$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft File: LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft (raw, json) Hash identifier: RJO8FZoc12ctlUG0jNZeb9yUHbszFKtP4pKmFUXsVB8= Subject key identifier: 49:C2:E0:FF:22:FE:63:2B:C4:28:9C:39:40:7B:0D:AE:68:1A:36:1B Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019A4E18E2B9A0453C4DC34B7006B26B2B70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft Manifest number: 0D74 Signing time: Tue 04 Nov 2025 09:00:44 +0000 Manifest this update: Tue 04 Nov 2025 09:00:44 +0000 Manifest next update: Wed 05 Nov 2025 09:00:44 +0000 Files and hashes: 1: 1-IWmPGtJ5CTq3OMRiJwJOr0g26I.roa (hash: I9qlf/NVdWHCcUFphZpTAjHqHpTV98ZokV5i2bE0ieg=) 2: IRdP1zrKnBVNovx793Jr6EUySCc.roa (hash: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=) 3: IqxvVxYpQXGyjlpb247YsLAsLrA.roa (hash: pmZht21od602QeGb4drbX2CGGKKQ4ZeceYEOlf8BpHs=) 4: LEiX1SaP4x26mCBJZ2PPl_8Lumg.roa (hash: 6cis2wW43qk4NjiRIRQf/WBXkWeDQ3D7xIxBVbv0k0k=) 5: LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl (hash: i7B6Cr0r3OGxk+91Jc1zexuEppRWJ9/J/zum33ZbLhY=) 6: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (hash: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=) 7: awm_v1iQmCWCv4tPtpoTKU4uPCU.roa (hash: x+eiEL+9g/kKLxu8mW8KpA5IN4sq7kn4Kf/NPE5f93g=) 8: hZftEdJ1i62Ff0o-eHl2JY1ihH0.roa (hash: w0uiSPz/sQM+Jk9yJimBEk2uQ4kCzCXX1QVlpDxUdak=) 9: jOTtZQcz5CD0eIF7zgXcfyooUME.roa (hash: n7TWbhbMTRNfsoNNdyGYWkmPwoq9ACx/VZl0EabCgC0=) 10: ktY0ZVKLVZ2-9f5VvidiSkAw1N8.roa (hash: /OxD1jMUUoFP547t19rFpdiFhM+fqd8IyqwhJNcn7vE=) 11: ly_AxUwwGayHz1D1tXiXd6I2K-o.roa (hash: stdA2q0pp81tad1unWJbT9WVVFHdWvlWDO33rK55EMo=) 12: m_n_guLqq0tYW5rCZkO296a5snc.roa (hash: bWXjQ23WKPX4qSBJXJ5pklNRH7pCS+2Y4V8yyzzjUAU=) 13: mkZu9zQ15SLcNKrMJf6H8zmEvEM.roa (hash: 0E608m04u95NudZY5nPiw1Gcr+rRgquoxj3/d81s98A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:18:e2:b9:a0:45:3c:4d:c3:4b:70:06:b2:6b:2b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Nov 4 09:00:44 2025 GMT Not After : Nov 5 09:00:44 2025 GMT Subject: CN=49c2e0ff22fe632bc4289c39407b0dae681a361b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5d:f9:9b:10:fc:f0:c7:a5:30:3d:ac:60:a7: fe:6a:2c:c2:d7:29:74:3f:40:05:65:97:4f:3a:db: 4b:a0:ba:ca:de:2b:c7:2c:12:d5:36:35:3e:c1:b1: 32:d0:0c:14:e8:6f:c5:8d:46:8a:fd:0e:c4:50:39: 65:5c:8b:60:cf:d9:12:91:83:2c:1f:8a:db:04:e9: e2:20:20:04:27:a8:3e:52:91:4d:2c:9b:a2:93:ac: 9d:f2:a3:81:ea:c2:28:73:01:3c:85:e7:9d:25:84: 9e:3b:89:46:06:64:18:30:f2:29:6e:15:ae:e7:e7: 9f:73:d7:64:e2:02:82:e7:7e:69:4f:dc:26:30:e9: be:81:56:86:cc:88:17:e5:e1:0e:79:e9:16:96:dd: d6:5e:fa:fe:fe:6f:c1:0a:69:e3:24:e9:20:91:16: 98:89:4e:56:26:5b:0e:16:ec:a1:7b:0c:54:f3:36: 01:e8:a3:73:64:22:11:96:8a:ea:2c:93:32:19:fa: 11:7d:05:86:e5:23:01:45:ae:bc:ff:5e:f1:d5:70: 75:df:15:20:68:2e:b2:dd:b4:df:fb:9c:42:fa:61: cf:51:0e:63:d0:a2:3e:e7:4a:a4:dd:f0:05:75:38: c3:a0:aa:64:59:11:48:5d:fa:26:52:bf:8a:32:4d: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C2:E0:FF:22:FE:63:2B:C4:28:9C:39:40:7B:0D:AE:68:1A:36:1B X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a0:ba:38:f4:9d:46:74:36:3e:66:94:3d:e3:c9:06:16:44: 57:6b:74:a5:4f:ad:af:06:67:9d:9b:d4:1d:f4:f4:61:8b:82: 33:cd:b6:c6:2a:09:0d:31:ae:55:ed:7a:37:76:18:f8:a4:60: 77:7e:21:c7:86:93:f0:d1:82:f6:93:28:e2:95:e2:24:63:f0: d6:49:d0:13:28:5b:93:93:55:d3:a4:b2:b9:cc:c5:2e:be:71: 05:fe:9d:e8:88:bf:54:3d:4d:c4:4c:0a:8e:7e:69:50:bc:6d: 83:43:d7:53:cf:89:10:50:97:20:1b:3c:c1:09:61:2e:36:c9: b6:24:36:5d:49:7b:e1:36:a2:00:76:a3:b5:c3:73:bd:6b:f7: c5:9d:88:77:64:7d:89:aa:45:ca:71:3b:7a:24:5b:b9:8d:f1: 59:4d:2a:61:fa:d9:fd:53:99:fc:73:33:f4:50:42:2f:ce:f4: ff:a3:52:ba:d0:f4:ba:96:52:ee:58:53:be:f1:45:4f:38:db: 1b:a3:06:a5:be:f3:0c:16:5e:95:fb:2f:a8:7d:4c:49:8b:f8: d3:10:bd:f6:a9:e3:16:e6:02:29:72:be:2d:bb:fd:21:25:b5: 3c:64:20:68:f6:cc:97:b1:9c:80:87:32:71:5f:4f:8b:a7:70: 66:44:2a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOGOK5oEU8TcNLcAayaytwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjUxMTA0MDkwMDQ0WhcNMjUxMTA1MDkwMDQ0WjAzMTEwLwYDVQQD Eyg0OWMyZTBmZjIyZmU2MzJiYzQyODljMzk0MDdiMGRhZTY4MWEzNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+V35mxD88MelMD2sYKf+aizC1yl0 P0AFZZdPOttLoLrK3ivHLBLVNjU+wbEy0AwU6G/FjUaK/Q7EUDllXItgz9kSkYMs H4rbBOniICAEJ6g+UpFNLJuik6yd8qOB6sIocwE8heedJYSeO4lGBmQYMPIpbhWu 5+efc9dk4gKC535pT9wmMOm+gVaGzIgX5eEOeekWlt3WXvr+/m/BCmnjJOkgkRaY iU5WJlsOFuyhewxU8zYB6KNzZCIRlorqLJMyGfoRfQWG5SMBRa68/17x1XB13xUg aC6y3bTf+5xC+mHPUQ5j0KI+50qk3fAFdTjDoKpkWRFIXfomUr+KMk0BiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnC4P8i/mMrxCicOUB7Da5oGjYbMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKC6OPSd RnQ2PmaUPePJBhZEV2t0pU+trwZnnZvUHfT0YYuCM822xioJDTGuVe16N3YY+KRg d34hx4aT8NGC9pMo4pXiJGPw1knQEyhbk5NV06SyuczFLr5xBf6d6Ii/VD1NxEwK jn5pULxtg0PXU8+JEFCXIBs8wQlhLjbJtiQ2XUl74TaiAHajtcNzvWv3xZ2Id2R9 iapFynE7eiRbuY3xWU0qYfrZ/VOZ/HMz9FBCL870/6NSutD0upZS7lhTvvFFTzjb G6MGpb7zDBZelfsvqH1MSYv40xC99qnjFuYCKXK+Lbv9ISW1PGQgaPbMl7GcgIcy cV9Pi6dwZkQqqQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:41:45 2025 by rpki-client