:f1:a8:f8:bb:6a:00:4f: 7b:1c:89:0b:18:5f:9c:3a:a4:2c:5f:5d:ce:f2:bd:cc:dc:9f: 8b:07:7f:6a:b0:0a:4d:54:d6:66:6a:2f:0d:24:fc:ce:66:9b: 9f:62:a3:2c:d1:cb:f9:34:10:98:fa:79:89:dc:73:55:c7:cf: ce:f2:7a:dd:00:85:57:c2:fc:2f:2f:ca:43:ae:6c:5e:4c:7d: a8:51:73:eb:d5:fb:82:52:6c:53:9f:7c:84:c8:da:69:87:6d: e0:dc:c9:bc:f1:9f:31:40:88:17:a4:21:16:3f:a6:92:0e:07: 4d:f5:ae:a0:0a:07:2a:18:d3:e1:9c:3e:cc:dd:bd:fe:f0:d8: bc:9f:7c:39:d0:7f:59:2b:b9:c1:0c:ac:0e:e5:4f:38:ee:b0: bf:61:28:68:76:3a:3b:47:f4:d2:68:55:61:1b:5a:e7:4a:29: a8:2a:99:e0:ca:54:4c:c9:51:4a:a2:b5:34:98:85:ce:b3:cb: dc:45:56:71:9d:29:59:32:49:7a:9d:f4:6c:97:1c:06:a6:e3: 7c:d5:90:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ3+qNlMYekK3uTntIbLA51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwNDI3MTYwMDM2WhcNMjUwNDI4MTYwMDM2WjAzMTEwLwYDVQQD EygyY2Q4ZTM2OTBiYzZhMjUyZDU2Y2VmNmUxNjJkYjE4MDhhZmEzMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uA5v2EUypjo640Gzs2gG/uZtc1w Rs05rbZZer8JGyeUU29TZDuIyokFZH6Pn56yjWEUHPH9A3SDX/VXTqNPJGz9U3dD NIeVsFQsSxaWBXdLVkW/HNLOPRJaGP5qQsfD1hbIVXn0I20FEBVb98c7nxU6g0P+ HhXTSXXAcg7iDt4zYXr0pC+NFoof8uu5TngZceWzrKd6A2fMfo4KFYtHjdMpyfUj MEcTBoIQD2aaqM9tWTSgCvo5qtBAddYBKpb3IkWOidd29gLQpqLQtsNmFJMvfQN8 GlbTOUi+MUV7ixO/8PUwQ62VjjbWAcsGCJxc7pw8rkLsX9s13VFFsDnr6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzY42kLxqJS1WzvbhYtsYCK+jBtMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDvPX4aM ucVNb8HF0FlWwklHEVdE/SvfqeBvVxMPRoouQqyQETt90A6vLIJ3WSTxqPi7agBP exyJCxhfnDqkLF9dzvK9zNyfiwd/arAKTVTWZmovDST8zmabn2KjLNHL+TQQmPp5 idxzVcfPzvJ63QCFV8L8Ly/KQ65sXkx9qFFz69X7glJsU598hMjaaYdt4NzJvPGf MUCIF6QhFj+mkg4HTfWuoAoHKhjT4Zw+zN29/vDYvJ98OdB/WSu5wQysDuVPOO6w v2EoaHY6O0f00mhVYRta50opqCqZ4MpUTMlRSqK1NJiFzrPL3EVWcZ0pWTJJep30 bJccBqbjfNWQMw== -----END CERTIFICATE-----Generated at Mon Apr 28 01:51:31 2025 by rpki-client