$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: gDgt11UaMJMdXbOkwpD72sOfmlMHqPeOoRVRLnrfEWs= Subject key identifier: 7B:9A:92:4C:36:E1:85:9A:B9:E0:B2:C0:82:E4:5D:56:6F:06:BA:D4 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 01982EC9FC548244A8A36859446A07350B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 06D3 Signing time: Mon 21 Jul 2025 21:00:45 +0000 Manifest this update: Mon 21 Jul 2025 21:00:45 +0000 Manifest next update: Tue 22 Jul 2025 21:00:45 +0000 Files and hashes: 1: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=) 2: RoTtigifINsixxIV_70QGvQ5BxY.roa (hash: plE7goAwFCfjJgbZot+4It6KwTroueBaFRIiGneV7rw=) 3: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=) 4: VN5ojuAnFRlItFJUN1HhyLhUOjc.roa (hash: VYiIZW/eoPqi7U3Fkl9T92J2c6UJvlwURwxGsvrFuvI=) 5: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=) 6: Z7WkjqluVcJx8TKOWpd-979l9Hs.roa (hash: G1RaFstXsXGfvVLHVI1mOVOghLjcLKzS1h9oV51+lXs=) 7: __x5Ic-9bwQ1SbZ8epBuTBTo8j4.roa (hash: f7wZGJuveG3jCNyR/mvzX8qDCmg/cdnCEqkzqJwo/p4=) 8: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=) 9: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=) 10: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=) 11: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=) 12: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: m+n6wVOrcJ9d/5MUR24u/Tw2Sumfn458iEbmIWXhsSU=) 13: lhSh68FljrO7wEKZo-qXGTfhzlE.roa (hash: I914mCRjyHYm2Pwd9b34kWk8XH3x42fFqaYwN5Q9h50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 20:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2e:c9:fc:54:82:44:a8:a3:68:59:44:6a:07:35:0b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jul 21 21:00:45 2025 GMT Not After : Jul 22 21:00:45 2025 GMT Subject: CN=7b9a924c36e1859ab9e0b2c082e45d566f06bad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:7c:e7:f3:33:26:86:eb:5d:23:07:f1:6e: 41:f8:7e:4d:f8:8d:88:2a:03:06:ec:76:57:a4:3c: 0a:86:1a:74:44:cc:08:11:b7:9f:a7:d0:89:6f:ba: c2:a4:21:bc:b7:dc:4e:b9:c3:19:99:70:12:aa:20: a5:54:35:ce:58:64:29:e1:5a:18:d0:4a:3b:62:a4: 61:b5:e6:72:b1:b8:27:ae:95:d9:6c:08:2e:15:70: c3:23:17:20:19:7f:af:12:56:da:de:d4:e4:78:16: bf:37:3a:fb:f1:e8:ff:47:35:77:ad:ae:ba:e8:84: b3:b8:80:70:72:87:90:78:71:35:1a:9b:d6:f5:d4: db:b1:e5:a9:10:a7:d2:bd:5f:e7:15:23:8d:95:3e: 08:84:7b:70:23:86:23:47:bd:04:e3:9c:38:0a:38: 6e:9f:08:cf:fa:94:80:1a:a2:bf:43:20:5c:00:68: 77:ea:04:7f:4f:65:0d:0b:55:30:f0:f0:c0:1c:52: 77:6a:41:66:9a:83:d6:65:ff:81:93:33:96:87:81: 95:31:98:9c:76:44:46:bb:a9:0d:3d:06:ad:15:59: aa:78:72:d2:95:37:84:45:14:3d:f9:3f:38:a9:b6: c6:34:d7:a9:75:03:1b:00:c2:c7:94:e4:48:39:24: 25:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9A:92:4C:36:E1:85:9A:B9:E0:B2:C0:82:E4:5D:56:6F:06:BA:D4 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:aa:58:d0:c9:56:39:cc:46:3a:4d:99:b8:f5:62:59:51:a7: b4:94:65:52:ed:fc:67:bd:36:da:46:bd:36:d8:3c:9e:a4:7e: da:5c:e7:ee:05:cb:80:fe:85:c8:ba:9d:8e:7d:af:01:5a:21: 71:c2:f1:0d:cc:ab:cf:ff:45:f0:e1:cc:83:40:c2:60:66:7c: c7:c8:c7:a0:ac:3a:df:9d:ba:e3:e8:e1:0c:6f:98:25:77:1e: 16:2f:79:56:23:7b:ff:74:be:b5:8b:5f:ec:99:e7:96:29:bb: 9d:ba:99:89:4a:b8:9b:21:45:dc:93:e8:76:06:12:fc:e2:25: ab:06:27:b1:c9:d8:8a:7d:7e:61:d6:b6:3e:33:1f:9a:0d:a8: f8:8d:79:ef:65:57:9e:dd:df:aa:2c:ad:c9:5b:3c:be:df:fc: 8b:bd:72:9e:13:d0:c3:57:db:a1:36:65:55:a2:04:dc:51:63: 35:ce:8e:93:8f:95:90:a8:dc:02:b0:e0:42:8b:9c:30:bf:16: 0d:9a:7d:08:2c:7b:a4:f9:e0:22:59:98:28:ec:c4:4f:a3:c1: 4c:a8:ac:78:1a:97:4d:23:80:4d:ef:0f:9e:66:af:c6:0d:d5: ba:10:f5:1a:3c:a6:51:88:b2:33:6a:7a:29:b0:08:7c:46:a7: f1:9c:22:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZguyfxUgkSoo2hZRGoHNQsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUwNzIxMjEwMDQ1WhcNMjUwNzIyMjEwMDQ1WjAzMTEwLwYDVQQD Eyg3YjlhOTI0YzM2ZTE4NTlhYjllMGIyYzA4MmU0NWQ1NjZmMDZiYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLd85/MzJobrXSMH8W5B+H5N+I2I KgMG7HZXpDwKhhp0RMwIEbefp9CJb7rCpCG8t9xOucMZmXASqiClVDXOWGQp4VoY 0Eo7YqRhteZysbgnrpXZbAguFXDDIxcgGX+vElba3tTkeBa/Nzr78ej/RzV3ra66 6ISzuIBwcoeQeHE1GpvW9dTbseWpEKfSvV/nFSONlT4IhHtwI4YjR70E45w4Cjhu nwjP+pSAGqK/QyBcAGh36gR/T2UNC1Uw8PDAHFJ3akFmmoPWZf+BkzOWh4GVMZic dkRGu6kNPQatFVmqeHLSlTeERRQ9+T84qbbGNNepdQMbAMLHlORIOSQlwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuakkw24YWaueCywILkXVZvBrrUMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6pY0MlW OcxGOk2ZuPViWVGntJRlUu38Z7022ka9Ntg8nqR+2lzn7gXLgP6FyLqdjn2vAVoh ccLxDcyrz/9F8OHMg0DCYGZ8x8jHoKw635264+jhDG+YJXceFi95ViN7/3S+tYtf 7Jnnlim7nbqZiUq4myFF3JPodgYS/OIlqwYnscnYin1+Yda2PjMfmg2o+I1572VX nt3fqiytyVs8vt/8i71ynhPQw1fboTZlVaIE3FFjNc6Ok4+VkKjcArDgQoucML8W DZp9CCx7pPngIlmYKOzET6PBTKiseBqXTSOATe8Pnmavxg3VuhD1GjymUYiyM2p6 KbAIfEan8ZwioA== -----END CERTIFICATE-----Generated at Tue Jul 22 04:33:02 2025 by rpki-client