$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft File: L6FqsGAgBndApMH7R6kSYi8dByI.mft (raw, json) Hash identifier: Rn09zB0Jh+cIHOH+p+o9/+XVsd+paY09grn4vZIe3E4= Subject key identifier: 28:05:96:C5:A3:8C:E7:D0:09:60:65:52:84:6C:75:FB:86:34:05:D3 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 0197B7B2F730FA50D6C571088714BD595E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft Manifest number: 1608 Signing time: Sat 28 Jun 2025 18:00:48 +0000 Manifest this update: Sat 28 Jun 2025 18:00:48 +0000 Manifest next update: Sun 29 Jun 2025 18:00:48 +0000 Files and hashes: 1: 02fWEW39DtOipFMD6ASDF08vEEo.roa (hash: 1pcwpV4dprUlTN0j3595RWhsxMg7qArA3wLzpHqEd1w=) 2: 3p0j32cYUOCnf_3ix5oMK3cKjZU.roa (hash: B5xTeALfTdQDGuz03rj872RqicG0ddnazQY9+v5kIg4=) 3: 4h6absYAiPsG0J40W2uzNiAQhgA.roa (hash: E2ubw8eCgRSEOdzjW9WhX5Of3RKTeNKXE5572xvYBTE=) 4: Ca2-ogSZC5B8tEEmtw5KxAEhJPM.roa (hash: 9b2u0lDf0ZcTigZmXHynF17wPQBPLYhpE0B4WDhTJ3Y=) 5: IO-WtDQojrXnpAq8np1ov8CUCWc.roa (hash: wK5cAChC2zZKj0xpr4U4SsnHLvY+XqHr++A5Z8gxuX0=) 6: ITMu_9G0gZ7hDjqWsuWYXnKA06k.roa (hash: EJ6xKkVoas6urLwLSHL1qGXfG7nshMzfhgWsYNbJ5+c=) 7: L6FqsGAgBndApMH7R6kSYi8dByI.crl (hash: a0kmOUuPgsmMFKAkFoJ71S+1sWvgtm01GFlY6sKlFUE=) 8: NFmYzWkBl0tEXVCAjimOMbeZ05w.roa (hash: R5QkYmdUiNUTOAH1jI8sgRxo6knT03efS63N6kTFh/U=) 9: ODbto6bcK8aNz52zo3gSzY9ABBA.roa (hash: RO2Q1L8IuswwbS9beUyqLvb6YUHXrI5sMJQ94ealYrM=) 10: PAiV7wwH5lDn0JNrrWRqQNYoPCA.roa (hash: U/HM2vtQqlyAA5VvXddzuybceKGB/8tIXNAeUOLwY20=) 11: STYQ_SYXh2dq-C7xVZvQixI1Nko.roa (hash: vSZ2A0exPiZDNAtn0sk9ZHsG3cp+DcfIT5Z7upIIwZ4=) 12: YM3gYtjsCSk6V1--bovb_wYt7qI.roa (hash: HYnXH43Els8xcyz2VLZSSOsrk9jNKw0kKYdJbAGPWYk=) 13: aqmkhJlTlqxL9qQ_4a7JuspIios.roa (hash: fNPDsnQHTC9xg63koJtaKMKA62LHo0SqQzdTvfn/WNI=) 14: fLg2SaMIQSlzSFYFGBORzBovTYk.roa (hash: rlIWoEzmASI5VouJUKPcFn3tqT/IQL88vIzCEpCaf9k=) 15: fkzxhNwpXM5jeuEJssvVXsdwixg.roa (hash: 0lAziCTuzAq2pp7jVp0iOpELYiMBg6nHcEbSbhOqWGs=) 16: gUT9YCkZWEcn742oGnu8ZfS34D8.roa (hash: AXHT/3cUQ+5r0lFJfezYLrNvbhUISwKUaKImq/bolQk=) 17: hxa6nxs_1z_VP7Dm_9A_jg_pRGc.roa (hash: /c24+EOtA2JGS+IHqjFa+CtjAJ+hAzZO9n24HxrhDss=) 18: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (hash: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=) 19: mxKqNAM863ITChJLjCi-JHUSkWw.roa (hash: dI+6FWK1t3x8Piw/q1k50w2Q/hiRygsH9DYBFb0RVSE=) 20: pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa (hash: 1CC5QDG9ExxRePRPfGaAzhbKQ4GWSPEJPxG3XPFJoGQ=) 21: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (hash: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=) 22: x58nBW842pZhjhJLCJx9GkCSrU4.roa (hash: yI29HuKDYhaUmkGPwd2s/nIFspAoGLTPT9OHHAMuvaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b2:f7:30:fa:50:d6:c5:71:08:87:14:bd:59:5e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jun 28 18:00:48 2025 GMT Not After : Jun 29 18:00:48 2025 GMT Subject: CN=280596c5a38ce7d009606552846c75fb863405d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:7e:29:5a:99:55:15:c5:b3:8d:6e:77:e9: ad:df:ea:ad:f7:45:e5:c7:97:7e:fe:0a:fe:e4:9c: 3c:d5:7c:3e:88:95:97:f3:0c:ad:fc:d3:27:88:88: 9e:f9:c4:06:2e:2a:2a:c7:c5:1c:85:7e:29:41:cc: e1:a4:94:86:14:fc:4a:ec:39:ac:f0:09:35:d3:3d: b8:5f:d0:f2:56:a6:37:d1:65:9c:10:44:4f:bb:60: 2c:02:54:20:21:dd:fa:0b:a1:b2:58:f1:f9:e6:c5: f2:a3:52:4e:ad:38:87:ec:ec:90:46:7b:d0:1b:33: 88:65:10:db:71:75:8d:ba:9f:7b:51:29:29:ed:c1: f9:52:35:7a:b4:7a:f2:9f:e6:99:14:fe:ef:4d:c8: 49:6c:f6:92:00:c2:2e:ba:3a:6c:aa:8a:7a:82:84: 57:e8:e2:4a:2b:11:91:88:c5:e0:a8:2a:29:af:f9: 78:d3:2f:55:98:64:2d:ee:9a:53:7a:66:d5:3a:b1: 6d:69:fe:f5:69:27:ae:bf:f5:c2:20:73:6e:4f:e3: 45:dd:df:fe:0c:7e:a7:44:b8:cf:d6:8d:2a:fb:b9: ec:a5:b4:a3:b9:07:b6:ed:7f:52:2f:21:7a:5f:99: 45:3a:3f:ed:69:d9:c5:cb:7f:a4:d3:69:47:11:d1: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:96:C5:A3:8C:E7:D0:09:60:65:52:84:6C:75:FB:86:34:05:D3 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:cd:96:e3:41:78:42:dd:b5:f6:fe:34:c4:a3:b0:2d:42:27: d1:81:51:be:16:98:46:3f:6d:46:f8:de:04:00:bd:38:5c:00: a3:92:7a:9d:53:9b:74:f0:9e:95:76:91:6c:9d:0d:0b:43:09: 83:90:25:83:5a:8e:e2:0f:8f:7a:c5:34:d2:fe:b9:21:3b:bd: 84:a8:9e:71:6f:1e:18:27:73:f4:36:be:e2:6a:03:fc:ff:65: 61:a4:7d:a9:7d:db:1d:a0:57:96:73:bb:99:8d:27:2b:e2:5a: 8d:ab:a4:ea:80:51:63:6a:74:66:88:8b:88:bf:78:88:9c:83: ee:9a:48:08:03:c2:17:c4:37:95:37:fa:ec:7e:e3:6e:67:6d: 3e:10:5d:89:09:a0:ed:4c:0f:e7:9c:70:e9:bb:c4:56:05:47: 1b:b9:55:d7:6c:89:07:a2:4b:08:22:e1:a6:67:62:ae:b0:b7: 81:af:8d:d4:14:ab:38:c1:f5:03:6c:8d:a6:91:5f:47:91:47: de:59:2d:f8:36:db:28:42:8f:17:5c:68:a2:e8:d9:e9:fd:0d: 1c:82:55:ac:3c:16:17:99:4d:2e:20:47:69:4f:72:34:56:91: 08:f9:a2:68:8b:07:66:9b:75:07:20:26:5d:de:8a:7b:b0:d6: 64:3f:e8:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3svcw+lDWxXEIhxS9WV4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjUwNjI4MTgwMDQ4WhcNMjUwNjI5MTgwMDQ4WjAzMTEwLwYDVQQD EygyODA1OTZjNWEzOGNlN2QwMDk2MDY1NTI4NDZjNzVmYjg2MzQwNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt75+KVqZVRXFs41ud+mt3+qt90Xl x5d+/gr+5Jw81Xw+iJWX8wyt/NMniIie+cQGLioqx8UchX4pQczhpJSGFPxK7Dms 8Ak10z24X9DyVqY30WWcEERPu2AsAlQgId36C6GyWPH55sXyo1JOrTiH7OyQRnvQ GzOIZRDbcXWNup97USkp7cH5UjV6tHryn+aZFP7vTchJbPaSAMIuujpsqop6goRX 6OJKKxGRiMXgqCopr/l40y9VmGQt7ppTembVOrFtaf71aSeuv/XCIHNuT+NF3d/+ DH6nRLjP1o0q+7nspbSjuQe27X9SLyF6X5lFOj/tadnFy3+k02lHEdGjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgFlsWjjOfQCWBlUoRsdfuGNAXTMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAic2W40F4 Qt219v40xKOwLUIn0YFRvhaYRj9tRvjeBAC9OFwAo5J6nVObdPCelXaRbJ0NC0MJ g5Alg1qO4g+PesU00v65ITu9hKiecW8eGCdz9Da+4moD/P9lYaR9qX3bHaBXlnO7 mY0nK+Jajauk6oBRY2p0ZoiLiL94iJyD7ppICAPCF8Q3lTf67H7jbmdtPhBdiQmg 7UwP55xw6bvEVgVHG7lV12yJB6JLCCLhpmdirrC3ga+N1BSrOMH1A2yNppFfR5FH 3lkt+DbbKEKPF1xooujZ6f0NHIJVrDwWF5lNLiBHaU9yNFaRCPmiaIsHZpt1ByAm Xd6Ke7DWZD/oeQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:55:46 2025 by rpki-client