$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: Egig8uHx5x3PgwDIMTykRcAn6jxniNoxshoT3pGp1Dc= Subject key identifier: FC:31:2E:DE:2D:59:4F:E2:E2:2F:1C:FF:3B:58:BA:FB:01:64:00:41 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 0199FB5A8C4B30A184B3D573376893C8B8C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0854 Signing time: Sun 19 Oct 2025 07:23:59 +0000 Manifest this update: Sun 19 Oct 2025 07:23:59 +0000 Manifest next update: Mon 20 Oct 2025 07:23:59 +0000 Files and hashes: 1: 3ltCFdZy4V3GyE2PWFgAfClRC2E.roa (hash: MvKcHOfmLjkCC6ae2mrrpxSjZGHgMZgVcn/g1k0NPNY=) 2: Hyeufykk73xgcSneHYi8ECCnPYc.roa (hash: 5VqCSOjA5bcQ+XGnXlR3yfwEpjMPFBK+PpNlY2M7gXw=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: QR2YqgWO3HgryB-jCKLQlEjjTqE.roa (hash: HEp/u92BN+OXq/U3xuaiaHmavKdXD4q9na0CF8S1PUg=) 6: _YY0UJCJbQTIa1XDSLBMiZ983vo.roa (hash: Gk8qdq6LrPLlWU/Jmg7W6QhRrabuxZ2rc8Fg/yM8yME=) 7: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: iZnCkTImCvQJuWE6Uos60nsBeAc.roa (hash: A+XXsOgpp9E8wrC4jlevUH3rfTq9qVISkfFyAQgNpWw=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: EkSYUAEH14d/OakDa8bM6J2/pumK+52rpv3eToKi99I=) 11: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 12: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 13: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:5a:8c:4b:30:a1:84:b3:d5:73:37:68:93:c8:b8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Oct 19 07:23:59 2025 GMT Not After : Oct 20 07:23:59 2025 GMT Subject: CN=fc312ede2d594fe2e22f1cff3b58bafb01640041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:1a:96:a8:5a:40:8d:6b:2d:0d:17:11:7d: 76:80:2c:7d:b7:96:81:f2:22:6b:9d:97:49:ca:5a: fb:c3:ef:1f:9d:84:f9:fe:fc:07:8a:17:f9:ae:a0: 09:c2:e9:37:98:ae:8d:d6:d0:68:30:b7:e6:79:0d: 2f:55:31:43:8a:74:78:ce:2a:2e:37:0b:9e:a4:58: 68:67:6c:78:11:09:0f:0d:c9:2d:a3:bc:31:26:ba: 63:c0:60:5e:09:40:e4:f2:4f:d9:a0:af:0d:d7:2e: 1c:28:ca:09:79:95:28:39:ae:29:7d:a5:2d:c4:de: c8:22:76:b1:60:c6:2a:8b:7b:06:29:b6:c9:a8:47: 14:12:7f:27:16:ec:6d:1c:b9:19:57:6b:5d:0f:8d: 25:aa:54:ad:33:96:c6:52:0f:16:eb:54:89:59:69: d8:65:8c:8f:72:2a:87:1b:32:50:0e:89:ef:a9:3a: d0:1f:c6:0f:85:3e:67:58:14:a0:97:85:31:50:41: b2:d9:5a:40:74:fc:5d:91:fc:1b:67:6a:7e:f9:74: 43:92:47:ec:22:0b:b2:d5:c0:d2:0a:74:31:51:86: c7:cc:66:6f:fc:61:6f:0e:c4:e3:46:3a:84:9b:7a: ff:73:e4:f7:7a:13:9e:1e:fc:74:3f:63:0b:c5:af: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:31:2E:DE:2D:59:4F:E2:E2:2F:1C:FF:3B:58:BA:FB:01:64:00:41 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:14:b5:d7:23:dd:7a:f8:a2:34:e0:f1:13:8f:7f:0a:12:69: 1c:af:54:b0:61:af:b0:c2:f9:6e:7e:64:84:fb:11:79:81:b6: b1:f0:3e:63:1b:4e:06:b6:a2:c6:78:8e:c0:d9:83:ba:ec:02: d6:54:84:6e:b2:35:4b:7f:7c:d2:7d:88:6d:2f:de:a3:70:78: 0a:09:02:a7:b0:ca:46:44:a2:44:99:2f:fe:e2:57:03:13:7c: f2:3b:35:a3:8b:5b:09:1e:bd:ab:07:e8:64:8c:ca:d8:9e:94: e2:a5:03:ca:73:7b:82:53:8f:46:7d:d8:8f:1a:dc:16:d7:cf: 06:86:c6:12:8c:da:6f:d4:44:0d:52:1b:a8:16:38:4b:91:72: f9:5b:11:6c:a3:3c:61:0a:2e:eb:84:a4:c2:9f:fa:9f:67:4c: a4:15:e2:3b:29:4b:a7:be:21:9a:bd:f0:1b:8e:b0:9e:62:ef: c1:4a:79:97:01:24:81:08:ea:2d:fb:e8:2b:2a:7d:dd:25:90: 74:b0:30:2d:68:f4:dc:a6:90:02:2b:12:70:41:25:49:02:26: 15:b8:03:2e:f3:4e:bf:db:5c:e2:2a:13:30:5d:81:82:b7:ba: 52:cd:97:d3:a7:b2:bd:75:bd:6e:f2:d7:17:75:88:6a:d3:91: b4:4e:d7:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7WoxLMKGEs9VzN2iTyLjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUxMDE5MDcyMzU5WhcNMjUxMDIwMDcyMzU5WjAzMTEwLwYDVQQD EyhmYzMxMmVkZTJkNTk0ZmUyZTIyZjFjZmYzYjU4YmFmYjAxNjQwMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2walqhaQI1rLQ0XEX12gCx9t5aB 8iJrnZdJylr7w+8fnYT5/vwHihf5rqAJwuk3mK6N1tBoMLfmeQ0vVTFDinR4ziou NwuepFhoZ2x4EQkPDckto7wxJrpjwGBeCUDk8k/ZoK8N1y4cKMoJeZUoOa4pfaUt xN7IInaxYMYqi3sGKbbJqEcUEn8nFuxtHLkZV2tdD40lqlStM5bGUg8W61SJWWnY ZYyPciqHGzJQDonvqTrQH8YPhT5nWBSgl4UxUEGy2VpAdPxdkfwbZ2p++XRDkkfs Iguy1cDSCnQxUYbHzGZv/GFvDsTjRjqEm3r/c+T3ehOeHvx0P2MLxa9PmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwxLt4tWU/i4i8c/ztYuvsBZABBMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxS11yPd eviiNODxE49/ChJpHK9UsGGvsML5bn5khPsReYG2sfA+YxtOBraixniOwNmDuuwC 1lSEbrI1S3980n2IbS/eo3B4CgkCp7DKRkSiRJkv/uJXAxN88js1o4tbCR69qwfo ZIzK2J6U4qUDynN7glOPRn3YjxrcFtfPBobGEozab9REDVIbqBY4S5Fy+VsRbKM8 YQou64Skwp/6n2dMpBXiOylLp74hmr3wG46wnmLvwUp5lwEkgQjqLfvoKyp93SWQ dLAwLWj03KaQAisScEElSQImFbgDLvNOv9tc4ioTMF2Bgre6Us2X06eyvXW9bvLX F3WIatORtE7XcA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:28:14 2025 by rpki-client