$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: s2v4XCYfnJKpmGVQM5ssN9c+0kW7A3d4rUhkduarOU0= Subject key identifier: AE:A2:ED:10:E3:E6:F2:E2:DB:F2:13:1C:76:B2:D0:8E:9E:35:BF:B2 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 01973DD2149C17556AF4129E7E738D8B0624 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 06E0 Signing time: Thu 05 Jun 2025 02:01:07 +0000 Manifest this update: Thu 05 Jun 2025 02:01:07 +0000 Manifest next update: Fri 06 Jun 2025 02:01:07 +0000 Files and hashes: 1: 1MaQ3UERADg_6Qg7JL_rTSZtSHY.roa (hash: +cHQwaDCYvHww4iP38T2uoBP4/k9EvIeJ4TrlPbtqZk=) 2: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=) 6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 7: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 8: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: dA8FBpcfo5fnKPvrN/40JKa7B7a7xJTrNa3vXARJiTE=) 9: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 10: whkGOZP4Q7wa7J5dbmXu5vPM1v0.roa (hash: 4Aaj5rdkc2lbz/0Cfp212ny3pIPA+JJbd5a/bPZM33w=) 11: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 12: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 21:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3d:d2:14:9c:17:55:6a:f4:12:9e:7e:73:8d:8b:06:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jun 5 02:01:07 2025 GMT Not After : Jun 6 02:01:07 2025 GMT Subject: CN=aea2ed10e3e6f2e2dbf2131c76b2d08e9e35bfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:10:da:c4:17:04:af:12:79:9f:0b:d5:68:0e: 0b:da:f7:25:7c:b2:28:e2:4f:f1:8a:05:8d:77:81: 0f:8a:7e:42:b9:fd:e2:db:47:9f:0d:08:f2:50:4d: d2:38:82:81:dd:e8:3b:a6:48:c9:b9:e4:25:29:16: dd:8d:8f:97:f3:77:1c:3a:4f:22:92:c9:8c:41:a1: 6a:66:7f:09:a7:2d:45:8c:46:9a:d1:d2:c0:1f:ee: f5:96:d7:0d:b5:30:f0:66:64:cb:7c:15:f1:7d:27: 02:70:b7:60:76:04:20:07:74:2d:85:11:f0:31:7d: 1f:4d:af:60:32:13:83:bd:84:3e:db:1a:57:29:b2: 6a:06:91:f7:aa:18:00:cd:dd:43:97:96:54:f3:5b: da:d1:d4:24:2e:d4:6e:64:c6:ea:14:db:15:37:fd: d2:4c:78:5e:a0:69:08:01:fc:1c:f5:d4:18:de:83: f0:b9:30:40:66:82:22:15:72:fd:ec:59:91:30:f9: d6:9f:d1:2c:00:ea:18:04:e1:14:b8:a3:43:56:10: e2:42:a9:cf:f9:4b:cd:ae:58:99:a6:20:bb:3b:5f: 47:2c:fd:75:af:0d:56:d6:81:56:ab:2c:94:6c:92: 69:16:90:27:ec:c6:ea:e7:6d:5c:9e:07:86:ad:0f: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A2:ED:10:E3:E6:F2:E2:DB:F2:13:1C:76:B2:D0:8E:9E:35:BF:B2 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:56:a7:59:b4:07:8e:cb:ba:5f:5c:7b:ce:e8:58:1d:7a:9b: b4:ab:09:86:1b:a1:b3:82:15:e3:bf:95:af:30:ac:06:25:08: 88:df:97:6f:89:4f:14:4c:d8:65:28:95:6b:1f:9d:7a:d5:7c: e9:9a:f9:d3:9f:96:8c:ec:95:e1:b5:7c:fe:79:d4:d8:16:48: 6a:79:f6:4e:af:dd:e5:b2:69:0b:32:9b:7b:6d:76:9f:13:cb: f8:02:bd:63:ac:0b:7f:31:02:4c:16:10:09:70:de:f3:ea:68: 46:ce:73:fd:e5:84:8d:d4:b0:d5:c9:28:9b:0d:85:fd:e2:c1: 8a:d8:21:32:66:25:72:b0:26:9b:61:61:58:a8:9f:86:86:2c: a9:fc:1d:21:d5:b7:02:ec:b9:b3:a0:70:b7:b7:5f:2e:91:d8: 37:3c:bc:ce:8d:ef:fe:c5:8f:3f:52:66:ca:c8:8b:50:70:c5: 03:dd:d7:4d:3d:8a:c1:e7:6e:90:eb:1b:0a:30:6e:99:76:4c: 34:bd:17:52:64:36:ea:82:16:c9:22:40:45:1b:55:13:28:a1: 74:75:2b:9b:8b:32:a0:45:4b:29:fc:7f:e7:84:d1:14:09:f5: bb:c4:33:db:38:5a:f2:fe:e2:75:4f:59:0e:0e:c8:ee:1c:36: 66:6f:e4:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc90hScF1Vq9BKefnONiwYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwNjA1MDIwMTA3WhcNMjUwNjA2MDIwMTA3WjAzMTEwLwYDVQQD EyhhZWEyZWQxMGUzZTZmMmUyZGJmMjEzMWM3NmIyZDA4ZTllMzViZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hDaxBcErxJ5nwvVaA4L2vclfLIo 4k/xigWNd4EPin5Cuf3i20efDQjyUE3SOIKB3eg7pkjJueQlKRbdjY+X83ccOk8i ksmMQaFqZn8Jpy1FjEaa0dLAH+71ltcNtTDwZmTLfBXxfScCcLdgdgQgB3QthRHw MX0fTa9gMhODvYQ+2xpXKbJqBpH3qhgAzd1Dl5ZU81va0dQkLtRuZMbqFNsVN/3S THheoGkIAfwc9dQY3oPwuTBAZoIiFXL97FmRMPnWn9EsAOoYBOEUuKNDVhDiQqnP +UvNrliZpiC7O19HLP11rw1W1oFWqyyUbJJpFpAn7Mbq521cngeGrQ80IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6i7RDj5vLi2/ITHHay0I6eNb+yMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVanWbQH jsu6X1x7zuhYHXqbtKsJhhuhs4IV47+VrzCsBiUIiN+Xb4lPFEzYZSiVax+detV8 6Zr505+WjOyV4bV8/nnU2BZIann2Tq/d5bJpCzKbe212nxPL+AK9Y6wLfzECTBYQ CXDe8+poRs5z/eWEjdSw1ckomw2F/eLBitghMmYlcrAmm2FhWKifhoYsqfwdIdW3 Auy5s6Bwt7dfLpHYNzy8zo3v/sWPP1JmysiLUHDFA93XTT2KwedukOsbCjBumXZM NL0XUmQ26oIWySJARRtVEyihdHUrm4syoEVLKfx/54TRFAn1u8Qz2zha8v7idU9Z Dg7I7hw2Zm/kgw== -----END CERTIFICATE-----Generated at Thu Jun 5 05:11:39 2025 by rpki-client