$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: XhaQ1Qm96yzqjsNZhxqoTjEx+gCB3bH3fSQoYCq5u8w= Subject key identifier: 0F:2D:7D:17:96:8D:CD:0B:F3:C9:12:6E:B1:D0:CF:5A:8B:67:FD:C1 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019833B9A61BA33136725C43D0F5D7495233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0C5A Signing time: Tue 22 Jul 2025 20:01:01 +0000 Manifest this update: Tue 22 Jul 2025 20:01:01 +0000 Manifest next update: Wed 23 Jul 2025 20:01:01 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: 7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa (hash: mR7T3WuKSbdAtTzSYp0E3OKslQutZqhI3l0DzsTdKEc=) 3: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 4: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 5: LB_t08DPTNyxU120z1nclHuMwMI.roa (hash: tD2v/rZHmdopAY/iPcE41q7HJJs5sc+Muz0vNadXByE=) 6: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 7: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: RjAK5I9iQAV6JbfA/WK38uC+T3HDVUT6h00cueJLB5U=) 8: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 9: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 10: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 11: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 12: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 13: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) 14: ny_FOqKdcKxW2aMlHbVAlwWW-0g.roa (hash: bVovQUFF5/cCoKkjWHFqwVp9ffYI5r3hMJ9pZsZnKpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:33:b9:a6:1b:a3:31:36:72:5c:43:d0:f5:d7:49:52:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Jul 22 20:01:01 2025 GMT Not After : Jul 23 20:01:01 2025 GMT Subject: CN=0f2d7d17968dcd0bf3c9126eb1d0cf5a8b67fdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:7a:79:80:2a:78:15:2b:1b:33:97:7a:6c: 1a:2c:d5:d1:cf:d2:82:24:a5:e3:fc:04:76:01:fc: a8:bc:97:a1:47:b6:34:da:17:0b:14:ff:a7:5f:02: 37:d7:c3:77:79:d5:a4:f8:7a:a0:d8:c5:f5:b0:c4: 20:0a:0b:23:a5:e2:48:7d:5c:45:6c:7c:f2:44:d7: 32:1d:f7:af:13:6a:0a:06:06:1b:87:b3:b1:1a:79: 58:36:c5:66:8e:17:aa:1e:4e:4c:21:74:97:6c:55: 4f:94:d1:06:95:10:4d:5b:99:54:be:f3:2b:80:5e: 65:cb:c9:4e:dd:0f:61:50:9f:1a:91:dc:d4:1a:8f: b0:03:13:ba:f7:64:be:52:8c:35:84:64:30:06:a4: 1b:fd:1b:3b:dc:d5:bf:8c:ce:cb:7e:e8:d6:5a:d9: 51:51:e8:fc:9c:1a:54:d7:21:8c:7f:c3:de:86:ff: 16:fb:4e:ec:dc:59:27:91:4e:ff:ad:a5:bc:ef:4c: dc:4e:f9:3a:90:ed:e2:18:ef:e1:9c:b6:ca:46:54: 4c:f0:33:88:41:3a:2c:2d:6e:13:17:d6:87:ba:7a: c9:36:ee:02:58:f1:32:86:02:88:48:49:28:b1:b6: 93:7d:a4:8d:6a:55:7f:85:d1:90:af:36:f3:95:8d: e3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2D:7D:17:96:8D:CD:0B:F3:C9:12:6E:B1:D0:CF:5A:8B:67:FD:C1 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3b:49:8b:23:c4:3a:80:ad:ca:9d:73:41:50:88:48:d2:2c: f7:ac:89:63:1e:f2:8b:4e:ed:cd:10:a5:28:c2:3f:ce:f8:33: 05:ab:33:e3:8b:44:d6:10:7b:64:8b:da:c7:7b:b8:a2:d5:be: 26:93:87:95:5b:c7:15:d6:fe:e9:9e:50:ad:7c:95:19:c7:a8: 3a:18:4b:47:10:5c:f7:9a:87:42:d5:0c:10:95:67:bb:0b:71: be:14:b9:83:bb:f3:75:e5:ec:3c:44:ad:48:3b:20:61:1c:a4: de:b6:6c:89:b5:f1:fe:25:20:85:81:ea:53:8f:ac:78:72:6a: 62:d7:9b:5b:b5:1d:0f:9e:19:13:b4:dd:0e:b9:2a:f1:14:af: c6:88:bd:d5:0c:42:21:c1:ba:2d:ca:78:57:5d:cf:fb:89:cc: d2:b5:e3:5a:c8:4c:c4:a0:63:aa:ba:95:f6:11:7a:fd:1b:34: 3a:ab:34:c6:77:d3:9f:a0:0b:e2:59:18:61:ef:f8:81:4e:0a: 36:35:17:f1:a1:c9:83:9a:6f:46:71:ff:2f:73:f7:df:08:ad: d4:29:0b:79:90:9b:f2:d3:e9:5b:a9:25:6a:bd:4a:30:70:ed: 23:7d:b3:10:ad:1e:6a:ea:e8:35:7c:d8:19:43:da:c0:06:0c: 33:78:76:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgzuaYbozE2clxD0PXXSVIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUwNzIyMjAwMTAxWhcNMjUwNzIzMjAwMTAxWjAzMTEwLwYDVQQD EygwZjJkN2QxNzk2OGRjZDBiZjNjOTEyNmViMWQwY2Y1YThiNjdmZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18p6eYAqeBUrGzOXemwaLNXRz9KC JKXj/AR2AfyovJehR7Y02hcLFP+nXwI318N3edWk+Hqg2MX1sMQgCgsjpeJIfVxF bHzyRNcyHfevE2oKBgYbh7OxGnlYNsVmjheqHk5MIXSXbFVPlNEGlRBNW5lUvvMr gF5ly8lO3Q9hUJ8akdzUGo+wAxO692S+Uow1hGQwBqQb/Rs73NW/jM7LfujWWtlR Uej8nBpU1yGMf8Pehv8W+07s3FknkU7/raW870zcTvk6kO3iGO/hnLbKRlRM8DOI QTosLW4TF9aHunrJNu4CWPEyhgKISEkosbaTfaSNalV/hdGQrzbzlY3jTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8tfReWjc0L88kSbrHQz1qLZ/3BMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYztJiyPE OoCtyp1zQVCISNIs96yJYx7yi07tzRClKMI/zvgzBasz44tE1hB7ZIvax3u4otW+ JpOHlVvHFdb+6Z5QrXyVGceoOhhLRxBc95qHQtUMEJVnuwtxvhS5g7vzdeXsPESt SDsgYRyk3rZsibXx/iUghYHqU4+seHJqYtebW7UdD54ZE7TdDrkq8RSvxoi91QxC IcG6Lcp4V13P+4nM0rXjWshMxKBjqrqV9hF6/Rs0Oqs0xnfTn6AL4lkYYe/4gU4K NjUX8aHJg5pvRnH/L3P33wit1CkLeZCb8tPpW6klar1KMHDtI32zEK0eauroNXzY GUPawAYMM3h2wA== -----END CERTIFICATE-----Generated at Wed Jul 23 01:48:01 2025 by rpki-client