$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: JX5oUw+7+0Zfwo5Wemocc1QlRHQIgJisoqgXbXlBIcE= Subject key identifier: 2F:36:50:35:2F:82:DD:CA:B2:04:87:0E:8B:00:6D:ED:B8:8A:E0:68 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019A180640FE90B37F012A297862FEBF6589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0D58 Signing time: Fri 24 Oct 2025 21:00:54 +0000 Manifest this update: Fri 24 Oct 2025 21:00:54 +0000 Manifest next update: Sat 25 Oct 2025 21:00:54 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 3: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 4: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 5: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: LlFtiTgs/UjJIRL4nh+R2Zn3tnE7vrFP5/lF5gm0S6k=) 6: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 7: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 8: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 9: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 10: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 11: ly_AxUwwGayHz1D1tXiXd6I2K-o.roa (hash: stdA2q0pp81tad1unWJbT9WVVFHdWvlWDO33rK55EMo=) 12: m_n_guLqq0tYW5rCZkO296a5snc.roa (hash: bWXjQ23WKPX4qSBJXJ5pklNRH7pCS+2Y4V8yyzzjUAU=) 13: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:18:06:40:fe:90:b3:7f:01:2a:29:78:62:fe:bf:65:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Oct 24 21:00:54 2025 GMT Not After : Oct 25 21:00:54 2025 GMT Subject: CN=2f3650352f82ddcab204870e8b006dedb88ae068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a5:ea:fc:68:40:bd:24:aa:a5:2c:12:fb:a0: 0d:e7:35:21:c2:b1:6c:ba:93:df:17:11:2a:f3:01: 89:f7:c0:16:cf:34:d1:8a:1b:b9:ee:3c:fb:9e:c1: d8:38:fa:aa:0e:e5:fd:ba:b5:e7:db:76:0b:2b:c6: 06:7a:37:02:3b:95:8c:1c:89:38:2b:cb:76:10:72: ec:6a:7d:03:8a:27:fb:10:c1:6f:38:6e:fb:1d:6a: 0e:eb:52:8c:da:69:28:ae:19:07:5e:84:0e:d8:e9: a6:ca:38:55:57:28:43:07:7d:80:96:89:7a:ce:de: a7:34:72:87:3c:38:b5:56:c1:34:40:cf:ba:fd:de: 36:17:5d:f9:66:74:38:64:95:65:c9:bc:84:cc:1a: be:99:c1:b5:6e:d7:6b:98:65:ec:9f:d5:96:d1:36: b3:80:df:9a:24:4a:86:56:59:e6:c1:ed:32:9a:55: d1:91:7a:52:e4:40:fe:f1:93:42:2b:e0:8a:ac:8b: 8c:f8:b6:e3:ce:1b:7c:58:20:71:7c:e4:78:f1:ec: bd:b5:dd:c0:1d:c4:cf:ec:eb:73:71:0d:67:25:3a: 95:9d:c9:8f:64:e7:e6:e9:6a:23:19:ae:db:23:af: e0:13:d6:ba:bd:ed:f3:f0:7d:66:fc:5b:52:37:f9: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:36:50:35:2F:82:DD:CA:B2:04:87:0E:8B:00:6D:ED:B8:8A:E0:68 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c1:47:08:e7:9a:2b:8b:bb:7a:64:cf:68:5e:b0:1c:b6:6d: 35:c4:7d:ae:32:26:a9:7d:e6:93:5f:95:89:04:f5:b7:67:f9: ee:9e:f0:15:34:4b:0a:51:48:e5:55:03:6d:55:db:b1:3e:9a: 59:c5:79:88:09:50:1c:d4:42:fa:3e:d1:c1:af:09:95:6d:44: 29:81:0c:93:f3:a2:a7:53:b8:c1:66:db:58:a0:f1:f0:ec:78: 57:02:41:e5:bb:e3:7a:d1:b4:df:f1:01:ef:5e:c4:80:c9:af: 2a:1a:67:74:be:08:a5:3e:f2:f0:c6:ab:43:11:b7:3e:1a:6f: 99:44:e5:0e:e5:6b:31:84:a2:7c:b9:00:c5:ac:75:7d:33:93: 32:1b:b8:28:55:1b:0d:73:b0:4d:97:62:cd:4b:5e:86:67:d1: 71:ae:6a:c7:11:4c:10:88:3f:cf:07:66:97:ba:ef:00:44:b7: 41:7f:17:60:0f:2d:6f:f3:46:32:02:6c:28:6e:fe:d7:77:ae: 5e:35:5e:ef:c7:4c:a6:96:a1:f2:1f:59:53:a4:20:8d:e5:b9: d4:37:86:1d:59:29:be:00:ed:97:24:0c:31:4e:92:d6:ca:28: 99:a5:4f:8e:21:3e:db:7b:65:db:82:94:28:6c:c6:97:02:48: 86:0a:13:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoYBkD+kLN/ASopeGL+v2WJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUxMDI0MjEwMDU0WhcNMjUxMDI1MjEwMDU0WjAzMTEwLwYDVQQD EygyZjM2NTAzNTJmODJkZGNhYjIwNDg3MGU4YjAwNmRlZGI4OGFlMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aXq/GhAvSSqpSwS+6AN5zUhwrFs upPfFxEq8wGJ98AWzzTRihu57jz7nsHYOPqqDuX9urXn23YLK8YGejcCO5WMHIk4 K8t2EHLsan0Diif7EMFvOG77HWoO61KM2mkorhkHXoQO2OmmyjhVVyhDB32Alol6 zt6nNHKHPDi1VsE0QM+6/d42F135ZnQ4ZJVlybyEzBq+mcG1btdrmGXsn9WW0Taz gN+aJEqGVlnmwe0ymlXRkXpS5ED+8ZNCK+CKrIuM+Lbjzht8WCBxfOR48ey9td3A HcTP7OtzcQ1nJTqVncmPZOfm6WojGa7bI6/gE9a6ve3z8H1m/FtSN/mBgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC82UDUvgt3KsgSHDosAbe24iuBoMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsFHCOea K4u7emTPaF6wHLZtNcR9rjImqX3mk1+ViQT1t2f57p7wFTRLClFI5VUDbVXbsT6a WcV5iAlQHNRC+j7Rwa8JlW1EKYEMk/Oip1O4wWbbWKDx8Ox4VwJB5bvjetG03/EB 717EgMmvKhpndL4IpT7y8MarQxG3PhpvmUTlDuVrMYSifLkAxax1fTOTMhu4KFUb DXOwTZdizUtehmfRca5qxxFMEIg/zwdml7rvAES3QX8XYA8tb/NGMgJsKG7+13eu XjVe78dMppah8h9ZU6QgjeW51DeGHVkpvgDtlyQMMU6S1soomaVPjiE+23tl24KU KGzGlwJIhgoT8w== -----END CERTIFICATE-----Generated at Sat Oct 25 00:39:33 2025 by rpki-client