$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: Fh5zsgqzQ5Kyn8rbmcPxSq9RtiQzlwCNiVVM0Fz7oDU= Subject key identifier: 26:8A:4C:A5:B6:89:A2:2D:4A:A1:91:1F:A4:F3:8D:3E:C4:D6:A9:55 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 01960E318EF7C791EDB54B03ADDC2251E9A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 12AE Signing time: Mon 07 Apr 2025 03:00:50 +0000 Manifest this update: Mon 07 Apr 2025 03:00:50 +0000 Manifest next update: Tue 08 Apr 2025 03:00:50 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: KUk-CSFCGROoWRr0bn1g2QgmGDo.roa (hash: UpwZsPUmRF6H+YvfEB2+WDVmprsNudTy1jgLuv//feE=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: kDfPottAwQ0/TmKmB07I1Q6Cl0DkjvXQdPWwYcMnoKo=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: NZa0gIfmJGTWop9klB_kmws3bBk.roa (hash: EJR++Bc5Re9D8wlLY18Cmifrl1rYRjuKt7sbeibsf5k=) 10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 13: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 14: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 15: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 16: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0e:31:8e:f7:c7:91:ed:b5:4b:03:ad:dc:22:51:e9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Apr 7 03:00:50 2025 GMT Not After : Apr 8 03:00:50 2025 GMT Subject: CN=268a4ca5b689a22d4aa1911fa4f38d3ec4d6a955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:61:3a:e2:f8:44:23:bf:7e:b1:be:8c:e0: 78:1c:69:5e:dc:cb:d1:a7:08:df:0c:48:a1:65:d7: 43:f9:24:f3:01:da:22:2b:6c:5a:0a:7c:e5:8c:80: 81:00:ac:99:51:0a:34:f5:c4:4a:7b:7d:9c:3d:e3: 5c:48:e3:51:98:61:6a:07:08:2a:85:6c:9c:78:b5: 69:bb:33:36:15:9b:c2:97:ec:6e:12:53:3e:a0:ea: 38:51:9a:8e:ec:28:3e:a0:64:82:b9:30:a4:c2:82: d8:07:11:b9:27:7a:e1:32:b4:3b:61:d7:e0:9a:14: 3c:09:e7:79:93:ff:5d:5d:10:b7:1b:d9:c8:1e:cd: a5:b9:ac:df:ae:16:71:60:66:8d:f8:1d:4e:46:66: 16:70:ff:29:f6:80:dc:52:01:53:84:3e:ae:db:b5: 3a:0a:b9:17:14:af:bb:9c:36:94:e8:a5:a3:be:8f: ab:36:32:6c:a4:63:dd:fb:28:8b:fa:e2:6c:c5:b5: 2b:c7:a0:ef:aa:fc:d2:79:eb:22:b7:c3:dd:9d:e7: ad:2f:d6:e0:5c:46:7b:56:a5:72:fa:3c:14:d1:ef: 19:35:93:c0:0e:0c:c3:ec:dd:b6:72:d6:21:0b:83: 5e:09:68:31:0f:f1:64:fc:95:9d:a8:06:b6:8c:b2: cc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:4C:A5:B6:89:A2:2D:4A:A1:91:1F:A4:F3:8D:3E:C4:D6:A9:55 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b7:8a:29:60:dc:24:cf:7e:7a:b5:d1:ca:50:4c:1d:2f:b2: f1:05:31:a6:1f:d3:20:59:2d:29:54:20:c0:69:52:8f:17:21: ff:ee:65:65:51:d5:fb:37:a8:a3:29:de:cb:e2:8b:28:12:ce: 16:a2:a9:ce:3c:1b:4e:47:31:51:47:3d:1e:e6:8e:2c:61:cf: 81:d5:08:e0:c9:93:02:f7:76:34:1d:e6:20:d5:32:9e:11:92: e5:6e:3c:ee:d0:1d:e9:66:09:61:85:5d:dd:ee:3e:d7:a9:ac: 6b:f7:d2:cd:f4:bd:63:ac:04:bc:9c:8a:4f:9b:df:1d:81:70: 34:9d:8d:8d:a6:a6:d3:08:c6:f8:2e:4a:70:62:66:cd:65:71: 1f:1e:52:09:0f:66:54:22:5b:a4:91:b2:96:be:30:b6:d3:b4: 42:e3:43:39:da:68:94:f6:98:08:de:45:c9:20:68:87:b1:0c: 05:b4:3a:23:b6:1b:ef:14:58:a6:1b:a1:4c:5b:d6:3f:73:99: 73:31:d0:9a:31:8b:a2:f3:a4:72:f8:87:20:c9:ff:e0:3a:b1: e7:cb:b6:12:de:ce:13:70:2a:b5:d5:80:06:c8:05:0e:2d:1c: 86:79:66:a8:d0:ac:17:2a:8a:d0:ab:81:64:27:ba:6d:f7:4a: 26:95:09:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYOMY73x5HttUsDrdwiUemoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwNDA3MDMwMDUwWhcNMjUwNDA4MDMwMDUwWjAzMTEwLwYDVQQD EygyNjhhNGNhNWI2ODlhMjJkNGFhMTkxMWZhNGYzOGQzZWM0ZDZhOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzFhOuL4RCO/frG+jOB4HGle3MvR pwjfDEihZddD+STzAdoiK2xaCnzljICBAKyZUQo09cRKe32cPeNcSONRmGFqBwgq hWyceLVpuzM2FZvCl+xuElM+oOo4UZqO7Cg+oGSCuTCkwoLYBxG5J3rhMrQ7Ydfg mhQ8Ced5k/9dXRC3G9nIHs2luazfrhZxYGaN+B1ORmYWcP8p9oDcUgFThD6u27U6 CrkXFK+7nDaU6KWjvo+rNjJspGPd+yiL+uJsxbUrx6DvqvzSeesit8PdneetL9bg XEZ7VqVy+jwU0e8ZNZPADgzD7N22ctYhC4NeCWgxD/Fk/JWdqAa2jLLMRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaKTKW2iaItSqGRH6TzjT7E1qlVMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLeKKWDc JM9+erXRylBMHS+y8QUxph/TIFktKVQgwGlSjxch/+5lZVHV+zeooyney+KLKBLO FqKpzjwbTkcxUUc9HuaOLGHPgdUI4MmTAvd2NB3mINUynhGS5W487tAd6WYJYYVd 3e4+16msa/fSzfS9Y6wEvJyKT5vfHYFwNJ2Njaam0wjG+C5KcGJmzWVxHx5SCQ9m VCJbpJGylr4wttO0QuNDOdpolPaYCN5FySBoh7EMBbQ6I7Yb7xRYphuhTFvWP3OZ czHQmjGLovOkcviHIMn/4Dqx58u2Et7OE3AqtdWABsgFDi0chnlmqNCsFyqK0KuB ZCe6bfdKJpUJeA== -----END CERTIFICATE-----Generated at Mon Apr 7 14:02:57 2025 by rpki-client