$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: ZVsCtNXDJqbOkE5hKbJOxBz/q4Lvqvy7IHH9ogErkGg= Subject key identifier: 5D:51:2E:26:9D:6F:CE:A9:C5:5C:B7:91:1F:07:96:1D:FE:13:C9:49 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 0199FC58F998AF7D4A550099BC703A4E6579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1678 Signing time: Sun 19 Oct 2025 12:01:53 +0000 Manifest this update: Sun 19 Oct 2025 12:01:53 +0000 Manifest next update: Mon 20 Oct 2025 12:01:53 +0000 Files and hashes: 1: 4XbrpnYb9fH0wMvekeYaI_ADm2M.roa (hash: KaRiqzoHzlwolVC6yfXNO0R4xyGemvvXu9DHgMiuTFw=) 2: 4o-wPw4Ynf0h1BoxC1fvHbONSvA.roa (hash: tiDaODRy5w9tozgqOg2LpStik670A6Jk8Q3uVbFTurY=) 3: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 4: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 5: 8CRAzgsoXZ3R79FWWctj3ImK9Mw.roa (hash: 6NM6Jwn6Hj02hW0yqUwKsiGgHdJV/f7oetsPrh6Xe3M=) 6: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 7: K0UekIqjR-B4QFvYqyuisPoIQxw.roa (hash: 3citoMQ7WPnfAIuUtz455F9SJlw4amcf7l2KAPTkKyU=) 8: LChJCjYTp7k_v-5k2BAu7BZJhF0.roa (hash: szBN38iYKk77yi/AxxkaE9KosMFhroCb+4hbaxv0syg=) 9: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: SZW7/Oc2bjYXcWbI4XldkdeAUaBBU1TckBBx/yCUx70=) 10: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (hash: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=) 11: NMmvspbSz_XwW2dzGwRqq7qvcmc.roa (hash: s05EajvvXbwnQJsnmk5mSyf9Jmf5xLLa0C6Z0XLi8as=) 12: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 13: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 14: kCRuq7L98PE6Zt6HyZcUPfIpvh8.roa (hash: fBWG5ks98F3nxnikXxLtKqW0MxF2K/jtQo2UYb1fIsg=) 15: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 16: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 17: xVxmxBwyxdPVvoJBeSg8RoTQZq4.roa (hash: ehyf3E2QFU6W31hWkV4qD6umV0NGP3V9uq2ksIR6aeg=) 18: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:f9:98:af:7d:4a:55:00:99:bc:70:3a:4e:65:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Oct 19 12:01:53 2025 GMT Not After : Oct 20 12:01:53 2025 GMT Subject: CN=5d512e269d6fcea9c55cb7911f07961dfe13c949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:f8:70:05:84:4a:68:d6:27:5c:70:07:8d: 39:04:db:0f:d0:b4:4f:36:67:1b:f0:76:4e:7f:68: d9:61:68:50:c0:b6:e8:81:89:bb:2d:8c:51:5f:2c: 5b:e4:94:a1:a7:a7:13:9c:38:74:c8:a4:2f:3d:e8: 71:ab:19:7b:9e:0e:b1:45:6f:da:dd:c1:56:92:5b: 35:2f:2b:db:a5:53:5e:69:2e:43:32:c8:6d:fe:e3: ee:46:a3:3f:bc:99:da:16:d1:8a:f9:06:2f:1b:7f: ce:dc:aa:94:ae:0c:8e:c2:65:e5:6c:a6:2f:47:5b: 3b:05:c4:2a:6d:63:3f:46:70:0e:e5:af:a4:03:53: bc:c6:2c:fe:93:53:f9:09:68:e0:3c:8b:a7:fa:90: 6a:6b:5a:0d:7e:4c:e2:e0:34:69:ff:e5:b9:50:11: a4:4c:48:2e:c9:2d:e0:b9:09:ea:a6:99:53:46:7c: 6b:ba:1a:4c:14:23:3c:a9:fb:a2:00:e0:17:cb:44: e4:12:2f:e9:4f:38:20:40:d2:f4:ed:e0:04:b8:89: 9e:8f:c4:e3:38:53:a9:34:2d:bd:6f:47:08:24:c8: 4b:da:84:e8:c2:42:a8:5b:91:0c:20:31:b4:15:0c: 59:79:ae:c5:96:f8:2b:28:fe:9a:01:0c:ee:84:05: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:51:2E:26:9D:6F:CE:A9:C5:5C:B7:91:1F:07:96:1D:FE:13:C9:49 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:47:1a:0b:19:34:f3:fb:84:f3:4e:dc:29:5f:cd:f7:4b:17: 13:77:21:3c:95:48:f4:1a:09:7c:8c:9b:dc:24:d2:2f:06:af: 90:cb:19:94:68:61:0e:85:d4:09:6c:b9:33:9b:07:62:dc:3a: e7:7d:b3:e6:69:9e:5c:20:87:7f:45:bd:d9:90:39:e3:f0:fd: 95:59:c3:aa:ac:17:2f:f5:45:ca:14:df:04:9e:57:b8:84:fa: 5f:df:b7:ed:cd:eb:7a:23:c9:07:94:15:d3:1b:53:b0:07:af: 6d:15:64:68:ca:e8:0d:b2:8c:ca:c2:88:f5:e2:9b:89:0c:d7: d4:95:5e:3b:83:f3:34:46:c0:91:b0:37:d1:17:5d:e1:af:d9: 54:88:23:c5:89:ef:a8:6a:6e:88:9a:fc:bb:05:37:b0:a9:e3: b6:42:58:95:81:a1:c0:74:1c:b1:08:ac:81:9a:3a:94:be:9d: 0c:f1:20:0b:1e:4c:4e:42:69:8b:e3:19:be:41:f6:cb:5d:14: 87:b4:0b:20:34:16:5c:b1:ea:46:26:a8:df:c5:b3:df:97:71: 0b:8e:df:0a:3d:75:0e:1f:aa:77:52:79:e1:6a:ad:df:8c:81: 3d:5d:97:35:af:fb:3e:5c:7c:f4:2d:08:76:69:94:69:2c:08: c3:af:df:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WPmYr31KVQCZvHA6TmV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMDE5MTIwMTUzWhcNMjUxMDIwMTIwMTUzWjAzMTEwLwYDVQQD Eyg1ZDUxMmUyNjlkNmZjZWE5YzU1Y2I3OTExZjA3OTYxZGZlMTNjOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9j4cAWESmjWJ1xwB405BNsP0LRP Nmcb8HZOf2jZYWhQwLbogYm7LYxRXyxb5JShp6cTnDh0yKQvPehxqxl7ng6xRW/a 3cFWkls1LyvbpVNeaS5DMsht/uPuRqM/vJnaFtGK+QYvG3/O3KqUrgyOwmXlbKYv R1s7BcQqbWM/RnAO5a+kA1O8xiz+k1P5CWjgPIun+pBqa1oNfkzi4DRp/+W5UBGk TEguyS3guQnqpplTRnxruhpMFCM8qfuiAOAXy0TkEi/pTzggQNL07eAEuImej8Tj OFOpNC29b0cIJMhL2oTowkKoW5EMIDG0FQxZea7FlvgrKP6aAQzuhAWt7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1RLiadb86pxVy3kR8Hlh3+E8lJMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0caCxk0 8/uE807cKV/N90sXE3chPJVI9BoJfIyb3CTSLwavkMsZlGhhDoXUCWy5M5sHYtw6 532z5mmeXCCHf0W92ZA54/D9lVnDqqwXL/VFyhTfBJ5XuIT6X9+37c3reiPJB5QV 0xtTsAevbRVkaMroDbKMysKI9eKbiQzX1JVeO4PzNEbAkbA30Rdd4a/ZVIgjxYnv qGpuiJr8uwU3sKnjtkJYlYGhwHQcsQisgZo6lL6dDPEgCx5MTkJpi+MZvkH2y10U h7QLIDQWXLHqRiao38Wz35dxC47fCj11Dh+qd1J54Wqt34yBPV2XNa/7Plx89C0I dmmUaSwIw6/fwQ== -----END CERTIFICATE-----Generated at Sun Oct 19 17:55:45 2025 by rpki-client