$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: e9hb2kkR7oamdsFjY3epWW1ynTg4w0bGEkXJUSD+K94= Subject key identifier: 2A:CB:F8:AC:E5:2A:A7:67:E2:0D:7F:C6:B2:C6:51:E6:F0:06:B9:DA Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 0197B96B2B1881825954788E6A834D9E48E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0720 Signing time: Sun 29 Jun 2025 02:01:37 +0000 Manifest this update: Sun 29 Jun 2025 02:01:37 +0000 Manifest next update: Mon 30 Jun 2025 02:01:37 +0000 Files and hashes: 1: 1MaQ3UERADg_6Qg7JL_rTSZtSHY.roa (hash: +cHQwaDCYvHww4iP38T2uoBP4/k9EvIeJ4TrlPbtqZk=) 2: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (hash: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: X51AXgb2KS_bSKaoVTEwZQCDbaI.roa (hash: dIVfAdtliR/rqqT9oOdAdBHVSJ2XfcVzKxtq7Q6eHNg=) 6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 7: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 8: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: AaRl5GoiusSsjMsRAYU78xdY6yhgL7iERLHZnzhXERw=) 9: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 10: whkGOZP4Q7wa7J5dbmXu5vPM1v0.roa (hash: 4Aaj5rdkc2lbz/0Cfp212ny3pIPA+JJbd5a/bPZM33w=) 11: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 12: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:6b:2b:18:81:82:59:54:78:8e:6a:83:4d:9e:48:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jun 29 02:01:37 2025 GMT Not After : Jun 30 02:01:37 2025 GMT Subject: CN=2acbf8ace52aa767e20d7fc6b2c651e6f006b9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:0c:d3:f5:92:22:cf:b0:d2:e8:9c:48:92: 1a:3d:e8:a0:ef:4f:0c:7c:b6:b9:f1:80:c1:8d:85: 85:46:00:52:b9:f8:5d:ee:34:50:00:ca:ce:cc:6f: a1:95:67:11:38:47:41:5f:13:c9:c3:ca:e8:58:7b: 93:34:cd:8a:46:1a:ef:a8:10:e7:cc:fd:dc:78:0c: 0f:d5:89:6b:ab:ed:d2:e2:0e:8b:57:12:ac:62:57: 13:75:82:e7:e3:79:f3:78:e3:af:8f:c1:d4:f7:b7: d6:12:13:c9:04:6c:e4:0d:5d:ac:44:c3:d7:92:91: 80:1f:ed:b9:8e:8e:66:84:b3:b3:10:24:77:b2:e6: e9:e2:49:a7:90:04:f3:27:3c:d6:73:5c:2f:57:5e: 88:cb:f0:e9:79:2b:ec:5f:76:55:18:93:27:60:d4: dc:5b:20:7a:99:ae:17:17:8c:a9:30:77:54:b9:97: ed:a6:ed:af:ef:b5:39:05:03:41:ad:81:8c:9f:00: 91:ff:ee:85:b6:0e:23:f9:bc:4e:64:e7:20:c8:47: 01:b1:ca:12:2b:a9:a8:58:17:d0:08:3c:0a:c6:37: 47:b0:e8:0c:bb:6a:58:2b:a4:41:78:61:30:22:0b: 0a:2e:db:29:77:86:77:37:ca:6b:f0:65:ae:99:2d: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:F8:AC:E5:2A:A7:67:E2:0D:7F:C6:B2:C6:51:E6:F0:06:B9:DA X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:37:86:0b:5a:ca:0d:d7:04:09:04:d0:da:a4:35:d6:01:25: 53:da:af:c9:2d:a7:25:d1:dd:ed:4d:ba:05:d6:c3:40:07:82: dc:21:31:a0:ea:7a:58:0d:24:46:ed:1e:29:8b:04:dd:cc:da: 0f:57:b9:f8:04:c6:75:5e:5f:81:d5:d9:bc:1a:5c:34:b8:0b: a3:a7:c6:2e:4d:e0:1b:42:f8:65:2f:3a:73:2e:95:49:2d:2b: 2e:87:e1:e2:89:3d:9d:e5:e9:ae:99:63:c7:f5:06:e4:cc:73: 2d:01:50:ae:82:4e:72:1d:42:f5:ed:85:b5:25:75:f0:0d:d3: 5f:da:69:fe:7b:a5:98:0e:33:f2:ae:38:d2:1e:aa:25:b2:e3: ee:b0:e6:ae:74:d0:8b:2e:02:21:0e:6e:df:16:19:35:e7:aa: fb:72:fa:d4:56:77:ed:0a:25:d0:55:0d:c0:f8:2a:e4:5b:59: 6e:02:0f:0b:f7:4c:5d:65:9a:6e:e1:86:e1:c7:38:a9:a3:c8: 9c:4b:93:46:4d:a4:34:75:06:a4:52:5a:70:f6:5c:59:11:92: 79:32:79:ed:75:53:5d:16:35:11:d9:bc:ef:c4:65:6f:b5:58: 37:4b:da:63:fe:1f:f4:36:25:4a:f3:9f:8a:71:1d:f1:2e:26: b6:fd:0c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe5aysYgYJZVHiOaoNNnkjoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUwNjI5MDIwMTM3WhcNMjUwNjMwMDIwMTM3WjAzMTEwLwYDVQQD EygyYWNiZjhhY2U1MmFhNzY3ZTIwZDdmYzZiMmM2NTFlNmYwMDZiOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28sM0/WSIs+w0uicSJIaPeig708M fLa58YDBjYWFRgBSufhd7jRQAMrOzG+hlWcROEdBXxPJw8roWHuTNM2KRhrvqBDn zP3ceAwP1Ylrq+3S4g6LVxKsYlcTdYLn43nzeOOvj8HU97fWEhPJBGzkDV2sRMPX kpGAH+25jo5mhLOzECR3subp4kmnkATzJzzWc1wvV16Iy/DpeSvsX3ZVGJMnYNTc WyB6ma4XF4ypMHdUuZftpu2v77U5BQNBrYGMnwCR/+6Ftg4j+bxOZOcgyEcBscoS K6moWBfQCDwKxjdHsOgMu2pYK6RBeGEwIgsKLtspd4Z3N8pr8GWumS3kUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrL+KzlKqdn4g1/xrLGUebwBrnaMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzeGC1rK DdcECQTQ2qQ11gElU9qvyS2nJdHd7U26BdbDQAeC3CExoOp6WA0kRu0eKYsE3cza D1e5+ATGdV5fgdXZvBpcNLgLo6fGLk3gG0L4ZS86cy6VSS0rLofh4ok9neXprplj x/UG5MxzLQFQroJOch1C9e2FtSV18A3TX9pp/nulmA4z8q440h6qJbLj7rDmrnTQ iy4CIQ5u3xYZNeeq+3L61FZ37Qol0FUNwPgq5FtZbgIPC/dMXWWabuGG4cc4qaPI nEuTRk2kNHUGpFJacPZcWRGSeTJ57XVTXRY1Edm878Rlb7VYN0vaY/4f9DYlSvOf inEd8S4mtv0MTw== -----END CERTIFICATE-----Generated at Sun Jun 29 04:40:49 2025 by rpki-client