$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: Sl5RrekJAOSLKrWjMCUtwzgw40nQ6KHLriGJPasJprU= Subject key identifier: E4:84:7C:83:67:63:CA:13:51:EE:D2:0E:65:E1:5C:9A:FD:F0:C8:71 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 0197B6694BFEE83FBC252F57F03613EA12A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 153A Signing time: Sat 28 Jun 2025 12:00:43 +0000 Manifest this update: Sat 28 Jun 2025 12:00:43 +0000 Manifest next update: Sun 29 Jun 2025 12:00:43 +0000 Files and hashes: 1: 1e3pGqIyrfm9l4tqQ_0wPiVutMo.roa (hash: 24aexiYaXRGqjdfXTQOXvZln1lsCByoueSHYTaaj6Pg=) 2: 5NarqgL1IqRhroqsljH0A9V5qCo.roa (hash: 8kRquWjA2VpTsIouS+9omLPNkeJK9gTo7+86zZ6sCIM=) 3: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 4: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 5: CufnYSstlNtENOE9efd7-2ln8Es.roa (hash: z8qQP+b43sULkWDkQAPO4p2CYsOjqrih9Z+imFI0Iok=) 6: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 7: HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa (hash: kHbTsJD5NdmK1vLZSQigG4P1BUyQFBvibnG4XtzolO8=) 8: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: kKVZVEMshjs7GnkGhduvCpadJ95BYR/gDe8bU3KVToU=) 9: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (hash: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=) 10: S31ZOfjUKXHqumIitPUzwNH5MBo.roa (hash: 6OktdKUpvFcNMtIKT9x1/tMHyAezG6+Rn6sN9L0iNIc=) 11: Uj4ioPjjyq2i6q1RbS_v7BbYhXk.roa (hash: /miAvLKH3DzdtiGSUmMYLssvrEQ8WfCsfOBu4FHPpIE=) 12: VgVq-6TLMiL7Sau_RtgQ3m_Vpv0.roa (hash: 1YKBUCdRYV8CfVZcj+eVWU3GK5hSdpogHam93h2rJ6k=) 13: ZaiMwzcGGnlOX7VCckUCRe2aoeg.roa (hash: BMX/w49Otk7OXGBq6Wah+reou3l0Xwz3nCkRtZ68UpQ=) 14: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 15: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 16: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 17: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 18: uWP5tLXHh8TegI8ITQ2fajYk7Bk.roa (hash: p7cwv0kZBwvZxjXniYwKfKYOtSo5mCVTyzW9YFAlMeU=) 19: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:69:4b:fe:e8:3f:bc:25:2f:57:f0:36:13:ea:12:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jun 28 12:00:43 2025 GMT Not After : Jun 29 12:00:43 2025 GMT Subject: CN=e4847c836763ca1351eed20e65e15c9afdf0c871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:f0:f7:87:91:f3:c2:58:c1:c5:a2:8a:0a: 95:58:72:9c:b7:ff:89:e5:e0:b1:09:a8:0a:43:2a: b1:5d:c3:95:6f:33:03:9d:e8:0b:cc:db:ad:ac:e2: dd:e2:b1:4d:80:ad:42:8e:ef:31:c6:82:0e:85:c8: b8:c0:ce:04:6a:4d:7d:50:60:2d:1e:65:5d:48:56: da:df:77:79:89:1b:7e:b0:fb:4a:1b:73:79:82:d5: 30:50:bf:32:26:0e:94:f6:7a:2b:46:76:79:73:f1: 37:38:93:70:8c:a2:07:eb:b3:86:79:9e:7c:d0:8d: 3b:f4:75:a0:91:02:e7:ca:38:10:bb:5d:ac:91:5b: fc:74:9c:7a:52:e7:7e:de:5f:e9:46:bd:56:7a:19: a2:f3:e2:de:f6:1f:59:b1:44:f2:61:8e:d2:bd:81: 6c:54:e3:a9:e1:50:42:59:e1:63:c3:8b:3e:45:b0: 32:12:6f:03:63:85:6c:af:1a:5d:7e:d1:ce:99:91: 3a:1d:22:d9:df:86:3b:78:d2:36:a3:da:6d:7f:0b: e9:84:50:eb:a3:44:fb:05:ec:d8:dd:55:bf:6f:45: 5b:ef:4d:8a:39:5b:10:f5:6e:7c:ca:ed:6a:97:68: 34:12:8e:73:93:8c:38:ce:1f:72:bc:a8:56:b2:21: 69:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:84:7C:83:67:63:CA:13:51:EE:D2:0E:65:E1:5C:9A:FD:F0:C8:71 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cf:c3:82:75:e1:e2:98:e1:0d:da:42:0c:53:2e:89:22:6c: 7a:41:cc:b8:0c:fe:f3:17:e7:44:cd:f0:a6:a6:a2:78:31:42: 08:0e:36:7a:07:39:56:77:e9:bc:40:2d:0a:d2:b7:40:de:3a: f8:18:9c:89:f8:03:40:8c:4e:d4:da:06:ad:a1:7d:ea:ae:f2: 2e:01:c2:48:1b:18:43:6c:5a:9b:c7:28:ce:70:d0:54:bf:90: c5:11:ab:bc:ec:8c:ab:c8:40:41:e3:6b:7e:07:54:61:a2:b3: 87:b1:b7:2b:fb:98:32:6a:0d:e6:f2:8d:99:70:bf:56:f7:4a: 42:55:61:cd:31:23:d1:a1:8f:19:14:64:e1:0f:eb:04:f5:4c: 3f:5d:49:a2:21:55:06:36:51:c7:d9:10:c5:3c:fb:23:da:3c: 79:b1:af:1f:e4:54:4a:df:8e:b5:c8:42:1d:af:3f:43:91:6f: 7a:96:80:bc:9d:c0:46:ab:73:8f:6e:c7:4d:93:18:83:23:29: c4:d8:a7:fd:d4:8c:95:b4:7d:cd:77:f8:a3:f6:e4:55:1b:28: 6e:b8:fb:8c:0b:bf:1b:ac:fb:65:88:5f:3f:fb:97:5a:39:f4: ed:17:e1:c2:ce:28:84:6f:c6:3d:35:ca:fc:08:f4:54:a6:47: 8e:57:6c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2aUv+6D+8JS9X8DYT6hKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUwNjI4MTIwMDQzWhcNMjUwNjI5MTIwMDQzWjAzMTEwLwYDVQQD EyhlNDg0N2M4MzY3NjNjYTEzNTFlZWQyMGU2NWUxNWM5YWZkZjBjODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dDw94eR88JYwcWiigqVWHKct/+J 5eCxCagKQyqxXcOVbzMDnegLzNutrOLd4rFNgK1Cju8xxoIOhci4wM4Eak19UGAt HmVdSFba33d5iRt+sPtKG3N5gtUwUL8yJg6U9norRnZ5c/E3OJNwjKIH67OGeZ58 0I079HWgkQLnyjgQu12skVv8dJx6Uud+3l/pRr1Wehmi8+Le9h9ZsUTyYY7SvYFs VOOp4VBCWeFjw4s+RbAyEm8DY4VsrxpdftHOmZE6HSLZ34Y7eNI2o9ptfwvphFDr o0T7BezY3VW/b0Vb702KOVsQ9W58yu1ql2g0Eo5zk4w4zh9yvKhWsiFpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSEfINnY8oTUe7SDmXhXJr98MhxMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8/DgnXh 4pjhDdpCDFMuiSJsekHMuAz+8xfnRM3wpqaieDFCCA42egc5VnfpvEAtCtK3QN46 +BicifgDQIxO1NoGraF96q7yLgHCSBsYQ2xam8coznDQVL+QxRGrvOyMq8hAQeNr fgdUYaKzh7G3K/uYMmoN5vKNmXC/VvdKQlVhzTEj0aGPGRRk4Q/rBPVMP11JoiFV BjZRx9kQxTz7I9o8ebGvH+RUSt+OtchCHa8/Q5FvepaAvJ3ARqtzj27HTZMYgyMp xNin/dSMlbR9zXf4o/bkVRsobrj7jAu/G6z7ZYhfP/uXWjn07Rfhws4ohG/GPTXK /Aj0VKZHjldsFw== -----END CERTIFICATE-----Generated at Sat Jun 28 20:30:22 2025 by rpki-client