$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: mz9B8UGNI+zU586AKc7cxZzIkQ0ES4yKseK+j+EqDXM= Subject key identifier: A2:BE:88:E8:9D:77:24:5F:73:07:71:9E:97:9F:98:FD:2C:2C:8E:DD Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 01969F07DDCB4EFDDB9E0FDAA66ECD05C520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 12F9 Signing time: Mon 05 May 2025 06:00:14 +0000 Manifest this update: Mon 05 May 2025 06:00:14 +0000 Manifest next update: Tue 06 May 2025 06:00:14 +0000 Files and hashes: 1: 3_PU79fuHYEhPlNdsJUuZYubgqE.roa (hash: XJWOGH/fcmWGI7b/RAY8L2wuvZcYBFbJ22ImnM+pQlo=) 2: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (hash: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=) 3: 6nGhmoSDQSpfjNNYdXCrQWERlIk.roa (hash: /4N+szUgXgcEHHrQDjyOBrtHm4Pkc7NrFhdRQABicbY=) 4: 7HPt5nannhv2gwbAHwaRC5RFFDM.roa (hash: UBw+74e6x0xFF9XFftGKU2o22p62byiADLv5iJRfz1g=) 5: KUk-CSFCGROoWRr0bn1g2QgmGDo.roa (hash: UpwZsPUmRF6H+YvfEB2+WDVmprsNudTy1jgLuv//feE=) 6: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: bwYZ0U5WsGJPQubw+jNce2Ak0s9glZ3yia1Ypg+9RPs=) 7: M2zzd8H-Tlg7XAdTwUQjLUYGllY.roa (hash: ETq98V9SXDP0t347M1cA3yCogqTqQCthqQp4LwB/LXQ=) 8: M97ZcKaRZuOa3DTXxLHlO-RLatQ.roa (hash: w0gHLxi0MpSA4Cow6J8TG6Bmoy7AY86PSwg5UsV2kcM=) 9: NZa0gIfmJGTWop9klB_kmws3bBk.roa (hash: EJR++Bc5Re9D8wlLY18Cmifrl1rYRjuKt7sbeibsf5k=) 10: WHIHIqWEsALKLs5d6Q-tOWQCla8.roa (hash: hEIDrElaFaUvEVn72pSS3zv8TkwlJYcJGyPsidxg2tA=) 11: a9iv50ooVHm1APCybq4owIunnG8.roa (hash: phKXw/sbpuIWnctwyonEWyJEOXe+K9H58t2l6qBy6tg=) 12: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (hash: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=) 13: iDsGG6EDS8fs9Hct4p8CitByvws.roa (hash: ch//5WVE7dA9hut4Enr9j7EKe84fcI2Ykg7l+3xy19U=) 14: jX4WFfpxo3HHZpB1YZxC4p_jFpo.roa (hash: HvcFd2uvN4vxiceLP8NW4lHvaK1pmADob7hykxb6+nc=) 15: pGGDoeGnPksdWvYsReZKh3O6puY.roa (hash: xGeOEw9UbAQAfMawzQlzpH9iOWa+z4LqLDy15zn/jN0=) 16: wnaVByUU9rLY0lixJG-AIxAIIKk.roa (hash: uZB4+jtFO740w1LWkNgD8gNKmUM01C7fhf/4nIXCJmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9f:07:dd:cb:4e:fd:db:9e:0f:da:a6:6e:cd:05:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: May 5 06:00:14 2025 GMT Not After : May 6 06:00:14 2025 GMT Subject: CN=a2be88e89d77245f7307719e979f98fd2c2c8edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1c:94:ab:25:12:53:87:af:58:29:e1:56:09: 73:63:41:2a:78:c1:68:e0:81:06:78:91:64:59:f0: c1:fc:4e:df:d9:48:6b:28:bd:c3:e1:ba:f8:5a:a4: e8:e6:7f:5f:aa:80:71:cb:9a:09:01:09:ee:22:6b: fb:94:95:45:36:f4:b8:41:87:5f:df:7f:60:e8:d3: 18:25:0f:9b:4d:a4:17:f2:b3:e4:67:b0:c4:a6:9b: f0:e2:14:b9:7b:ed:55:71:54:6b:7c:11:14:07:6e: b0:cd:b9:36:e8:30:45:34:6b:26:f9:7a:04:23:31: 94:7d:a5:e9:2b:e0:af:4a:bc:ff:53:93:b3:1c:2a: e7:8b:9d:5d:5b:04:41:38:95:98:95:9b:14:bd:0f: 0d:df:e3:86:66:77:3b:c2:32:f8:ad:c7:63:47:b8: f4:66:cf:d6:6a:25:38:4e:e9:fc:05:0e:64:15:91: 56:ab:a7:ed:6e:9f:70:c0:91:ef:86:bb:4d:b4:43: 09:7d:8c:00:fd:e2:d2:46:97:0f:02:5f:be:e4:65: 51:ab:1f:0a:5a:f2:ed:fb:31:7c:71:00:13:74:e6: 8a:5d:86:40:72:fa:6b:cc:0e:0d:52:97:d9:44:9c: 5a:d4:12:aa:57:e0:1d:0b:d0:5b:06:a4:2c:9b:8f: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BE:88:E8:9D:77:24:5F:73:07:71:9E:97:9F:98:FD:2C:2C:8E:DD X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:3d:16:19:09:5e:8f:05:83:6d:11:8c:85:e8:42:50:09:34: 2f:dc:ca:78:78:67:eb:f9:3b:e0:3b:16:12:a0:3e:1f:95:e6: 83:71:81:04:93:b2:bc:76:5c:ed:6e:ea:57:7d:88:15:a5:8e: ff:24:e6:15:dd:28:ac:11:07:ce:c4:13:ba:6c:c2:79:49:73: b1:66:83:c2:fc:af:90:6b:65:50:dc:cc:8b:93:28:ca:aa:fa: 6d:e1:ab:0e:9e:30:2d:36:1c:00:9f:b7:3a:c3:8b:bc:63:45: cd:cd:f7:45:dc:86:d8:b1:30:b6:c1:aa:2b:9d:6c:79:70:58: fd:e5:e8:b8:41:05:07:95:99:f9:63:12:06:19:17:ce:11:fe: 29:b8:d1:74:4f:70:b9:55:71:19:cb:c5:df:44:3d:33:e8:a8: ef:ff:3f:f2:78:3f:86:f7:d1:90:04:7b:8b:f2:86:d7:ce:af: 07:39:fa:3d:1b:5a:fd:f3:35:f9:65:40:c0:3a:2f:34:f2:2c: ae:59:10:60:ae:20:bb:6c:3b:42:98:56:95:25:82:10:47:60: 39:a2:19:40:6f:46:f7:2b:ca:ed:76:34:81:54:fc:90:90:39: 7d:6e:72:dd:3e:22:e6:06:6c:73:26:87:13:ef:2b:00:94:1f: c3:af:af:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZafB93LTv3bng/apm7NBcUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUwNTA1MDYwMDE0WhcNMjUwNTA2MDYwMDE0WjAzMTEwLwYDVQQD EyhhMmJlODhlODlkNzcyNDVmNzMwNzcxOWU5NzlmOThmZDJjMmM4ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqByUqyUSU4evWCnhVglzY0EqeMFo 4IEGeJFkWfDB/E7f2UhrKL3D4br4WqTo5n9fqoBxy5oJAQnuImv7lJVFNvS4QYdf 339g6NMYJQ+bTaQX8rPkZ7DEppvw4hS5e+1VcVRrfBEUB26wzbk26DBFNGsm+XoE IzGUfaXpK+CvSrz/U5OzHCrni51dWwRBOJWYlZsUvQ8N3+OGZnc7wjL4rcdjR7j0 Zs/WaiU4Tun8BQ5kFZFWq6ftbp9wwJHvhrtNtEMJfYwA/eLSRpcPAl++5GVRqx8K WvLt+zF8cQATdOaKXYZAcvprzA4NUpfZRJxa1BKqV+AdC9BbBqQsm48PAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKK+iOiddyRfcwdxnpefmP0sLI7dMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0D0WGQle jwWDbRGMhehCUAk0L9zKeHhn6/k74DsWEqA+H5Xmg3GBBJOyvHZc7W7qV32IFaWO /yTmFd0orBEHzsQTumzCeUlzsWaDwvyvkGtlUNzMi5Moyqr6beGrDp4wLTYcAJ+3 OsOLvGNFzc33RdyG2LEwtsGqK51seXBY/eXouEEFB5WZ+WMSBhkXzhH+KbjRdE9w uVVxGcvF30Q9M+io7/8/8ng/hvfRkAR7i/KG186vBzn6PRta/fM1+WVAwDovNPIs rlkQYK4gu2w7QphWlSWCEEdgOaIZQG9G9yvK7XY0gVT8kJA5fW5y3T4i5gZscyaH E+8rAJQfw6+vHQ== -----END CERTIFICATE-----Generated at Mon May 5 08:51:11 2025 by rpki-client