$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: LpsUppZbStrSrQVzykg6uerZBYiGX1qYH/XG4DO3Lkc= Subject key identifier: 55:DD:85:01:B0:4B:7F:20:96:89:9D:08:6E:95:E7:04:6F:A2:23:2B Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 0199FB7CD6BF88DF0BD4ED74FE96E8FD668A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 02EF Signing time: Sun 19 Oct 2025 08:01:26 +0000 Manifest this update: Sun 19 Oct 2025 08:01:26 +0000 Manifest next update: Mon 20 Oct 2025 08:01:26 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: MSWWb80nLyTh9gp/DAPANJpvPyvAVznZzq0OoqBJ13U=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: 7nqYSNRgpsvM-UlPtwo-uw5JdC8.roa (hash: zbZzHQxFPE9nkpfPwYSh1rCa28pAH7nN65AJIuORwmA=) 6: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 7: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 8: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 9: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 10: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 11: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 12: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 13: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 14: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 15: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 08:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:d6:bf:88:df:0b:d4:ed:74:fe:96:e8:fd:66:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Oct 19 08:01:26 2025 GMT Not After : Oct 20 08:01:26 2025 GMT Subject: CN=55dd8501b04b7f2096899d086e95e7046fa2232b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:2f:1b:68:82:0f:28:f4:bc:2a:66:b3:fb: 40:46:c8:8c:0a:fc:98:0a:03:cd:68:29:d9:cf:e8: 0a:1e:70:f1:88:55:66:7c:13:06:2c:71:45:68:00: 59:82:0b:9a:77:92:62:1d:63:63:98:87:d1:99:fb: 23:47:67:7a:4d:30:a5:82:8c:68:ce:7e:bf:b6:e0: 7d:1a:d1:f3:55:f6:a9:e7:fc:b8:41:b6:ca:f3:1d: f7:a4:5e:1e:f3:d2:ab:1b:60:73:76:67:9b:86:b8: 65:33:5c:0b:c0:22:b1:56:0a:b2:73:1a:59:36:a4: 07:80:e7:7d:19:cd:7c:2f:ee:a2:18:a8:96:e8:26: 0e:6c:26:06:7e:d0:71:71:6b:dd:0b:9d:f8:50:98: 36:73:e8:58:8b:46:35:af:f6:3e:9e:a9:b3:9c:0b: 14:d9:ea:cf:27:8c:fa:da:07:95:69:fb:47:fd:76: eb:de:bc:00:b9:5f:24:71:89:f6:b8:d8:93:24:45: 57:33:92:4f:9f:64:a1:cc:d8:b1:f6:29:01:c5:89: 24:9f:37:ec:b6:b0:74:ff:4a:56:00:e8:ff:86:ef: c2:51:b6:be:0b:ef:62:a8:8d:db:20:1e:e5:60:95: 7f:b6:74:23:be:6b:16:42:e8:ac:bf:64:92:18:63: 43:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DD:85:01:B0:4B:7F:20:96:89:9D:08:6E:95:E7:04:6F:A2:23:2B X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:52:ec:10:1e:9f:20:19:c5:bf:e7:88:a6:51:4e:07:64:3c: 6a:43:7b:e2:e6:28:be:d4:13:30:17:87:57:d4:77:1d:2e:83: 26:4c:e9:09:74:01:85:f8:7d:8b:c9:9e:26:81:14:f3:71:fe: 92:09:dd:b6:60:14:02:e6:93:24:e1:61:62:90:8f:91:d0:00: ce:b1:9d:8d:2d:ed:a1:94:d9:80:46:6e:84:9b:0a:5b:58:59: ba:4a:e5:0a:50:c2:ea:07:87:eb:6d:bc:be:d4:91:51:12:4a: b0:45:51:d5:19:60:f4:bf:ee:18:ed:95:bd:b6:03:fd:d9:6e: a6:ad:0b:d6:22:56:9a:60:a4:cb:e1:cc:85:14:be:82:48:95: 85:29:32:c3:6f:a2:e8:d2:59:67:3b:ec:35:0d:71:09:1c:10: 68:6d:2c:18:ad:cd:2a:35:be:bb:e2:96:60:cb:3c:b6:82:4f: a5:64:52:88:01:b9:2c:e1:99:f1:01:79:0a:44:21:41:a7:a4: 0e:97:7a:4f:74:3e:ec:8e:c0:ae:92:fb:eb:79:9a:4f:ad:ed: 58:b6:a8:26:bd:e6:2f:26:60:b7:ea:18:0c:66:fc:b3:45:5d: 5a:86:65:6b:c5:dc:2f:31:e7:8a:16:41:b6:03:04:e7:d4:00: 54:d5:9e:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fNa/iN8L1O10/pbo/WaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMDE5MDgwMTI2WhcNMjUxMDIwMDgwMTI2WjAzMTEwLwYDVQQD Eyg1NWRkODUwMWIwNGI3ZjIwOTY4OTlkMDg2ZTk1ZTcwNDZmYTIyMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQwvG2iCDyj0vCpms/tARsiMCvyY CgPNaCnZz+gKHnDxiFVmfBMGLHFFaABZgguad5JiHWNjmIfRmfsjR2d6TTClgoxo zn6/tuB9GtHzVfap5/y4QbbK8x33pF4e89KrG2BzdmebhrhlM1wLwCKxVgqycxpZ NqQHgOd9Gc18L+6iGKiW6CYObCYGftBxcWvdC534UJg2c+hYi0Y1r/Y+nqmznAsU 2erPJ4z62geVaftH/Xbr3rwAuV8kcYn2uNiTJEVXM5JPn2ShzNix9ikBxYkknzfs trB0/0pWAOj/hu/CUba+C+9iqI3bIB7lYJV/tnQjvmsWQuisv2SSGGNDZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXdhQGwS38glomdCG6V5wRvoiMrMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlLsEB6f IBnFv+eIplFOB2Q8akN74uYovtQTMBeHV9R3HS6DJkzpCXQBhfh9i8meJoEU83H+ kgndtmAUAuaTJOFhYpCPkdAAzrGdjS3toZTZgEZuhJsKW1hZukrlClDC6geH6228 vtSRURJKsEVR1Rlg9L/uGO2VvbYD/dlupq0L1iJWmmCky+HMhRS+gkiVhSkyw2+i 6NJZZzvsNQ1xCRwQaG0sGK3NKjW+u+KWYMs8toJPpWRSiAG5LOGZ8QF5CkQhQaek Dpd6T3Q+7I7ArpL763maT63tWLaoJr3mLyZgt+oYDGb8s0VdWoZla8XcLzHnihZB tgME59QAVNWeBg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:26:05 2025 by rpki-client