$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: 6zbmp+Bnsz7UVCdmd6FJ1v9SFGDfzmQzdqgRZLkOwEU= Subject key identifier: 35:68:61:C3:A0:FA:C6:71:2C:87:52:35:DC:81:57:EA:06:1C:A4:6F Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019827EC27ED7C501AFFD41773D23497A044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 075B Signing time: Sun 20 Jul 2025 13:00:44 +0000 Manifest this update: Sun 20 Jul 2025 13:00:44 +0000 Manifest next update: Mon 21 Jul 2025 13:00:44 +0000 Files and hashes: 1: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=) 2: EZKSFO2NEuAH-h6tOWr_Lr_4upc.roa (hash: wV4VGEiLrp0bit41RVyzgowJdABU7OXVtSesO8xYkNQ=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=) 6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 7: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 8: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: YvZgRoqZp2k3NtqCYcAPpbDlcC4lqWr+DqLxLOx//GA=) 9: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 10: whkGOZP4Q7wa7J5dbmXu5vPM1v0.roa (hash: 4Aaj5rdkc2lbz/0Cfp212ny3pIPA+JJbd5a/bPZM33w=) 11: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 12: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:ec:27:ed:7c:50:1a:ff:d4:17:73:d2:34:97:a0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jul 20 13:00:44 2025 GMT Not After : Jul 21 13:00:44 2025 GMT Subject: CN=356861c3a0fac6712c875235dc8157ea061ca46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:2d:0f:8e:9e:ad:d3:f5:11:e0:2b:04:09: 7a:2f:ea:cc:df:54:dc:60:f8:79:db:cf:1c:b2:b9: 81:7a:84:7d:28:3a:e5:7b:04:ac:c3:14:a1:3f:0f: 0c:30:25:34:15:0a:cb:c7:0c:1a:2a:05:16:97:29: b0:2c:1c:90:24:16:62:a3:ca:39:b8:79:a1:cb:de: 27:b1:bc:fe:9e:8c:24:f3:cc:ff:af:5a:d6:cc:c3: fb:ba:f7:34:b6:f7:5d:82:05:ba:c1:a9:f1:7b:fe: df:8a:58:e4:62:76:f8:9f:1f:56:6a:7e:b1:4e:31: 83:57:72:72:c6:59:26:87:0f:89:09:f3:8c:42:9c: 6b:2f:2a:51:7d:56:35:85:b0:40:ae:bc:d1:0c:97: a9:a2:c6:89:ac:19:61:4a:69:87:fa:1e:25:c5:e9: a6:2c:6a:fd:14:4b:39:c5:80:d2:6d:7d:78:b3:55: bb:48:e2:6d:3d:33:c5:1e:41:05:7d:bb:bc:b9:09: 89:fa:fa:4c:71:41:dc:e2:e4:fa:14:78:37:d4:51: c8:04:f1:58:7c:c1:d7:dc:20:33:88:e8:1e:76:3e: 05:df:83:b8:d0:d7:fb:77:51:38:5d:25:f0:11:7b: 0a:cf:c8:24:06:6b:d3:d3:93:87:3d:92:66:8e:7c: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:68:61:C3:A0:FA:C6:71:2C:87:52:35:DC:81:57:EA:06:1C:A4:6F X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:62:f3:cf:5a:06:04:d3:6e:c7:fb:3f:7b:76:8d:d3:a1:a4: 79:db:a4:71:2e:be:21:8f:86:aa:5a:a8:ca:f6:99:f6:59:f0: bf:da:25:b7:4d:66:f1:2b:03:75:f5:d6:26:a6:e8:3d:24:76: c6:73:ae:f9:4b:ba:51:a5:a3:4c:33:cd:47:2d:9e:43:7b:12: 87:47:2c:bb:ae:89:6b:37:95:20:02:4a:cb:dc:d9:49:5d:b8: 08:1f:df:a1:7d:39:b3:9d:50:a7:6f:e0:ed:5e:ca:1b:e8:06: 7b:8a:bd:bc:38:ef:18:de:c2:ea:a5:cc:c6:67:ab:c0:84:9d: 36:48:f0:95:33:5f:55:5d:8f:a3:f7:ea:17:08:f3:fe:fe:43: 79:2b:9b:b5:26:18:21:20:3a:77:a0:44:71:4c:c2:58:e0:45: ad:e0:f8:36:86:14:fb:a8:45:95:6d:23:51:cc:eb:2d:49:91: da:dc:1e:6d:90:17:6f:28:fe:8a:11:50:38:d1:dd:c9:ab:02: 10:66:32:f7:89:1c:60:0d:9a:7e:f3:49:42:0e:f8:ff:b1:c2: 90:ca:b0:b5:95:2c:2d:d8:ab:5f:7e:15:b0:65:ea:cd:6f:f9: 35:f7:91:03:80:ef:cc:9a:d3:eb:cc:e7:99:d6:99:33:d2:bf: df:98:1b:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgn7CftfFAa/9QXc9I0l6BEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwNzIwMTMwMDQ0WhcNMjUwNzIxMTMwMDQ0WjAzMTEwLwYDVQQD EygzNTY4NjFjM2EwZmFjNjcxMmM4NzUyMzVkYzgxNTdlYTA2MWNhNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho4tD46erdP1EeArBAl6L+rM31Tc YPh5288csrmBeoR9KDrlewSswxShPw8MMCU0FQrLxwwaKgUWlymwLByQJBZio8o5 uHmhy94nsbz+nowk88z/r1rWzMP7uvc0tvddggW6wanxe/7filjkYnb4nx9Wan6x TjGDV3Jyxlkmhw+JCfOMQpxrLypRfVY1hbBArrzRDJeposaJrBlhSmmH+h4lxemm LGr9FEs5xYDSbX14s1W7SOJtPTPFHkEFfbu8uQmJ+vpMcUHc4uT6FHg31FHIBPFY fMHX3CAziOgedj4F34O40Nf7d1E4XSXwEXsKz8gkBmvT05OHPZJmjnzkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVoYcOg+sZxLIdSNdyBV+oGHKRvMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWLzz1oG BNNux/s/e3aN06GkedukcS6+IY+GqlqoyvaZ9lnwv9olt01m8SsDdfXWJqboPSR2 xnOu+Uu6UaWjTDPNRy2eQ3sSh0csu66JazeVIAJKy9zZSV24CB/foX05s51Qp2/g 7V7KG+gGe4q9vDjvGN7C6qXMxmerwISdNkjwlTNfVV2Po/fqFwjz/v5DeSubtSYY ISA6d6BEcUzCWOBFreD4NoYU+6hFlW0jUczrLUmR2twebZAXbyj+ihFQONHdyasC EGYy94kcYA2afvNJQg74/7HCkMqwtZUsLdirX34VsGXqzW/5NfeRA4DvzJrT68zn mdaZM9K/35gb+Q== -----END CERTIFICATE-----Generated at Sun Jul 20 16:22:31 2025 by rpki-client