$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: g+vBl0P6veCNY4WKboP5Hk7V6WPx9rsCyMheksEXssw= Subject key identifier: 89:C4:D4:92:EE:C2:DF:84:74:33:EB:E8:D6:AE:91:DB:59:AE:84:AF Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 0198D439AC7A776683B315BE2AEB2B8F2433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 07B8 Signing time: Sat 23 Aug 2025 00:00:06 +0000 Manifest this update: Sat 23 Aug 2025 00:00:06 +0000 Manifest next update: Sun 24 Aug 2025 00:00:06 +0000 Files and hashes: 1: 1-UVj7ag_d9orF_0zVzG07Lxl5mQ.roa (hash: SkCOrOVawqubIGJ5nSRzyPM3ZK7PA9iP1A0fEWvNw7w=) 2: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 3: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 4: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=) 5: ZUCSxG1Mf3vh6H-OdsaFlysq2PI.roa (hash: fnkgnNhLxDo5d76SFWWtb+XXfJOw/8ACHDWRYq3npqo=) 6: _YY0UJCJbQTIa1XDSLBMiZ983vo.roa (hash: Gk8qdq6LrPLlWU/Jmg7W6QhRrabuxZ2rc8Fg/yM8yME=) 7: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: iZnCkTImCvQJuWE6Uos60nsBeAc.roa (hash: A+XXsOgpp9E8wrC4jlevUH3rfTq9qVISkfFyAQgNpWw=) 10: jgSrNBRl0O58OF2uJ1T4Vq5j9mc.roa (hash: O5nsMxX+wHNr1n7zDqUhnxSWx/mpO17MWYa1hHPwxzM=) 11: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: 6Uu8EJnleRfSloyI6uAwVnv1MpUojEaJdS+rQb+KSdg=) 12: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 13: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 14: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:39:ac:7a:77:66:83:b3:15:be:2a:eb:2b:8f:24:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Aug 23 00:00:06 2025 GMT Not After : Aug 24 00:00:06 2025 GMT Subject: CN=89c4d492eec2df847433ebe8d6ae91db59ae84af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:6a:93:f6:3e:8a:36:79:7a:a8:cc:b9:46: 8b:08:b3:d8:f3:92:00:85:40:fd:74:09:8e:ca:8a: 0a:d8:f0:bd:61:0c:89:14:bb:79:41:9f:7c:9a:c7: 00:25:62:95:4c:88:cc:87:e0:9f:82:ff:48:89:8d: 7f:b7:27:59:e2:58:08:39:19:59:f1:47:8d:84:a4: 91:79:e8:63:d4:de:14:63:6c:36:fc:2e:7c:98:f0: de:32:8a:57:64:e7:38:0b:5b:cc:99:9b:31:0f:af: c5:ff:45:09:e7:36:ed:11:12:72:61:fd:bb:17:d8: 0a:86:cd:f3:64:74:af:cb:bc:f2:e4:9c:d6:ae:cc: 58:0e:01:b9:e9:b9:9c:7b:75:95:a4:53:89:f0:e0: 45:8e:5e:c5:f3:cd:33:fe:ec:ed:f6:b6:32:2f:9a: 8c:e9:f8:19:6f:bc:bd:eb:cb:1c:e0:be:04:8d:5c: 55:0e:18:8e:18:b2:ed:21:65:1d:fe:48:bf:ce:c9: 6b:4f:b0:92:05:b3:c6:02:66:1a:5e:98:a3:b0:7f: cc:d1:57:fa:70:44:87:b2:1e:99:48:c9:b0:ff:b7: a9:79:7b:6e:b9:d2:61:fa:e7:a0:6c:b4:47:e4:b1: 42:b2:2c:9e:5c:bd:14:49:ea:53:a6:d7:61:f7:28: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C4:D4:92:EE:C2:DF:84:74:33:EB:E8:D6:AE:91:DB:59:AE:84:AF X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f3:6d:b9:6c:82:51:3f:e0:cc:2b:37:8f:23:35:2f:a2:d9: b3:87:29:22:65:e1:53:ac:f1:23:b2:63:92:75:6b:57:20:59: ee:0a:2c:28:be:35:b9:dc:bc:07:72:83:9c:24:a9:41:d5:9b: 39:43:f5:5a:aa:ad:16:28:6c:a4:e4:b8:d3:00:a5:38:62:27: b9:d8:65:d6:f5:8e:a8:86:93:15:80:38:2a:f5:46:72:9f:6e: 4a:b3:4f:7d:b3:de:dd:e9:7f:1f:31:b0:23:bd:0f:05:31:e1: 02:58:db:3b:3a:4a:db:b7:58:a4:28:e6:59:74:45:12:05:37: bf:58:5c:6b:6b:d9:73:f1:c2:bd:b4:ef:59:31:c7:1a:79:06: 11:e4:c6:84:68:96:a6:3e:79:e6:31:c5:74:35:b9:ad:4d:6c: 4d:df:82:cc:4f:3d:a4:10:dd:66:90:3c:f5:83:3c:e6:de:53: ab:1e:f9:7f:53:03:1c:7e:89:ac:22:9e:32:5e:b6:8c:5d:03: f4:2b:d3:32:1e:06:1a:d9:d5:c3:8a:9b:5e:49:1e:cb:da:03: 3d:72:0c:a0:ae:8c:19:df:f1:a5:7d:05:59:ea:91:ed:05:83: 68:34:7d:ec:c4:b8:e2:7c:43:f1:a7:a8:9f:67:74:8e:67:59: 46:12:be:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUOax6d2aDsxW+KusrjyQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwODIzMDAwMDA2WhcNMjUwODI0MDAwMDA2WjAzMTEwLwYDVQQD Eyg4OWM0ZDQ5MmVlYzJkZjg0NzQzM2ViZThkNmFlOTFkYjU5YWU4NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTRqk/Y+ijZ5eqjMuUaLCLPY85IA hUD9dAmOyooK2PC9YQyJFLt5QZ98mscAJWKVTIjMh+Cfgv9IiY1/tydZ4lgIORlZ 8UeNhKSReehj1N4UY2w2/C58mPDeMopXZOc4C1vMmZsxD6/F/0UJ5zbtERJyYf27 F9gKhs3zZHSvy7zy5JzWrsxYDgG56bmce3WVpFOJ8OBFjl7F880z/uzt9rYyL5qM 6fgZb7y968sc4L4EjVxVDhiOGLLtIWUd/ki/zslrT7CSBbPGAmYaXpijsH/M0Vf6 cESHsh6ZSMmw/7epeXtuudJh+uegbLRH5LFCsiyeXL0USepTptdh9yjpAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInE1JLuwt+EdDPr6NaukdtZroSvMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/NtuWyC UT/gzCs3jyM1L6LZs4cpImXhU6zxI7JjknVrVyBZ7gosKL41udy8B3KDnCSpQdWb OUP1WqqtFihspOS40wClOGInudhl1vWOqIaTFYA4KvVGcp9uSrNPfbPe3el/HzGw I70PBTHhAljbOzpK27dYpCjmWXRFEgU3v1hca2vZc/HCvbTvWTHHGnkGEeTGhGiW pj555jHFdDW5rU1sTd+CzE89pBDdZpA89YM85t5Tqx75f1MDHH6JrCKeMl62jF0D 9CvTMh4GGtnVw4qbXkkey9oDPXIMoK6MGd/xpX0FWeqR7QWDaDR97MS44nxD8aeo n2d0jmdZRhK+UQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:49 2025 by rpki-client