$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft File: LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft (raw, json) Hash identifier: 8ggdTF74X+zMnqC1M/6I81HZbpflRFoVK9RLfUJTBgQ= Subject key identifier: 1F:B1:1F:7A:FF:F2:25:FC:A3:EB:22:B0:0D:65:75:FB:8D:23:4F:6F Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 0199FCFD478D26E47B04B4C3B506F4517B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft Manifest number: 0EF6 Signing time: Sun 19 Oct 2025 15:01:21 +0000 Manifest this update: Sun 19 Oct 2025 15:01:21 +0000 Manifest next update: Mon 20 Oct 2025 15:01:21 +0000 Files and hashes: 1: 8gg7kQMVPMp5CW_2Zh8YAWMAQ5w.roa (hash: f3wtA4WN/DWLyQp37wYwvHxSkXSyAaxvA1pdEj3pPLE=) 2: LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl (hash: DaqS0F31vBKqSHyphdWAL0V1Yn+36hBeVcJJROaP5pU=) 3: UH8mYATqGd2LhlccdYCUKZ4JN64.roa (hash: zx6xKES79izKCK41WQG8kojfkl15CZD0vapTu3dVd94=) 4: V3nOHEnCJP-Y80iAPhFlmBROCqE.roa (hash: u4LP1rpbwcMhaXZxdRjmUDhrY5qRbzrSLpn+2r2q6YI=) 5: dqRWzSNCruVCqi7CqPXaFVIAZqc.roa (hash: 1yVtBaBVVLrbvd7QX7NgCFT4elTOPpbTI0QeBKDstSU=) 6: fnRO3YPFe8F_GuJVP6BFmCLExds.roa (hash: S/FNrD8uODF/R2lWPGP6dnynofHgMlQ5RLJ6/4lt0U4=) 7: nf08bxZrXlifI-WoWt3QiOzUCYE.roa (hash: 9Fjz3WhUtYB2nXdTzmYUXTXJcsut26eiijRzx8g0Gdo=) 8: oTTFl9FHxLAZ8JiSJdPGimoCQHM.roa (hash: 45Ta1xYJRmd1UM8tpaggP68jmIJqaROOKMXNUEmi1b0=) 9: teJ51KVPIWV36Tlu6BnhXD2AUD4.roa (hash: iirQ6/n4/0a+w6plKlxP3E2dDeNQoZhhCXUm/2+ugFU=) 10: z9geQajqLX4fEuy3PNQy0IwzzgY.roa (hash: JIvL3zAmwpher+kvj+pICp4mH45/hSa/ISO69pribAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:47:8d:26:e4:7b:04:b4:c3:b5:06:f4:51:7b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Oct 19 15:01:21 2025 GMT Not After : Oct 20 15:01:21 2025 GMT Subject: CN=1fb11f7afff225fca3eb22b00d6575fb8d234f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0d:5f:b1:2d:c6:91:1f:f0:29:50:e5:12:5b: ab:9a:1a:82:8b:bf:3d:98:c3:fb:ec:13:0f:4d:1f: db:22:b6:6a:56:b3:bd:28:8a:4b:fd:86:08:54:40: a7:f0:29:d0:ad:f5:47:ef:fc:5b:f8:6c:e1:47:11: 7c:de:1c:45:b6:98:27:ea:c1:1c:93:1f:90:5e:2d: 24:fa:73:3a:fe:81:d8:5e:46:39:ec:41:0f:f5:7b: bf:49:0d:59:7e:00:e7:32:dc:60:d1:8b:f9:72:c5: 97:d6:ff:32:3b:de:ad:4e:3d:a6:fd:45:e9:8d:89: 5c:fb:40:22:51:28:e8:f9:f0:0d:69:b2:07:e4:d9: d5:54:07:2b:53:f5:61:d5:4a:eb:ab:e8:fd:04:7c: 81:3f:a7:e8:76:f3:da:16:b6:70:cd:46:c3:1b:3f: 4c:37:b9:0a:9c:e3:8e:51:4d:da:8c:46:c4:42:3b: af:92:1e:7e:3e:de:1a:dc:55:9e:4a:00:d8:64:c4: 02:4b:a1:f0:ac:64:ca:c9:19:14:bd:c8:62:b5:e5: 0f:4a:b7:5d:93:4d:35:80:ee:25:11:f2:d4:30:12: ac:26:af:1e:04:45:7f:ef:79:d6:cd:e4:24:29:91: 31:28:9e:7b:18:79:c7:dc:7c:f3:c0:d7:06:fe:43: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B1:1F:7A:FF:F2:25:FC:A3:EB:22:B0:0D:65:75:FB:8D:23:4F:6F X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1c:48:52:b2:38:ef:ce:4d:92:3a:f3:36:55:a8:ca:85:de: 62:d3:36:54:15:61:4f:6c:71:6b:e8:c4:1a:63:72:52:fd:40: 66:af:07:af:8b:78:6d:fe:97:c2:9e:72:ba:7c:52:85:1b:4e: 5a:11:ab:9f:48:ef:02:d2:7e:0e:ae:0f:87:b2:66:7c:b3:0f: 95:4b:8f:71:72:9f:ef:9d:b1:57:db:41:d7:fd:9c:be:97:ff: b5:ea:f2:57:11:9e:2e:d6:bb:70:58:1e:56:7c:6e:c4:45:99: 98:f0:f7:d7:2f:d6:b1:aa:99:d5:33:a0:e6:d5:14:54:77:e0: 87:d1:8a:bb:e4:91:70:ed:e4:be:78:f9:ee:2b:a0:12:1c:ca: 91:a3:ae:83:48:0c:76:ac:fb:8e:84:49:ad:c8:b3:67:68:f2: 40:be:77:2a:87:89:52:4f:ed:40:86:9c:d8:c3:24:2b:4b:32: 61:70:81:20:76:6a:72:23:9c:98:58:7a:4b:de:ff:58:42:1e: d5:27:10:14:8d:f5:db:66:ec:22:03:34:86:06:4c:e9:42:43: d6:a0:d6:a3:d0:42:27:9b:00:5d:06:3e:b2:4a:7c:08:3c:79: ac:fa:af:06:b7:01:b1:3d:a8:ed:32:5c:30:c2:87:45:1e:9e: 03:37:a5:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/UeNJuR7BLTDtQb0UXteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjUxMDE5MTUwMTIxWhcNMjUxMDIwMTUwMTIxWjAzMTEwLwYDVQQD EygxZmIxMWY3YWZmZjIyNWZjYTNlYjIyYjAwZDY1NzVmYjhkMjM0ZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A1fsS3GkR/wKVDlElurmhqCi789 mMP77BMPTR/bIrZqVrO9KIpL/YYIVECn8CnQrfVH7/xb+GzhRxF83hxFtpgn6sEc kx+QXi0k+nM6/oHYXkY57EEP9Xu/SQ1ZfgDnMtxg0Yv5csWX1v8yO96tTj2m/UXp jYlc+0AiUSjo+fANabIH5NnVVAcrU/Vh1Urrq+j9BHyBP6fodvPaFrZwzUbDGz9M N7kKnOOOUU3ajEbEQjuvkh5+Pt4a3FWeSgDYZMQCS6HwrGTKyRkUvchiteUPSrdd k001gO4lEfLUMBKsJq8eBEV/73nWzeQkKZExKJ57GHnH3HzzwNcG/kNHNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+xH3r/8iX8o+sisA1ldfuNI09vMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBxIUrI4 785NkjrzNlWoyoXeYtM2VBVhT2xxa+jEGmNyUv1AZq8Hr4t4bf6Xwp5yunxShRtO WhGrn0jvAtJ+Dq4Ph7JmfLMPlUuPcXKf752xV9tB1/2cvpf/teryVxGeLta7cFge VnxuxEWZmPD31y/WsaqZ1TOg5tUUVHfgh9GKu+SRcO3kvnj57iugEhzKkaOug0gM dqz7joRJrcizZ2jyQL53KoeJUk/tQIac2MMkK0syYXCBIHZqciOcmFh6S97/WEIe 1ScQFI3122bsIgM0hgZM6UJD1qDWo9BCJ5sAXQY+skp8CDx5rPqvBrcBsT2o7TJc MMKHRR6eAzelVw== -----END CERTIFICATE-----Generated at Sun Oct 19 18:06:16 2025 by rpki-client