$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: pvx0VB6Jd+vsyRH1OgS9+6v4q2cwWv99xYsd48wXK3A= Subject key identifier: A6:E5:DF:57:51:F3:44:82:CA:7C:B0:85:B4:A9:7C:9D:A3:87:2B:7D Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019602D26BE1FBE66C65AC1374AFE9684BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 06F5 Signing time: Fri 04 Apr 2025 22:01:06 +0000 Manifest this update: Fri 04 Apr 2025 22:01:06 +0000 Manifest next update: Sat 05 Apr 2025 22:01:06 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: 1pJLrKsabrTjCLAr3gOCOfHpDqqpydgqXnmNtU2mh7M=) 2: 5osuIpQEXkmgGGfabxgkobMCOqo.roa (hash: ar+Luee3A/qxuqFBW+KjI5NWMnxgfB2LrCoUMGMm2y0=) 3: CdQL_rNfT4mruJeuRhVd0hpPdps.roa (hash: Z/uUo7J+RuPWC8u1ha2F9ldd1L0f2IgJnPvQNnlMC1w=) 4: EYqz9-lWcT6mAZDYhv76ihfxRKA.roa (hash: 2kj2lpyBuoRk5Uqc6kG2vMBRCERsonaSDs/n/J78Nlc=) 5: LB0RhZaeHc4lFeLZglNMj0M0iuc.roa (hash: pKzr9fhEjb+2hcFnGRNZ9yDdUriurScTg3ZqXErO5Fk=) 6: LebN_fB1s6ScKeJ5c8zfxUklaIc.roa (hash: ugIRy/GdUvkC8oivMaAEQB7yPRimuew/T3ig9FaE2mE=) 7: Oxq3b11n6uCTM0uPwvJREK86m_M.roa (hash: WeeN+4UbvcXB1SOJyNyRYKOsQ4tcgwaNpWz1JcCaJfM=) 8: TWprmIRYABwJKC3e_3_5wzunOVk.roa (hash: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=) 9: XQHVRGTqM3fRB_j_ijhUwjJs9Ug.roa (hash: fKPNzBl0e4tcVAHFnpIZK59mBTOB3H7FeF+MB2XfaW0=) 10: e50PKaKFcaW3uGMNUchzpEB18-M.roa (hash: c0PkOWIaLZSS8TffWgd4kYVYWuDWquopKeKw112DVMI=) 11: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (hash: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=) 12: eeYpshaoc5go--DBuuRmLZpBsio.roa (hash: 9Ypg180659MtxxUjCyOwRub9c14vNLr84izZxblP7gQ=) 13: giUGr98XTvMTapx-HcfkJZUS_QQ.roa (hash: t3Dcx8q3eGk8zI/z9A/Ebz1Oh7dW30YVpRQVHDQqIlA=) 14: lSpQXF77aOd5aaWL7y9AyYlQaWs.roa (hash: k9FWEbwffQtuSyIeXa8qgZ8XemL3dT9nYO5Khh1P6zU=) 15: nNGX_OCe8X9nXrEP34vII8SEf10.roa (hash: n1Og0cpU00h6IhKyI+ECnhLWs0U3hRjPdAcqH8CABIM=) 16: tcp-Msodt7Yoyc_U-JzWb4RQflg.roa (hash: 2O16WNiH/chbI3skghuISKeRLWAnGH5be6qCPHCOEPw=) 17: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (hash: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=) 18: wQyg8eA6lRREzJ9taIK7-ABN-Vk.roa (hash: 56Z2ikBVQqPH0LfM7ywhy1//SerrhxAPBdjzeQApODo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:d2:6b:e1:fb:e6:6c:65:ac:13:74:af:e9:68:4b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Apr 4 22:01:06 2025 GMT Not After : Apr 5 22:01:06 2025 GMT Subject: CN=a6e5df5751f34482ca7cb085b4a97c9da3872b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:da:98:f5:d7:d9:03:e7:eb:e1:e9:15:a9: ef:26:c5:09:36:39:da:e0:eb:e5:9f:29:9d:48:42: 27:04:d6:da:50:5a:99:19:01:a8:42:91:74:2b:56: 8e:b4:d0:2c:f8:23:fc:ae:6f:a8:c9:2a:f8:4c:ce: 38:2c:16:4d:3d:97:08:fb:5c:c5:5f:df:ae:c2:e4: 5e:7a:79:00:83:0d:a6:7d:21:36:86:12:36:22:b5: e3:8a:06:61:20:fc:4c:1c:15:4d:d4:d8:43:5a:88: a1:f1:4c:1b:56:48:34:a1:a2:c6:02:93:6d:cb:89: 59:c8:4f:e2:00:3e:ca:9a:f3:cd:64:d6:bc:e8:22: 3b:16:26:bf:32:a1:08:78:f8:89:a0:58:44:b7:9a: 9d:26:4c:3d:96:4e:4c:ac:28:ae:a7:b8:ea:1d:47: f3:37:61:ae:ba:c2:7a:0a:2a:74:7a:27:63:eb:c3: 71:f2:eb:6c:68:21:3c:5c:68:8f:1c:6d:83:8b:20: 4a:2f:7e:87:0e:c3:6f:b3:58:f9:88:e6:1c:a6:77: 3b:94:f7:d5:5c:1c:85:a7:16:6f:68:8a:23:fb:17: 7a:91:16:6a:27:76:e5:e6:6c:9e:7c:9b:b2:81:cf: c6:83:94:0b:a4:b2:a4:60:bd:d1:dd:2c:28:6a:8c: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E5:DF:57:51:F3:44:82:CA:7C:B0:85:B4:A9:7C:9D:A3:87:2B:7D X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:27:8c:12:25:b4:f6:d6:7f:4b:c5:43:b2:c9:66:de:9a:5a: 59:30:05:79:b0:89:a0:71:4a:9e:ec:02:34:ef:8d:08:e5:0f: 02:45:d9:3b:1f:35:8c:22:1d:17:ed:19:fb:fc:78:b2:7d:1f: 78:ae:a7:97:94:57:8f:ef:36:ff:07:80:6a:17:2b:ad:53:57: 5f:a0:90:64:52:3b:80:9c:ce:3a:de:6a:85:e7:04:60:df:e6: 7a:16:c2:73:5c:ef:51:d3:5b:1f:f3:82:b9:93:0f:56:38:ab: 59:b8:08:3f:78:71:36:a1:69:0d:bf:3e:20:ad:f3:34:1a:64: e1:0e:62:40:e8:8f:f6:a0:a3:17:24:be:7c:3b:4d:09:a0:28: 0b:2d:05:58:5d:97:33:27:4a:77:b9:dc:65:b4:ed:6f:f1:33: b5:cf:e9:08:02:a0:de:aa:bf:85:ed:ec:e2:76:df:fa:8d:39: 98:00:b8:ba:9b:5e:5a:cb:ff:e0:a6:01:7c:05:ce:93:fd:17: 4f:6a:a8:ba:ed:33:4c:34:40:8b:04:90:95:ef:ed:9b:c8:b2: 88:18:4f:8a:1b:7b:d4:12:be:71:79:0a:32:af:e0:29:b8:ed: 09:9e:84:15:d7:66:39:1d:c0:c4:6b:f1:98:91:c6:44:c3:0d: a9:4c:5a:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYC0mvh++ZsZawTdK/paEv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjUwNDA0MjIwMTA2WhcNMjUwNDA1MjIwMTA2WjAzMTEwLwYDVQQD EyhhNmU1ZGY1NzUxZjM0NDgyY2E3Y2IwODViNGE5N2M5ZGEzODcyYjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU7amPXX2QPn6+HpFanvJsUJNjna 4OvlnymdSEInBNbaUFqZGQGoQpF0K1aOtNAs+CP8rm+oySr4TM44LBZNPZcI+1zF X9+uwuReenkAgw2mfSE2hhI2IrXjigZhIPxMHBVN1NhDWoih8UwbVkg0oaLGApNt y4lZyE/iAD7KmvPNZNa86CI7Fia/MqEIePiJoFhEt5qdJkw9lk5MrCiup7jqHUfz N2GuusJ6Cip0eidj68Nx8utsaCE8XGiPHG2DiyBKL36HDsNvs1j5iOYcpnc7lPfV XByFpxZvaIoj+xd6kRZqJ3bl5myefJuygc/Gg5QLpLKkYL3R3SwoaoyKDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbl31dR80SCynywhbSpfJ2jhyt9MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyeMEiW0 9tZ/S8VDsslm3ppaWTAFebCJoHFKnuwCNO+NCOUPAkXZOx81jCIdF+0Z+/x4sn0f eK6nl5RXj+82/weAahcrrVNXX6CQZFI7gJzOOt5qhecEYN/mehbCc1zvUdNbH/OC uZMPVjirWbgIP3hxNqFpDb8+IK3zNBpk4Q5iQOiP9qCjFyS+fDtNCaAoCy0FWF2X MydKd7ncZbTtb/Eztc/pCAKg3qq/he3s4nbf+o05mAC4upteWsv/4KYBfAXOk/0X T2qouu0zTDRAiwSQle/tm8iyiBhPiht71BK+cXkKMq/gKbjtCZ6EFddmOR3AxGvx mJHGRMMNqUxaPA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:33 2025 by rpki-client