$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: de+ICkLtW+WNKRe5OiBYDInTnH8pfuiEPoh4LvVpKKY= Subject key identifier: 2E:28:8F:C4:1F:C6:B1:48:16:1B:1A:DA:D8:72:F6:C0:CB:79:59:24 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 0198722A42E552A694D4217C7A2A190BF22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0783 Signing time: Sun 03 Aug 2025 23:00:28 +0000 Manifest this update: Sun 03 Aug 2025 23:00:28 +0000 Manifest next update: Mon 04 Aug 2025 23:00:28 +0000 Files and hashes: 1: 1-UVj7ag_d9orF_0zVzG07Lxl5mQ.roa (hash: SkCOrOVawqubIGJ5nSRzyPM3ZK7PA9iP1A0fEWvNw7w=) 2: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=) 6: _YY0UJCJbQTIa1XDSLBMiZ983vo.roa (hash: Gk8qdq6LrPLlWU/Jmg7W6QhRrabuxZ2rc8Fg/yM8yME=) 7: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: iZnCkTImCvQJuWE6Uos60nsBeAc.roa (hash: A+XXsOgpp9E8wrC4jlevUH3rfTq9qVISkfFyAQgNpWw=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: UIN67kmMtYInPNQ5+Tvi31pbHS0LqcONRIJ0KMEVGLI=) 11: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 12: umezidv-FWVd5BONx0eQ2df3GDk.roa (hash: F8spCI/zm7IIZKjgLnCLJLeEJHfa5Hi34ZAZHQ3nTyk=) 13: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 14: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:2a:42:e5:52:a6:94:d4:21:7c:7a:2a:19:0b:f2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Aug 3 23:00:28 2025 GMT Not After : Aug 4 23:00:28 2025 GMT Subject: CN=2e288fc41fc6b148161b1adad872f6c0cb795924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:95:65:da:69:54:cf:40:51:a4:d9:ab:a8: 99:b5:5b:9c:69:d3:21:e1:4b:b2:27:dd:d2:1b:35: 53:37:f1:e6:26:60:7c:a9:b3:68:46:cc:93:a1:6b: e1:80:41:2c:85:b1:51:18:b0:ba:58:ac:6d:0d:f2: 4f:e1:d3:c2:f1:c2:b2:af:d9:1c:54:15:e4:a5:34: 72:50:7c:1a:66:a0:29:a4:79:95:1c:98:f4:58:5f: 5e:80:34:8c:de:ab:70:89:d7:1e:e1:1f:f3:9f:08: d3:2c:42:b1:fe:a3:e3:eb:1b:01:3a:cd:d5:7e:33: f5:eb:b4:9c:e7:5c:3c:7d:17:2a:9f:fe:7c:cd:73: cc:75:c6:3d:5d:59:7c:d0:b4:89:9a:10:fe:92:a9: 7e:33:54:2e:3c:c3:72:29:d7:1e:92:48:e6:1d:6a: 04:7a:4b:3f:14:18:2e:67:4a:90:8f:a9:d9:1d:ab: 89:0b:b9:e1:c2:ae:59:aa:50:9f:b4:41:ec:bf:17: 94:fc:8e:cd:17:4f:f6:ed:d1:cd:0d:69:db:7c:6d: 34:ad:f9:c4:28:cb:3c:bd:cd:6c:e3:31:f0:a8:ce: 9a:a8:85:2b:80:d4:32:91:b8:a7:a3:24:14:e7:de: bf:db:28:39:28:31:d7:69:a5:63:87:c2:b5:e4:a7: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:28:8F:C4:1F:C6:B1:48:16:1B:1A:DA:D8:72:F6:C0:CB:79:59:24 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:92:c2:48:ea:75:d7:6d:bc:50:6f:00:dc:67:ca:1e:af:e6: 70:9d:b6:b5:d9:f4:93:96:22:2a:c9:bf:45:6a:08:71:76:a9: f1:70:48:8a:9d:b3:a7:8a:45:cf:e1:7d:b1:6d:68:25:e8:50: 3a:6a:3f:63:4c:ec:22:c0:ac:c9:b9:37:c3:18:f1:37:8e:c3: 3d:b7:69:a3:aa:52:e7:2e:a3:20:8f:32:05:73:97:57:b4:d6: 35:3b:90:2f:d5:7f:2d:ce:aa:25:3d:cd:53:96:85:17:82:8f: 6a:61:52:49:e1:b6:93:c0:40:66:ce:14:fb:12:c7:8f:4a:18: 2b:e5:aa:24:7f:19:e6:29:ee:14:ef:32:ec:a5:2f:55:02:3d: 8b:94:bd:4b:47:94:65:21:0d:46:ee:3b:97:df:3d:86:ae:66: fa:70:a7:19:03:79:70:56:34:51:6a:1c:f6:34:98:4d:f0:8f: ac:06:63:9d:b8:8e:c7:8d:36:9e:3f:e2:7b:66:eb:40:40:9e: bd:02:51:34:62:d0:69:bb:be:04:61:93:d3:a0:23:61:56:59: 29:ff:18:89:59:9d:76:99:ff:be:d9:e4:96:0e:08:10:5a:31: a3:07:7f:17:30:3b:20:89:4d:c7:8c:9e:22:75:15:1e:a9:a6: 01:15:1e:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyKkLlUqaU1CF8eioZC/IuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwODAzMjMwMDI4WhcNMjUwODA0MjMwMDI4WjAzMTEwLwYDVQQD EygyZTI4OGZjNDFmYzZiMTQ4MTYxYjFhZGFkODcyZjZjMGNiNzk1OTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzqVZdppVM9AUaTZq6iZtVucadMh 4UuyJ93SGzVTN/HmJmB8qbNoRsyToWvhgEEshbFRGLC6WKxtDfJP4dPC8cKyr9kc VBXkpTRyUHwaZqAppHmVHJj0WF9egDSM3qtwidce4R/znwjTLEKx/qPj6xsBOs3V fjP167Sc51w8fRcqn/58zXPMdcY9XVl80LSJmhD+kql+M1QuPMNyKdcekkjmHWoE eks/FBguZ0qQj6nZHauJC7nhwq5ZqlCftEHsvxeU/I7NF0/27dHNDWnbfG00rfnE KMs8vc1s4zHwqM6aqIUrgNQykbinoyQU596/2yg5KDHXaaVjh8K15KfuHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4oj8QfxrFIFhsa2thy9sDLeVkkMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpLCSOp1 1228UG8A3GfKHq/mcJ22tdn0k5YiKsm/RWoIcXap8XBIip2zp4pFz+F9sW1oJehQ Omo/Y0zsIsCsybk3wxjxN47DPbdpo6pS5y6jII8yBXOXV7TWNTuQL9V/Lc6qJT3N U5aFF4KPamFSSeG2k8BAZs4U+xLHj0oYK+WqJH8Z5inuFO8y7KUvVQI9i5S9S0eU ZSENRu47l989hq5m+nCnGQN5cFY0UWoc9jSYTfCPrAZjnbiOx402nj/ie2brQECe vQJRNGLQabu+BGGT06AjYVZZKf8YiVmddpn/vtnklg4IEFoxowd/FzA7IIlNx4ye InUVHqmmARUe5A== -----END CERTIFICATE-----Generated at Mon Aug 4 03:57:58 2025 by rpki-client