$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: dbksnKpgQtBKUSNg9h9BJ/fIMDeundmnCBAghUZR+IU= Subject key identifier: 0B:6F:EB:DF:B1:A7:13:92:6A:6E:93:C8:03:CE:C5:4F:86:50:D9:7B Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 0196B5FDF13650DB6DDBE2059468DE850ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 14B1 Signing time: Fri 09 May 2025 17:00:40 +0000 Manifest this update: Fri 09 May 2025 17:00:40 +0000 Manifest next update: Sat 10 May 2025 17:00:40 +0000 Files and hashes: 1: 5NarqgL1IqRhroqsljH0A9V5qCo.roa (hash: 8kRquWjA2VpTsIouS+9omLPNkeJK9gTo7+86zZ6sCIM=) 2: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 3: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 4: AFQfc6JxPs0WbtXEfZUQW6cmtHw.roa (hash: e8L77a5kg61puuX03oiiqxMg/6Zhg3a40JEKuTihNS4=) 5: CufnYSstlNtENOE9efd7-2ln8Es.roa (hash: z8qQP+b43sULkWDkQAPO4p2CYsOjqrih9Z+imFI0Iok=) 6: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 7: HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa (hash: kHbTsJD5NdmK1vLZSQigG4P1BUyQFBvibnG4XtzolO8=) 8: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: zjtxFMPJdIKUnre3NMueUTlV4Knx1Gv9F/7gWemtkdg=) 9: LoGWdajWVkzXAomx3BiXVveHKPE.roa (hash: DQkDoapnHj0MLL/tsnzQzVTwMl16+a7poqF4DwlVKiA=) 10: S31ZOfjUKXHqumIitPUzwNH5MBo.roa (hash: 6OktdKUpvFcNMtIKT9x1/tMHyAezG6+Rn6sN9L0iNIc=) 11: SjmXZnG51JRTtLsN9sJ8Rvd5Pt4.roa (hash: tJBERu9Lo1wC7SnI5+hmLMCW8eZfTvyvoHgD0vHT/x8=) 12: VgVq-6TLMiL7Sau_RtgQ3m_Vpv0.roa (hash: 1YKBUCdRYV8CfVZcj+eVWU3GK5hSdpogHam93h2rJ6k=) 13: i7NdTPcfWm6S-ia8jMavL8TwgBo.roa (hash: rfwL8AVw3aN8CfLATlDNteM+c6BBXT+JuCeDGBUeAPo=) 14: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 15: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 16: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 17: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b5:fd:f1:36:50:db:6d:db:e2:05:94:68:de:85:0a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: May 9 17:00:40 2025 GMT Not After : May 10 17:00:40 2025 GMT Subject: CN=0b6febdfb1a713926a6e93c803cec54f8650d97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:aa:43:ec:b7:6e:b4:a3:d0:f3:f5:f1:1f:98: ea:d9:9e:3f:9c:37:bd:a2:78:5f:83:f4:27:95:98: 79:44:5c:8d:6e:fa:0c:c0:93:92:c3:36:f0:0a:68: ed:e2:8c:de:35:be:6a:a9:84:6a:8e:37:87:e7:61: 92:f6:77:f1:ce:74:16:eb:a7:38:9a:10:ae:ad:3b: 6f:b0:07:6f:2c:ff:44:fa:3e:66:27:af:14:dd:9b: 53:3a:5d:d0:98:82:69:70:79:8c:68:db:91:e7:ff: 2a:99:78:46:f0:9b:ae:d9:0d:85:99:c3:ca:74:31: e7:5f:69:25:de:bf:23:02:dd:90:d7:af:ce:7b:41: fd:7b:1d:df:d3:a0:2b:74:20:11:ec:a7:a7:db:96: 97:39:92:7c:13:fe:91:c7:ca:f0:6e:2d:d1:44:7d: 3d:99:37:3c:0d:94:52:ca:24:4e:64:76:83:b9:e6: 68:3d:15:9f:4c:11:fa:b9:c7:8d:e4:b8:82:38:97: 4d:c4:56:54:db:ff:49:d2:2f:61:ea:66:7b:7d:79: da:84:1f:a4:86:49:20:cf:cb:20:86:d3:2d:01:00: 9d:f5:d9:d9:ec:17:2e:65:7b:be:42:25:99:3a:a1: 8f:f7:97:84:84:de:c5:16:ee:8b:25:f1:b1:9e:70: a2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6F:EB:DF:B1:A7:13:92:6A:6E:93:C8:03:CE:C5:4F:86:50:D9:7B X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cd:f0:76:45:2a:1a:c3:99:60:a5:27:60:d0:37:dc:2d:2c: 29:cc:ef:32:8f:3a:80:79:ff:2a:28:4f:ce:89:34:a5:b2:de: 10:47:87:e5:25:e6:b8:d3:c7:b4:be:c5:ba:65:fe:5f:50:7a: ac:f7:57:72:08:37:df:1a:ff:59:67:d3:28:b5:d0:bf:45:d5: a8:ee:17:4a:eb:43:e9:65:2c:21:30:46:8c:7c:c0:ca:69:e3: 36:dd:5f:8b:34:a1:05:73:08:aa:b5:ce:5a:90:ce:3c:c7:d1: b4:e5:7d:b7:3e:86:27:71:57:eb:77:c5:ef:59:32:3a:0d:51: 05:93:31:65:d1:a1:34:68:2a:a4:1d:ba:68:b6:98:ed:25:78: 6c:a8:9b:79:b5:29:03:c5:ff:eb:ee:77:46:1f:24:0d:23:7e: 69:ac:48:8a:8d:ec:ee:3c:52:ce:57:36:25:7d:8f:65:b7:35: 7b:e9:71:60:a7:ab:44:76:40:6c:d8:e7:8b:88:6e:52:0d:25: ee:73:f7:90:b9:c8:70:47:a2:23:cd:48:a1:f9:99:e6:2f:90: b5:1a:0f:03:5b:7e:53:5a:e3:66:c2:b9:72:5e:9a:c9:6f:fd: a3:fa:d7:5f:5e:90:bb:30:91:da:44:51:21:85:83:07:cc:03: 79:e8:17:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa1/fE2UNtt2+IFlGjehQq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUwNTA5MTcwMDQwWhcNMjUwNTEwMTcwMDQwWjAzMTEwLwYDVQQD EygwYjZmZWJkZmIxYTcxMzkyNmE2ZTkzYzgwM2NlYzU0Zjg2NTBkOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5apD7LdutKPQ8/XxH5jq2Z4/nDe9 onhfg/QnlZh5RFyNbvoMwJOSwzbwCmjt4ozeNb5qqYRqjjeH52GS9nfxznQW66c4 mhCurTtvsAdvLP9E+j5mJ68U3ZtTOl3QmIJpcHmMaNuR5/8qmXhG8Juu2Q2FmcPK dDHnX2kl3r8jAt2Q16/Oe0H9ex3f06ArdCAR7Ken25aXOZJ8E/6Rx8rwbi3RRH09 mTc8DZRSyiROZHaDueZoPRWfTBH6uceN5LiCOJdNxFZU2/9J0i9h6mZ7fXnahB+k hkkgz8sghtMtAQCd9dnZ7BcuZXu+QiWZOqGP95eEhN7FFu6LJfGxnnCiFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtv69+xpxOSam6TyAPOxU+GUNl7MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALM3wdkUq GsOZYKUnYNA33C0sKczvMo86gHn/KihPzok0pbLeEEeH5SXmuNPHtL7FumX+X1B6 rPdXcgg33xr/WWfTKLXQv0XVqO4XSutD6WUsITBGjHzAymnjNt1fizShBXMIqrXO WpDOPMfRtOV9tz6GJ3FX63fF71kyOg1RBZMxZdGhNGgqpB26aLaY7SV4bKibebUp A8X/6+53Rh8kDSN+aaxIio3s7jxSzlc2JX2PZbc1e+lxYKerRHZAbNjni4huUg0l 7nP3kLnIcEeiI81IofmZ5i+QtRoPA1t+U1rjZsK5cl6ayW/9o/rXX16QuzCR2kRR IYWDB8wDeegXnw== -----END CERTIFICATE-----Generated at Fri May 9 23:38:57 2025 by rpki-client