$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: iYgVd00SFG2tv7jRq4sF6Jp8VHvlwe7eWuzfxnRjwTM= Subject key identifier: 50:C0:10:22:A3:C6:EC:F9:7D:5E:B6:C3:EB:C0:7D:A6:0E:14:9A:7E Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 0197B77C3694E10CCC3A478633E36A957166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0694 Signing time: Sat 28 Jun 2025 17:01:00 +0000 Manifest this update: Sat 28 Jun 2025 17:01:00 +0000 Manifest next update: Sun 29 Jun 2025 17:01:00 +0000 Files and hashes: 1: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=) 2: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=) 3: S7m9vNahUOOZ_HH4EOue0mD6ojQ.roa (hash: iuC6c5kNWQOil5E1FXRPC8YmUg8D3YuPN+o4r0R3VQc=) 4: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=) 5: Z7WkjqluVcJx8TKOWpd-979l9Hs.roa (hash: G1RaFstXsXGfvVLHVI1mOVOghLjcLKzS1h9oV51+lXs=) 6: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=) 7: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=) 8: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=) 9: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=) 10: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: nXNclDcIis/GuR2zk3tWmEg4DWaWnCYxH0ia/A0747w=) 11: lhSh68FljrO7wEKZo-qXGTfhzlE.roa (hash: I914mCRjyHYm2Pwd9b34kWk8XH3x42fFqaYwN5Q9h50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:36:94:e1:0c:cc:3a:47:86:33:e3:6a:95:71:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Jun 28 17:01:00 2025 GMT Not After : Jun 29 17:01:00 2025 GMT Subject: CN=50c01022a3c6ecf97d5eb6c3ebc07da60e149a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:d6:8c:92:b4:cd:e3:aa:d3:8e:14:51:69: 07:03:9f:70:43:fa:e0:09:3e:1c:5f:b3:03:5f:95: c5:7b:93:ab:2f:8b:f2:a1:ba:ca:71:b9:aa:b0:be: 74:e2:11:6d:f2:b4:46:5b:71:2a:ed:2d:f0:1a:34: 42:51:0d:51:58:bb:4c:03:fa:a0:ed:ae:63:a0:63: 77:77:ae:3d:05:31:d6:58:d1:05:85:06:c4:54:73: 6d:d6:b8:64:10:b1:e8:ac:81:ef:96:3f:4b:b2:36: bc:c8:7f:ed:10:43:ad:22:12:65:a4:7b:4e:0f:53: 6d:16:7f:c8:39:20:a5:cb:7a:bf:e8:fe:0a:9e:74: 81:72:05:eb:0d:da:44:a4:8a:c3:55:0a:bb:aa:57: d5:37:f8:48:4b:d1:40:0d:7e:51:1c:80:00:b2:00: 69:4a:49:c1:1d:98:d1:ef:d7:63:47:5c:a1:fa:57: e6:d1:51:ad:34:48:2b:94:b5:9d:f3:ae:3a:6e:3e: 8c:3f:30:03:3c:d2:94:0a:f8:74:fc:89:c4:24:b7: f0:c8:1b:5f:8f:c7:be:e5:96:04:e2:9a:61:13:81: fd:59:61:2a:d8:ef:b9:9f:82:9a:d1:7d:4d:93:0d: a6:42:7f:bc:d6:5c:c9:90:51:27:31:a4:31:28:9b: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C0:10:22:A3:C6:EC:F9:7D:5E:B6:C3:EB:C0:7D:A6:0E:14:9A:7E X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:47:9e:e3:27:1e:a9:82:58:28:2d:3d:16:4b:c8:c6:e8:6c: 2e:20:3f:39:87:80:8d:71:d9:a4:59:87:5e:06:da:92:ff:90: 44:f6:47:70:3a:1d:da:f6:be:08:a2:72:00:66:ea:ed:7a:7e: 08:43:a0:71:f5:6f:c1:1c:6f:ce:e6:1c:e1:e0:d9:05:08:ef: 5c:3f:1a:40:28:a4:d2:28:4f:14:0d:1e:87:90:87:90:8b:87: da:fb:ef:8d:b8:e5:3c:44:4d:31:5a:26:3d:37:c6:1f:26:4a: 28:8e:0d:7d:6e:a7:b7:61:46:b3:bf:1b:82:a2:b1:8b:fc:c1: 8c:e5:03:6c:2c:0f:ba:b2:24:6d:8e:38:df:68:fe:af:f4:4e: af:d4:73:84:48:69:98:d0:c5:fc:53:53:e0:fc:ba:be:96:42: 8a:6d:e7:02:31:30:ed:a2:3b:71:ab:b7:5d:26:b8:dc:e1:ea: 74:83:74:79:33:92:91:05:76:0d:f3:4b:48:64:97:75:08:01: 4f:6b:90:af:e9:21:74:6d:81:14:a5:22:02:38:5d:9a:4c:c9: 09:bc:ba:1e:b3:cc:86:fa:40:b6:c1:d2:fc:5c:e7:64:bb:76: 3e:a1:51:b5:76:7f:8f:8b:e0:4b:39:c0:c4:a4:fd:fa:69:2b: eb:ba:ec:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fDaU4QzMOkeGM+NqlXFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUwNjI4MTcwMTAwWhcNMjUwNjI5MTcwMTAwWjAzMTEwLwYDVQQD Eyg1MGMwMTAyMmEzYzZlY2Y5N2Q1ZWI2YzNlYmMwN2RhNjBlMTQ5YTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuLWjJK0zeOq044UUWkHA59wQ/rg CT4cX7MDX5XFe5OrL4vyobrKcbmqsL504hFt8rRGW3Eq7S3wGjRCUQ1RWLtMA/qg 7a5joGN3d649BTHWWNEFhQbEVHNt1rhkELHorIHvlj9Lsja8yH/tEEOtIhJlpHtO D1NtFn/IOSCly3q/6P4KnnSBcgXrDdpEpIrDVQq7qlfVN/hIS9FADX5RHIAAsgBp SknBHZjR79djR1yh+lfm0VGtNEgrlLWd8646bj6MPzADPNKUCvh0/InEJLfwyBtf j8e+5ZYE4pphE4H9WWEq2O+5n4Ka0X1Nkw2mQn+81lzJkFEnMaQxKJs+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDAECKjxuz5fV62w+vAfaYOFJp+MB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0ee4yce qYJYKC09FkvIxuhsLiA/OYeAjXHZpFmHXgbakv+QRPZHcDod2va+CKJyAGbq7Xp+ CEOgcfVvwRxvzuYc4eDZBQjvXD8aQCik0ihPFA0eh5CHkIuH2vvvjbjlPERNMVom PTfGHyZKKI4NfW6nt2FGs78bgqKxi/zBjOUDbCwPurIkbY4432j+r/ROr9RzhEhp mNDF/FNT4Py6vpZCim3nAjEw7aI7cau3XSa43OHqdIN0eTOSkQV2DfNLSGSXdQgB T2uQr+khdG2BFKUiAjhdmkzJCby6HrPMhvpAtsHS/FznZLt2PqFRtXZ/j4vgSznA xKT9+mkr67rswA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:58:00 2025 by rpki-client