$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json) Hash identifier: 0AjDX1oL/aP2Or36URhg4C2Srniq7ePfAhC/SZIOCmA= Subject key identifier: 76:12:4F:A9:25:3A:FA:27:CC:44:BD:06:03:02:5A:DA:BE:1E:DB:D0 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 0199FDD9E435FC1D216D1391F2D5C82A6661 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft Manifest number: 16EF Signing time: Sun 19 Oct 2025 19:02:19 +0000 Manifest this update: Sun 19 Oct 2025 19:02:19 +0000 Manifest next update: Mon 20 Oct 2025 19:02:19 +0000 Files and hashes: 1: 1-50fUTEZMsqAfXKRVrjaJClUTPo.roa (hash: SmVCW5SnXSQgzJ45PrQg5gb9ODVy5PLQWa7gK9vYWEc=) 2: 1-rkdO3RS7mM1mTwHCfWVGwivLng.roa (hash: BJTIHx9AZNxRytnvkhO+a74x3XvNzoddWw1cmVufMkE=) 3: 1tphX7duVxQmoCj6iTv4JAUaFg0.roa (hash: 27/QMQNGQs+g1Yp+wtV2KRKQWUHGqze2SI6TtsCCM6Y=) 4: EsH1wGyP_4A3yjvtVJYJ-XBblic.roa (hash: DKgsauljcGZUwZ9qDQvDqIX1wcEbMc0VYZIYyCHtBuo=) 5: HuN4xP77vmRQRTk2kLL4bBeTBzg.roa (hash: cfsClMuW5Wg28hM5IbnYhS3Trbel7XimVvBZYWRkJfs=) 6: IMiFsNnN_p3sRoFH_C0d3qAaG_Q.roa (hash: oWqS9ieXKn+2R3xoqT+UPllXbLVMb7LbQgSB908taWQ=) 7: J8ocfDucYOz1VMSwyoOUgA7bURQ.roa (hash: 0LgKF+X2hpfhBTpNW2fTwMBm/B3MJkvlI1FoopslTw8=) 8: KE6TA5zPoru3bUa_YwQT_Aq4Tew.roa (hash: 6ftLo5kAogsbjk6fggK5ulzLgZYRlhQ2Mq1e7w+2xz0=) 9: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: xBeVqu/TuZqEp4qjbXTflPGz+bsO4wqtiXQzbg2mWJE=) 10: MtbsaY1yHn7-MT1fnsMPsz6ewPc.roa (hash: OtSZHtlFSjGonybseZjtwCmp5aSwaiqTCQ92rP98kgk=) 11: PskBO-hDKENpyj5TTl1bEDl9XFc.roa (hash: tVSD5b97fIERDtyitQPZy1bsEOcd19dJWMvlkxpkiNA=) 12: Vr7CtL_FipPK_JMmN6nyOTkF9N4.roa (hash: O291N7rIOeqa+sP7ZzErWn7Ntd1lj5fabHHpKHOsvGs=) 13: Y1Q65_50tcxlLXfWRBA87l5aDQw.roa (hash: g92z5H6lVXAl9mxdMgSPp7qM0b2CPQJ/omh9m+p0QO4=) 14: tfcI96HYGRf5GQ2bB8COjBYLdUQ.roa (hash: TrgrDqQXriqLm4qlMfISeHZWAMtYQBeQJnDLH6tGFGI=) 15: wajonDxdBm0pS767lGRq06Z84rM.roa (hash: Ne2muvaUoR5VivXU1vdN76aOmdMN56u55EBtWCDX1QI=) 16: yyYpMTy-uoOfGWdAgBKsqlQl5P4.roa (hash: bh3l2F5hAe5r/ruUhfgdEqGkzm/2Cu1kCzAkVz4n/4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:d9:e4:35:fc:1d:21:6d:13:91:f2:d5:c8:2a:66:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Oct 19 19:02:19 2025 GMT Not After : Oct 20 19:02:19 2025 GMT Subject: CN=76124fa9253afa27cc44bd0603025adabe1edbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:ed:8c:ba:c1:77:7b:2f:40:0a:67:5b:e8: 21:3c:cc:d6:56:7c:57:d1:97:7b:05:5e:9e:25:0f: 92:5f:34:f2:c9:d1:80:ae:cc:08:28:f3:c2:cd:48: 30:fc:5f:60:99:92:2e:98:1c:87:06:83:44:13:2e: ab:46:2a:2d:17:e6:58:27:ac:4e:9c:a7:c2:e4:38: 8f:64:8a:3b:d4:06:95:09:6c:1d:e3:4c:9f:22:a6: 49:af:fa:4c:52:f6:e8:e6:71:75:11:07:2a:ea:06: bd:e0:e6:ed:e9:70:cb:1b:08:31:ad:9b:36:6b:af: f6:b2:b7:2c:17:cb:c8:39:f8:ab:32:c5:ec:02:22: 82:09:8b:b9:b2:71:79:f2:98:e9:2a:6d:09:c1:ff: 7d:43:16:e2:2e:f2:fc:c3:4d:cd:2b:1f:e2:5b:fc: b9:cc:36:94:3b:89:99:55:01:ee:34:b1:89:de:09: 15:d9:d7:54:9b:14:b5:51:1c:4b:5c:b1:e8:95:f9: eb:e6:44:36:e3:ef:c9:52:80:2a:39:c4:73:a9:e2: 55:b1:24:15:e4:7b:1a:e6:1b:a6:97:7c:e5:89:ad: 6e:2e:f8:1d:87:17:04:91:0c:1e:d4:af:25:d2:5a: 96:03:eb:96:c0:25:e5:85:72:e7:20:b9:b4:b0:70: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:12:4F:A9:25:3A:FA:27:CC:44:BD:06:03:02:5A:DA:BE:1E:DB:D0 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cc:8c:91:9e:09:9c:e1:f3:69:e4:bd:c6:3a:2b:84:a7:93: 04:f1:ac:25:40:c1:70:8f:e8:b8:60:b3:ec:c2:50:a8:4d:b7: 0a:a9:a4:f0:5b:7f:f4:c1:28:7c:e5:a9:86:df:17:2c:a4:ce: 7b:b6:cc:a5:74:64:2f:1e:f7:ba:99:42:2e:66:08:b0:7f:bc: b6:2e:b0:d4:ab:dc:76:c0:2b:df:7a:fc:91:3f:cd:05:c4:ca: 03:05:1a:ee:0c:a4:7c:41:2c:e2:88:e0:9b:86:46:97:88:ac: a4:0e:46:34:ed:a4:9d:67:5b:bb:c8:be:0c:72:ef:ec:c8:96: b5:05:b9:7f:28:e0:70:4a:d7:0a:a0:d2:49:68:da:9b:5f:76: b9:4c:69:cf:63:c3:8d:e0:f4:83:3c:66:17:c3:44:59:20:69: 7e:43:65:dc:56:98:a8:b3:87:fb:9f:6d:c8:83:69:34:49:bf: fd:16:db:0c:ad:d1:3e:5e:72:10:ae:58:68:ca:27:7a:d6:4e: f9:c2:6b:36:f1:c8:f0:a0:2c:bf:cf:ee:89:b4:42:f6:ce:35: 1b:54:ae:3d:69:f7:33:c3:5a:c2:5d:4a:bb:07:32:36:e9:53: 9e:19:0d:e9:9e:ce:67:8a:88:f3:ee:79:14:9b:a9:87:09:c5: c1:48:fa:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn92eQ1/B0hbROR8tXIKmZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjUxMDE5MTkwMjE5WhcNMjUxMDIwMTkwMjE5WjAzMTEwLwYDVQQD Eyg3NjEyNGZhOTI1M2FmYTI3Y2M0NGJkMDYwMzAyNWFkYWJlMWVkYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WXtjLrBd3svQApnW+ghPMzWVnxX 0Zd7BV6eJQ+SXzTyydGArswIKPPCzUgw/F9gmZIumByHBoNEEy6rRiotF+ZYJ6xO nKfC5DiPZIo71AaVCWwd40yfIqZJr/pMUvbo5nF1EQcq6ga94Obt6XDLGwgxrZs2 a6/2srcsF8vIOfirMsXsAiKCCYu5snF58pjpKm0Jwf99QxbiLvL8w03NKx/iW/y5 zDaUO4mZVQHuNLGJ3gkV2ddUmxS1URxLXLHolfnr5kQ24+/JUoAqOcRzqeJVsSQV 5Hsa5huml3zlia1uLvgdhxcEkQwe1K8l0lqWA+uWwCXlhXLnILm0sHBoGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYST6klOvonzES9BgMCWtq+HtvQMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMyMkZ4J nOHzaeS9xjorhKeTBPGsJUDBcI/ouGCz7MJQqE23Cqmk8Ft/9MEofOWpht8XLKTO e7bMpXRkLx73uplCLmYIsH+8ti6w1KvcdsAr33r8kT/NBcTKAwUa7gykfEEs4ojg m4ZGl4ispA5GNO2knWdbu8i+DHLv7MiWtQW5fyjgcErXCqDSSWjam192uUxpz2PD jeD0gzxmF8NEWSBpfkNl3FaYqLOH+59tyINpNEm//RbbDK3RPl5yEK5YaMonetZO +cJrNvHI8KAsv8/uibRC9s41G1SuPWn3M8Nawl1KuwcyNulTnhkN6Z7OZ4qI8+55 FJuphwnFwUj6BA== -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:04 2025 by rpki-client