$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: 64oprA/e637VpUNsJh8HkxGEC0kG5NaeizyMddizfSg= Subject key identifier: E1:CA:A7:A3:AB:FE:E5:27:0F:86:35:4D:48:11:61:FD:63:58:4D:24 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 0198D5F1B3DA68D2261E5F3FE26B4D6F29DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0257 Signing time: Sat 23 Aug 2025 08:00:43 +0000 Manifest this update: Sat 23 Aug 2025 08:00:43 +0000 Manifest next update: Sun 24 Aug 2025 08:00:43 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: jFfP4XUPln3njZmxrI3WI0/Z6RFoG5U/gCnA5HWEx7E=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: 7nqYSNRgpsvM-UlPtwo-uw5JdC8.roa (hash: zbZzHQxFPE9nkpfPwYSh1rCa28pAH7nN65AJIuORwmA=) 6: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 7: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 8: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 9: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 10: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 11: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 12: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 13: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 14: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 15: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:b3:da:68:d2:26:1e:5f:3f:e2:6b:4d:6f:29:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Aug 23 08:00:43 2025 GMT Not After : Aug 24 08:00:43 2025 GMT Subject: CN=e1caa7a3abfee5270f86354d481161fd63584d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:6d:54:d0:b1:b4:42:0d:6d:43:54:35:ed: aa:b8:95:13:26:5c:cc:dd:24:9a:aa:4b:ee:84:92: f2:91:19:f0:8e:40:15:6e:d4:7c:d1:2b:80:a3:c0: cd:55:a8:a7:8b:e6:62:19:0f:3c:62:88:a1:3e:c9: 62:9a:fc:be:b2:04:5a:c6:a9:33:59:80:ea:ba:15: 01:d0:d0:3b:86:c9:02:42:b9:61:f5:41:1b:65:2f: be:a0:07:65:d7:ce:e8:f7:c9:55:15:8b:41:0d:7d: 48:b9:df:8c:12:12:ab:be:27:7d:13:49:ee:95:b5: dd:f8:56:5a:97:aa:86:e6:84:21:df:05:b8:8d:2c: 0c:f3:2a:f1:04:23:79:d6:fc:aa:1a:af:ca:32:3e: 19:83:39:ee:2f:15:94:82:20:72:45:f7:f1:83:b1: 13:7a:0c:d8:b7:fe:43:58:e2:2a:a2:0f:c6:d0:b2: ec:24:1e:1f:6a:23:53:a2:5a:b2:2f:c3:23:8d:3c: 2b:3a:98:f2:2d:cc:eb:07:65:d8:c5:63:6b:36:7c: bd:85:cf:b2:9e:e1:6b:68:bb:fd:92:3a:65:e2:3a: bd:f2:43:b1:6d:9c:26:3e:90:6e:1c:57:4c:66:76: 1e:77:94:c0:4d:1c:ef:68:37:01:87:f8:82:0d:30: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CA:A7:A3:AB:FE:E5:27:0F:86:35:4D:48:11:61:FD:63:58:4D:24 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e3:0e:b0:15:0b:e7:4f:71:b7:79:59:68:18:7a:f1:3a:dc: 3e:11:38:5d:73:d3:25:62:2a:07:3b:07:94:35:d5:3c:e8:be: a5:b5:92:87:dd:86:5a:d1:99:4d:21:44:20:a4:b9:97:dc:81: 68:7d:02:cf:e8:ab:cf:2e:55:73:4a:f6:c2:4a:9b:87:b5:04: 26:48:cc:8e:89:51:16:98:fd:9f:84:46:d3:23:8d:4e:7d:b1: c6:01:6b:96:59:65:72:7d:05:c5:8e:ef:3d:f8:d4:42:03:95: 05:19:30:4e:e3:4d:5e:6a:4f:cd:58:61:52:e6:90:34:ac:2a: 65:30:40:a7:c4:b9:e2:f7:b8:3d:de:d1:a9:46:4f:58:48:b1: 78:2a:5a:f6:16:81:2c:97:36:52:db:3b:cd:12:53:da:72:43: 30:45:82:e9:56:a8:3b:53:90:3d:1f:b7:f8:f6:0d:13:7b:fd: 59:9d:35:a2:91:71:aa:90:57:09:96:65:dc:dd:55:6e:54:f9: 12:14:e6:6f:fd:14:48:27:42:6a:86:52:dd:ac:8e:d3:6a:83: 8a:ba:de:c1:a0:93:75:0c:d3:3e:8c:d4:ac:a3:dd:28:e9:3c: 2c:03:77:88:72:37:20:e6:5c:8b:80:52:d7:21:cd:a2:b3:78: dd:e6:31:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8bPaaNImHl8/4mtNbyneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUwODIzMDgwMDQzWhcNMjUwODI0MDgwMDQzWjAzMTEwLwYDVQQD EyhlMWNhYTdhM2FiZmVlNTI3MGY4NjM1NGQ0ODExNjFmZDYzNTg0ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyxtVNCxtEINbUNUNe2quJUTJlzM 3SSaqkvuhJLykRnwjkAVbtR80SuAo8DNVaini+ZiGQ88YoihPslimvy+sgRaxqkz WYDquhUB0NA7hskCQrlh9UEbZS++oAdl187o98lVFYtBDX1Iud+MEhKrvid9E0nu lbXd+FZal6qG5oQh3wW4jSwM8yrxBCN51vyqGq/KMj4ZgznuLxWUgiByRffxg7ET egzYt/5DWOIqog/G0LLsJB4faiNTolqyL8MjjTwrOpjyLczrB2XYxWNrNny9hc+y nuFraLv9kjpl4jq98kOxbZwmPpBuHFdMZnYed5TATRzvaDcBh/iCDTCKYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHKp6Or/uUnD4Y1TUgRYf1jWE0kMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuMOsBUL 509xt3lZaBh68TrcPhE4XXPTJWIqBzsHlDXVPOi+pbWSh92GWtGZTSFEIKS5l9yB aH0Cz+irzy5Vc0r2wkqbh7UEJkjMjolRFpj9n4RG0yONTn2xxgFrllllcn0FxY7v PfjUQgOVBRkwTuNNXmpPzVhhUuaQNKwqZTBAp8S54ve4Pd7RqUZPWEixeCpa9haB LJc2Uts7zRJT2nJDMEWC6VaoO1OQPR+3+PYNE3v9WZ01opFxqpBXCZZl3N1VblT5 EhTmb/0USCdCaoZS3ayO02qDirrewaCTdQzTPozUrKPdKOk8LAN3iHI3IOZci4BS 1yHNorN43eYxnQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:27:10 2025 by rpki-client