$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: tcHY3qszy1Hns6F6jQ085QYy5+ak5ZwhX0NLKlAY01c= Subject key identifier: C3:F8:9A:66:EB:F5:D8:C6:AA:5B:D6:60:FF:DF:5E:3D:52:FD:85:E4 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019A5074C7C14AB878933FAAA5BEE664A5D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 031B Signing time: Tue 04 Nov 2025 20:00:21 +0000 Manifest this update: Tue 04 Nov 2025 20:00:21 +0000 Manifest next update: Wed 05 Nov 2025 20:00:21 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: G7O6Lgd9mNkbZIEYQMMFKjAFAi8zcoZMkkZnl4qQ6IY=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: 7nqYSNRgpsvM-UlPtwo-uw5JdC8.roa (hash: zbZzHQxFPE9nkpfPwYSh1rCa28pAH7nN65AJIuORwmA=) 6: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 7: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 8: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 9: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 10: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 11: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 12: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 13: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 14: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 15: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:c7:c1:4a:b8:78:93:3f:aa:a5:be:e6:64:a5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Nov 4 20:00:21 2025 GMT Not After : Nov 5 20:00:21 2025 GMT Subject: CN=c3f89a66ebf5d8c6aa5bd660ffdf5e3d52fd85e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1e:d4:1f:38:6a:8f:34:a6:06:5b:b3:a6:8c: 05:39:0d:8d:01:57:3e:ee:a1:86:84:9f:f9:29:14: 99:0a:29:75:61:ab:11:78:22:67:fb:5e:ba:a3:5e: 68:3b:27:a3:82:4c:7e:32:3a:0b:89:84:a7:ad:72: 90:57:d4:e9:c0:2b:59:0f:b2:de:fd:33:90:da:11: 04:ec:83:68:51:4e:c6:0e:e3:c7:da:0f:fd:70:7a: bf:6c:9c:95:66:bc:fb:16:27:a9:62:dc:85:72:82: 47:72:91:ba:69:e3:6c:3a:9b:2f:c0:ec:91:fc:f0: fe:a3:07:18:5e:6c:3c:38:bf:c7:83:16:29:3f:0f: 04:7d:8d:e8:5c:15:44:2f:77:a8:dc:8c:69:1f:4c: cf:55:ca:0a:f0:5f:d5:31:f1:93:93:33:c6:0c:0d: eb:38:77:db:74:c4:b0:d7:27:ae:15:6c:48:04:a3: 40:13:e3:a8:95:7e:7d:7f:0c:1c:f2:d4:06:d0:14: fc:91:17:30:02:5e:bb:11:c2:37:5e:85:2d:77:a7: b1:2d:a7:14:80:82:d6:d5:cb:77:d8:6a:40:64:c7: 2e:04:2f:16:6e:a4:8f:66:dd:61:af:74:3c:79:df: 29:1c:67:5c:89:1a:a2:7d:79:ea:48:e2:dd:d6:5e: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F8:9A:66:EB:F5:D8:C6:AA:5B:D6:60:FF:DF:5E:3D:52:FD:85:E4 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:aa:7c:5c:cd:61:a7:2d:b5:e5:1e:87:da:15:dd:69:15:60: c4:ca:ed:fc:68:51:2d:88:14:4d:80:5f:ab:54:83:b9:e9:83: 0a:e1:45:b3:9c:4c:6a:47:17:1c:91:75:bc:1a:ac:b5:6c:7a: bf:77:cd:8f:15:4f:be:2c:a0:dc:df:20:f5:74:5a:e2:0c:30: e1:32:19:6b:d9:52:36:4a:ac:bc:30:b2:03:12:cb:d8:fb:4b: f0:f5:62:57:b9:2f:98:68:5f:a8:8d:5b:a3:f6:3d:75:fc:cf: e0:e3:68:11:b0:b2:a5:71:af:65:ab:86:b0:d9:a7:e8:f0:2d: f3:8c:9c:e9:ad:f4:cc:6a:72:3d:90:d1:44:ff:66:9b:62:60: 42:30:9b:0d:50:58:e4:85:d3:e5:55:94:b0:50:b3:4f:d9:cc: 9d:46:a6:e4:ba:d0:df:ac:b5:98:31:32:07:5b:2a:2e:47:b8: 11:38:d3:fa:e7:a6:ed:65:04:21:ed:61:e4:92:f2:19:11:4a: 05:ad:46:91:8e:8b:32:a7:8f:3d:dd:01:f2:26:ff:02:f3:17: ca:12:85:de:80:a8:42:ce:4b:96:ae:f3:14:d3:51:07:53:d7: e1:2e:ba:b0:d4:8a:43:5f:b7:12:2d:64:21:4b:0f:38:ee:44: 1f:90:32:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdMfBSrh4kz+qpb7mZKXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMTA0MjAwMDIxWhcNMjUxMTA1MjAwMDIxWjAzMTEwLwYDVQQD EyhjM2Y4OWE2NmViZjVkOGM2YWE1YmQ2NjBmZmRmNWUzZDUyZmQ4NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR7UHzhqjzSmBluzpowFOQ2NAVc+ 7qGGhJ/5KRSZCil1YasReCJn+166o15oOyejgkx+MjoLiYSnrXKQV9TpwCtZD7Le /TOQ2hEE7INoUU7GDuPH2g/9cHq/bJyVZrz7FiepYtyFcoJHcpG6aeNsOpsvwOyR /PD+owcYXmw8OL/HgxYpPw8EfY3oXBVEL3eo3IxpH0zPVcoK8F/VMfGTkzPGDA3r OHfbdMSw1yeuFWxIBKNAE+OolX59fwwc8tQG0BT8kRcwAl67EcI3XoUtd6exLacU gILW1ct32GpAZMcuBC8WbqSPZt1hr3Q8ed8pHGdciRqifXnqSOLd1l6T4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMP4mmbr9djGqlvWYP/fXj1S/YXkMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqp8XM1h py215R6H2hXdaRVgxMrt/GhRLYgUTYBfq1SDuemDCuFFs5xMakcXHJF1vBqstWx6 v3fNjxVPviyg3N8g9XRa4gww4TIZa9lSNkqsvDCyAxLL2PtL8PViV7kvmGhfqI1b o/Y9dfzP4ONoEbCypXGvZauGsNmn6PAt84yc6a30zGpyPZDRRP9mm2JgQjCbDVBY 5IXT5VWUsFCzT9nMnUam5LrQ36y1mDEyB1sqLke4ETjT+uem7WUEIe1h5JLyGRFK Ba1GkY6LMqePPd0B8ib/AvMXyhKF3oCoQs5Llq7zFNNRB1PX4S66sNSKQ1+3Ei1k IUsPOO5EH5AyuA== -----END CERTIFICATE-----Generated at Wed Nov 5 00:30:53 2025 by rpki-client