$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: nJAUcj56IL/K8/znhb452i7DCvizI8JN1Pp4N6m6Cpg= Subject key identifier: 52:04:46:B9:DD:19:9A:1B:F9:B5:0C:B3:61:47:4E:D3:97:CD:C5:13 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 01967BD825861D0A6269809C407F2C84804C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0679 Signing time: Mon 28 Apr 2025 10:01:25 +0000 Manifest this update: Mon 28 Apr 2025 10:01:25 +0000 Manifest next update: Tue 29 Apr 2025 10:01:25 +0000 Files and hashes: 1: 1MaQ3UERADg_6Qg7JL_rTSZtSHY.roa (hash: +cHQwaDCYvHww4iP38T2uoBP4/k9EvIeJ4TrlPbtqZk=) 2: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=) 3: HZRJn6Tle2sGNVjuC1VDO76X76Q.roa (hash: fXSmWLniv8nFMnfUppgyxtui2MfIKvJerwegHQDXicI=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: OvDT3hoMHBsjPJyk8KakbVCtc9Q.roa (hash: VPiSczt4Msg1WvbqoxKczsVhjU7QHTKIOEw0gt/k9GQ=) 6: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=) 7: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: 7ZnRvTENGi8RzScW09EKQAQYM4pfOVBcXi7bJObOHVo=) 10: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 11: whkGOZP4Q7wa7J5dbmXu5vPM1v0.roa (hash: 4Aaj5rdkc2lbz/0Cfp212ny3pIPA+JJbd5a/bPZM33w=) 12: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7b:d8:25:86:1d:0a:62:69:80:9c:40:7f:2c:84:80:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Apr 28 10:01:25 2025 GMT Not After : Apr 29 10:01:25 2025 GMT Subject: CN=520446b9dd199a1bf9b50cb361474ed397cdc513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:a2:e5:18:13:c9:88:1f:35:b4:9f:f8:c3: ca:2d:ef:2d:03:d2:fe:ef:00:03:7d:8c:1e:60:59: ae:b0:21:8e:ea:91:46:0a:3d:76:ba:fd:23:fd:af: 1f:86:39:57:46:37:90:c8:64:36:6d:b4:5e:e8:d6: 68:7f:38:bd:b8:d0:35:f2:e1:3b:93:c2:57:40:30: 6a:35:6d:ac:0c:87:11:65:8a:32:80:51:e4:d8:7e: 0d:29:f2:a0:4d:4b:ac:f4:8a:10:3a:4b:b6:7e:91: d3:03:52:53:c1:1c:f1:c4:35:a4:2a:d1:a9:4a:9b: 44:1c:29:02:80:1e:0d:79:f6:be:aa:63:7e:17:7e: 3b:3d:f9:98:b0:2a:60:bd:4b:dc:3e:2c:8e:fe:9a: 96:fd:14:9a:c5:87:a8:32:72:b0:50:d3:b2:b1:7b: 87:09:f5:ea:f8:b9:63:f6:c8:64:1d:4b:9a:81:b5: 1e:77:fc:bf:da:2c:a7:d4:3a:30:da:d5:5a:80:26: 7f:a6:1e:7a:a3:1d:7f:4e:0f:2d:fe:57:a0:c3:c0: b1:11:3f:ae:f3:cc:30:f0:09:5b:3b:59:b8:d8:c8: 5e:0b:d5:e6:47:48:f1:5e:2e:28:26:39:d0:79:5c: c3:4d:12:91:c4:74:af:cb:04:63:c2:6b:d1:82:f7: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:04:46:B9:DD:19:9A:1B:F9:B5:0C:B3:61:47:4E:D3:97:CD:C5:13 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:df:5c:ad:8d:33:ea:94:92:2e:9e:68:b7:91:5e:c1:5d:e6: 31:ab:3b:41:65:ae:12:7a:2b:11:e7:ec:b6:93:5f:17:25:a1: 4c:46:0f:a8:2f:50:3d:fd:b5:d6:a2:28:b3:6e:f4:09:7a:71: cb:09:e8:de:6f:66:cc:c6:c9:4d:9c:19:7d:8b:15:13:03:f0: 14:36:23:60:b0:95:c9:7d:9d:84:ae:9d:b6:39:6a:db:f7:f6: 72:8a:5f:76:b2:81:ac:28:a8:40:17:9e:f5:18:a9:00:2c:00: 3b:c9:36:d4:4c:2a:e0:44:7b:02:3b:53:80:54:ba:61:65:6e: 7c:9c:24:02:0e:c4:fa:2b:b1:3c:0c:15:cb:dc:50:e4:2d:db: f8:c2:ab:92:4f:59:a3:cc:f3:56:d8:ff:a1:63:a0:f3:b1:7c: ee:9b:33:ba:ab:c4:0b:9f:7f:6a:44:75:b7:41:f6:80:cd:1b: 86:f5:b6:0c:fd:59:8c:3f:9f:cb:0c:46:88:1c:61:47:e5:f1: 42:2a:4f:40:ee:d1:d1:34:23:92:c8:ac:be:db:27:b7:db:73: 78:56:83:18:3f:d6:93:d1:a1:7b:5f:18:a0:4f:4d:ca:21:80: da:af:01:b9:15:c8:ef:79:ed:00:cf:ae:86:e1:1a:d2:14:3f: 8a:9f:ca:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ72CWGHQpiaYCcQH8shIBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwNDI4MTAwMTI1WhcNMjUwNDI5MTAwMTI1WjAzMTEwLwYDVQQD Eyg1MjA0NDZiOWRkMTk5YTFiZjliNTBjYjM2MTQ3NGVkMzk3Y2RjNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbui5RgTyYgfNbSf+MPKLe8tA9L+ 7wADfYweYFmusCGO6pFGCj12uv0j/a8fhjlXRjeQyGQ2bbRe6NZofzi9uNA18uE7 k8JXQDBqNW2sDIcRZYoygFHk2H4NKfKgTUus9IoQOku2fpHTA1JTwRzxxDWkKtGp SptEHCkCgB4Nefa+qmN+F347PfmYsCpgvUvcPiyO/pqW/RSaxYeoMnKwUNOysXuH CfXq+Llj9shkHUuagbUed/y/2iyn1Dow2tVagCZ/ph56ox1/Tg8t/legw8CxET+u 88ww8AlbO1m42MheC9XmR0jxXi4oJjnQeVzDTRKRxHSvywRjwmvRgvek5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIERrndGZob+bUMs2FHTtOXzcUTMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApd9crY0z 6pSSLp5ot5FewV3mMas7QWWuEnorEefstpNfFyWhTEYPqC9QPf211qIos270CXpx ywno3m9mzMbJTZwZfYsVEwPwFDYjYLCVyX2dhK6dtjlq2/f2copfdrKBrCioQBee 9RipACwAO8k21Ewq4ER7AjtTgFS6YWVufJwkAg7E+iuxPAwVy9xQ5C3b+MKrkk9Z o8zzVtj/oWOg87F87pszuqvEC59/akR1t0H2gM0bhvW2DP1ZjD+fywxGiBxhR+Xx QipPQO7R0TQjksisvtsnt9tzeFaDGD/Wk9Ghe18YoE9NyiGA2q8BuRXI73ntAM+u huEa0hQ/ip/K6w== -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:40 2025 by rpki-client