$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: Qi+Uf6rJ5ZbLNkxjyC66UaNAv7qN4wulS3MSnu4KLgA= Subject key identifier: 52:05:3D:A6:B1:BA:72:F3:60:09:36:AB:42:A8:6F:EC:5E:B5:5A:A8 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019658DDB5C2507415563D2555282BA85F30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 12C1 Signing time: Mon 21 Apr 2025 15:00:47 +0000 Manifest this update: Mon 21 Apr 2025 15:00:47 +0000 Manifest next update: Tue 22 Apr 2025 15:00:47 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: ESM3K+5oUN2B13Agcnsg7Ai5YDPtLEDlKu+VqW6nFaA=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: auh8PiwrTf2v6lpf50WPxKXXVeY.roa (hash: mQnueIBK5DtLGO9VF25YUU0TKwd0Wbv6zpM4STDhWvE=) 7: puxQYZc-bCSrSQ9uTbWytBh-eug.roa (hash: GCBmXahO4pMrxN7DjJxkuPfStuAZ5NPuhQw85mRhQ5g=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Apr 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:58:dd:b5:c2:50:74:15:56:3d:25:55:28:2b:a8:5f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Apr 21 15:00:47 2025 GMT Not After : Apr 22 15:00:47 2025 GMT Subject: CN=52053da6b1ba72f3600936ab42a86fec5eb55aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:3c:fa:f3:37:79:70:d8:18:95:f5:0f:b2: 8f:85:5d:25:52:9b:24:f5:bb:49:71:7c:bd:57:30: 9d:71:d2:af:01:ea:a7:57:90:27:9d:62:18:7b:79: 46:c7:e7:7c:88:f8:82:b2:06:22:af:4c:77:bf:03: 43:84:bb:3e:b8:9c:5e:d6:56:e4:b3:2f:ee:70:04: 40:d0:78:09:9f:20:d9:26:71:33:bb:26:dd:4b:d2: b8:19:15:60:9c:02:1c:e9:9b:3e:d0:dd:b7:37:d3: 31:0f:6d:d3:d8:23:65:4b:c7:fb:be:46:7e:09:5e: 23:be:3e:54:84:0f:01:0f:2d:d6:8d:bf:91:14:cc: 54:ef:79:e1:66:78:fa:5f:62:ed:08:be:f6:25:31: 11:6f:96:92:c7:ff:e7:fb:34:36:75:6d:17:dc:1d: 5d:09:cd:9a:b0:f6:4c:04:71:90:e9:7a:c2:1f:bd: a8:91:55:a4:e8:18:ae:a8:61:56:a2:05:c6:d8:3b: 79:f0:8b:92:d0:1c:0a:e3:27:4e:13:9c:41:75:4c: 86:e1:bf:e3:be:6a:0b:af:a1:6e:96:66:a1:21:36: 87:31:1e:0d:f6:9b:8e:bb:ed:10:d2:4d:d2:ae:9d: d0:c2:62:f8:44:7c:2e:04:a0:84:5f:48:6c:eb:98: 47:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:05:3D:A6:B1:BA:72:F3:60:09:36:AB:42:A8:6F:EC:5E:B5:5A:A8 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1d:db:cf:e5:7f:11:82:f5:2f:fc:b0:85:4c:fd:37:4e:c9: c4:82:c8:4c:57:e6:a0:ab:5f:92:cd:8b:cd:ef:b2:c1:a0:2c: eb:19:9e:1b:92:6c:9a:dc:61:39:81:b1:76:cf:84:28:72:25: 82:f7:c5:01:d5:1a:1c:5c:f5:9a:55:2d:4c:b0:22:eb:56:ab: 0e:87:9b:f3:a6:07:6e:7a:ad:b6:11:ad:cd:a2:4c:ff:25:24: af:a9:17:80:0d:77:3e:2a:4a:50:be:86:cc:02:89:c6:e0:b7: 9d:6d:78:15:cf:30:ff:62:a3:58:5f:e4:b3:22:60:f0:a8:e5: 45:a9:77:e1:6f:b0:20:e5:6e:73:e7:e7:2a:dd:83:0e:7b:f2: 0d:51:e2:89:87:99:c5:f7:75:6b:9a:26:7f:99:2e:83:6e:57: 4e:5a:8c:a1:f0:d8:af:2e:12:0e:24:ad:63:77:dc:98:4e:9d: 3b:c8:42:16:71:84:38:bb:a8:61:3c:15:f2:2a:b7:d8:07:35: 18:be:60:66:31:2a:27:9f:34:0e:c4:43:30:62:3e:53:25:96: 88:a6:8e:9d:51:f0:4f:0d:a8:71:5a:08:48:c9:5f:6d:21:9e: 44:fa:9b:4d:ac:52:3a:36:e3:82:32:9a:0d:9e:6c:91:f2:9c: fa:0a:03:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZY3bXCUHQVVj0lVSgrqF8wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUwNDIxMTUwMDQ3WhcNMjUwNDIyMTUwMDQ3WjAzMTEwLwYDVQQD Eyg1MjA1M2RhNmIxYmE3MmYzNjAwOTM2YWI0MmE4NmZlYzVlYjU1YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpg8+vM3eXDYGJX1D7KPhV0lUpsk 9btJcXy9VzCdcdKvAeqnV5AnnWIYe3lGx+d8iPiCsgYir0x3vwNDhLs+uJxe1lbk sy/ucARA0HgJnyDZJnEzuybdS9K4GRVgnAIc6Zs+0N23N9MxD23T2CNlS8f7vkZ+ CV4jvj5UhA8BDy3Wjb+RFMxU73nhZnj6X2LtCL72JTERb5aSx//n+zQ2dW0X3B1d Cc2asPZMBHGQ6XrCH72okVWk6BiuqGFWogXG2Dt58IuS0BwK4ydOE5xBdUyG4b/j vmoLr6FulmahITaHMR4N9puOu+0Q0k3Srp3QwmL4RHwuBKCEX0hs65hHPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIFPaaxunLzYAk2q0Kob+xetVqoMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh3bz+V/ EYL1L/ywhUz9N07JxILITFfmoKtfks2Lze+ywaAs6xmeG5JsmtxhOYGxds+EKHIl gvfFAdUaHFz1mlUtTLAi61arDoeb86YHbnqtthGtzaJM/yUkr6kXgA13PipKUL6G zAKJxuC3nW14Fc8w/2KjWF/ksyJg8KjlRal34W+wIOVuc+fnKt2DDnvyDVHiiYeZ xfd1a5omf5kug25XTlqMofDYry4SDiStY3fcmE6dO8hCFnGEOLuoYTwV8iq32Ac1 GL5gZjEqJ580DsRDMGI+UyWWiKaOnVHwTw2ocVoISMlfbSGeRPqbTaxSOjbjgjKa DZ5skfKc+goDrQ== -----END CERTIFICATE-----Generated at Tue Apr 22 01:05:10 2025 by rpki-client