$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft File: a1_LvqSJN6RCur2zMCEyxLyb1qo.mft (raw, json) Hash identifier: VT8yyxIX60v2DI8HoKHjE87B5gTqrPIJlVY7G3m5bVQ= Subject key identifier: 36:09:22:24:34:58:58:A9:1A:D2:36:C8:CB:3D:43:AF:CB:0B:DB:75 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 0199FAD7D9FFCDEF6A47E822351178D49756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft Manifest number: 1836 Signing time: Sun 19 Oct 2025 05:01:13 +0000 Manifest this update: Sun 19 Oct 2025 05:01:13 +0000 Manifest next update: Mon 20 Oct 2025 05:01:13 +0000 Files and hashes: 1: 0HrJZEusZ9oVv98kJdzq5f65oZc.roa (hash: dfKMUKXunH7iRDrvxK4TsI75m1fiZPCXdxvwmAgNWmA=) 2: 1-5eUrXFS-mBvBFAzMBYr7thfm9g.roa (hash: RJYu6dco2QdzYib1CpLJ1XzU7TkYn7kM5vZDgj+Qfq4=) 3: 2vBfvAyUN2SY6M08IgnYx3zpve8.roa (hash: RSfWbc+Q+PHBpjAMYMn9vJC3eO3SfOagaCxQxW+i+xY=) 4: 6YWIcpjqWXXPr0NHMqc1t9BXFVc.roa (hash: s0BJpPQsUGvUNtr9zssg66b9fzELBdWvWGhPg3ZGd54=) 5: 9RbPMGyrxxGDjhfhukyfN6o-Z4U.roa (hash: xSndOIBXuZfPEBg/S2+nu0yDpJ+UXvrA6czAqS6vAeU=) 6: ACZ2w-GBagSgNrY3036o3-e-Yqs.roa (hash: RSgAhArW7RQeYQelUqAv5Bi0LBoSl2TBOlzzPUGVSs4=) 7: AgtwmtvxF4N5hFZv6c0Kn9WuSjc.roa (hash: FzH8Kt5CwD+ySzmFXho8yF26DYIdDiiJUHfuxiebVjA=) 8: BSK1K69J3TkTyBl6IbpBE-cZifE.roa (hash: l0XJM88UXO7kvswhcnsVGiFK9WZcVumCwivqOuFibGk=) 9: Bi-w2vQ6q7Paqeb-8FWxe--YcbU.roa (hash: 9bBFk/y11iYrmgN87LW1/x7IiYYmSf4cmU0eu0rkk44=) 10: C_IwqrNY74tqwTt9DSJJP5hsHAg.roa (hash: 1KQkHaDXpnduSOfi4Uk43kKKyMkZFzguthY9ka10pjQ=) 11: DryXQlC-O6D9dchGkCmKyUCSsXI.roa (hash: B9dLWQKoYikqSd8ehtteDkH0W34vjGERp8Sj/XEwj6U=) 12: G3b-Sj4xeRWlrOwhKw8McaCq4-4.roa (hash: KsA50zolUB7j1wTltm21R5N5ZnAzGY8iJfsZ1UX7vns=) 13: HMpahg815y5dLvRLadSLI9aRsZg.roa (hash: 7aZKETNxbarqjhff7UXQieI8SIU6EFel2uGR2s4s5Vg=) 14: IcFuQIouJCuWuHO_yiXsv9D-BsM.roa (hash: 85qJOiM2ad9ExmakxtoyKPLzM0B0skhvz9w/Rt90g4E=) 15: KeNSVcNIveDRNN0Eoyb056mMz44.roa (hash: KxKJclC3t7SyZCwcHAS4oMcneZIsejj+HibsNh2NOPM=) 16: N8LNjpmOeVZYvg1jyz1lgIODcEY.roa (hash: 9cYZxOQ70YEa6To3ZyqXq1X8m5FcvDVxbleGk2DvQvo=) 17: N994a833bc2uIsA--2ZFV_U7vK0.roa (hash: y5YvusL5mCqgFNDXvaktcHZW0AUoplzITf8148wwjn4=) 18: ODFUWKpYaPLOOmJRIlRL0pQTI-w.roa (hash: HpDjnMyeNXyUzKx7D/ZEuNgQ0V3sG7+U1ei4TAQZwOE=) 19: P26tRDqYGCwh-7d-FJbBAUiu9-A.roa (hash: fWd7FaKR5SY0UsefC1+rxZMd28VdqLcV9fz9eNghnJo=) 20: P7jpQYz_dktvYEApQ1HG4zZwUEc.roa (hash: NEeXpDKrquu4iF+gLfu51Lrnztx6B+hCuEcppqklv9o=) 21: SKUvOfrbsqr3EnSOp3cPbI_T-3s.roa (hash: zcB+FnS7IiJ/8trtebwNZEe6Q2L/uSLF6q1AjtaMoM0=) 22: Y6s6cpOFDB4o8Olwu7BDwFdi334.roa (hash: HD+fAQto30SmGE5lBvM4Gw74e88AyoLNbubpfD3gI0o=) 23: YYUKAK2F8cmjIDogLRScyFjxA3s.roa (hash: u5QuMtNIXq5Bh4ROu+k9IjhVvTjPtCkjIDCr4jQWPME=) 24: YrcaUlVHW2fyltCzVxW5srb_t8s.roa (hash: YyEdnBQrxhTsz3EF/MLdt6wJMANAV3iBNjSWCoo0bHQ=) 25: Z9-pCHbukVnLD87CbKvdfqMcjp8.roa (hash: 1VKomI6H8eJxRas/I2A1OFxgdNoUgegMh0Wu5FVC1Ac=) 26: Zm5q-OAHF8XMlkTGRZ0ocvZo0kU.roa (hash: zaEMQARl+u5DyRZJ/ZHvBcK3a2De+5zPDZnd/rHpNTM=) 27: _LjXL3YpDt_zyQsAkB93yjvRiaQ.roa (hash: ZQ7+7ZrSo0V28gXLcUC1wHDwSfOa/Id279ib+ZBn12k=) 28: _ogMXTvwuiGuXrWQ2hK3AO0_Fcw.roa (hash: WEgomRLuOpaCXAroET1pTNRkA9KLGMtgaXxjhp1OXmU=) 29: a1_LvqSJN6RCur2zMCEyxLyb1qo.crl (hash: He26hFewUXjEdeqWAPXGfbgx4iGVX5MJvu8nKLGvpAs=) 30: bL4QpEkGhQ7SFvt1p4570f2wAjw.roa (hash: VLEwmnAxRkzaJysdwmNToFGvk98WHCrz2Guz8+uOcTM=) 31: bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa (hash: zO1ybKX/s2NCYeSrRX1xfvdOpXtR/b+YJZ3CodIb+Uw=) 32: cyZ1sTw8fJMJ0imtzY4vSPe1vTA.roa (hash: mq6LW/5tlRNhY67aMiyHZWFimK2nqWKi24D//Whvb/I=) 33: dKiiYEuCprC3AOoAMLpWRXhcGBQ.roa (hash: 0WP2E0pAfFrtZraTWqyuvItd/X3MNJyZXv47/Gpv9Z8=) 34: diurzX_f0Kh-tkNz_5FkIhsZcbc.roa (hash: oW1j/29eW+cjlDjHbcTAisOM3fT59ntCtOMes7dOnI0=) 35: dlGy94OdP9CxuWl64-ZF98qSRvQ.roa (hash: 2w0HFoh9L9yMqJIGL3SRLvEXuzUEWFfnBxb+BUXGxJs=) 36: iQM89N-8pmdX0FKn2_ZUBdzCshE.roa (hash: NTnxEBzWzfIQmnb4pTpW6WXtbroKOIVyfaC55jLlJKo=) 37: jDbnCgLzOMoh_-prUYRyopQON3Q.roa (hash: 6fIT6hQqx2VPBEO30KN0TuzIAeq1d3a3aNS/Vq7UDzI=) 38: jNqX84RRwICbOmOsyyyD8-SEETQ.roa (hash: BYwZ6wAb4yTmr6zei/Clsy11v9hbMtuZ/ZmhoS0Qe4o=) 39: jh0eioYXOqOrsCPseryQuBa5sNE.roa (hash: CQiFhuEkzUbKw/vn9D3Xs2++bHgNSX5mKS4pk62lNhM=) 40: m8-NvEaTYxdMpq73t7W6hVC0ihg.roa (hash: 6sXEXZZdBBtQd9DJnye4oxTj76YdlamW0jnEVUOdwSg=) 41: o90pOwyPTJq3ipoCJqnYBJG60tQ.roa (hash: Na/z/vBKAhxwYBPl3tg6qs5p0eBzlCQ1bMK6PBTkoFc=) 42: tOXM1ArNi_WlT9YM3bcgjCEuYiE.roa (hash: WoZWnVDNekQ1pmAx1W3mwlUwZGDjKwmVnvBatyWe8dU=) 43: tlKn03Ch2n039rtBjA5ofqd299w.roa (hash: 9PuwizLdWImEnrfTYLu1uBixtkLMu3z0UocdkAE0/2k=) 44: voka6WVN1tlnTci6JfZZ2xxnXVo.roa (hash: a0Bd9r0sMvT06FR0FY5TMEpD3poTyuJ09n/TRmfIiaw=) 45: w6m4oMJeiLn2T3m3LP8pqzAnTQw.roa (hash: 8lTNAlZen7HjuRJ2IbBbtSJoygdDSQvxjXXFZis+Axs=) 46: wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa (hash: B4jHxBo8KD+DxfBtAFoOk8Vvzyje54Bq/hBOaPBuC2c=) 47: wdcRzGakLe3jtYKRAcXH-gjC00w.roa (hash: duKEk5GHM/r1VrV4PFuMXDPuM6unFH0pIjUwPANnOzU=) 48: xFV94mhycLMDkO1NS4j7t6HntvE.roa (hash: A9Prynd/URC1jVssoaAU0w6tIKnFpphaGal/8eTJRlM=) 49: yp-8gzIUS28UkdIriaZE9SvxySU.roa (hash: +iP77Exrci+Xrmn096jgn0pyK47AsH9ERkphbh20fcM=) 50: zf6pdNUpGphO6Df4cNnwGf8vsno.roa (hash: ECJKSpVkmXvbPK0APqCdCGrsrVqyutvoFLDEiGmDUxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:d7:d9:ff:cd:ef:6a:47:e8:22:35:11:78:d4:97:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Oct 19 05:01:13 2025 GMT Not After : Oct 20 05:01:13 2025 GMT Subject: CN=36092224345858a91ad236c8cb3d43afcb0bdb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:a2:fb:0e:1a:dd:a8:d8:ca:0f:36:5d:66: f5:ac:5b:ea:f9:61:64:ca:64:a4:ee:40:ed:39:58: a2:7d:35:a2:46:85:68:36:ca:b1:86:b3:3f:2f:c2: 6e:c3:8d:e1:7d:13:c8:00:af:c8:be:c7:da:43:b0: 85:ba:9b:81:53:ac:97:98:6d:1a:d9:24:39:a4:f5: ec:e7:9c:68:d3:e3:d9:11:19:dd:00:e7:64:aa:f2: d3:e5:95:45:4a:2b:0e:07:3a:49:a3:c1:0b:7a:32: 29:9d:62:39:a4:e0:39:cb:64:8c:62:29:20:b2:c4: 36:76:a5:2f:01:8c:f9:0f:f4:0a:68:98:c5:78:28: 46:0f:3c:14:83:79:79:2b:f2:f6:0b:50:d8:92:c2: ab:4b:88:97:68:ce:8e:72:af:0e:f1:43:33:6c:dc: 1f:f2:3b:bd:3d:20:93:1b:8d:55:76:0c:78:ab:d5: e3:f5:b8:bb:ea:61:6c:64:0f:b4:94:ca:6e:70:d9: d1:d0:e4:e9:f8:b7:30:da:b2:66:24:96:93:6c:11: 05:f3:68:6f:81:07:20:de:08:25:07:35:d1:33:59: 58:34:ad:f3:30:c4:7d:ea:f7:07:16:61:15:33:25: 99:95:1e:69:03:37:8a:ff:ea:8a:5e:50:70:a3:8b: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:09:22:24:34:58:58:A9:1A:D2:36:C8:CB:3D:43:AF:CB:0B:DB:75 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8f:37:50:e4:6d:37:79:29:d6:18:c9:9a:79:7a:36:42:bf: d7:31:8d:51:36:65:a9:02:19:dc:c4:86:14:f1:b1:40:f4:68: fb:3e:c3:35:04:11:e6:a0:96:4e:cd:31:76:6f:23:2f:9c:af: e9:d5:2c:79:52:44:0a:68:c2:4d:f2:51:84:80:52:66:54:4c: 81:11:70:03:3d:61:1a:e5:95:e6:87:5a:23:cc:20:37:f4:1b: 7e:fd:8d:9a:4b:58:73:b0:ff:19:9f:e9:1c:af:74:04:53:35: 60:a0:57:a9:5a:0c:b7:97:e1:bc:71:d8:c2:5f:54:97:b3:8a: 13:60:e8:0e:60:58:10:a4:18:12:9e:41:6f:a2:0c:1e:36:f4: db:97:c1:60:0b:7d:a8:78:89:e3:8f:4f:3d:4a:1a:0c:87:59: 3e:7f:b5:b0:87:43:8f:21:13:69:ac:bd:b9:56:e0:cd:62:bc: cc:20:d5:1f:e9:27:59:ab:74:2b:ec:64:fc:3e:75:72:2d:ba: b3:2e:41:de:c4:49:69:f4:b3:33:e5:5a:31:27:d8:75:e0:a0: 3c:63:02:c0:f4:91:75:11:8a:37:99:3f:96:93:ca:50:cc:7b: 6c:50:9d:97:c8:ec:d6:64:95:a7:6c:c0:7d:44:8a:80:85:a9: bf:c8:6d:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn619n/ze9qR+giNRF41JdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjUxMDE5MDUwMTEzWhcNMjUxMDIwMDUwMTEzWjAzMTEwLwYDVQQD EygzNjA5MjIyNDM0NTg1OGE5MWFkMjM2YzhjYjNkNDNhZmNiMGJkYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWSi+w4a3ajYyg82XWb1rFvq+WFk ymSk7kDtOViifTWiRoVoNsqxhrM/L8Juw43hfRPIAK/IvsfaQ7CFupuBU6yXmG0a 2SQ5pPXs55xo0+PZERndAOdkqvLT5ZVFSisOBzpJo8ELejIpnWI5pOA5y2SMYikg ssQ2dqUvAYz5D/QKaJjFeChGDzwUg3l5K/L2C1DYksKrS4iXaM6Ocq8O8UMzbNwf 8ju9PSCTG41Vdgx4q9Xj9bi76mFsZA+0lMpucNnR0OTp+Lcw2rJmJJaTbBEF82hv gQcg3gglBzXRM1lYNK3zMMR96vcHFmEVMyWZlR5pAzeK/+qKXlBwo4uiDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYJIiQ0WFipGtI2yMs9Q6/LC9t1MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo83UORt N3kp1hjJmnl6NkK/1zGNUTZlqQIZ3MSGFPGxQPRo+z7DNQQR5qCWTs0xdm8jL5yv 6dUseVJECmjCTfJRhIBSZlRMgRFwAz1hGuWV5odaI8wgN/Qbfv2NmktYc7D/GZ/p HK90BFM1YKBXqVoMt5fhvHHYwl9Ul7OKE2DoDmBYEKQYEp5Bb6IMHjb025fBYAt9 qHiJ449PPUoaDIdZPn+1sIdDjyETaay9uVbgzWK8zCDVH+knWat0K+xk/D51ci26 sy5B3sRJafSzM+VaMSfYdeCgPGMCwPSRdRGKN5k/lpPKUMx7bFCdl8js1mSVp2zA fUSKgIWpv8htxA== -----END CERTIFICATE-----Generated at Sun Oct 19 13:05:30 2025 by rpki-client