$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: eIR3S/5cjW8nFAkEdXfX0NmmlFgv/GW2AQ+GireAfWc= Subject key identifier: F7:EC:88:DB:27:72:23:C3:E0:E4:57:6D:3D:B6:E4:DC:F0:BB:0F:6A Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 0198529F4938E9C4BD5199957A6A9B383CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 13C8 Signing time: Mon 28 Jul 2025 20:00:27 +0000 Manifest this update: Mon 28 Jul 2025 20:00:27 +0000 Manifest next update: Tue 29 Jul 2025 20:00:27 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 5nXJsXS_dpKafNzYuUWOwTJcqns.roa (hash: 81+L+Fn0DpdmRR6n9IejP9I94PV32SnSNym+QIx285g=) 3: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 4: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: OmVJBYnIYmM0GbO2KGfPT5PgaIc2FGjkVbjGwmJURmU=) 6: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 7: eeJQTXzJRG74gLZzvmSazKWdeSk.roa (hash: apRxPLkLu+OXbwhl6Vtb7LX5Cws2a7TltcG+TguzTP8=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Jul 2025 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:52:9f:49:38:e9:c4:bd:51:99:95:7a:6a:9b:38:3c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jul 28 20:00:27 2025 GMT Not After : Jul 29 20:00:27 2025 GMT Subject: CN=f7ec88db277223c3e0e4576d3db6e4dcf0bb0f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:ee:b2:5f:81:08:12:04:24:85:dc:5a:3c: 24:31:e9:db:13:5f:36:21:fd:4e:11:2f:2c:51:b6: 1a:b2:58:ab:d1:e1:d5:d9:ce:2c:b6:44:24:9b:db: cd:76:ea:b1:a8:9f:55:9c:e2:7d:67:b0:b4:87:8d: b1:05:ae:ec:ef:74:2b:5f:a8:98:99:87:04:c6:f9: 15:3b:b2:4e:64:c7:df:88:bf:12:49:f0:d6:53:79: d0:c5:ae:47:1f:f3:cf:17:fe:a7:06:82:00:c3:7a: bc:ec:c5:22:ba:80:6f:88:62:6c:95:0a:58:58:16: 1a:51:78:ef:3c:47:42:ea:09:13:80:3d:b7:62:a8: 26:3f:44:3c:1d:2f:d7:d9:d0:e6:75:16:11:33:60: b6:c1:91:e1:b7:75:fb:46:69:de:f2:df:26:67:91: f8:d2:bc:95:8e:78:62:77:50:aa:95:13:c4:05:08: 6f:21:50:98:53:f5:c0:b3:9f:dc:9e:00:4a:50:88: f4:b2:2e:58:b4:43:34:3e:12:3d:65:b2:17:6b:6c: c7:b9:55:40:24:a8:91:5d:e5:ae:f0:a0:6c:31:b9: 53:ba:e8:df:d3:51:96:5b:09:43:ab:a5:80:f3:b6: 54:e2:29:77:de:11:27:0d:5f:0a:4f:1c:9e:d7:c3: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EC:88:DB:27:72:23:C3:E0:E4:57:6D:3D:B6:E4:DC:F0:BB:0F:6A X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9f:b0:ad:79:a9:38:ab:84:bd:15:6d:f0:02:f4:66:8f:99: c9:b2:2d:22:78:75:0d:00:5f:73:5c:56:90:13:6a:19:f7:28: 3c:21:7b:07:ad:a8:fe:27:0e:cc:99:62:28:82:b7:ad:3d:13: 34:e3:e4:7c:a8:78:97:03:df:14:6b:c3:a0:e9:39:d5:c0:1c: 24:ab:4a:13:b7:6a:a5:d6:d7:c1:ea:8f:d1:5f:4f:e8:c5:90: dc:2e:6e:0a:0b:3f:96:bb:e0:d4:87:fd:a1:93:d7:c6:c7:13: a3:98:69:76:3b:05:2d:b4:80:09:b8:ce:6d:23:59:4b:b4:71: 14:d9:cb:14:b4:b1:45:e4:58:62:99:11:f1:47:9b:12:8c:41: 5f:41:3b:2a:24:99:7f:12:26:22:3f:03:26:5a:76:76:3d:0c: c1:66:2f:16:36:cf:96:6e:1c:fb:fd:81:85:e8:a1:f2:ae:a4: 55:25:4c:c7:52:04:13:68:92:e4:5c:da:77:e3:5b:5e:c7:01: a9:ca:ec:a7:47:c1:f8:de:aa:43:ca:31:36:6e:5a:07:f1:b2: 7c:ac:f4:d6:78:d5:2e:5d:69:78:0e:77:6f:55:80:be:05:5c: 02:c3:80:6b:11:aa:2c:f5:cb:fe:49:55:32:28:d2:2f:92:9f: 33:23:d4:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhSn0k46cS9UZmVemqbODzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUwNzI4MjAwMDI3WhcNMjUwNzI5MjAwMDI3WjAzMTEwLwYDVQQD EyhmN2VjODhkYjI3NzIyM2MzZTBlNDU3NmQzZGI2ZTRkY2YwYmIwZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUTusl+BCBIEJIXcWjwkMenbE182 If1OES8sUbYaslir0eHV2c4stkQkm9vNduqxqJ9VnOJ9Z7C0h42xBa7s73QrX6iY mYcExvkVO7JOZMffiL8SSfDWU3nQxa5HH/PPF/6nBoIAw3q87MUiuoBviGJslQpY WBYaUXjvPEdC6gkTgD23YqgmP0Q8HS/X2dDmdRYRM2C2wZHht3X7Rmne8t8mZ5H4 0ryVjnhid1CqlRPEBQhvIVCYU/XAs5/cngBKUIj0si5YtEM0PhI9ZbIXa2zHuVVA JKiRXeWu8KBsMblTuujf01GWWwlDq6WA87ZU4il33hEnDV8KTxye18P43QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfsiNsnciPD4ORXbT225Nzwuw9qMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp+wrXmp OKuEvRVt8AL0Zo+ZybItInh1DQBfc1xWkBNqGfcoPCF7B62o/icOzJliKIK3rT0T NOPkfKh4lwPfFGvDoOk51cAcJKtKE7dqpdbXweqP0V9P6MWQ3C5uCgs/lrvg1If9 oZPXxscTo5hpdjsFLbSACbjObSNZS7RxFNnLFLSxReRYYpkR8UebEoxBX0E7KiSZ fxImIj8DJlp2dj0MwWYvFjbPlm4c+/2Bheih8q6kVSVMx1IEE2iS5Fzad+NbXscB qcrsp0fB+N6qQ8oxNm5aB/GyfKz01njVLl1peA53b1WAvgVcAsOAaxGqLPXL/klV MijSL5KfMyPUbA== -----END CERTIFICATE-----Generated at Tue Jul 29 04:43:02 2025 by rpki-client