$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: wIY5jH69ILXzSbiyQaBHSANPNMK/WR5zbUnutyywmdA= Subject key identifier: CE:A4:30:09:52:60:BC:D2:47:7F:DF:D1:4D:0C:29:9B:44:5E:3A:B8 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 0196B7EC4F8FCAC677FC552E83A1BF747215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 1536 Signing time: Sat 10 May 2025 02:00:39 +0000 Manifest this update: Sat 10 May 2025 02:00:39 +0000 Manifest next update: Sun 11 May 2025 02:00:39 +0000 Files and hashes: 1: 1-YLitnkBbXXsQAFgwq_VXNT0JiU.roa (hash: AJ3gimUDCGBcWcTGkG9GHuWdzHVsFaaNIwm4c/UaNKI=) 2: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (hash: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=) 3: JJeVt7UZqNUEt2c6x7hNRcOI6xI.roa (hash: MfyInY8zOEg6qrPZH5fZlCQbjzWyB7B/O95gOPgwBK8=) 4: JRPXqjHWLaWnIuSL8g9IeICp1DA.roa (hash: 2iPE1VbPS86vB8xHzmkYPiMJ/2pRuAO+4Eo+0e52CUU=) 5: KCNwgf6PeVKuiUUhuKfKXnLgLFQ.roa (hash: v+IFmLklJP0SF039aJ72TNFUXKdUB+t1BQfemj0rrwE=) 6: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: UFZmu1OUejKDTvrui5YV7u7KPidSSwsoJyZ298CyqB0=) 7: PKP5a34KkATdKIYJt-5YPdlCScc.roa (hash: DIduPrIRFwlPmmTvgmnIOUqFQ2p2Urxx9bdsVWJtVNQ=) 8: URdHpLliQS0f_xW89x43dy03NFM.roa (hash: slk/BTTaKKDTHH1yknm1NTv+Ov77fSUjZtooH73b8sg=) 9: gEEujvRXufmsjgTmstu1Zbbnfs0.roa (hash: P5YHH8ETd3YFKeI8j0ogt9xk/9FEVi5SrSm44Y95yWk=) 10: koANhf94Ms7kfxsa0LrqViexTxU.roa (hash: n1usXJi4k9IdIFnEicQPzyVEwnESkffY6S41/7XDahM=) 11: lsyqD2gTgikkDZqsbqed-AvQOFE.roa (hash: 2f7aOq0K3Z5tB/Bm8elLHTKPwyM1VQt3iTAgGQr0kUA=) 12: m-IIE152ao_pZE4Wt42YO_x1XlM.roa (hash: muFT1Obe9mEevORUc6UEy/Cz3RKhk79/nUEvl5PDZM4=) 13: nZHdV3WJYYopwUGJLwL5bZm3VpI.roa (hash: yZFjAsboNvT9P5DWXdZp8gsxk1AZMOxeZfK2Mq9pQEU=) 14: oJy5Ih3Wi9poj-CApp9bi93q2-8.roa (hash: UiKgdsncZ7pajJ8yDf76t7tbkfWUzikpYtARnAAsGHo=) 15: riI-pOFWNLX8839TKqYFfWOwpZ8.roa (hash: fqG5C98P6l1daY/xcAV9OUvehrdtHt6AHPVOzurPOBw=) 16: sr_tDwJkHkj-JXNMt0Zy5ypCJ7g.roa (hash: btOhuVo5qzp7IyhUfnRzrwSPzaIUCOIvSAfRoFrawl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b7:ec:4f:8f:ca:c6:77:fc:55:2e:83:a1:bf:74:72:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: May 10 02:00:39 2025 GMT Not After : May 11 02:00:39 2025 GMT Subject: CN=cea430095260bcd2477fdfd14d0c299b445e3ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:05:62:19:02:33:ee:eb:37:16:0b:26:26: e1:cb:5e:49:ad:75:c7:5b:93:0f:e2:73:1d:89:0f: 33:c5:de:d8:9e:31:53:8e:9d:97:00:86:93:84:c6: 8e:13:5e:07:2c:55:74:e1:84:d7:28:29:d5:4f:f4: 07:77:02:6e:d0:4b:ff:d1:75:54:bf:49:55:d0:82: 25:46:94:72:c3:46:d6:05:ef:3f:23:c9:96:d7:76: c6:e2:1c:4f:05:24:9d:be:10:f6:69:db:7b:62:ac: 3d:8c:00:8b:d3:d9:cf:85:3e:e7:ef:7f:60:e2:01: 91:db:1b:0c:e3:33:9c:7a:68:0a:47:8e:02:72:22: df:af:93:c5:16:a7:88:92:44:79:00:e1:a6:a6:c7: 71:74:0e:87:50:61:d7:24:a0:28:21:ec:84:06:e2: d9:97:a8:12:05:1b:4f:c5:99:3e:f0:36:eb:3f:10: c0:36:a5:9a:73:7a:5f:5f:3a:3c:8f:86:59:94:fa: 3c:89:40:d1:54:73:64:db:5c:45:58:37:80:f0:73: d0:65:53:a3:67:ae:52:35:8b:59:0a:2c:89:91:3b: bd:de:e0:50:50:42:97:5d:df:de:ee:e7:ef:3d:e0: a5:0e:37:b9:23:4c:45:d3:b1:15:69:10:3c:67:17: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:30:09:52:60:BC:D2:47:7F:DF:D1:4D:0C:29:9B:44:5E:3A:B8 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f8:cf:80:a8:62:cf:56:1a:35:1d:fa:a6:77:d1:d8:ba:ec: b7:8e:78:e8:8e:c8:13:99:2a:48:fe:74:67:d5:ab:61:b0:18: 88:3b:94:42:57:40:2f:ff:1f:18:1a:de:46:8d:fb:58:27:9d: 77:c5:99:8f:d1:5c:55:a8:25:41:3a:5b:24:03:01:96:95:cb: f9:e0:d7:5d:6b:5e:65:0c:31:e4:92:ed:c3:2c:73:56:47:ba: 22:ef:21:22:23:1a:26:89:d2:a3:cf:5f:c3:fb:d7:2e:07:13: 5c:49:98:8c:d7:a9:9a:cc:13:98:d8:1f:02:66:07:44:f5:14: 8a:8b:81:5e:93:cc:70:08:49:b1:8f:15:3f:43:f6:3b:13:b3: 23:04:e1:00:64:86:8d:fa:09:d7:4b:60:61:55:fb:f6:60:15: e8:cc:87:c6:fa:c3:76:c2:86:f3:e6:4a:d1:31:4b:bd:8a:ad: d7:4b:18:31:b2:a9:bd:d8:d8:26:df:56:e4:65:79:05:61:35: e1:59:37:8e:c7:c5:31:ef:00:55:bf:35:54:d2:f9:c2:61:3e: 3c:e3:2f:7b:95:30:29:4a:90:07:cb:e3:fc:e2:7a:6e:0a:2a: d8:09:c8:fb:64:09:63:f9:8f:34:02:d3:27:85:3e:78:4f:71: 76:b6:b3:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa37E+PysZ3/FUug6G/dHIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjUwNTEwMDIwMDM5WhcNMjUwNTExMDIwMDM5WjAzMTEwLwYDVQQD EyhjZWE0MzAwOTUyNjBiY2QyNDc3ZmRmZDE0ZDBjMjk5YjQ0NWUzYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl4FYhkCM+7rNxYLJibhy15JrXXH W5MP4nMdiQ8zxd7YnjFTjp2XAIaThMaOE14HLFV04YTXKCnVT/QHdwJu0Ev/0XVU v0lV0IIlRpRyw0bWBe8/I8mW13bG4hxPBSSdvhD2adt7Yqw9jACL09nPhT7n739g 4gGR2xsM4zOcemgKR44CciLfr5PFFqeIkkR5AOGmpsdxdA6HUGHXJKAoIeyEBuLZ l6gSBRtPxZk+8DbrPxDANqWac3pfXzo8j4ZZlPo8iUDRVHNk21xFWDeA8HPQZVOj Z65SNYtZCiyJkTu93uBQUEKXXd/e7ufvPeClDje5I0xF07EVaRA8ZxeUvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6kMAlSYLzSR3/f0U0MKZtEXjq4MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/jPgKhi z1YaNR36pnfR2Lrst4546I7IE5kqSP50Z9WrYbAYiDuUQldAL/8fGBreRo37WCed d8WZj9FcVaglQTpbJAMBlpXL+eDXXWteZQwx5JLtwyxzVke6Iu8hIiMaJonSo89f w/vXLgcTXEmYjNepmswTmNgfAmYHRPUUiouBXpPMcAhJsY8VP0P2OxOzIwThAGSG jfoJ10tgYVX79mAV6MyHxvrDdsKG8+ZK0TFLvYqt10sYMbKpvdjYJt9W5GV5BWE1 4Vk3jsfFMe8AVb81VNL5wmE+POMve5UwKUqQB8vj/OJ6bgoq2AnI+2QJY/mPNALT J4U+eE9xdraz3Q== -----END CERTIFICATE-----Generated at Sat May 10 05:22:35 2025 by rpki-client