$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: xHtI50f8o4rR70ykueu0QanMVvJBe/lyMbNMM3cEuPo= Subject key identifier: E1:13:D8:99:7B:31:1B:A6:21:0E:72:DA:0A:48:DF:8E:29:1A:7A:52 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 0199FC21AB21B949B97F7FF789B57ADDB2C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 14AD Signing time: Sun 19 Oct 2025 11:01:28 +0000 Manifest this update: Sun 19 Oct 2025 11:01:28 +0000 Manifest next update: Mon 20 Oct 2025 11:01:28 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: MHLQU3FdAFSQAfzL08+HSkNBhT8B8+Zydn3uaiN9R5k=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 7: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: vIlo6Dk-dYUOv5-nktddKH_zbFQ.roa (hash: dU3Xza9rfoKJOlEJVf8d8iW9v0mUKy4oBSU35lnK1P4=) 11: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:ab:21:b9:49:b9:7f:7f:f7:89:b5:7a:dd:b2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Oct 19 11:01:28 2025 GMT Not After : Oct 20 11:01:28 2025 GMT Subject: CN=e113d8997b311ba6210e72da0a48df8e291a7a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ee:fb:34:9d:37:27:a5:b4:ab:ef:55:24:c7: 01:a7:10:35:fa:b2:1c:a5:63:78:6f:ed:f4:b5:71: a0:10:72:a5:7c:f4:a9:74:5a:08:78:20:54:6c:62: 12:f4:d8:d8:d3:24:a5:8f:e1:eb:68:3a:5c:72:2a: f5:95:d6:66:04:58:de:06:5e:7c:10:8d:ce:a8:80: ec:bf:a3:b2:2d:1c:6a:02:4f:f3:56:be:01:c8:43: 54:5c:36:48:a9:1f:f0:ae:ea:5b:c6:05:1a:e9:53: d5:6d:ae:a7:ed:04:d6:d8:53:90:54:85:53:5d:58: d2:0d:aa:d4:63:7c:71:6c:fa:93:9a:ec:ad:bf:ce: 38:a4:9c:7f:74:e0:38:a9:da:97:36:2a:eb:e4:02: b6:26:9c:7b:2d:40:00:45:f4:5d:48:97:fa:90:1c: e5:79:ce:ea:42:36:d2:7c:77:dd:1e:79:63:c8:6b: a4:9d:e6:3b:e9:b9:26:d8:54:f5:b9:5b:a5:79:e9: 4c:6a:cb:64:a7:e7:1f:b5:94:6c:04:ea:97:d8:85: 1c:02:5c:f8:55:a3:d4:1d:2c:66:f6:de:34:9d:d5: 6b:43:cb:6f:bf:98:1c:ec:b9:e4:0b:0d:60:e0:22: 3c:89:3a:37:93:7f:fb:83:30:1e:b9:dc:b0:d7:56: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:13:D8:99:7B:31:1B:A6:21:0E:72:DA:0A:48:DF:8E:29:1A:7A:52 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ab:b6:ae:6b:4e:1b:59:3d:d1:7c:1c:d9:ee:f7:c5:e5:4c: 14:00:9a:bf:b8:d0:83:25:24:98:b4:09:de:ce:5c:c5:85:b4: 43:50:86:8f:8c:82:ae:f9:6d:7a:61:c8:53:fb:86:10:38:c7: 7d:58:4f:db:4d:84:b3:92:6b:e7:ea:a3:20:06:1a:51:97:34: 47:48:20:50:6d:0d:c9:a8:55:7e:e0:1f:55:9f:75:d0:78:c0: a4:0d:76:a1:7c:06:ed:83:48:0d:b2:ad:c8:70:2e:62:9e:b0: c5:0d:c0:b7:4d:4a:17:a8:c4:1d:cd:a4:2d:d7:71:a3:7f:5e: 30:24:11:a8:25:db:ca:e5:9e:02:9f:5c:58:55:24:a1:fe:7d: 21:f1:de:1c:a9:cf:6c:ed:4f:f2:20:43:c8:b9:2d:d1:ca:d7: 73:b1:ac:50:ce:f9:0c:32:77:18:dd:49:6e:8e:ff:1a:45:95: a3:73:7b:8b:a7:b1:4e:05:8b:d2:c6:d1:59:ba:a5:ce:53:d0: 40:fc:d9:bd:d6:9a:fa:7e:66:44:28:4b:9d:fc:2c:e4:9b:05: 9c:81:f1:7d:db:95:f1:5e:d0:24:53:03:e5:d4:82:04:64:cc: 4f:8b:92:f3:83:77:53:c3:62:53:db:91:7d:d1:9e:e9:7b:ef: fa:17:bc:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IashuUm5f3/3ibV63bLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUxMDE5MTEwMTI4WhcNMjUxMDIwMTEwMTI4WjAzMTEwLwYDVQQD EyhlMTEzZDg5OTdiMzExYmE2MjEwZTcyZGEwYTQ4ZGY4ZTI5MWE3YTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O77NJ03J6W0q+9VJMcBpxA1+rIc pWN4b+30tXGgEHKlfPSpdFoIeCBUbGIS9NjY0ySlj+HraDpccir1ldZmBFjeBl58 EI3OqIDsv6OyLRxqAk/zVr4ByENUXDZIqR/wrupbxgUa6VPVba6n7QTW2FOQVIVT XVjSDarUY3xxbPqTmuytv844pJx/dOA4qdqXNirr5AK2Jpx7LUAARfRdSJf6kBzl ec7qQjbSfHfdHnljyGukneY76bkm2FT1uVuleelMastkp+cftZRsBOqX2IUcAlz4 VaPUHSxm9t40ndVrQ8tvv5gc7LnkCw1g4CI8iTo3k3/7gzAeudyw11aodQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOET2Jl7MRumIQ5y2gpI344pGnpSMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATau2rmtO G1k90Xwc2e73xeVMFACav7jQgyUkmLQJ3s5cxYW0Q1CGj4yCrvltemHIU/uGEDjH fVhP202Es5Jr5+qjIAYaUZc0R0ggUG0NyahVfuAfVZ910HjApA12oXwG7YNIDbKt yHAuYp6wxQ3At01KF6jEHc2kLddxo39eMCQRqCXbyuWeAp9cWFUkof59IfHeHKnP bO1P8iBDyLkt0crXc7GsUM75DDJ3GN1Jbo7/GkWVo3N7i6exTgWL0sbRWbqlzlPQ QPzZvdaa+n5mRChLnfws5JsFnIHxfduV8V7QJFMD5dSCBGTMT4uS84N3U8NiU9uR fdGe6Xvv+he8QQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:10:31 2025 by rpki-client