$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: eB9WFQtlm/UywVxkcAVj8cnhuLqQD+vnke8vOAoFVII= Subject key identifier: 16:E1:D4:00:A0:5E:BE:EC:A2:69:EC:54:3C:5B:61:36:0B:A6:5D:C0 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 0197B70E513FE8C622AC27A039B82B05FF93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0C17 Signing time: Sat 28 Jun 2025 15:00:58 +0000 Manifest this update: Sat 28 Jun 2025 15:00:58 +0000 Manifest next update: Sun 29 Jun 2025 15:00:58 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: 7KA5CgNkdr1ih8Qy3AvCuBfEzN0.roa (hash: mR7T3WuKSbdAtTzSYp0E3OKslQutZqhI3l0DzsTdKEc=) 3: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 4: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 5: LB_t08DPTNyxU120z1nclHuMwMI.roa (hash: tD2v/rZHmdopAY/iPcE41q7HJJs5sc+Muz0vNadXByE=) 6: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 7: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: w6OZULiMI/5+JOMMcJu7pdPmc1xJlJMZMZtReUPWGoM=) 8: NzO5JHHrowrlOrfRmJ6rlCKWAiI.roa (hash: mEn+H0KcivRIVdMWKafr2JpXW+KPhxm6nmi6vgCsBn4=) 9: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 10: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 11: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 12: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 13: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 14: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:51:3f:e8:c6:22:ac:27:a0:39:b8:2b:05:ff:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Jun 28 15:00:58 2025 GMT Not After : Jun 29 15:00:58 2025 GMT Subject: CN=16e1d400a05ebeeca269ec543c5b61360ba65dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:fb:46:3e:e5:de:26:f6:56:55:75:b7:ba: c6:e5:67:b4:9a:ba:8d:c7:47:20:72:dc:cc:f4:6f: 50:7b:0f:0e:62:ea:07:e3:b6:a6:ec:30:fd:e9:9b: 70:60:d0:7f:f8:a2:7c:31:20:99:ee:fd:c1:cb:57: 8d:de:75:0f:6c:92:dd:9b:44:34:43:e4:03:3f:cc: 9e:f8:fd:77:3f:bc:b1:cc:da:57:ed:5d:87:62:30: 09:ff:a0:84:86:89:4d:e0:a2:54:5b:28:da:c2:81: bc:21:a0:be:9c:40:49:0d:d2:c2:77:65:a4:80:47: bd:c8:7e:9a:6b:f9:d6:7b:24:a2:81:45:c1:0d:38: af:dc:f0:92:78:94:5f:80:eb:31:57:41:6a:7e:31: f9:b7:74:20:51:31:0f:f5:6a:c1:05:d3:e4:a5:30: 36:37:80:6b:c7:a4:86:09:77:83:f9:06:94:88:6e: 53:8b:64:41:be:5d:8e:d3:e7:16:45:b1:6e:fa:6b: cf:42:45:e0:28:fa:78:b0:65:d0:cd:6f:cd:99:9e: 9b:65:5f:39:3d:8d:39:cf:e5:8a:55:85:c3:04:74: 36:bb:20:07:e1:84:0b:0e:60:a9:10:a0:b5:11:6a: 07:08:9f:7a:23:45:49:2e:18:4a:06:d9:69:83:6a: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E1:D4:00:A0:5E:BE:EC:A2:69:EC:54:3C:5B:61:36:0B:A6:5D:C0 X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d0:48:bc:cd:e0:da:5c:55:65:18:cc:ac:3f:a8:03:24:c6: b9:02:53:bb:0d:fb:84:6a:59:18:bb:f8:a4:76:b2:64:3e:1d: e2:f8:77:ef:85:42:c1:18:67:c8:1b:7c:40:19:0a:bf:d4:52: ae:29:2e:66:64:65:20:2e:fb:6e:d6:92:9a:7b:07:ce:a9:9f: 48:9d:6f:db:2e:e0:d5:88:17:b6:ec:13:53:a4:b5:98:9c:78: 00:de:1f:ac:7d:0d:61:c3:4b:2e:92:c0:54:cc:84:75:62:a5: dc:ae:ac:62:4f:b2:3a:75:48:90:6d:ee:ee:f7:bc:16:26:76: b6:53:eb:4d:58:f0:d8:ae:fb:08:e7:a0:fb:a2:46:4d:c5:87: 7b:90:ab:fe:0e:2e:1d:0b:fd:c7:88:a7:9d:ca:59:64:43:de: 5b:33:62:64:12:0c:e0:89:c9:37:40:b5:53:85:ce:83:f3:cc: c8:1d:4b:bb:f0:08:08:fd:b4:3c:fd:3f:88:60:6b:30:c3:b3: 0d:dc:af:2a:65:92:d1:0e:86:28:19:02:15:f2:1d:79:58:8c: 2a:6e:d9:83:c1:aa:2e:6b:f2:00:92:ec:66:bd:1e:6f:81:0e: 5c:0b:4c:51:ae:b6:6e:db:59:d9:b1:db:91:20:70:fe:bb:b8: 12:4b:4d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DlE/6MYirCegObgrBf+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUwNjI4MTUwMDU4WhcNMjUwNjI5MTUwMDU4WjAzMTEwLwYDVQQD EygxNmUxZDQwMGEwNWViZWVjYTI2OWVjNTQzYzViNjEzNjBiYTY1ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2In7Rj7l3ib2VlV1t7rG5We0mrqN x0cgctzM9G9Qew8OYuoH47am7DD96ZtwYNB/+KJ8MSCZ7v3By1eN3nUPbJLdm0Q0 Q+QDP8ye+P13P7yxzNpX7V2HYjAJ/6CEholN4KJUWyjawoG8IaC+nEBJDdLCd2Wk gEe9yH6aa/nWeySigUXBDTiv3PCSeJRfgOsxV0FqfjH5t3QgUTEP9WrBBdPkpTA2 N4Brx6SGCXeD+QaUiG5Ti2RBvl2O0+cWRbFu+mvPQkXgKPp4sGXQzW/NmZ6bZV85 PY05z+WKVYXDBHQ2uyAH4YQLDmCpEKC1EWoHCJ96I0VJLhhKBtlpg2ruNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbh1ACgXr7somnsVDxbYTYLpl3AMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9BIvM3g 2lxVZRjMrD+oAyTGuQJTuw37hGpZGLv4pHayZD4d4vh374VCwRhnyBt8QBkKv9RS rikuZmRlIC77btaSmnsHzqmfSJ1v2y7g1YgXtuwTU6S1mJx4AN4frH0NYcNLLpLA VMyEdWKl3K6sYk+yOnVIkG3u7ve8FiZ2tlPrTVjw2K77COeg+6JGTcWHe5Cr/g4u HQv9x4inncpZZEPeWzNiZBIM4InJN0C1U4XOg/PMyB1Lu/AICP20PP0/iGBrMMOz DdyvKmWS0Q6GKBkCFfIdeViMKm7Zg8GqLmvyAJLsZr0eb4EOXAtMUa62bttZ2bHb kSBw/ru4EktNRA== -----END CERTIFICATE-----Generated at Sat Jun 28 22:45:30 2025 by rpki-client