$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: sV1hCrZ3r86jnNgtFI/AwwaL2pBb8w0/NMNOfOlDGdw= Subject key identifier: 0D:3F:AB:39:EA:37:34:7B:08:42:A1:EF:35:31:97:1E:26:1F:5E:CC Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 0198D583AB512B7C40E83E6DE24BFFE19B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 15DA Signing time: Sat 23 Aug 2025 06:00:32 +0000 Manifest this update: Sat 23 Aug 2025 06:00:32 +0000 Manifest next update: Sun 24 Aug 2025 06:00:32 +0000 Files and hashes: 1: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 2: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 3: E4EO3fVQfns_Atan7LvwnUxSb-U.roa (hash: vCMtsAfqgWBbXg/7LBWpNDaXZdUfwGEZ9HYBIRzNGqg=) 4: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 5: K0UekIqjR-B4QFvYqyuisPoIQxw.roa (hash: 3citoMQ7WPnfAIuUtz455F9SJlw4amcf7l2KAPTkKyU=) 6: LChJCjYTp7k_v-5k2BAu7BZJhF0.roa (hash: szBN38iYKk77yi/AxxkaE9KosMFhroCb+4hbaxv0syg=) 7: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: tsY4H+BFdDXCCvJEEYAh7cs6+lTNDT2BU0p8txshbiA=) 8: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (hash: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=) 9: NMmvspbSz_XwW2dzGwRqq7qvcmc.roa (hash: s05EajvvXbwnQJsnmk5mSyf9Jmf5xLLa0C6Z0XLi8as=) 10: TrLp4LQGVKKizxXsmdCLRLZwmDo.roa (hash: UJmx6dzRXF6ld9YvoDPMR3Wt4jZTtuoIk+NqvTInIaE=) 11: Uj4ioPjjyq2i6q1RbS_v7BbYhXk.roa (hash: /miAvLKH3DzdtiGSUmMYLssvrEQ8WfCsfOBu4FHPpIE=) 12: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 13: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 14: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 15: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 16: uWP5tLXHh8TegI8ITQ2fajYk7Bk.roa (hash: p7cwv0kZBwvZxjXniYwKfKYOtSo5mCVTyzW9YFAlMeU=) 17: xVxmxBwyxdPVvoJBeSg8RoTQZq4.roa (hash: ehyf3E2QFU6W31hWkV4qD6umV0NGP3V9uq2ksIR6aeg=) 18: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:ab:51:2b:7c:40:e8:3e:6d:e2:4b:ff:e1:9b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Aug 23 06:00:32 2025 GMT Not After : Aug 24 06:00:32 2025 GMT Subject: CN=0d3fab39ea37347b0842a1ef3531971e261f5ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:c9:e9:45:99:17:ae:70:72:18:8a:8e:40: 35:d5:4a:18:c3:c6:df:7d:b5:02:15:15:13:62:fe: 44:84:23:6a:73:88:1e:44:b9:98:d1:f2:ed:8a:c8: 2d:2e:0f:9a:0f:f6:c2:22:25:26:50:aa:77:8f:3e: d9:0d:19:35:16:f5:66:a0:c1:26:84:7f:5a:2a:9f: f1:b9:fd:ed:97:8a:29:5f:ea:0b:e0:31:e4:77:90: ee:85:01:3b:54:5b:8c:1e:56:54:d2:44:6e:49:0b: ae:43:3f:d7:de:f2:a3:8f:87:87:b0:2f:a6:7b:70: c7:85:38:9e:a6:d8:41:5c:3e:19:6c:f1:48:33:40: ec:93:92:d3:3a:2c:da:18:bf:df:98:ea:18:32:88: 6c:03:bb:c6:7d:4c:9c:d8:e1:e5:61:fa:7e:6a:45: 00:09:bc:62:98:95:fa:98:73:2d:13:a3:0f:d3:37: 59:ac:2c:6c:a0:50:41:70:77:39:ef:94:e3:b2:25: c9:bc:de:1b:fb:5a:d1:4c:63:cc:04:e9:ee:49:38: 6f:25:d3:5e:17:2a:71:7d:b0:50:4a:41:d2:a7:14: 68:42:22:10:a8:13:b7:ff:fc:7c:37:25:97:ce:fe: 96:f2:e4:56:e0:5a:a9:03:2e:79:ab:97:33:7f:62: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3F:AB:39:EA:37:34:7B:08:42:A1:EF:35:31:97:1E:26:1F:5E:CC X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:06:6f:30:1c:21:bb:60:f0:c6:67:d3:cb:56:63:cb:ad:32: e4:46:7c:a0:98:33:b0:ce:92:73:1e:4e:fb:58:ef:48:60:a2: c5:13:a9:e6:d7:80:c8:23:00:0b:da:de:d8:67:9a:f3:74:f1: 5f:5d:14:c6:bf:1a:1a:36:6e:5a:c3:a1:74:9f:37:28:c8:8e: 51:b1:fe:08:dd:50:09:10:88:e6:3f:4d:48:6a:6b:5d:55:99: 79:31:b0:49:cc:a4:9d:b4:eb:c2:f1:71:dc:bc:d0:db:68:f6: 1d:96:11:ba:0a:81:a5:b3:f8:a5:ca:35:14:5c:fa:c4:93:46: 0f:2b:cc:5b:1b:fd:97:4f:e1:99:02:a4:15:33:47:a3:f3:ab: 8a:5e:0e:d0:c4:7b:59:1a:be:c3:5e:51:ab:0f:53:21:dc:9f: 4f:66:e8:0f:1a:60:95:8c:57:49:f4:79:30:83:f9:52:7b:cd: 6a:3f:42:dc:97:c6:f8:cc:b5:79:82:32:04:4f:8d:02:63:f2: 7d:1c:56:1b:f2:71:df:b4:83:76:73:61:e1:b1:90:38:d2:b9: f7:a4:1f:b9:10:9a:6f:78:2c:13:c7:01:27:b1:35:70:c5:47: 79:6f:c1:66:71:4a:48:48:61:8a:37:e8:20:7d:bc:94:37:9e: 21:4b:6a:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg6tRK3xA6D5t4kv/4ZtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUwODIzMDYwMDMyWhcNMjUwODI0MDYwMDMyWjAzMTEwLwYDVQQD EygwZDNmYWIzOWVhMzczNDdiMDg0MmExZWYzNTMxOTcxZTI2MWY1ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNvJ6UWZF65wchiKjkA11UoYw8bf fbUCFRUTYv5EhCNqc4geRLmY0fLtisgtLg+aD/bCIiUmUKp3jz7ZDRk1FvVmoMEm hH9aKp/xuf3tl4opX+oL4DHkd5DuhQE7VFuMHlZU0kRuSQuuQz/X3vKjj4eHsC+m e3DHhTiepthBXD4ZbPFIM0Dsk5LTOizaGL/fmOoYMohsA7vGfUyc2OHlYfp+akUA CbximJX6mHMtE6MP0zdZrCxsoFBBcHc575TjsiXJvN4b+1rRTGPMBOnuSThvJdNe FypxfbBQSkHSpxRoQiIQqBO3//x8NyWXzv6W8uRW4FqpAy55q5czf2JVPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0/qznqNzR7CEKh7zUxlx4mH17MMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQZvMBwh u2DwxmfTy1Zjy60y5EZ8oJgzsM6Scx5O+1jvSGCixROp5teAyCMAC9re2Gea83Tx X10Uxr8aGjZuWsOhdJ83KMiOUbH+CN1QCRCI5j9NSGprXVWZeTGwScyknbTrwvFx 3LzQ22j2HZYRugqBpbP4pco1FFz6xJNGDyvMWxv9l0/hmQKkFTNHo/Oril4O0MR7 WRq+w15Rqw9TIdyfT2boDxpglYxXSfR5MIP5UnvNaj9C3JfG+My1eYIyBE+NAmPy fRxWG/Jx37SDdnNh4bGQONK596QfuRCab3gsE8cBJ7E1cMVHeW/BZnFKSEhhijfo IH28lDeeIUtqJA== -----END CERTIFICATE-----Generated at Sat Aug 23 11:36:17 2025 by rpki-client