$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: HaXafVF9QBA/zCfystqRnt+aF8qgMR9tN92D+M/+ohg= Subject key identifier: 59:61:97:09:79:A4:BD:4C:AE:38:A5:C9:D2:20:C9:7B:34:86:F0:99 Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 0196BE2550FE97BBD51D0EC92035C8E3DE8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 0219 Signing time: Sun 11 May 2025 07:00:38 +0000 Manifest this update: Sun 11 May 2025 07:00:38 +0000 Manifest next update: Mon 12 May 2025 07:00:38 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: SOcWuLu3l7OzvZF8x52Cnud2t+N83g8v5umUzoQD6NQ=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:25:50:fe:97:bb:d5:1d:0e:c9:20:35:c8:e3:de:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: May 11 07:00:38 2025 GMT Not After : May 12 07:00:38 2025 GMT Subject: CN=5961970979a4bd4cae38a5c9d220c97b3486f099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:42:45:38:6a:19:69:f0:83:18:b5:17:48: 0e:02:c7:29:84:80:ba:4b:0a:f5:9f:04:66:dd:d1: 91:73:4d:72:1a:a3:06:3a:b7:df:32:f5:01:c6:48: ee:be:72:53:61:6e:a0:08:6f:54:be:27:00:e5:cf: 27:56:c5:0d:97:38:94:03:63:24:04:3b:d2:02:50: 8c:87:ec:5f:b5:52:34:be:d2:26:17:3d:12:3b:b7: 4f:39:e6:45:64:56:a1:a1:20:38:fb:4b:af:05:3c: b1:1c:c4:8d:92:ef:f6:3b:69:86:74:35:59:ee:1c: 04:8d:be:98:15:d1:8d:80:14:57:cc:7a:4c:86:78: f8:76:6c:fd:82:2a:08:ff:a6:eb:66:c9:9f:88:5e: b9:c1:e5:00:5c:57:a4:c9:3f:bb:8e:8b:a2:31:17: c6:3e:16:64:a8:61:44:7c:77:e6:bd:2e:a7:bf:20: df:c1:c0:bc:d6:72:9f:f4:75:e7:49:2a:9f:2b:b9: 14:36:d1:02:cc:cd:e1:4b:4d:0e:12:3b:7f:0b:06: 83:7b:51:46:01:64:bb:20:09:c1:f6:cb:bd:88:8a: 7b:9e:a5:95:06:5b:0f:d2:eb:80:c0:54:b2:51:61: 5e:b2:71:f5:19:7d:30:ca:d6:9a:a5:99:d4:61:a4: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:61:97:09:79:A4:BD:4C:AE:38:A5:C9:D2:20:C9:7B:34:86:F0:99 X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2a:6b:3f:ec:a3:b9:b0:51:ce:60:5d:e4:6a:1b:86:cb:98: c5:6f:77:34:8b:35:f0:65:fc:02:8b:1b:5e:84:4d:cc:82:4f: d2:a9:d9:e5:2d:c5:fc:f5:cf:78:81:d6:d2:ae:9c:77:a2:85: 08:5f:ea:c0:ef:19:bc:4a:f7:20:91:07:b5:dc:d4:76:77:1f: e1:c9:4e:b1:dd:86:ee:10:93:b6:fb:b1:f8:6a:e4:35:ef:f3: 82:a6:81:b0:02:45:97:e2:cf:82:57:bc:40:65:7e:ef:1f:c7: a2:05:b7:98:60:a0:5f:5d:de:f0:85:ae:99:e3:b0:2e:1b:93: 8c:fb:05:4c:3e:66:77:d3:73:55:c5:15:d0:74:b3:5b:22:c2: 56:ff:19:b1:f7:da:fb:71:78:1c:6c:3d:f9:a2:7c:ab:68:26: 29:14:90:12:f3:4a:00:75:04:62:60:55:9d:0f:eb:79:12:81: 7b:70:e2:a0:fc:3f:f9:02:40:c4:c2:c1:b5:9d:70:ad:7d:82: 90:2c:6f:9b:f5:e4:8c:7e:e3:b5:82:50:2f:e9:f9:57:c0:5c: 87:aa:5f:25:ca:74:0c:a9:6b:a5:c3:6c:a3:35:95:fe:4b:c9: 89:0f:99:31:ac:48:e1:a8:67:1a:20:18:d5:e8:5f:70:f8:69: c5:45:75:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+JVD+l7vVHQ7JIDXI496OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUwNTExMDcwMDM4WhcNMjUwNTEyMDcwMDM4WjAzMTEwLwYDVQQD Eyg1OTYxOTcwOTc5YTRiZDRjYWUzOGE1YzlkMjIwYzk3YjM0ODZmMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYlCRThqGWnwgxi1F0gOAscphIC6 Swr1nwRm3dGRc01yGqMGOrffMvUBxkjuvnJTYW6gCG9UvicA5c8nVsUNlziUA2Mk BDvSAlCMh+xftVI0vtImFz0SO7dPOeZFZFahoSA4+0uvBTyxHMSNku/2O2mGdDVZ 7hwEjb6YFdGNgBRXzHpMhnj4dmz9gioI/6brZsmfiF65weUAXFekyT+7jouiMRfG PhZkqGFEfHfmvS6nvyDfwcC81nKf9HXnSSqfK7kUNtECzM3hS00OEjt/CwaDe1FG AWS7IAnB9su9iIp7nqWVBlsP0uuAwFSyUWFesnH1GX0wytaapZnUYaTMhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlhlwl5pL1MrjilydIgyXs0hvCZMB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyprP+yj ubBRzmBd5GobhsuYxW93NIs18GX8AosbXoRNzIJP0qnZ5S3F/PXPeIHW0q6cd6KF CF/qwO8ZvEr3IJEHtdzUdncf4clOsd2G7hCTtvux+GrkNe/zgqaBsAJFl+LPgle8 QGV+7x/HogW3mGCgX13e8IWumeOwLhuTjPsFTD5md9NzVcUV0HSzWyLCVv8Zsffa +3F4HGw9+aJ8q2gmKRSQEvNKAHUEYmBVnQ/reRKBe3DioPw/+QJAxMLBtZ1wrX2C kCxvm/XkjH7jtYJQL+n5V8Bch6pfJcp0DKlrpcNsozWV/kvJiQ+ZMaxI4ahnGiAY 1ehfcPhpxUV1ag== -----END CERTIFICATE-----Generated at Sun May 11 11:42:21 2025 by rpki-client