$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: savpIdW1j/9r2XWXThLyNPvFKSNaH8wwrVR5CNZmXr0= Subject key identifier: BC:80:9A:F8:C7:73:47:ED:22:82:5E:33:7D:4D:70:54:D4:2B:23:9F Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 01973950655A85367B51A642B6FD3C24F3DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 14F5 Signing time: Wed 04 Jun 2025 05:00:59 +0000 Manifest this update: Wed 04 Jun 2025 05:00:59 +0000 Manifest next update: Thu 05 Jun 2025 05:00:59 +0000 Files and hashes: 1: 5NarqgL1IqRhroqsljH0A9V5qCo.roa (hash: 8kRquWjA2VpTsIouS+9omLPNkeJK9gTo7+86zZ6sCIM=) 2: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 3: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 4: AFQfc6JxPs0WbtXEfZUQW6cmtHw.roa (hash: e8L77a5kg61puuX03oiiqxMg/6Zhg3a40JEKuTihNS4=) 5: CufnYSstlNtENOE9efd7-2ln8Es.roa (hash: z8qQP+b43sULkWDkQAPO4p2CYsOjqrih9Z+imFI0Iok=) 6: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 7: HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa (hash: kHbTsJD5NdmK1vLZSQigG4P1BUyQFBvibnG4XtzolO8=) 8: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: 3ZyNwUjObClE9xdmWRl+Ob4SGo3Si2BmjcYqkQH0RVI=) 9: LoGWdajWVkzXAomx3BiXVveHKPE.roa (hash: DQkDoapnHj0MLL/tsnzQzVTwMl16+a7poqF4DwlVKiA=) 10: S31ZOfjUKXHqumIitPUzwNH5MBo.roa (hash: 6OktdKUpvFcNMtIKT9x1/tMHyAezG6+Rn6sN9L0iNIc=) 11: SjmXZnG51JRTtLsN9sJ8Rvd5Pt4.roa (hash: tJBERu9Lo1wC7SnI5+hmLMCW8eZfTvyvoHgD0vHT/x8=) 12: VgVq-6TLMiL7Sau_RtgQ3m_Vpv0.roa (hash: 1YKBUCdRYV8CfVZcj+eVWU3GK5hSdpogHam93h2rJ6k=) 13: i7NdTPcfWm6S-ia8jMavL8TwgBo.roa (hash: rfwL8AVw3aN8CfLATlDNteM+c6BBXT+JuCeDGBUeAPo=) 14: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 15: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 16: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 17: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:39:50:65:5a:85:36:7b:51:a6:42:b6:fd:3c:24:f3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jun 4 05:00:59 2025 GMT Not After : Jun 5 05:00:59 2025 GMT Subject: CN=bc809af8c77347ed22825e337d4d7054d42b239f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:c1:43:2b:b6:5a:aa:55:ee:32:81:05:10: 6b:05:0f:76:53:07:60:a1:62:ea:d9:36:3b:0f:4c: 0f:bb:ec:48:72:ba:26:43:e4:1a:46:d3:ee:ca:22: 3c:46:4c:39:f2:9c:01:70:ad:d9:91:8e:70:0d:73: c8:d4:9c:62:04:e3:8d:01:80:d9:a5:26:76:b1:14: b6:3b:9c:dd:1a:52:33:a7:dc:50:8d:16:3a:ea:03: af:bb:38:93:a0:75:c7:34:cf:fc:27:ad:8d:21:4d: ac:c0:b2:64:b0:ef:5e:7d:2c:ae:69:0c:ef:cb:59: 67:01:14:aa:39:eb:e9:6a:74:e3:22:90:1e:1e:fc: 16:05:59:68:c2:02:15:5c:11:ae:56:46:af:3a:32: 63:de:ae:58:48:47:c9:83:46:a3:76:d4:01:67:8e: 2e:32:65:1f:02:53:1e:92:0a:8b:1d:f5:42:54:2c: 20:5a:ac:e7:c6:ac:25:68:b8:ed:c5:bb:0f:19:90: de:48:97:a0:c4:d7:6a:17:99:80:8c:bd:4a:8d:07: e5:68:cf:c3:ca:60:40:ab:98:58:12:70:c8:50:67: ae:a8:b3:00:de:5f:02:71:bf:af:6b:f2:15:c1:5f: c2:d2:36:2f:ce:44:02:8e:54:bf:64:6c:10:06:38: 11:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:80:9A:F8:C7:73:47:ED:22:82:5E:33:7D:4D:70:54:D4:2B:23:9F X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:15:b0:a3:89:55:71:a9:e7:78:46:10:3e:1c:7a:dc:5f:b4: e2:97:03:aa:34:46:34:86:1a:0a:f3:c8:1a:c9:86:bb:3d:05: 17:95:ac:b0:0d:bf:a5:32:5c:e2:4f:cd:64:ac:4e:f4:e0:77: ca:20:9d:47:1b:00:02:ba:ac:dd:44:59:1e:da:13:d7:0f:98: 40:b3:e7:f8:f4:e5:cc:e7:98:5a:9e:53:38:e9:f5:6b:c7:60: 5e:05:97:3d:d2:ea:27:8e:e8:f5:1e:2f:3a:62:bb:2f:cf:4d: 21:30:42:53:f8:9f:d3:99:48:35:ca:84:bc:8c:22:58:f7:ea: 7e:be:c1:7a:b3:c2:87:40:1d:97:b1:7e:52:ea:4a:cc:be:78: 2f:12:eb:55:c6:70:be:f3:f3:94:97:8c:e4:0b:eb:15:3b:e8: bd:1a:11:c3:d6:be:dc:86:9c:11:b6:a2:74:b9:c0:28:9b:9c: 97:43:66:31:13:c0:4f:4b:65:17:1d:b0:9f:1b:34:47:94:75: b0:d2:64:3e:e9:1c:32:2b:68:de:a4:21:3d:e7:1f:a1:3d:e8: 8c:b1:a4:19:be:2d:85:02:1c:63:4f:fd:59:aa:72:28:bf:2b: a9:78:7c:5c:8a:df:81:a6:ed:d5:7d:97:81:00:89:6b:35:11: df:fe:67:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc5UGVahTZ7UaZCtv08JPPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUwNjA0MDUwMDU5WhcNMjUwNjA1MDUwMDU5WjAzMTEwLwYDVQQD EyhiYzgwOWFmOGM3NzM0N2VkMjI4MjVlMzM3ZDRkNzA1NGQ0MmIyMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYPBQyu2WqpV7jKBBRBrBQ92Uwdg oWLq2TY7D0wPu+xIcromQ+QaRtPuyiI8Rkw58pwBcK3ZkY5wDXPI1JxiBOONAYDZ pSZ2sRS2O5zdGlIzp9xQjRY66gOvuziToHXHNM/8J62NIU2swLJksO9efSyuaQzv y1lnARSqOevpanTjIpAeHvwWBVlowgIVXBGuVkavOjJj3q5YSEfJg0ajdtQBZ44u MmUfAlMekgqLHfVCVCwgWqznxqwlaLjtxbsPGZDeSJegxNdqF5mAjL1KjQflaM/D ymBAq5hYEnDIUGeuqLMA3l8Ccb+va/IVwV/C0jYvzkQCjlS/ZGwQBjgRlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyAmvjHc0ftIoJeM31NcFTUKyOfMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxWwo4lV canneEYQPhx63F+04pcDqjRGNIYaCvPIGsmGuz0FF5WssA2/pTJc4k/NZKxO9OB3 yiCdRxsAArqs3URZHtoT1w+YQLPn+PTlzOeYWp5TOOn1a8dgXgWXPdLqJ47o9R4v OmK7L89NITBCU/if05lINcqEvIwiWPfqfr7BerPCh0Adl7F+UupKzL54LxLrVcZw vvPzlJeM5AvrFTvovRoRw9a+3IacEbaidLnAKJucl0NmMRPAT0tlFx2wnxs0R5R1 sNJkPukcMito3qQhPecfoT3ojLGkGb4thQIcY0/9WapyKL8rqXh8XIrfgabt1X2X gQCJazUR3/5nMA== -----END CERTIFICATE-----Generated at Wed Jun 4 11:41:09 2025 by rpki-client