$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: sHuj1nD9aAbL4QTnvDSl0szLjSv6Pb5VAu4b8ZcqhTs= Subject key identifier: 5B:91:66:65:2C:D0:91:5D:37:A7:71:DC:00:68:20:9A:CC:42:D7:89 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 0198718609969377A6F35FFD08362981EB19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0223 Signing time: Sun 03 Aug 2025 20:01:06 +0000 Manifest this update: Sun 03 Aug 2025 20:01:06 +0000 Manifest next update: Mon 04 Aug 2025 20:01:06 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: QeMRvzWCba062P9DVXGqHQvYJf69eZu/jVxEwJwmfHI=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: 7nqYSNRgpsvM-UlPtwo-uw5JdC8.roa (hash: zbZzHQxFPE9nkpfPwYSh1rCa28pAH7nN65AJIuORwmA=) 6: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 7: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 8: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 9: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 10: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 11: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 12: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 13: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 14: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 15: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:71:86:09:96:93:77:a6:f3:5f:fd:08:36:29:81:eb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Aug 3 20:01:06 2025 GMT Not After : Aug 4 20:01:06 2025 GMT Subject: CN=5b9166652cd0915d37a771dc0068209acc42d789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:76:7a:76:b9:fd:2d:de:64:53:62:b8:49: 83:d2:21:d7:95:0b:6c:65:4a:9b:9b:9b:24:fb:4c: 5d:82:55:28:00:9b:26:3c:5b:e2:5f:6b:f5:25:3b: 89:f4:aa:cb:b3:81:d9:2e:2b:59:7e:bb:93:64:c1: f8:62:06:bd:a8:d7:05:98:5a:29:cd:c4:c2:96:11: b7:ba:ae:07:51:7c:54:92:cb:9d:6f:61:5c:cf:51: cb:b9:86:8e:ef:45:50:a2:4b:0f:09:9d:3d:88:53: 19:cc:7f:c2:a2:b2:ed:d8:93:33:4d:f3:c2:9d:9e: 23:69:bc:ac:21:5b:23:f8:c6:f7:31:7a:11:62:40: 8f:c6:8b:61:fe:76:4d:d3:31:0d:42:7d:d4:9f:33: bb:61:49:3a:1c:96:82:9b:5d:8e:de:7f:4d:bb:42: 6d:ff:7d:2d:6f:07:40:68:2d:69:e0:a5:23:7b:d9: 6d:39:37:2d:d4:1b:6b:c0:73:6d:2d:89:2d:e6:55: da:2d:7b:47:3e:37:a5:0b:17:ed:09:6c:bc:04:76: 31:79:9d:05:a9:cb:00:94:0d:ab:04:bf:f6:47:f2: 8b:b1:4c:4e:67:07:c9:a5:25:6e:87:90:47:44:04: 7d:cf:77:58:c8:62:78:75:88:e4:70:f0:2d:6a:86: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:91:66:65:2C:D0:91:5D:37:A7:71:DC:00:68:20:9A:CC:42:D7:89 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:26:13:30:5b:c5:c0:a0:d0:90:1c:a1:cf:80:be:4a:38:c4: f6:35:89:17:5b:95:ab:c1:df:08:9d:94:d6:8f:91:9c:00:27: 3f:d9:1c:6c:9a:38:e6:4e:2c:bd:18:14:f1:7b:09:7d:60:6f: 34:1b:5f:8d:c6:75:0c:ad:60:9a:2d:49:db:d9:a1:f6:48:5e: 02:92:f0:32:55:89:4e:e9:ce:fb:b9:c7:d3:03:d9:8c:37:c7: 2d:c5:de:bb:c8:b8:1c:6f:49:59:2f:65:9b:8f:23:4e:a6:ab: 6d:c6:e8:cd:a2:05:ff:09:ff:47:61:0e:0f:3a:3a:d0:eb:89: 5a:5e:72:31:3d:b9:9a:4f:7d:05:9b:52:77:0a:d9:be:b2:75: c0:b2:94:20:36:01:df:62:4e:85:64:00:9d:77:e1:8f:a4:94: 9b:8a:ae:de:d1:98:94:f2:49:45:c0:77:4a:b0:a3:d7:d7:5f: b4:da:f2:58:a7:c7:88:d7:3a:9f:77:03:33:45:7e:00:42:f9: c0:1b:d7:60:bc:2c:f9:72:2e:6f:6d:db:56:c3:c6:f2:67:41: ab:b1:f9:f3:8a:77:d6:a7:c0:09:af:29:ea:65:69:64:a7:fd: 3e:b4:73:a7:dd:1d:58:b4:d9:b8:b7:ec:2b:a0:36:47:70:37: 22:a2:75:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhxhgmWk3em81/9CDYpgesZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUwODAzMjAwMTA2WhcNMjUwODA0MjAwMTA2WjAzMTEwLwYDVQQD Eyg1YjkxNjY2NTJjZDA5MTVkMzdhNzcxZGMwMDY4MjA5YWNjNDJkNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywx2ena5/S3eZFNiuEmD0iHXlQts ZUqbm5sk+0xdglUoAJsmPFviX2v1JTuJ9KrLs4HZLitZfruTZMH4Yga9qNcFmFop zcTClhG3uq4HUXxUksudb2Fcz1HLuYaO70VQoksPCZ09iFMZzH/CorLt2JMzTfPC nZ4jabysIVsj+Mb3MXoRYkCPxoth/nZN0zENQn3UnzO7YUk6HJaCm12O3n9Nu0Jt /30tbwdAaC1p4KUje9ltOTct1BtrwHNtLYkt5lXaLXtHPjelCxftCWy8BHYxeZ0F qcsAlA2rBL/2R/KLsUxOZwfJpSVuh5BHRAR9z3dYyGJ4dYjkcPAtaobsdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuRZmUs0JFdN6dx3ABoIJrMQteJMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiYTMFvF wKDQkByhz4C+SjjE9jWJF1uVq8HfCJ2U1o+RnAAnP9kcbJo45k4svRgU8XsJfWBv NBtfjcZ1DK1gmi1J29mh9kheApLwMlWJTunO+7nH0wPZjDfHLcXeu8i4HG9JWS9l m48jTqarbcbozaIF/wn/R2EODzo60OuJWl5yMT25mk99BZtSdwrZvrJ1wLKUIDYB 32JOhWQAnXfhj6SUm4qu3tGYlPJJRcB3SrCj19dftNryWKfHiNc6n3cDM0V+AEL5 wBvXYLws+XIub23bVsPG8mdBq7H584p31qfACa8p6mVpZKf9PrRzp90dWLTZuLfs K6A2R3A3IqJ1/w== -----END CERTIFICATE-----Generated at Mon Aug 4 03:24:06 2025 by rpki-client