$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: UzCvj2iMyTZvruD5dt+A8m0BCoEpL5TK28jd6x+Bae0= Subject key identifier: B6:AA:DD:0E:10:CB:03:45:1D:2B:42:D8:9A:7D:AC:43:DD:8A:76:1C Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 01967E335700F63D0B04746D420A329DEAE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 12E8 Signing time: Mon 28 Apr 2025 21:00:15 +0000 Manifest this update: Mon 28 Apr 2025 21:00:15 +0000 Manifest next update: Tue 29 Apr 2025 21:00:15 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: KUk-CSFCGROoWRr0bn1g2QgmGDo.roa (hash: UpwZsPUmRF6H+YvfEB2+WDVmprsNudTy1jgLuv//feE=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: 02Z600ed1Q1dtnD6vg6sazDc13gO5XOsYzKrGASg4cs=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: NZa0gIfmJGTWop9klB_kmws3bBk.roa (hash: EJR++Bc5Re9D8wlLY18Cmifrl1rYRjuKt7sbeibsf5k=) 10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 13: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 14: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 15: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 16: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7e:33:57:00:f6:3d:0b:04:74:6d:42:0a:32:9d:ea:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Apr 28 21:00:15 2025 GMT Not After : Apr 29 21:00:15 2025 GMT Subject: CN=b6aadd0e10cb03451d2b42d89a7dac43dd8a761c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:43:79:58:21:46:66:b2:4a:19:09:a8:09:47: 5e:99:3b:49:d8:18:7e:be:5a:39:28:f5:22:83:80: 0c:76:a0:29:a6:8f:47:ce:ad:4d:86:b9:fc:a2:e3: 7d:cc:30:3a:8f:b4:c2:42:b9:c6:12:bc:fe:d7:1b: 4e:65:99:b5:d2:71:00:ba:0e:99:3c:b2:75:67:ea: 9c:c0:22:3a:40:9e:37:38:4b:78:d8:5c:15:24:0a: 8f:8c:f7:0e:0f:32:a8:24:64:26:de:a3:fa:c9:82: 04:17:dc:97:53:0a:73:22:a6:f4:62:38:26:50:ef: 31:4d:ac:7a:f1:95:c7:d8:b3:c2:19:49:6e:3c:a6: e5:74:95:05:9f:bd:11:2f:d8:d7:af:d6:92:71:7b: 5b:8a:50:50:76:72:6b:a0:00:89:32:2e:75:ef:d9: 91:1a:d6:23:81:35:0e:71:ed:54:7a:7b:79:ae:78: e1:e5:d5:cd:c1:ea:ba:85:6d:8b:d0:6f:d0:40:fc: a1:ec:5a:f8:81:bd:34:61:58:16:0e:6e:dc:1a:40: 79:9c:6f:73:ab:ee:19:e7:2f:f2:93:ed:5d:4a:f1: a6:c3:d1:f0:2d:0c:07:3e:46:1f:59:fa:25:0e:26: 62:48:9f:c6:c7:29:88:60:e8:c9:73:ea:3a:9b:4d: 87:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:DD:0E:10:CB:03:45:1D:2B:42:D8:9A:7D:AC:43:DD:8A:76:1C X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:48:2d:c1:0b:ea:a9:52:1a:71:c4:ab:4c:76:bc:93:74:15: 1b:c5:aa:f1:54:61:dd:23:47:6c:79:45:a1:9c:68:f5:e7:18: 89:61:23:b1:28:3c:8f:2c:df:78:dd:15:d9:0b:6a:72:5a:d9: 11:7b:0f:78:6a:6f:0f:51:8d:eb:64:c1:bf:26:ec:19:6f:c1: 78:69:53:9c:2a:32:b0:9d:9b:ed:fb:75:a8:f9:f1:8b:bb:d2: af:4b:4f:9e:89:90:a8:55:44:f1:de:f6:e9:26:b2:73:45:10: a3:01:d1:d9:e5:57:bb:da:fe:1a:4e:a8:a5:aa:7f:70:e2:1e: 3e:36:a2:c6:a5:7b:d2:5d:61:06:c9:d2:7c:5b:7e:ca:27:3b: 79:e3:da:e6:d1:88:8a:4f:49:4f:93:f2:fa:57:9b:bf:80:d8: 49:0d:06:98:80:ee:4e:a6:10:15:6e:d7:37:ed:dc:cf:06:58: 82:14:51:fc:61:59:61:63:8f:f7:66:04:36:8e:aa:d2:92:24: 0d:5a:b8:2a:7d:50:74:1b:c7:e3:7b:0a:72:51:97:6f:73:f9: 02:a2:3c:54:b4:4a:1d:35:64:2b:99:2d:c1:c2:13:ab:91:97: 3c:de:fc:5d:6f:d1:47:ed:fe:9b:11:d5:9d:d0:fc:d2:d4:5e: ad:bd:0e:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ+M1cA9j0LBHRtQgoynerpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwNDI4MjEwMDE1WhcNMjUwNDI5MjEwMDE1WjAzMTEwLwYDVQQD EyhiNmFhZGQwZTEwY2IwMzQ1MWQyYjQyZDg5YTdkYWM0M2RkOGE3NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkN5WCFGZrJKGQmoCUdemTtJ2Bh+ vlo5KPUig4AMdqAppo9Hzq1Nhrn8ouN9zDA6j7TCQrnGErz+1xtOZZm10nEAug6Z PLJ1Z+qcwCI6QJ43OEt42FwVJAqPjPcODzKoJGQm3qP6yYIEF9yXUwpzIqb0Yjgm UO8xTax68ZXH2LPCGUluPKbldJUFn70RL9jXr9aScXtbilBQdnJroACJMi5179mR GtYjgTUOce1Uent5rnjh5dXNweq6hW2L0G/QQPyh7Fr4gb00YVgWDm7cGkB5nG9z q+4Z5y/yk+1dSvGmw9HwLQwHPkYfWfolDiZiSJ/GxymIYOjJc+o6m02HxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaq3Q4QywNFHStC2Jp9rEPdinYcMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy0gtwQvq qVIaccSrTHa8k3QVG8Wq8VRh3SNHbHlFoZxo9ecYiWEjsSg8jyzfeN0V2QtqclrZ EXsPeGpvD1GN62TBvybsGW/BeGlTnCoysJ2b7ft1qPnxi7vSr0tPnomQqFVE8d72 6Sayc0UQowHR2eVXu9r+Gk6opap/cOIePjaixqV70l1hBsnSfFt+yic7eePa5tGI ik9JT5Py+lebv4DYSQ0GmIDuTqYQFW7XN+3czwZYghRR/GFZYWOP92YENo6q0pIk DVq4Kn1QdBvH43sKclGXb3P5AqI8VLRKHTVkK5ktwcITq5GXPN78XW/RR+3+mxHV ndD80tRerb0Odw== -----END CERTIFICATE-----Generated at Tue Apr 29 06:33:14 2025 by rpki-client