$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: m/u8ccvmkrDZPUDvUKTCm/pK4yHQzAsKHYqZz1X8pxA= Subject key identifier: 0A:9E:F3:26:9C:EB:00:5E:9F:1A:70:B7:72:30:13:49:EE:F7:17:4F Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019A4F2B67339E150DE6D09BFE2CC69BF591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 14D8 Signing time: Tue 04 Nov 2025 14:00:35 +0000 Manifest this update: Tue 04 Nov 2025 14:00:35 +0000 Manifest next update: Wed 05 Nov 2025 14:00:35 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: IeyJXSRVvN+GN6U1wfZ5wOKMF3fN/oNw3bS9YV25sB8=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 7: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: vIlo6Dk-dYUOv5-nktddKH_zbFQ.roa (hash: dU3Xza9rfoKJOlEJVf8d8iW9v0mUKy4oBSU35lnK1P4=) 11: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:67:33:9e:15:0d:e6:d0:9b:fe:2c:c6:9b:f5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Nov 4 14:00:35 2025 GMT Not After : Nov 5 14:00:35 2025 GMT Subject: CN=0a9ef3269ceb005e9f1a70b772301349eef7174f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:3e:b6:55:00:6b:5c:e1:06:e4:90:a7:11: 45:69:c9:19:93:96:8e:f4:2e:73:8b:84:6a:72:00: 22:4f:2e:c3:9a:e4:3a:f5:b0:6e:6c:9a:dd:44:53: 8f:ca:3c:24:58:a4:b0:eb:30:0c:2c:71:03:78:4d: 20:84:18:11:31:04:89:ad:c9:87:a9:c3:f1:39:a8: 70:e1:8d:a7:59:fa:c1:1e:5d:4c:11:0a:4b:a6:7a: fe:78:b3:a5:31:76:25:d0:c6:0b:51:c6:93:70:f5: 35:56:20:c2:3c:9a:4d:75:a4:af:e3:b7:4c:d3:34: c0:d5:3e:ea:b5:b9:94:40:2b:a3:a2:cd:b1:ef:a0: bd:13:59:f7:0b:e0:ce:34:b4:76:de:59:fe:6e:19: 3f:21:b6:d5:ab:ad:86:f9:55:3f:e1:fd:97:8e:44: c8:f0:10:e9:43:31:a7:de:11:d2:19:c2:68:2a:b5: 74:30:26:46:b9:25:86:02:29:7a:2d:a2:67:62:18: 82:b2:58:20:ca:38:b9:ef:fe:6d:27:c6:b9:d2:75: 26:3c:d4:c9:be:9e:b2:39:4c:5b:97:78:5c:12:de: bb:f7:58:6c:57:09:a6:54:9a:78:8d:d0:95:cf:68: bd:88:5c:ae:da:49:93:53:49:32:07:59:e4:38:dc: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:F3:26:9C:EB:00:5E:9F:1A:70:B7:72:30:13:49:EE:F7:17:4F X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:66:65:46:10:47:fb:b0:5b:75:91:38:be:10:a5:e7:62:53: a1:ad:91:a0:98:dc:06:1f:3a:45:7e:75:f9:b1:a7:7d:2b:f3: 66:22:9a:04:ad:94:6c:9f:e6:d8:cd:ff:08:b1:fe:40:00:f6: cc:6b:48:f1:f7:6d:a7:5e:75:63:f3:ee:2d:5d:47:38:e8:dd: fe:7b:f7:fb:63:de:41:fe:0a:cf:1d:9f:a2:52:20:17:1e:c0: 47:1a:c7:9c:d5:ee:38:61:20:a3:f8:94:62:9c:26:e0:24:9c: 8e:a3:65:0f:76:e3:f9:2e:4c:d0:29:8a:03:8c:76:63:cf:64: 3c:d4:b3:bc:07:c1:21:1a:85:5c:44:e1:f4:87:e3:16:22:f1: 73:e7:84:de:a0:2f:50:5e:1a:ac:82:98:90:db:d3:1f:be:6a: 80:9e:83:6a:fc:c2:18:6b:ea:2c:84:68:38:71:a1:9e:79:dc: 52:88:25:81:19:a5:04:15:f6:60:62:c5:4d:19:dc:bf:43:e9: 9f:e6:68:f4:50:b5:93:e4:66:1b:43:d8:f6:62:2a:6c:3c:6b: fc:e4:7e:27:f7:8a:86:c5:b4:bc:41:6b:88:9e:a2:17:34:50: e2:e1:0a:96:b7:e7:4e:a3:5a:1f:73:62:ee:2a:88:3f:b5:1a: be:bc:ba:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK2cznhUN5tCb/izGm/WRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUxMTA0MTQwMDM1WhcNMjUxMTA1MTQwMDM1WjAzMTEwLwYDVQQD EygwYTllZjMyNjljZWIwMDVlOWYxYTcwYjc3MjMwMTM0OWVlZjcxNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYo+tlUAa1zhBuSQpxFFackZk5aO 9C5zi4RqcgAiTy7DmuQ69bBubJrdRFOPyjwkWKSw6zAMLHEDeE0ghBgRMQSJrcmH qcPxOahw4Y2nWfrBHl1MEQpLpnr+eLOlMXYl0MYLUcaTcPU1ViDCPJpNdaSv47dM 0zTA1T7qtbmUQCujos2x76C9E1n3C+DONLR23ln+bhk/IbbVq62G+VU/4f2XjkTI 8BDpQzGn3hHSGcJoKrV0MCZGuSWGAil6LaJnYhiCslggyji57/5tJ8a50nUmPNTJ vp6yOUxbl3hcEt6791hsVwmmVJp4jdCVz2i9iFyu2kmTU0kyB1nkONweuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqe8yac6wBenxpwt3IwE0nu9xdPMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2ZlRhBH +7BbdZE4vhCl52JToa2RoJjcBh86RX51+bGnfSvzZiKaBK2UbJ/m2M3/CLH+QAD2 zGtI8fdtp151Y/PuLV1HOOjd/nv3+2PeQf4Kzx2folIgFx7ARxrHnNXuOGEgo/iU Ypwm4CScjqNlD3bj+S5M0CmKA4x2Y89kPNSzvAfBIRqFXETh9IfjFiLxc+eE3qAv UF4arIKYkNvTH75qgJ6DavzCGGvqLIRoOHGhnnncUoglgRmlBBX2YGLFTRncv0Pp n+Zo9FC1k+RmG0PY9mIqbDxr/OR+J/eKhsW0vEFriJ6iFzRQ4uEKlrfnTqNaH3Ni 7iqIP7Uavry6BA== -----END CERTIFICATE-----Generated at Tue Nov 4 20:22:37 2025 by rpki-client