$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json) Hash identifier: WHhaPmdsYWmT9SsKv1zZ7BqCdDOACRQvSYycTZomsII= Subject key identifier: CF:34:7D:B0:2F:93:53:6C:03:C5:B9:32:40:D6:30:5D:22:A8:DD:3E Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 01978660BFB208E4F98FF5FED19323CB24D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft Manifest number: 15A8 Signing time: Thu 19 Jun 2025 04:09:36 +0000 Manifest this update: Thu 19 Jun 2025 04:09:36 +0000 Manifest next update: Fri 20 Jun 2025 04:09:36 +0000 Files and hashes: 1: 1-50fUTEZMsqAfXKRVrjaJClUTPo.roa (hash: SmVCW5SnXSQgzJ45PrQg5gb9ODVy5PLQWa7gK9vYWEc=) 2: 1-rkdO3RS7mM1mTwHCfWVGwivLng.roa (hash: BJTIHx9AZNxRytnvkhO+a74x3XvNzoddWw1cmVufMkE=) 3: 1tphX7duVxQmoCj6iTv4JAUaFg0.roa (hash: 27/QMQNGQs+g1Yp+wtV2KRKQWUHGqze2SI6TtsCCM6Y=) 4: EsH1wGyP_4A3yjvtVJYJ-XBblic.roa (hash: DKgsauljcGZUwZ9qDQvDqIX1wcEbMc0VYZIYyCHtBuo=) 5: HuN4xP77vmRQRTk2kLL4bBeTBzg.roa (hash: cfsClMuW5Wg28hM5IbnYhS3Trbel7XimVvBZYWRkJfs=) 6: IMiFsNnN_p3sRoFH_C0d3qAaG_Q.roa (hash: oWqS9ieXKn+2R3xoqT+UPllXbLVMb7LbQgSB908taWQ=) 7: J8ocfDucYOz1VMSwyoOUgA7bURQ.roa (hash: 0LgKF+X2hpfhBTpNW2fTwMBm/B3MJkvlI1FoopslTw8=) 8: KE6TA5zPoru3bUa_YwQT_Aq4Tew.roa (hash: 6ftLo5kAogsbjk6fggK5ulzLgZYRlhQ2Mq1e7w+2xz0=) 9: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: VIfNOLJjeNDc/5WAWaKnU//yCRAI+bTIn1VMFKoTrz4=) 10: MtbsaY1yHn7-MT1fnsMPsz6ewPc.roa (hash: OtSZHtlFSjGonybseZjtwCmp5aSwaiqTCQ92rP98kgk=) 11: PskBO-hDKENpyj5TTl1bEDl9XFc.roa (hash: tVSD5b97fIERDtyitQPZy1bsEOcd19dJWMvlkxpkiNA=) 12: Vr7CtL_FipPK_JMmN6nyOTkF9N4.roa (hash: O291N7rIOeqa+sP7ZzErWn7Ntd1lj5fabHHpKHOsvGs=) 13: Y1Q65_50tcxlLXfWRBA87l5aDQw.roa (hash: g92z5H6lVXAl9mxdMgSPp7qM0b2CPQJ/omh9m+p0QO4=) 14: tfcI96HYGRf5GQ2bB8COjBYLdUQ.roa (hash: TrgrDqQXriqLm4qlMfISeHZWAMtYQBeQJnDLH6tGFGI=) 15: wajonDxdBm0pS767lGRq06Z84rM.roa (hash: Ne2muvaUoR5VivXU1vdN76aOmdMN56u55EBtWCDX1QI=) 16: yyYpMTy-uoOfGWdAgBKsqlQl5P4.roa (hash: bh3l2F5hAe5r/ruUhfgdEqGkzm/2Cu1kCzAkVz4n/4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 23:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:86:60:bf:b2:08:e4:f9:8f:f5:fe:d1:93:23:cb:24:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jun 19 04:09:36 2025 GMT Not After : Jun 20 04:09:36 2025 GMT Subject: CN=cf347db02f93536c03c5b93240d6305d22a8dd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:89:69:46:8d:57:24:a5:ea:ee:0f:a0:f3: 5f:43:a3:87:0c:e5:22:d3:03:88:0d:e3:2e:fd:8e: 3a:c1:17:3e:19:a2:98:c1:86:a0:bf:0e:28:44:8f: 3a:21:37:11:91:e8:61:d1:a2:19:80:f6:62:a0:cd: 2c:02:92:8d:83:38:a0:69:49:32:b2:2e:a1:2a:ab: 66:32:8d:58:ba:7e:9e:59:7c:21:18:7d:02:14:16: 00:37:45:a1:fe:58:36:ce:4f:77:be:4e:f1:83:bd: 85:7f:3c:32:6b:b8:9a:3f:ba:79:92:88:09:49:3a: 11:b4:c7:3c:2a:49:a6:44:9a:b1:8c:26:a7:28:d4: d2:f4:dd:42:24:03:fa:e1:1f:de:e3:d3:9e:09:c0: 1b:7e:1c:37:b4:df:a9:3b:13:5a:86:7b:15:5d:56: e9:77:da:7a:40:f1:98:d7:8a:21:3e:ac:5d:d7:01: 29:5b:80:72:6a:50:89:75:44:1e:10:f7:70:2c:10: cd:0d:d9:7c:71:81:cb:d2:68:83:aa:ea:21:a8:cd: ba:48:e6:8f:37:90:84:3c:9f:e4:f1:f4:27:42:45: a0:41:83:58:16:23:1c:18:a4:3e:58:bc:cc:69:61: 9a:08:43:aa:c0:9f:1f:9d:eb:55:0f:cf:39:29:64: 1d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:34:7D:B0:2F:93:53:6C:03:C5:B9:32:40:D6:30:5D:22:A8:DD:3E X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:54:49:77:11:70:45:ae:29:92:70:84:e7:48:d3:92:f6:ae: 37:41:51:33:5f:11:bc:0d:83:96:09:5d:13:2e:15:c7:2f:f6: 38:f6:91:8d:65:08:fd:84:f3:13:9c:32:7d:98:d7:f5:10:be: 2a:a9:16:00:b4:89:ff:0f:4e:69:c5:e3:6d:8a:3c:db:32:0b: 3d:61:08:63:f9:e9:11:5d:60:bd:1f:4b:ae:6a:c6:e2:68:5e: ec:ba:b5:e3:cd:d1:d6:33:96:60:52:04:5e:89:8d:b0:ef:79: 64:9b:be:11:69:d2:fd:43:23:e4:2d:49:89:3e:84:c4:75:3f: 1f:5f:92:d4:e0:d4:b7:48:06:b2:f6:c3:d9:c6:48:81:4a:79: f7:03:58:ed:6e:97:43:98:50:ea:06:8f:a4:f9:54:1b:b2:a8: f2:6c:e3:a6:29:d6:48:7e:9f:a7:df:b8:1d:2f:67:62:e7:6f: 38:45:21:f2:8c:23:15:c6:a4:60:1d:d8:36:e5:a0:e2:e4:0c: fa:b1:86:21:bc:fa:9d:a9:14:97:e2:c0:14:d0:7b:53:77:fb: 0b:b0:41:73:33:b5:9f:50:68:b0:44:55:98:6b:32:f1:16:7b: e1:bf:e4:90:b2:fe:f0:41:ee:e8:6f:ad:ba:a0:77:a1:ae:96: b4:d7:98:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeGYL+yCOT5j/X+0ZMjyyTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjUwNjE5MDQwOTM2WhcNMjUwNjIwMDQwOTM2WjAzMTEwLwYDVQQD EyhjZjM0N2RiMDJmOTM1MzZjMDNjNWI5MzI0MGQ2MzA1ZDIyYThkZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUaJaUaNVySl6u4PoPNfQ6OHDOUi 0wOIDeMu/Y46wRc+GaKYwYagvw4oRI86ITcRkehh0aIZgPZioM0sApKNgzigaUky si6hKqtmMo1Yun6eWXwhGH0CFBYAN0Wh/lg2zk93vk7xg72Ffzwya7iaP7p5kogJ SToRtMc8KkmmRJqxjCanKNTS9N1CJAP64R/e49OeCcAbfhw3tN+pOxNahnsVXVbp d9p6QPGY14ohPqxd1wEpW4ByalCJdUQeEPdwLBDNDdl8cYHL0miDquohqM26SOaP N5CEPJ/k8fQnQkWgQYNYFiMcGKQ+WLzMaWGaCEOqwJ8fnetVD885KWQdwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM80fbAvk1NsA8W5MkDWMF0iqN0+MB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClRJdxFw Ra4pknCE50jTkvauN0FRM18RvA2DlgldEy4Vxy/2OPaRjWUI/YTzE5wyfZjX9RC+ KqkWALSJ/w9OacXjbYo82zILPWEIY/npEV1gvR9LrmrG4mhe7Lq1483R1jOWYFIE XomNsO95ZJu+EWnS/UMj5C1JiT6ExHU/H1+S1ODUt0gGsvbD2cZIgUp59wNY7W6X Q5hQ6gaPpPlUG7Ko8mzjpinWSH6fp9+4HS9nYudvOEUh8owjFcakYB3YNuWg4uQM +rGGIbz6nakUl+LAFNB7U3f7C7BBczO1n1BosERVmGsy8RZ74b/kkLL+8EHu6G+t uqB3oa6WtNeYKQ== -----END CERTIFICATE-----Generated at Thu Jun 19 09:19:23 2025 by rpki-client