$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: MY5pJ/6BdcozSmmQz4TRg/6wQeNAtQHNjlif2qMxn38= Subject key identifier: B5:B8:13:03:EB:88:B1:55:9B:FB:5E:1B:FA:D2:79:B0:A3:FA:89:FD Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019602D2DA107245983058849456EF9B55C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 05B1 Signing time: Fri 04 Apr 2025 22:01:34 +0000 Manifest this update: Fri 04 Apr 2025 22:01:34 +0000 Manifest next update: Sat 05 Apr 2025 22:01:34 +0000 Files and hashes: 1: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=) 2: D6jFbkqHYmfBUO-NiDAUQ68UyIo.roa (hash: w3KhAWQlARV/M31ue9uDn8EjMyV0tfnsDAPEqthHKBI=) 3: DmdZirH8wcWnW5zYYUR5leLKxe8.roa (hash: hx6zA2N9TKsc5Jie2Z1vdSmK9L1McLQ+3QD/drh38sI=) 4: GUjvsT11NwmP7HaNG7Xjc0a1oUA.roa (hash: XFqsKKOYJeZJfhitB3mAa0IsuaFQxFWAs/MA5Ah1E1g=) 5: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=) 6: WohBgOePqR35hSMfPj1Zz5dH6l4.roa (hash: ufiBhx+UbH8IqJmmi8avlRIHO79c7baFJfbTCVFvmvc=) 7: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=) 8: Z7WkjqluVcJx8TKOWpd-979l9Hs.roa (hash: G1RaFstXsXGfvVLHVI1mOVOghLjcLKzS1h9oV51+lXs=) 9: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=) 10: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=) 11: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=) 12: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=) 13: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: kDQo8pkqDdbn2wH+irUVLR94r/fHgaWxAGdtVHCM2MY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:d2:da:10:72:45:98:30:58:84:94:56:ef:9b:55:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Apr 4 22:01:34 2025 GMT Not After : Apr 5 22:01:34 2025 GMT Subject: CN=b5b81303eb88b1559bfb5e1bfad279b0a3fa89fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:f9:17:92:d0:0c:8e:6d:cd:2a:38:72:cf: cb:0c:7e:f4:1e:8f:bb:23:49:57:a6:55:f5:8f:52: a2:c8:b4:6b:af:5a:5e:4e:91:9c:d0:f8:79:a3:a2: 3d:21:e7:a7:74:05:57:df:52:55:fc:3f:b4:72:20: 19:13:de:ad:f3:b1:7a:53:f5:76:be:77:7c:71:c6: d0:4e:de:0c:f2:bf:02:75:51:2d:91:cd:87:bb:4c: cd:88:e9:1f:0f:ed:fe:ca:5e:62:2d:50:77:27:19: 62:c8:88:65:a4:9e:45:f5:e9:06:94:2a:6e:97:a3: 02:c1:1e:ce:42:57:77:7d:fa:6a:a1:f3:d3:af:5a: 5d:fd:09:ed:af:db:d6:e1:0f:97:81:a9:2c:b0:15: 4c:67:7d:bc:09:2f:75:0f:c9:0b:9c:de:02:40:42: d2:50:46:2e:d5:62:a0:46:91:17:36:75:81:bf:4c: a4:db:22:d7:14:c9:6d:ba:fe:de:1e:35:a2:59:11: 0a:4d:44:46:e0:f4:72:34:f5:06:fd:ed:2a:03:a9: 8d:5b:bf:aa:61:ab:b3:86:b9:ab:ba:04:3f:7f:e0: f7:84:d5:43:09:1b:03:9a:98:3b:9f:82:ef:2d:cb: a0:5c:46:86:7d:a7:72:d2:b8:73:45:17:db:07:f6: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B8:13:03:EB:88:B1:55:9B:FB:5E:1B:FA:D2:79:B0:A3:FA:89:FD X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6a:a5:ca:5d:ec:82:a9:2c:38:a0:00:59:60:02:f4:42:95: 88:82:fc:55:3b:50:6c:db:7c:81:a7:6f:db:2a:1a:52:fe:b8: d3:b8:b6:b0:a4:43:f7:5b:08:82:eb:89:ad:e3:f2:b2:82:47: 92:6f:8d:39:80:69:c3:3f:ec:68:41:48:33:49:19:eb:90:60: 90:a7:d5:f8:ce:e3:ed:55:c9:8d:52:fc:af:b6:25:68:8f:ea: 3a:90:a0:82:c2:f7:2f:aa:13:9d:3e:75:95:4f:13:64:d6:ad: 73:a5:cb:fe:26:35:94:c9:e0:bb:9d:6e:4a:96:3a:90:8b:a1: 8d:57:e3:28:ce:e1:c1:67:ee:a9:2c:86:96:ea:e1:28:9d:46: 37:96:a4:48:1c:b5:17:b9:95:a0:12:ba:49:ac:08:47:1d:b3: 03:e8:43:b0:d2:8b:f6:06:3a:d8:35:c1:d7:38:79:61:80:dc: d8:76:99:f7:0e:01:0e:2e:68:33:2d:87:08:1a:54:39:03:00: 17:78:cd:c0:ff:3c:ac:58:d1:78:b4:de:a6:c7:ba:30:f0:57: 80:e5:be:11:6c:e4:41:d9:c1:c2:23:fb:14:90:7d:7b:6d:2b: 81:c4:70:a0:da:38:cf:cf:5c:01:c7:10:01:bc:61:8f:f4:a7: 5b:ee:03:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYC0toQckWYMFiElFbvm1XDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUwNDA0MjIwMTM0WhcNMjUwNDA1MjIwMTM0WjAzMTEwLwYDVQQD EyhiNWI4MTMwM2ViODhiMTU1OWJmYjVlMWJmYWQyNzliMGEzZmE4OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcH5F5LQDI5tzSo4cs/LDH70Ho+7 I0lXplX1j1KiyLRrr1peTpGc0Ph5o6I9IeendAVX31JV/D+0ciAZE96t87F6U/V2 vnd8ccbQTt4M8r8CdVEtkc2Hu0zNiOkfD+3+yl5iLVB3JxliyIhlpJ5F9ekGlCpu l6MCwR7OQld3ffpqofPTr1pd/Qntr9vW4Q+XgakssBVMZ328CS91D8kLnN4CQELS UEYu1WKgRpEXNnWBv0yk2yLXFMltuv7eHjWiWREKTURG4PRyNPUG/e0qA6mNW7+q YauzhrmrugQ/f+D3hNVDCRsDmpg7n4LvLcugXEaGfady0rhzRRfbB/bMDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW4EwPriLFVm/teG/rSebCj+on9MB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmqlyl3s gqksOKAAWWAC9EKViIL8VTtQbNt8gadv2yoaUv6407i2sKRD91sIguuJrePysoJH km+NOYBpwz/saEFIM0kZ65BgkKfV+M7j7VXJjVL8r7YlaI/qOpCggsL3L6oTnT51 lU8TZNatc6XL/iY1lMngu51uSpY6kIuhjVfjKM7hwWfuqSyGlurhKJ1GN5akSBy1 F7mVoBK6SawIRx2zA+hDsNKL9gY62DXB1zh5YYDc2HaZ9w4BDi5oMy2HCBpUOQMA F3jNwP88rFjReLTepse6MPBXgOW+EWzkQdnBwiP7FJB9e20rgcRwoNo4z89cAccQ Abxhj/SnW+4Dcg== -----END CERTIFICATE-----Generated at Sat Apr 5 04:31:16 2025 by rpki-client