$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: ayQmRmIHIy7LMCcnZRokFo0YirqhjLBk+XrMeJ2OjIQ= Subject key identifier: 86:69:B5:BD:49:28:78:66:50:3A:E8:43:EC:45:B9:E4:63:0D:84:21 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 0197B6A08778DAF889F2842A3D1820A3A514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 01C1 Signing time: Sat 28 Jun 2025 13:01:03 +0000 Manifest this update: Sat 28 Jun 2025 13:01:03 +0000 Manifest next update: Sun 29 Jun 2025 13:01:03 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: ws/tJCzuWdWmfmPf2JC42y1zu5k8s91HTtYoUofp85w=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: 7nqYSNRgpsvM-UlPtwo-uw5JdC8.roa (hash: zbZzHQxFPE9nkpfPwYSh1rCa28pAH7nN65AJIuORwmA=) 6: E4KcJHE0n0TKLaC6bMZFCAcb_VQ.roa (hash: hPXmeWeNB758yPScVGfaU0vyDbInbo0zBYshzkP1Pxo=) 7: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 8: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 9: TatL9OoUWxXZgHGxaDUj4GDLE9o.roa (hash: +7WpBtxQIB4QfQxia/0uvzsc5xW01CueIK7yUh8b2As=) 10: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 11: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 12: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 13: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 14: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 15: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:87:78:da:f8:89:f2:84:2a:3d:18:20:a3:a5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Jun 28 13:01:03 2025 GMT Not After : Jun 29 13:01:03 2025 GMT Subject: CN=8669b5bd49287866503ae843ec45b9e4630d8421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:25:2b:5c:0a:20:31:1c:b4:b1:93:b8:9d: 8f:5b:f6:77:c6:c9:57:56:c9:39:a1:38:a2:e9:2f: 7d:7c:0b:ff:b8:6b:e0:94:ec:3f:e8:21:f1:59:79: 27:d6:51:ad:5f:19:79:fd:77:d9:aa:51:29:69:a8: 25:2c:45:b5:1b:fd:56:fb:c8:43:9c:6e:fc:54:75: 7c:9a:7a:8a:0e:77:e3:13:52:3d:be:c0:b0:34:47: a5:44:6b:b9:6a:ab:b1:89:b0:42:0e:cf:69:c2:fe: 1a:ff:89:6e:8a:08:aa:00:96:69:77:2d:b5:41:50: b8:94:d1:a1:62:73:3b:68:7c:7a:09:a0:95:66:07: 23:96:7f:ff:f9:e4:21:42:f8:c1:42:89:27:1f:30: 09:ac:83:29:e3:67:19:d3:0c:d7:a5:3e:60:c7:f3: 51:50:d6:11:81:81:a1:e0:09:c0:3e:7e:af:aa:5c: 37:e2:bf:54:86:d2:57:bc:d5:e7:f5:43:63:ae:60: df:ea:14:13:9a:17:7d:82:d8:78:b7:31:16:d9:fb: f3:18:6e:af:55:47:a9:79:d4:e1:0d:4b:a2:bf:22: 90:bb:5b:51:2a:20:b7:1a:f5:5f:8c:c7:17:f6:64: 8b:57:0a:69:d2:99:50:a9:a3:9b:e2:b8:0e:05:b2: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:69:B5:BD:49:28:78:66:50:3A:E8:43:EC:45:B9:E4:63:0D:84:21 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6f:73:95:d2:35:df:2e:e3:6f:18:9b:24:40:99:0c:54:08: 72:0b:28:28:87:80:3c:56:30:45:7e:41:56:98:91:a1:c6:18: 62:5b:24:6f:80:cc:3c:ce:57:39:93:54:67:fd:aa:2f:20:61: cb:77:e1:11:42:77:9d:87:c3:7d:63:f2:6f:9c:22:a0:cc:0e: 16:37:61:a9:db:e4:fe:72:78:9b:a7:18:a2:56:47:05:b8:45: 66:4c:d7:dc:3e:d9:4c:1e:2f:a9:31:c9:58:3d:ad:18:39:3f: bf:1e:20:ab:c5:f5:62:45:fc:3c:54:7f:67:4e:bb:fd:ea:97: 8b:16:c5:52:3a:19:2f:7a:2d:cf:1f:7e:c4:d4:f7:73:1b:1c: 8a:bb:58:01:98:e2:c7:95:5a:d7:f0:fd:27:72:f0:81:a0:af: 67:4f:7b:6c:f8:78:04:21:ec:fb:05:09:63:b0:ff:7f:10:9b: 01:a6:e3:16:de:d0:f8:c9:c9:92:78:fc:58:87:21:88:71:4d: cc:54:da:90:d7:c6:c8:c4:a7:4b:28:d2:59:56:85:5a:b0:e6: 52:e3:ff:18:00:41:c3:3c:4a:6f:af:ae:88:75:a0:b3:92:df: 3f:67:e1:57:db:a4:7d:a9:8e:08:c9:0a:c5:48:dd:89:6c:33: 8e:da:ef:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oId42viJ8oQqPRggo6UUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUwNjI4MTMwMTAzWhcNMjUwNjI5MTMwMTAzWjAzMTEwLwYDVQQD Eyg4NjY5YjViZDQ5Mjg3ODY2NTAzYWU4NDNlYzQ1YjllNDYzMGQ4NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvIlK1wKIDEctLGTuJ2PW/Z3xslX Vsk5oTii6S99fAv/uGvglOw/6CHxWXkn1lGtXxl5/XfZqlEpaaglLEW1G/1W+8hD nG78VHV8mnqKDnfjE1I9vsCwNEelRGu5aquxibBCDs9pwv4a/4luigiqAJZpdy21 QVC4lNGhYnM7aHx6CaCVZgcjln//+eQhQvjBQoknHzAJrIMp42cZ0wzXpT5gx/NR UNYRgYGh4AnAPn6vqlw34r9UhtJXvNXn9UNjrmDf6hQTmhd9gth4tzEW2fvzGG6v VUepedThDUuivyKQu1tRKiC3GvVfjMcX9mSLVwpp0plQqaOb4rgOBbK0cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZptb1JKHhmUDroQ+xFueRjDYQhMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG9zldI1 3y7jbxibJECZDFQIcgsoKIeAPFYwRX5BVpiRocYYYlskb4DMPM5XOZNUZ/2qLyBh y3fhEUJ3nYfDfWPyb5wioMwOFjdhqdvk/nJ4m6cYolZHBbhFZkzX3D7ZTB4vqTHJ WD2tGDk/vx4gq8X1YkX8PFR/Z067/eqXixbFUjoZL3otzx9+xNT3cxscirtYAZji x5Va1/D9J3LwgaCvZ097bPh4BCHs+wUJY7D/fxCbAabjFt7Q+MnJknj8WIchiHFN zFTakNfGyMSnSyjSWVaFWrDmUuP/GABBwzxKb6+uiHWgs5LfP2fhV9ukfamOCMkK xUjdiWwzjtrv4w== -----END CERTIFICATE-----Generated at Sat Jun 28 19:13:02 2025 by rpki-client