$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: wF11Ri18RH7Fvbis8Xd+YU+Ai4idTlmD7SnjuOxTh4g= Subject key identifier: 33:4A:7F:27:E9:C9:FF:FC:AD:43:A2:B1:9A:31:63:9C:B4:38:0E:9E Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019926698D60359C0C035D370B29CE57EC9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0CD8 Signing time: Sun 07 Sep 2025 23:01:15 +0000 Manifest this update: Sun 07 Sep 2025 23:01:15 +0000 Manifest next update: Mon 08 Sep 2025 23:01:15 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: 7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa (hash: mR7T3WuKSbdAtTzSYp0E3OKslQutZqhI3l0DzsTdKEc=) 3: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 4: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 5: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 6: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: I+QFF3Jp5G55MAKs3s6DryjyfFdaDot524JYBAWHkCs=) 7: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 8: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 9: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 10: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 11: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 12: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) 13: ny_FOqKdcKxW2aMlHbVAlwWW-0g.roa (hash: bVovQUFF5/cCoKkjWHFqwVp9ffYI5r3hMJ9pZsZnKpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:69:8d:60:35:9c:0c:03:5d:37:0b:29:ce:57:ec:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Sep 7 23:01:15 2025 GMT Not After : Sep 8 23:01:15 2025 GMT Subject: CN=334a7f27e9c9fffcad43a2b19a31639cb4380e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:36:0e:f4:90:8c:6b:f4:22:12:4e:72:14:bc: 65:d5:10:32:a8:8e:49:94:77:0c:3e:c5:5c:4d:c2: b1:78:4c:89:06:a6:a9:17:67:23:d5:65:4c:7e:f1: fd:db:76:20:36:56:c8:2b:f0:f6:b9:0c:3a:c8:15: 4b:04:95:d3:49:e3:e8:13:60:e3:64:e6:60:a6:2d: 36:20:d2:44:b1:1f:a1:46:2e:fe:4e:77:45:7d:cb: e1:46:24:8e:e7:76:e4:ad:d1:2b:24:b4:f6:0a:ff: 1e:06:63:51:48:88:9b:aa:0b:d4:9a:58:d2:c9:5f: 66:50:e9:b1:a0:40:b1:82:eb:66:89:b5:52:c6:93: 78:0e:29:ec:75:db:ac:b5:89:01:8f:a3:28:6d:f5: 81:0d:86:99:09:6c:5c:5e:6a:3a:a2:92:7d:fc:16: 45:49:bb:02:c4:51:3f:9d:cb:b7:17:76:db:1d:fb: c9:49:98:52:27:52:e2:34:67:d7:62:09:7a:1a:b2: 20:58:13:73:4f:d8:cc:bc:9f:45:19:42:d7:6f:2e: ec:22:f9:ed:f3:22:4e:73:21:8d:b0:48:53:41:c0: 21:e5:b6:0d:e0:fc:0b:0d:d0:30:b7:ea:74:d1:fb: 6e:f6:8a:5b:5a:a4:70:73:c4:58:c1:ef:48:56:7a: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:7F:27:E9:C9:FF:FC:AD:43:A2:B1:9A:31:63:9C:B4:38:0E:9E X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:db:97:b8:bf:e7:ff:b8:ab:aa:05:68:c0:91:ea:8a:8d:59: 51:c7:4c:da:22:c4:39:97:ff:a7:8b:9e:c1:7a:d2:ee:9b:83: 64:16:b8:e2:59:5c:95:0a:d6:b2:e6:f8:56:ee:de:cf:d4:70: 67:57:46:a8:8f:b3:14:c6:2a:d7:e4:91:1e:e6:ec:68:27:7f: c4:77:15:97:00:30:9a:98:19:23:0f:e4:a5:a8:ad:b9:a7:c7: 44:58:9e:b2:dc:54:4a:a5:ab:86:34:d9:4c:f8:7d:ac:96:a1: 46:1e:f8:27:b1:4e:12:fa:72:af:d4:c0:d2:66:d7:f6:5a:81: 1c:8f:70:28:42:67:72:53:26:00:eb:be:f7:85:63:0d:df:a8: 8b:81:42:49:48:4a:d9:28:c7:01:c5:86:09:fd:34:fb:25:73: 5b:5f:05:bc:14:19:1d:3d:7f:14:e3:71:53:45:52:91:bb:a8: 82:11:77:69:09:ee:02:00:28:35:76:dd:b2:82:15:f4:b1:85: a1:21:1a:2a:64:49:d6:19:06:ec:70:eb:dc:46:c4:b5:b0:15: 4f:c4:aa:74:1c:4a:b3:f6:0b:3f:09:fa:aa:5a:10:54:47:b6: 28:b3:61:0a:32:94:f7:17:99:9f:b7:bc:79:8b:82:79:7f:60: 3c:bf:a7:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkmaY1gNZwMA103CynOV+yaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUwOTA3MjMwMTE1WhcNMjUwOTA4MjMwMTE1WjAzMTEwLwYDVQQD EygzMzRhN2YyN2U5YzlmZmZjYWQ0M2EyYjE5YTMxNjM5Y2I0MzgwZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DYO9JCMa/QiEk5yFLxl1RAyqI5J lHcMPsVcTcKxeEyJBqapF2cj1WVMfvH923YgNlbIK/D2uQw6yBVLBJXTSePoE2Dj ZOZgpi02INJEsR+hRi7+TndFfcvhRiSO53bkrdErJLT2Cv8eBmNRSIibqgvUmljS yV9mUOmxoECxgutmibVSxpN4DinsddustYkBj6MobfWBDYaZCWxcXmo6opJ9/BZF SbsCxFE/ncu3F3bbHfvJSZhSJ1LiNGfXYgl6GrIgWBNzT9jMvJ9FGULXby7sIvnt 8yJOcyGNsEhTQcAh5bYN4PwLDdAwt+p00ftu9opbWqRwc8RYwe9IVnp23QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNKfyfpyf/8rUOisZoxY5y0OA6eMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNuXuL/n /7irqgVowJHqio1ZUcdM2iLEOZf/p4uewXrS7puDZBa44llclQrWsub4Vu7ez9Rw Z1dGqI+zFMYq1+SRHubsaCd/xHcVlwAwmpgZIw/kpaituafHRFiestxUSqWrhjTZ TPh9rJahRh74J7FOEvpyr9TA0mbX9lqBHI9wKEJnclMmAOu+94VjDd+oi4FCSUhK 2SjHAcWGCf00+yVzW18FvBQZHT1/FONxU0VSkbuoghF3aQnuAgAoNXbdsoIV9LGF oSEaKmRJ1hkG7HDr3EbEtbAVT8SqdBxKs/YLPwn6qloQVEe2KLNhCjKU9xeZn7e8 eYuCeX9gPL+nXA== -----END CERTIFICATE-----Generated at Mon Sep 8 08:35:44 2025 by rpki-client