$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: bk2hNr3KdaeA5YWI263i+RZ0SZxSasFEQ+Y6+4fNhoI= Subject key identifier: DA:11:14:F2:88:79:49:A7:4F:53:95:19:5B:14:F2:82:DD:05:F9:DE Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 0199FCC69C695F18907345AA606AE6439914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 07C9 Signing time: Sun 19 Oct 2025 14:01:38 +0000 Manifest this update: Sun 19 Oct 2025 14:01:38 +0000 Manifest next update: Mon 20 Oct 2025 14:01:38 +0000 Files and hashes: 1: 10YxumJfCgMbEFFhgimNAitIXbo.roa (hash: v3bYOpwG4V7mwXqa0+rkwNDr8sO1z2gnt3eo4dKc+lg=) 2: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=) 3: B9i3RiZuSYGN1RhgDnM-0Eme8tg.roa (hash: LBtiQvM+v9zo/IiLv5JEHtXJuteP7xqw+3W3lEbcXeU=) 4: NjwQaw6cGSA62FEIMXZVEfnmYHA.roa (hash: VdZC8D9z93aWtA1IVYybwBtyAxHN+u20jiFNcSx/n9g=) 5: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=) 6: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=) 7: __x5Ic-9bwQ1SbZ8epBuTBTo8j4.roa (hash: f7wZGJuveG3jCNyR/mvzX8qDCmg/cdnCEqkzqJwo/p4=) 8: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=) 9: ckN51ugpQaovcqL7-uk8cWmLqXg.roa (hash: AbepzMs/Oj4qVnFocQGvyMM251EH9U8v0u27S4AwMCM=) 10: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=) 11: fwGEa1qMKzWIxGZ5Rx3BvoG9LN4.roa (hash: 9w2zj4YTOzCrlR2dMoFL7n6g98Fr8mnP5vI4EHJkpEQ=) 12: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=) 13: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=) 14: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: FjCRi40dSyeSLthbaHtSC+td5NcBKmSc3SFMkEGEs/k=) 15: lhSh68FljrO7wEKZo-qXGTfhzlE.roa (hash: I914mCRjyHYm2Pwd9b34kWk8XH3x42fFqaYwN5Q9h50=) 16: smF0R1R_A0zx4qeKi8ts1NVojqE.roa (hash: j+uf9Z2ujmHk6U0a8V2BdNuYKUEO2994xBDSPO5pRSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 14:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:9c:69:5f:18:90:73:45:aa:60:6a:e6:43:99:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Oct 19 14:01:38 2025 GMT Not After : Oct 20 14:01:38 2025 GMT Subject: CN=da1114f2887949a74f5395195b14f282dd05f9de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:5c:8e:b4:e3:7b:7d:c1:d0:a5:c2:b4:cb: de:1b:f7:4e:ec:cd:3d:51:1c:9a:51:93:f4:29:44: 46:e2:fd:b9:72:81:7b:07:09:45:42:bc:08:5a:56: 37:8d:44:a6:f1:79:23:79:b1:08:ae:57:14:23:1c: a0:d7:bd:18:89:5e:a0:27:05:29:84:46:64:49:97: a5:27:c2:b8:9b:a5:a5:22:b1:f0:d7:c5:8c:81:ad: 3f:42:ed:12:7c:4a:0d:98:7b:58:2f:44:55:58:b6: 78:ff:c9:e9:08:27:fb:45:ca:31:bd:a1:ae:2f:e4: 24:0f:95:2e:95:92:e2:9c:40:d3:c4:10:5c:da:91: 67:0a:01:c7:e0:35:0f:44:f9:8f:70:c2:85:79:ba: 34:fc:42:ae:df:6c:2a:c5:d2:37:6b:cb:d2:3e:7e: 51:32:08:4f:3b:54:35:ed:dd:37:c5:fd:d9:df:f3: b8:3e:71:5f:de:cf:f7:63:e6:ce:40:f6:ba:bb:e8: cd:3b:3f:78:49:cc:7b:c7:60:c4:a4:be:56:a4:72: e7:c3:05:df:7d:5d:9a:0c:98:ff:06:38:da:18:0a: 9d:20:c7:de:bb:27:d1:b5:1c:c7:4e:b4:dc:89:5f: 98:be:0d:5f:01:e3:e1:89:1f:da:bb:64:21:2d:5a: 7b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:11:14:F2:88:79:49:A7:4F:53:95:19:5B:14:F2:82:DD:05:F9:DE X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0d:ce:57:49:e8:a7:45:31:94:4f:9e:76:a5:cd:a3:75:4c: 0b:d8:68:15:63:0e:ed:d5:a4:93:ad:ae:52:40:40:d8:cd:ce: bf:00:42:0c:10:ac:1b:c7:37:7f:90:54:93:24:10:db:6b:f3: 11:7f:0c:4c:50:a4:b0:66:35:9d:92:e0:c7:bb:57:4e:6c:81: 7b:c9:eb:06:ae:68:cf:54:fc:25:57:54:95:95:a3:d1:34:34: 21:67:b5:ec:33:9f:4a:0b:cb:6f:1c:35:7c:61:8f:7d:bb:d8: 3e:b6:08:58:e7:f8:28:32:d8:b0:2a:9d:75:b5:0e:b5:c5:55: b4:ad:e2:2b:57:c1:a8:a3:80:f4:41:dd:8a:98:df:9a:1c:2b: 2e:e2:7c:59:73:65:c3:dd:8d:de:57:57:c5:0e:ea:94:e5:8d: 4d:8e:31:58:4c:56:33:c3:34:9d:72:8e:07:36:64:ba:d7:e6: ab:d2:d8:4c:8c:00:26:a3:5a:73:37:50:d2:43:a5:f9:1e:99: 60:22:7a:4f:56:97:b2:28:24:44:28:d9:73:69:12:53:95:d3: bd:49:64:fe:c7:94:1b:2a:be:40:08:ba:2c:f3:aa:5f:79:23: f3:7b:4e:4c:cb:8f:c2:b6:20:c6:9d:5b:52:8b:4e:5e:a1:57: 92:10:9d:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xpxpXxiQc0WqYGrmQ5kUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUxMDE5MTQwMTM4WhcNMjUxMDIwMTQwMTM4WjAzMTEwLwYDVQQD EyhkYTExMTRmMjg4Nzk0OWE3NGY1Mzk1MTk1YjE0ZjI4MmRkMDVmOWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNtcjrTje33B0KXCtMveG/dO7M09 URyaUZP0KURG4v25coF7BwlFQrwIWlY3jUSm8XkjebEIrlcUIxyg170YiV6gJwUp hEZkSZelJ8K4m6WlIrHw18WMga0/Qu0SfEoNmHtYL0RVWLZ4/8npCCf7RcoxvaGu L+QkD5UulZLinEDTxBBc2pFnCgHH4DUPRPmPcMKFebo0/EKu32wqxdI3a8vSPn5R MghPO1Q17d03xf3Z3/O4PnFf3s/3Y+bOQPa6u+jNOz94Scx7x2DEpL5WpHLnwwXf fV2aDJj/BjjaGAqdIMfeuyfRtRzHTrTciV+Yvg1fAePhiR/au2QhLVp78QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoRFPKIeUmnT1OVGVsU8oLdBfneMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg3OV0no p0UxlE+edqXNo3VMC9hoFWMO7dWkk62uUkBA2M3OvwBCDBCsG8c3f5BUkyQQ22vz EX8MTFCksGY1nZLgx7tXTmyBe8nrBq5oz1T8JVdUlZWj0TQ0IWe17DOfSgvLbxw1 fGGPfbvYPrYIWOf4KDLYsCqddbUOtcVVtK3iK1fBqKOA9EHdipjfmhwrLuJ8WXNl w92N3ldXxQ7qlOWNTY4xWExWM8M0nXKOBzZkutfmq9LYTIwAJqNaczdQ0kOl+R6Z YCJ6T1aXsigkRCjZc2kSU5XTvUlk/seUGyq+QAi6LPOqX3kj83tOTMuPwrYgxp1b UotOXqFXkhCdsQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:30:37 2025 by rpki-client