$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: C9RYxUHzf4oTSv06dsRuM0zH/03fQpn/DSWMGSCZOkU= Subject key identifier: CF:93:FC:09:66:89:3D:3D:1D:CD:0F:00:3B:30:D4:E0:5F:9D:E3:77 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 0196B823A0B777848CBBC301297B93606501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 069A Signing time: Sat 10 May 2025 03:01:04 +0000 Manifest this update: Sat 10 May 2025 03:01:04 +0000 Manifest next update: Sun 11 May 2025 03:01:04 +0000 Files and hashes: 1: 1MaQ3UERADg_6Qg7JL_rTSZtSHY.roa (hash: +cHQwaDCYvHww4iP38T2uoBP4/k9EvIeJ4TrlPbtqZk=) 2: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=) 3: HZRJn6Tle2sGNVjuC1VDO76X76Q.roa (hash: fXSmWLniv8nFMnfUppgyxtui2MfIKvJerwegHQDXicI=) 4: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 5: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 6: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=) 7: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: 8TNGXfp8xSrLHBQa2bLazxBHeV+YGTxcuBNjBBtuvqA=) 10: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 11: whkGOZP4Q7wa7J5dbmXu5vPM1v0.roa (hash: 4Aaj5rdkc2lbz/0Cfp212ny3pIPA+JJbd5a/bPZM33w=) 12: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:23:a0:b7:77:84:8c:bb:c3:01:29:7b:93:60:65:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: May 10 03:01:04 2025 GMT Not After : May 11 03:01:04 2025 GMT Subject: CN=cf93fc0966893d3d1dcd0f003b30d4e05f9de377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:88:a1:5f:dd:89:e7:43:f7:00:3f:b6:7b: bd:2c:bb:b6:5f:77:85:fa:b4:1f:10:6d:53:a8:22: f0:1b:9f:84:1d:26:d1:d1:d5:9a:be:85:f5:7e:cc: 94:f7:ea:0d:12:44:94:c7:84:a5:d7:2b:81:39:d0: b9:a0:4b:ac:18:4e:ff:44:22:24:22:4c:b1:8d:75: 5a:df:ac:a9:08:ee:54:8f:73:1f:9d:e2:2b:f5:38: 7f:ab:23:98:95:1a:73:55:8f:94:0a:15:51:f7:ce: 1c:01:3c:e1:dc:ed:da:2e:4b:c4:11:9d:9d:3e:95: 4b:1e:3d:7f:c0:ea:5c:4f:bb:b1:82:1e:bd:c7:ca: 1a:ef:e2:24:3d:2b:c7:0e:9f:34:4c:93:bc:3e:14: 72:f3:37:d1:34:2d:69:89:49:0a:54:c8:23:10:49: d2:2f:c8:2e:3a:f5:2e:b6:26:f1:a2:09:42:cb:2a: fa:bb:cf:08:a5:c6:83:24:9d:da:50:14:a3:24:a8: d4:47:8a:fe:63:ff:8e:e1:ba:e9:0a:82:6c:7e:8c: c5:e5:ef:db:8e:1c:90:0c:6c:9a:85:ac:7b:dd:e3: 67:aa:05:09:15:2c:6f:67:14:81:e9:ea:f4:6d:76: a4:59:cc:ab:cb:b3:06:64:e4:56:1a:26:7c:b1:a7: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:93:FC:09:66:89:3D:3D:1D:CD:0F:00:3B:30:D4:E0:5F:9D:E3:77 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9d:db:c0:b0:c1:fd:c7:0e:3a:7c:44:c0:b3:41:ec:84:25: 52:20:28:ba:fc:3c:7f:e9:55:d9:95:b7:72:12:7d:57:63:19: a1:d1:c1:98:25:39:5e:41:b5:58:14:9d:f5:08:df:7c:4c:91: a6:09:03:c4:eb:7b:65:2f:7f:cf:24:62:1f:52:17:29:4b:94: 79:59:5a:f7:86:bb:5c:3a:8e:ba:c0:40:77:57:c4:12:9b:a1: 46:11:d6:c7:c1:70:88:1f:13:a9:ef:4c:f4:bb:01:bb:e1:9a: bd:ad:63:6c:8d:60:ca:5d:a1:51:86:0e:be:91:95:0a:53:c9: 26:e1:58:ee:64:93:23:82:db:5a:fe:b0:40:ab:80:60:00:20: 57:dc:51:3d:2a:b5:52:d6:d8:f2:a5:ff:ac:cc:3e:00:cf:dd: ed:03:33:18:90:be:60:83:57:33:37:74:c8:d9:c6:27:21:05: af:e6:d7:a0:4c:2a:98:99:78:b7:b4:8c:65:95:38:f7:43:78: 43:68:0f:b6:1b:5c:49:bd:32:62:54:07:95:97:b7:95:11:e3: 0e:e7:14:b9:e1:3c:96:e1:6c:4d:f2:67:ae:80:e6:e6:7f:7c: 92:6a:f7:f4:5f:ec:c6:00:f5:7d:02:72:a1:1a:2c:c3:c4:14: 28:41:0e:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4I6C3d4SMu8MBKXuTYGUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwNTEwMDMwMTA0WhcNMjUwNTExMDMwMTA0WjAzMTEwLwYDVQQD EyhjZjkzZmMwOTY2ODkzZDNkMWRjZDBmMDAzYjMwZDRlMDVmOWRlMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuKIoV/diedD9wA/tnu9LLu2X3eF +rQfEG1TqCLwG5+EHSbR0dWavoX1fsyU9+oNEkSUx4Sl1yuBOdC5oEusGE7/RCIk IkyxjXVa36ypCO5Uj3MfneIr9Th/qyOYlRpzVY+UChVR984cATzh3O3aLkvEEZ2d PpVLHj1/wOpcT7uxgh69x8oa7+IkPSvHDp80TJO8PhRy8zfRNC1piUkKVMgjEEnS L8guOvUutibxoglCyyr6u88IpcaDJJ3aUBSjJKjUR4r+Y/+O4brpCoJsfozF5e/b jhyQDGyahax73eNnqgUJFSxvZxSB6er0bXakWcyry7MGZORWGiZ8sac3YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+T/AlmiT09Hc0PADsw1OBfneN3MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJ3bwLDB /ccOOnxEwLNB7IQlUiAouvw8f+lV2ZW3chJ9V2MZodHBmCU5XkG1WBSd9QjffEyR pgkDxOt7ZS9/zyRiH1IXKUuUeVla94a7XDqOusBAd1fEEpuhRhHWx8FwiB8Tqe9M 9LsBu+Gava1jbI1gyl2hUYYOvpGVClPJJuFY7mSTI4LbWv6wQKuAYAAgV9xRPSq1 UtbY8qX/rMw+AM/d7QMzGJC+YINXMzd0yNnGJyEFr+bXoEwqmJl4t7SMZZU490N4 Q2gPthtcSb0yYlQHlZe3lRHjDucUueE8luFsTfJnroDm5n98kmr39F/sxgD1fQJy oRosw8QUKEEOZg== -----END CERTIFICATE-----Generated at Sat May 10 11:41:40 2025 by rpki-client