$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: uBdiV+jJgpbK/wkCvG8fBYkCIJhTKyzxrnGqEgzITec= Subject key identifier: 3C:F7:04:18:55:69:DA:A0:EB:13:33:AC:DE:CB:BD:CE:34:87:5D:4C Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 01991CC1B2C60B1463E80033E38206CAC85F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 074F Signing time: Sat 06 Sep 2025 02:01:20 +0000 Manifest this update: Sat 06 Sep 2025 02:01:20 +0000 Manifest next update: Sun 07 Sep 2025 02:01:20 +0000 Files and hashes: 1: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=) 2: RoTtigifINsixxIV_70QGvQ5BxY.roa (hash: plE7goAwFCfjJgbZot+4It6KwTroueBaFRIiGneV7rw=) 3: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=) 4: VN5ojuAnFRlItFJUN1HhyLhUOjc.roa (hash: VYiIZW/eoPqi7U3Fkl9T92J2c6UJvlwURwxGsvrFuvI=) 5: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=) 6: Z7WkjqluVcJx8TKOWpd-979l9Hs.roa (hash: G1RaFstXsXGfvVLHVI1mOVOghLjcLKzS1h9oV51+lXs=) 7: __x5Ic-9bwQ1SbZ8epBuTBTo8j4.roa (hash: f7wZGJuveG3jCNyR/mvzX8qDCmg/cdnCEqkzqJwo/p4=) 8: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=) 9: ckN51ugpQaovcqL7-uk8cWmLqXg.roa (hash: AbepzMs/Oj4qVnFocQGvyMM251EH9U8v0u27S4AwMCM=) 10: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=) 11: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=) 12: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=) 13: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: 17VkDAwlml0RH1VtCBCQzFwfgmRMk3YBZxi29S0EAoM=) 14: lhSh68FljrO7wEKZo-qXGTfhzlE.roa (hash: I914mCRjyHYm2Pwd9b34kWk8XH3x42fFqaYwN5Q9h50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:c1:b2:c6:0b:14:63:e8:00:33:e3:82:06:ca:c8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Sep 6 02:01:20 2025 GMT Not After : Sep 7 02:01:20 2025 GMT Subject: CN=3cf704185569daa0eb1333acdecbbdce34875d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:03:83:cc:cf:20:3a:7c:5b:27:d3:a1:59: c5:2c:20:6e:8d:64:42:2d:73:70:2a:cb:61:9c:ab: 5c:4f:87:dc:a3:ad:e7:6b:75:20:0c:98:8a:15:5d: c4:ce:3d:af:d1:b4:40:7e:f8:28:dc:a8:ac:fb:e8: 95:88:f6:35:43:17:ea:b9:b2:a2:ca:18:1a:10:98: c9:8f:23:ef:01:37:94:79:b6:cb:fd:5c:f6:cb:66: 7d:10:3e:0e:e0:93:50:ab:65:0e:bb:ae:dd:94:6d: 7c:36:e0:c9:1e:7d:c6:1f:b2:4f:3c:14:79:48:ee: c6:4e:8d:20:e1:49:ba:f5:bd:c0:bf:41:46:3c:90: a7:d8:13:71:f3:e2:1e:0a:86:41:20:d8:21:93:1a: 45:3c:04:74:a3:4d:1e:99:e3:15:c4:23:c3:10:fb: 29:00:77:f9:b3:fb:7c:38:f5:17:1e:29:96:22:ae: 13:4f:e5:5a:ad:c6:83:ae:af:7b:c1:39:70:1d:f7: f8:7f:a3:ea:b1:71:b4:de:c5:8c:a9:27:e0:2b:87: 4d:bc:5c:c5:75:5d:db:92:10:c7:57:18:a4:ea:4a: 1d:85:78:a5:40:9a:be:8e:f7:a9:39:b4:af:66:80: 9a:90:fd:ee:03:17:26:34:c1:77:b5:67:88:bd:5d: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F7:04:18:55:69:DA:A0:EB:13:33:AC:DE:CB:BD:CE:34:87:5D:4C X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:27:cc:71:e4:6d:6d:31:a9:08:87:a4:13:79:89:96:3e:e2: ee:1a:bf:e8:50:11:62:ec:54:3e:12:66:28:59:76:fb:84:7b: e7:33:78:3a:39:37:bc:d8:14:35:2e:37:f4:04:63:08:17:31: 85:26:da:10:d5:09:e5:7a:63:77:8d:47:a1:a0:34:91:46:36: d2:a0:e7:a3:68:1f:63:f4:c6:68:41:57:1a:eb:32:67:11:35: 13:6b:d8:b0:ab:4b:7d:e4:bb:05:45:1c:a4:25:77:c2:2a:a3: 29:10:32:ef:9b:b6:64:57:1e:b5:c0:38:d1:64:37:99:f7:d0: 73:db:0f:46:b8:1e:69:1f:b5:55:0b:4d:ff:ed:4a:87:48:1a: 98:25:e8:46:96:3f:34:7d:e1:28:2d:2b:b0:67:99:ed:83:bb: 87:aa:b1:87:8d:15:16:87:d2:02:19:bb:16:5f:a0:45:29:f8: 81:9e:d9:34:04:fa:d7:2d:f2:c6:0f:6c:07:c9:c4:9e:2f:85: 7f:45:47:6a:37:2f:30:dc:fc:7c:17:eb:7b:21:b5:86:8e:e5: 73:14:72:7e:3a:87:44:ae:75:32:2b:4e:49:02:1a:41:db:c2: 5c:53:34:bb:af:bd:da:e8:7a:5a:1d:8f:30:ef:1d:81:d2:8d: bc:50:b9:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkcwbLGCxRj6AAz44IGyshfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUwOTA2MDIwMTIwWhcNMjUwOTA3MDIwMTIwWjAzMTEwLwYDVQQD EygzY2Y3MDQxODU1NjlkYWEwZWIxMzMzYWNkZWNiYmRjZTM0ODc1ZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgIDg8zPIDp8WyfToVnFLCBujWRC LXNwKsthnKtcT4fco63na3UgDJiKFV3Ezj2v0bRAfvgo3Kis++iViPY1QxfqubKi yhgaEJjJjyPvATeUebbL/Vz2y2Z9ED4O4JNQq2UOu67dlG18NuDJHn3GH7JPPBR5 SO7GTo0g4Um69b3Av0FGPJCn2BNx8+IeCoZBINghkxpFPAR0o00emeMVxCPDEPsp AHf5s/t8OPUXHimWIq4TT+VarcaDrq97wTlwHff4f6PqsXG03sWMqSfgK4dNvFzF dV3bkhDHVxik6kodhXilQJq+jvepObSvZoCakP3uAxcmNMF3tWeIvV2GxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz3BBhVadqg6xMzrN7Lvc40h11MMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCfMceRt bTGpCIekE3mJlj7i7hq/6FARYuxUPhJmKFl2+4R75zN4Ojk3vNgUNS439ARjCBcx hSbaENUJ5Xpjd41HoaA0kUY20qDno2gfY/TGaEFXGusyZxE1E2vYsKtLfeS7BUUc pCV3wiqjKRAy75u2ZFcetcA40WQ3mffQc9sPRrgeaR+1VQtN/+1Kh0gamCXoRpY/ NH3hKC0rsGeZ7YO7h6qxh40VFofSAhm7Fl+gRSn4gZ7ZNAT61y3yxg9sB8nEni+F f0VHajcvMNz8fBfreyG1ho7lcxRyfjqHRK51MitOSQIaQdvCXFM0u6+92uh6Wh2P MO8dgdKNvFC5uQ== -----END CERTIFICATE-----Generated at Sat Sep 6 05:16:45 2025 by rpki-client