$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: oQiyA7WByHvIRH8v6gw7m3LO/t+iPonxZ2Ca4mktdJQ= Subject key identifier: 45:83:AF:64:B9:80:EF:D1:F3:6E:DF:6A:99:4F:60:D0:74:10:7F:E2 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 019676B15A5C3943CB9DFB6BFF3AC4ED8B70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 01F4 Signing time: Sun 27 Apr 2025 10:00:56 +0000 Manifest this update: Sun 27 Apr 2025 10:00:56 +0000 Manifest next update: Mon 28 Apr 2025 10:00:56 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: b70wGF2POAZutOpCeH78b1R5W4XWHmwqDq/U6OSryjI=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:b1:5a:5c:39:43:cb:9d:fb:6b:ff:3a:c4:ed:8b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Apr 27 10:00:56 2025 GMT Not After : Apr 28 10:00:56 2025 GMT Subject: CN=4583af64b980efd1f36edf6a994f60d074107fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:89:2e:ea:c4:73:cb:5a:33:c9:2a:ac:f3: 51:8d:f9:ca:1d:2d:30:3e:eb:91:f9:8c:b2:52:43: 2a:80:53:0d:ad:c3:7b:dc:41:6d:27:a8:23:ba:e4: 57:ed:3e:0d:08:88:63:98:37:d0:13:12:db:11:f8: 92:7d:41:92:10:28:7e:42:2a:c8:7e:e4:8d:bd:65: 1d:b6:d0:72:4b:d4:aa:95:ad:05:77:bc:5c:a1:e1: eb:e4:b2:a7:73:2a:b9:59:0c:fd:e7:0b:a2:b8:7d: de:cc:37:60:a2:f7:1a:6d:54:58:a3:cb:46:c1:b1: 19:8f:35:ad:7b:d5:e9:ee:dc:53:c6:b1:67:13:01: 30:85:f8:89:90:ad:70:a6:07:74:54:0b:54:19:62: c9:04:22:38:37:25:ca:cb:dd:0d:01:42:81:b9:7c: 3a:7d:06:93:b9:51:55:ae:cc:64:81:4a:61:6d:07: 47:03:8d:31:b8:6a:21:9f:4a:13:00:fe:e3:bc:9d: b3:4f:02:ad:e0:ad:9c:10:81:92:54:59:e2:30:d8: a4:42:ab:7f:4d:24:71:cd:97:b8:aa:2e:dc:c8:b3: a3:cc:36:f2:6e:b3:6b:c5:25:e4:38:46:be:0c:52: b0:ad:6d:50:20:71:c2:d4:6f:d4:3c:04:3f:bd:85: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:AF:64:B9:80:EF:D1:F3:6E:DF:6A:99:4F:60:D0:74:10:7F:E2 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:52:dc:a5:ab:c5:a5:d3:44:d3:89:c5:24:41:4d:33:ca:96: 65:5d:91:56:a9:89:4a:39:b1:af:2c:06:6f:e9:86:72:ba:85: a2:a9:96:1e:ff:e3:43:0c:28:97:1b:5a:85:e3:cf:fa:fe:b6: 6e:c6:ec:a0:5f:52:d5:52:3d:a2:ca:4d:54:65:d5:95:3b:fd: 53:e5:fc:f8:6e:6e:0f:47:11:10:e4:5f:ac:30:6e:a3:82:dd: e3:6f:40:40:ec:2a:02:71:d8:90:60:d0:72:36:a1:c4:e3:fb: 8d:82:54:3a:29:8c:5b:1f:b4:63:29:05:43:cf:25:cc:a7:cc: 87:48:b9:ed:40:0b:4a:07:0f:32:c1:ea:8c:4f:f6:a0:4a:fd: 47:b0:f0:7d:2a:63:d0:fb:4e:8a:c6:f1:e4:47:5e:37:dd:2e: 51:9a:5e:d2:f7:fe:68:66:85:c2:55:d4:7b:87:7e:d1:fe:6f: 67:ed:45:88:23:99:cc:9a:75:19:1b:f4:a6:93:4d:cb:90:a5: 0a:ea:5b:62:49:61:20:60:64:da:2f:48:91:cc:45:a7:97:1a: fd:1b:5a:05:7c:50:fd:25:c8:f3:55:37:13:3c:71:55:4a:f5: 42:43:71:bc:4c:f1:5d:a7:7f:e4:5d:1d:1b:6d:a3:02:bf:9d: 8f:62:63:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2sVpcOUPLnftr/zrE7YtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUwNDI3MTAwMDU2WhcNMjUwNDI4MTAwMDU2WjAzMTEwLwYDVQQD Eyg0NTgzYWY2NGI5ODBlZmQxZjM2ZWRmNmE5OTRmNjBkMDc0MTA3ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxaJLurEc8taM8kqrPNRjfnKHS0w PuuR+YyyUkMqgFMNrcN73EFtJ6gjuuRX7T4NCIhjmDfQExLbEfiSfUGSECh+QirI fuSNvWUdttByS9Sqla0Fd7xcoeHr5LKncyq5WQz95wuiuH3ezDdgovcabVRYo8tG wbEZjzWte9Xp7txTxrFnEwEwhfiJkK1wpgd0VAtUGWLJBCI4NyXKy90NAUKBuXw6 fQaTuVFVrsxkgUphbQdHA40xuGohn0oTAP7jvJ2zTwKt4K2cEIGSVFniMNikQqt/ TSRxzZe4qi7cyLOjzDbybrNrxSXkOEa+DFKwrW1QIHHC1G/UPAQ/vYVMGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWDr2S5gO/R827faplPYNB0EH/iMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVLcpavF pdNE04nFJEFNM8qWZV2RVqmJSjmxrywGb+mGcrqFoqmWHv/jQwwolxtahePP+v62 bsbsoF9S1VI9ospNVGXVlTv9U+X8+G5uD0cREORfrDBuo4Ld429AQOwqAnHYkGDQ cjahxOP7jYJUOimMWx+0YykFQ88lzKfMh0i57UALSgcPMsHqjE/2oEr9R7DwfSpj 0PtOisbx5EdeN90uUZpe0vf+aGaFwlXUe4d+0f5vZ+1FiCOZzJp1GRv0ppNNy5Cl CupbYklhIGBk2i9IkcxFp5ca/RtaBXxQ/SXI81U3EzxxVUr1QkNxvEzxXad/5F0d G22jAr+dj2Jjxg== -----END CERTIFICATE-----Generated at Sun Apr 27 20:11:20 2025 by rpki-client