$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: I7yRUoB3Kr1bDr732I2hwvhFNjB3FZwFC2QFT9jpIsA= Subject key identifier: 16:A7:FB:35:F2:32:92:30:87:80:02:B2:5F:FC:A1:EE:A9:1B:CD:7B Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019678D67054332F5799FDC57A724E08A26F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1490 Signing time: Sun 27 Apr 2025 20:00:41 +0000 Manifest this update: Sun 27 Apr 2025 20:00:41 +0000 Manifest next update: Mon 28 Apr 2025 20:00:41 +0000 Files and hashes: 1: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 2: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 3: AFQfc6JxPs0WbtXEfZUQW6cmtHw.roa (hash: e8L77a5kg61puuX03oiiqxMg/6Zhg3a40JEKuTihNS4=) 4: CufnYSstlNtENOE9efd7-2ln8Es.roa (hash: z8qQP+b43sULkWDkQAPO4p2CYsOjqrih9Z+imFI0Iok=) 5: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 6: HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa (hash: kHbTsJD5NdmK1vLZSQigG4P1BUyQFBvibnG4XtzolO8=) 7: Ja8jEoAFdKAq9jPVrV5r_aM_sDE.roa (hash: aPkpHINCNIPcNaF1YN3J73MWU0LUO30n5otRk9vcQU8=) 8: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: cTaqcyu0KppYVI+GKa/moO1y8Kt0mLoDg6E/u16YCBA=) 9: LoGWdajWVkzXAomx3BiXVveHKPE.roa (hash: DQkDoapnHj0MLL/tsnzQzVTwMl16+a7poqF4DwlVKiA=) 10: S31ZOfjUKXHqumIitPUzwNH5MBo.roa (hash: 6OktdKUpvFcNMtIKT9x1/tMHyAezG6+Rn6sN9L0iNIc=) 11: SjmXZnG51JRTtLsN9sJ8Rvd5Pt4.roa (hash: tJBERu9Lo1wC7SnI5+hmLMCW8eZfTvyvoHgD0vHT/x8=) 12: VgVq-6TLMiL7Sau_RtgQ3m_Vpv0.roa (hash: 1YKBUCdRYV8CfVZcj+eVWU3GK5hSdpogHam93h2rJ6k=) 13: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 14: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 15: q9zx3y37CGvq7f_eoa_X5J6aUiQ.roa (hash: VDm3O0ZHhZ/8aSTirgiKWAby76xfZls/qzdOQO5HVw8=) 16: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 17: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:d6:70:54:33:2f:57:99:fd:c5:7a:72:4e:08:a2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Apr 27 20:00:41 2025 GMT Not After : Apr 28 20:00:41 2025 GMT Subject: CN=16a7fb35f2329230878002b25ffca1eea91bcd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:75:14:a3:c1:19:06:0c:d7:1e:70:45:88: 8b:3c:7a:bc:10:a3:a1:67:82:3e:3e:f8:9c:18:96: 41:88:12:df:69:6b:36:25:a2:39:58:2e:db:3e:48: 90:b6:c2:58:e4:82:c1:9c:49:6e:40:02:12:cb:a1: 49:26:07:17:4b:b4:35:29:79:22:31:d9:32:c8:f2: 6d:b8:0f:84:3e:7e:6f:6d:8a:69:f2:73:cb:5a:fa: 25:8a:e3:0a:bd:52:6f:a1:cd:4f:c1:80:94:06:43: 78:01:01:63:0c:0d:d9:0c:9b:17:cc:40:78:cf:5d: bb:6b:b2:13:63:0b:ca:94:ef:c8:be:df:e9:94:4a: 07:5f:f3:3f:34:75:66:4e:17:19:2f:e4:57:ee:5b: 0e:17:b6:88:2a:c2:de:ce:29:99:68:d2:5f:2a:c9: ab:4a:f5:ad:00:b0:47:62:7c:ca:bd:69:2c:68:71: 41:7b:90:96:47:b7:5e:e7:97:ef:2c:ca:d6:3d:ab: 85:e0:36:8b:f4:5d:fc:e2:c3:30:9e:c6:ca:92:f2: f5:b7:78:af:55:6b:43:17:04:ff:e0:4b:b8:3e:86: 0d:3b:16:24:97:09:85:89:7b:2a:cd:c3:a0:28:5b: 5c:0b:60:1a:72:c4:61:09:f2:02:ad:99:39:71:ee: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A7:FB:35:F2:32:92:30:87:80:02:B2:5F:FC:A1:EE:A9:1B:CD:7B X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2a:9e:01:1a:ac:44:80:bf:3a:c9:6b:4d:f2:e2:ae:be:ce: 96:80:1f:0a:aa:90:43:61:ad:87:e0:5d:3c:1d:3b:e9:b4:28: 85:fe:9b:a8:6e:82:6c:af:f1:dc:65:e7:90:fd:76:21:44:f6: 52:ef:da:3a:60:58:ac:ba:0b:0c:aa:26:28:c2:02:f7:ab:b7: c8:e4:70:fe:53:fa:49:14:1c:23:ff:f6:b5:3d:ca:79:9f:1d: d1:80:8f:00:9e:9e:1a:ed:57:34:c2:6c:77:8d:80:f1:6f:89: 9e:64:a2:2b:df:b0:c0:20:93:f2:f1:05:d7:42:21:6c:6c:bb: 21:b7:d9:75:1f:57:87:1a:66:4b:26:91:02:65:dc:92:e5:2a: 09:f3:b0:e0:90:47:f2:75:d1:cf:2f:ec:a6:e1:8a:8e:95:de: fa:3e:0a:e6:15:e3:20:e1:05:35:12:38:9f:3d:6f:22:91:7a: 7c:ec:b9:0e:82:fa:42:f4:39:3e:de:c4:c6:de:7d:cc:33:de: 11:b4:86:aa:1a:53:22:df:09:8b:0c:22:ab:01:93:4d:96:e4: bc:f7:be:ea:2d:82:47:16:48:48:b8:b4:65:15:12:4e:25:9f: b9:c2:95:41:00:42:63:fc:2b:91:26:df:7d:b3:a2:ab:5e:fe: 01:9b:68:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ41nBUMy9Xmf3FenJOCKJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUwNDI3MjAwMDQxWhcNMjUwNDI4MjAwMDQxWjAzMTEwLwYDVQQD EygxNmE3ZmIzNWYyMzI5MjMwODc4MDAyYjI1ZmZjYTFlZWE5MWJjZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiJ1FKPBGQYM1x5wRYiLPHq8EKOh Z4I+PvicGJZBiBLfaWs2JaI5WC7bPkiQtsJY5ILBnEluQAISy6FJJgcXS7Q1KXki MdkyyPJtuA+EPn5vbYpp8nPLWvoliuMKvVJvoc1PwYCUBkN4AQFjDA3ZDJsXzEB4 z127a7ITYwvKlO/Ivt/plEoHX/M/NHVmThcZL+RX7lsOF7aIKsLezimZaNJfKsmr SvWtALBHYnzKvWksaHFBe5CWR7de55fvLMrWPauF4DaL9F384sMwnsbKkvL1t3iv VWtDFwT/4Eu4PoYNOxYklwmFiXsqzcOgKFtcC2AacsRhCfICrZk5ce6jtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBan+zXyMpIwh4ACsl/8oe6pG817MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiqeARqs RIC/OslrTfLirr7OloAfCqqQQ2Gth+BdPB076bQohf6bqG6CbK/x3GXnkP12IUT2 Uu/aOmBYrLoLDKomKMIC96u3yORw/lP6SRQcI//2tT3KeZ8d0YCPAJ6eGu1XNMJs d42A8W+JnmSiK9+wwCCT8vEF10IhbGy7IbfZdR9XhxpmSyaRAmXckuUqCfOw4JBH 8nXRzy/spuGKjpXe+j4K5hXjIOEFNRI4nz1vIpF6fOy5DoL6QvQ5Pt7Ext59zDPe EbSGqhpTIt8JiwwiqwGTTZbkvPe+6i2CRxZISLi0ZRUSTiWfucKVQQBCY/wrkSbf fbOiq17+AZtoPw== -----END CERTIFICATE-----Generated at Sun Apr 27 22:11:09 2025 by rpki-client