$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft File: lwJP_Eknv-NSiUNdnQKAQguOzcs.mft (raw, json) Hash identifier: ncf4ffNoOfVEMb/u6iSxU/zq1Ef4IYsxza7d8bmsN1o= Subject key identifier: B9:E9:93:0B:7B:C2:42:DC:E8:41:4C:A6:DA:2B:09:24:03:2B:5D:3B Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Certificate serial: 0197B7451B2844C6BBD15F26E3613A952091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft Manifest number: 029A Signing time: Sat 28 Jun 2025 16:00:48 +0000 Manifest this update: Sat 28 Jun 2025 16:00:48 +0000 Manifest next update: Sun 29 Jun 2025 16:00:48 +0000 Files and hashes: 1: 2SkENpXb0el73BG8YEd0qffOYtk.roa (hash: 0jaoPpV/MX/H1rwXTjmAcjuo/4JCznBTWQGqCB7AVKs=) 2: JZvyn9etRbXjoocBllh7CNIOWtQ.roa (hash: mGlCIUXbc6xwaltgbnFxc0QkfIrllonR1TRT5DAGlfo=) 3: TPKP9_vIv3ZwN8x82Si3hqn8TqY.roa (hash: yYiZ6dC2HXsnlhNc9UgTQuWOe3jZHK4v0roNCv1tWq8=) 4: UQTJpCv9bdrUfH2Saww4hxPMkG8.roa (hash: SUoc+09CYtApBYMdnWncVZH3VjgdKoqVPXysENVRzSs=) 5: V4OKC9u84ToAwKHP8ipFnECEUSc.roa (hash: 63X029Xmtv3CuXa3LW6ITuuCc8ehUl7D3xtwLtBbGKw=) 6: gLbYx573_mCaGUlXxiWajg-EMEY.roa (hash: XXunEzXS739jLBVukfokQ5juDd54e+4tF/UDVJT6Zy4=) 7: lwJP_Eknv-NSiUNdnQKAQguOzcs.crl (hash: W8iSzjFB7wMEu3g/BJPmMrcBvA7QDX6CPtM1au0Botw=) 8: nMgeDSRn1palbG1YFRplQLiBJ88.roa (hash: qMMTHgMyiQ7I7jN7xNsRXFOKbCMbPEhnaDyD9fJClec=) 9: r8pB6OBljZlMvGeFwUgatLrYkjM.roa (hash: W/h+mxaAQgY0+amEPgG34hfdTN3S90SZFDGD/ImhAMQ=) 10: uYRmq9riIpnSj-dt063FdDttSMY.roa (hash: eVkY1lCFSypqnoFYGs3dDTWcHF3+cepLJEQKRr/0kno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:1b:28:44:c6:bb:d1:5f:26:e3:61:3a:95:20:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb Validity Not Before: Jun 28 16:00:48 2025 GMT Not After : Jun 29 16:00:48 2025 GMT Subject: CN=b9e9930b7bc242dce8414ca6da2b0924032b5d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:51:71:dd:c9:d8:a9:5e:c9:27:b6:5a:86: e4:f6:98:00:b4:16:15:98:c0:1e:79:9e:e5:bc:f6: 29:d8:c7:9d:9b:50:11:ab:4f:77:cb:7d:ae:89:d3: 94:6a:ae:0c:df:fd:de:99:b7:0d:2f:f5:02:d4:13: e1:8c:f8:da:e7:8a:9d:1c:3f:a4:99:c2:89:0e:5d: 81:80:af:14:67:08:a6:56:b0:ad:37:70:c0:93:c8: a2:75:c5:a4:c7:26:0a:cb:8d:54:30:6a:ef:30:bb: 5a:84:77:04:58:77:e4:15:34:7f:e0:8e:22:ef:4d: 5f:9e:b3:a4:9d:84:33:f3:ef:72:43:e0:10:33:08: 44:08:e8:e0:76:b1:c2:14:6c:ae:a1:5e:90:d7:23: 3d:04:6a:ea:ac:38:89:f0:ad:e3:48:be:50:56:21: 32:d2:b4:bc:9e:9a:ea:12:d1:e8:bc:71:61:67:ae: 58:4c:50:4b:b2:76:02:1d:1c:1e:6f:94:a3:ea:66: 47:9f:86:30:a7:a8:bb:78:c1:3b:07:61:33:f9:e9: 16:f5:2f:7f:c4:37:00:62:cc:bf:ba:be:2d:82:c5: fc:e3:9c:0d:8c:88:c8:0d:19:20:66:b9:a9:3e:72: 70:58:53:4d:8d:9d:03:ff:12:ee:2d:f5:84:f0:f8: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:93:0B:7B:C2:42:DC:E8:41:4C:A6:DA:2B:09:24:03:2B:5D:3B X509v3 Authority Key Identifier: keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d9:64:f1:c1:e3:fb:4c:29:bb:0e:dd:10:66:9e:3f:7d:b1: 49:34:da:f3:23:13:01:15:de:6a:88:75:44:d0:3c:6a:fb:54: e7:b1:cf:d7:b4:79:1a:ff:3d:1e:bf:9e:eb:0e:58:ed:79:33: 36:63:4c:0c:d1:3c:8d:55:18:f0:71:0f:28:bd:3e:bf:f7:e7: f5:3c:e9:1b:a6:10:65:91:44:63:8b:a3:92:e7:68:54:ed:5b: 21:64:61:b9:ce:ea:ff:32:ab:54:9c:41:05:e7:4e:0f:9b:7a: d6:55:a1:a3:bc:77:8d:93:28:16:36:58:95:88:d7:4b:eb:90: c4:29:d5:ac:22:32:25:ee:8a:1a:37:84:91:ad:0e:20:cb:f6: 8e:30:5c:ce:3f:5d:68:ea:de:08:a8:e8:07:e9:8a:33:3d:ec: 31:05:1d:e2:fc:6c:e2:04:c1:28:b4:08:2d:22:96:58:1e:f2: b1:bd:d8:ca:8e:54:92:8a:7a:21:4f:70:8a:7c:3c:b2:67:73: da:54:d9:80:15:0c:bb:1b:19:82:49:9f:6b:0a:48:98:11:18: 61:8a:99:55:2a:e3:3c:e2:a2:e2:32:6a:45:ea:cb:51:a0:9d: a4:42:48:b9:70:03:70:c0:db:23:bf:32:cc:d1:7b:5b:4e:15: d9:8c:46:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RRsoRMa70V8m42E6lSCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDI0ZmZjNDkyN2JmZTM1Mjg5NDM1ZDlkMDI4MDQyMGI4 ZWNkY2IwHhcNMjUwNjI4MTYwMDQ4WhcNMjUwNjI5MTYwMDQ4WjAzMTEwLwYDVQQD EyhiOWU5OTMwYjdiYzI0MmRjZTg0MTRjYTZkYTJiMDkyNDAzMmI1ZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoptRcd3J2KleySe2Wobk9pgAtBYV mMAeeZ7lvPYp2Medm1ARq093y32uidOUaq4M3/3embcNL/UC1BPhjPja54qdHD+k mcKJDl2BgK8UZwimVrCtN3DAk8iidcWkxyYKy41UMGrvMLtahHcEWHfkFTR/4I4i 701fnrOknYQz8+9yQ+AQMwhECOjgdrHCFGyuoV6Q1yM9BGrqrDiJ8K3jSL5QViEy 0rS8nprqEtHovHFhZ65YTFBLsnYCHRweb5Sj6mZHn4Ywp6i7eME7B2Ez+ekW9S9/ xDcAYsy/ur4tgsX845wNjIjIDRkgZrmpPnJwWFNNjZ0D/xLuLfWE8PiBPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnpkwt7wkLc6EFMptorCSQDK107MB8GA1UdIwQY MBaAFJcCT/xJJ7/jUolDXZ0CgEILjs3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDkt NDAxYmRhNDQ3N2I1LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MTcyMjEtMWQwMy00ZDEzLTkwNDktNDAxYmRhNDQ3N2I1 LzEvbHdKUF9Fa252LU5TaVVOZG5RS0FRZ3VPemNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdlk8cHj +0wpuw7dEGaeP32xSTTa8yMTARXeaoh1RNA8avtU57HP17R5Gv89Hr+e6w5Y7Xkz NmNMDNE8jVUY8HEPKL0+v/fn9TzpG6YQZZFEY4ujkudoVO1bIWRhuc7q/zKrVJxB BedOD5t61lWho7x3jZMoFjZYlYjXS+uQxCnVrCIyJe6KGjeEka0OIMv2jjBczj9d aOreCKjoB+mKMz3sMQUd4vxs4gTBKLQILSKWWB7ysb3Yyo5Ukop6IU9winw8smdz 2lTZgBUMuxsZgkmfawpImBEYYYqZVSrjPOKi4jJqRerLUaCdpEJIuXADcMDbI78y zNF7W04V2YxGTg== -----END CERTIFICATE-----Generated at Sat Jun 28 23:02:47 2025 by rpki-client