$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json) Hash identifier: Dy6KHbI3+hChixoDp8hcBnrUe8P+i3ri6ZbON1CEam0= Subject key identifier: B6:EE:00:AA:54:D7:DB:A7:C9:61:E4:28:C1:EA:11:F9:C7:FD:19:7E Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019887319408E6A5CB55DAB0C72C2BC1E352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft Manifest number: 162D Signing time: Fri 08 Aug 2025 01:00:29 +0000 Manifest this update: Fri 08 Aug 2025 01:00:29 +0000 Manifest next update: Sat 09 Aug 2025 01:00:29 +0000 Files and hashes: 1: 1-50fUTEZMsqAfXKRVrjaJClUTPo.roa (hash: SmVCW5SnXSQgzJ45PrQg5gb9ODVy5PLQWa7gK9vYWEc=) 2: 1-rkdO3RS7mM1mTwHCfWVGwivLng.roa (hash: BJTIHx9AZNxRytnvkhO+a74x3XvNzoddWw1cmVufMkE=) 3: 1tphX7duVxQmoCj6iTv4JAUaFg0.roa (hash: 27/QMQNGQs+g1Yp+wtV2KRKQWUHGqze2SI6TtsCCM6Y=) 4: EsH1wGyP_4A3yjvtVJYJ-XBblic.roa (hash: DKgsauljcGZUwZ9qDQvDqIX1wcEbMc0VYZIYyCHtBuo=) 5: HuN4xP77vmRQRTk2kLL4bBeTBzg.roa (hash: cfsClMuW5Wg28hM5IbnYhS3Trbel7XimVvBZYWRkJfs=) 6: IMiFsNnN_p3sRoFH_C0d3qAaG_Q.roa (hash: oWqS9ieXKn+2R3xoqT+UPllXbLVMb7LbQgSB908taWQ=) 7: J8ocfDucYOz1VMSwyoOUgA7bURQ.roa (hash: 0LgKF+X2hpfhBTpNW2fTwMBm/B3MJkvlI1FoopslTw8=) 8: KE6TA5zPoru3bUa_YwQT_Aq4Tew.roa (hash: 6ftLo5kAogsbjk6fggK5ulzLgZYRlhQ2Mq1e7w+2xz0=) 9: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: tGce3tGKxK4ff0vNyCWYL6v5m/POe9V408QFFaytJj8=) 10: MtbsaY1yHn7-MT1fnsMPsz6ewPc.roa (hash: OtSZHtlFSjGonybseZjtwCmp5aSwaiqTCQ92rP98kgk=) 11: PskBO-hDKENpyj5TTl1bEDl9XFc.roa (hash: tVSD5b97fIERDtyitQPZy1bsEOcd19dJWMvlkxpkiNA=) 12: Vr7CtL_FipPK_JMmN6nyOTkF9N4.roa (hash: O291N7rIOeqa+sP7ZzErWn7Ntd1lj5fabHHpKHOsvGs=) 13: Y1Q65_50tcxlLXfWRBA87l5aDQw.roa (hash: g92z5H6lVXAl9mxdMgSPp7qM0b2CPQJ/omh9m+p0QO4=) 14: tfcI96HYGRf5GQ2bB8COjBYLdUQ.roa (hash: TrgrDqQXriqLm4qlMfISeHZWAMtYQBeQJnDLH6tGFGI=) 15: wajonDxdBm0pS767lGRq06Z84rM.roa (hash: Ne2muvaUoR5VivXU1vdN76aOmdMN56u55EBtWCDX1QI=) 16: yyYpMTy-uoOfGWdAgBKsqlQl5P4.roa (hash: bh3l2F5hAe5r/ruUhfgdEqGkzm/2Cu1kCzAkVz4n/4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:87:31:94:08:e6:a5:cb:55:da:b0:c7:2c:2b:c1:e3:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Aug 8 01:00:29 2025 GMT Not After : Aug 9 01:00:29 2025 GMT Subject: CN=b6ee00aa54d7dba7c961e428c1ea11f9c7fd197e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:7d:d6:dd:b5:0b:ee:03:6b:3b:1b:7d:6a: c7:4f:60:d8:58:82:b2:c2:74:91:72:cd:89:b3:93: b9:94:e3:fb:7a:ef:06:24:66:a4:72:72:41:6b:86: 66:01:69:8c:5b:e5:ea:d3:04:a8:41:8d:e4:28:8a: 48:e6:35:01:75:21:da:ad:83:88:4d:20:dd:d0:e0: 63:21:0a:39:10:72:5c:9e:2c:fe:4f:ef:77:ab:21: 25:d3:b8:3f:50:b8:44:0f:b4:a6:da:71:79:47:62: bd:eb:66:b0:97:87:73:5b:99:f8:15:52:d6:c6:cf: 23:8b:7c:a8:37:be:7c:67:d3:f2:17:ea:99:46:43: ac:68:37:57:96:c5:55:ee:b9:cc:9c:75:ff:ea:6f: 9c:d6:01:c8:3c:d9:8d:3e:26:26:6f:32:35:b1:44: 70:16:82:8e:c6:91:d2:f2:85:ce:ef:60:84:ba:40: 91:3a:1b:64:4c:30:67:a1:9e:b4:05:7b:28:9f:cb: 82:f0:ff:ad:90:23:b9:7e:59:ed:7a:38:2c:e1:16: ab:61:f2:56:55:77:14:3c:ba:d0:f0:61:e4:af:5f: 09:19:a4:61:ac:48:05:71:54:1f:66:4e:90:43:52: 12:97:7e:a6:d5:e6:e8:41:d7:bf:38:05:7b:1f:36: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EE:00:AA:54:D7:DB:A7:C9:61:E4:28:C1:EA:11:F9:C7:FD:19:7E X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:9d:9f:b7:a3:94:d1:0b:54:9c:fa:b4:cc:fe:d7:d8:ee:f2: b3:95:86:c1:36:47:2e:2c:1f:ed:88:54:91:b9:e9:5b:a7:42: eb:a0:66:ec:c2:ab:54:c9:82:66:b1:84:10:b5:a2:c3:ae:5f: 88:11:22:68:ad:18:d4:90:dd:2c:76:b1:ea:25:a3:f1:d2:4d: 1e:06:c8:6b:66:86:8b:c9:b9:40:45:4e:45:08:18:68:79:57: 8b:89:ed:39:0d:98:46:ee:d1:dd:05:ae:60:7c:af:eb:03:7c: 09:af:83:3a:bf:9b:f7:ef:89:be:2d:16:b8:ed:5f:a1:a4:1d: 45:39:04:07:50:cc:79:a9:29:00:6c:c9:2a:11:d5:b9:bc:cc: 39:44:ad:09:de:f3:91:99:d3:77:cd:91:1f:45:e6:db:e6:cf: 3b:61:0e:51:7b:ce:7f:56:f1:75:ac:8f:70:80:61:9f:5b:5f: 71:b6:5c:a6:0b:b2:8d:c3:0e:92:3f:aa:a6:74:47:3d:77:ca: 28:e1:f1:84:85:21:af:28:b6:cd:b7:90:22:75:2b:be:5a:1e: 02:6d:2b:b9:1b:3f:76:4b:78:4b:22:c9:5e:0c:86:eb:db:d4: af:a5:5d:b1:77:1d:fe:73:9d:1d:58:78:d1:2f:24:67:8c:12: a5:2b:70:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiHMZQI5qXLVdqwxywrweNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjUwODA4MDEwMDI5WhcNMjUwODA5MDEwMDI5WjAzMTEwLwYDVQQD EyhiNmVlMDBhYTU0ZDdkYmE3Yzk2MWU0MjhjMWVhMTFmOWM3ZmQxOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbZ91t21C+4DazsbfWrHT2DYWIKy wnSRcs2Js5O5lOP7eu8GJGakcnJBa4ZmAWmMW+Xq0wSoQY3kKIpI5jUBdSHarYOI TSDd0OBjIQo5EHJcniz+T+93qyEl07g/ULhED7Sm2nF5R2K962awl4dzW5n4FVLW xs8ji3yoN758Z9PyF+qZRkOsaDdXlsVV7rnMnHX/6m+c1gHIPNmNPiYmbzI1sURw FoKOxpHS8oXO72CEukCROhtkTDBnoZ60BXson8uC8P+tkCO5flntejgs4RarYfJW VXcUPLrQ8GHkr18JGaRhrEgFcVQfZk6QQ1ISl36m1eboQde/OAV7HzYorQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbuAKpU19unyWHkKMHqEfnH/Rl+MB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvp2ft6OU 0QtUnPq0zP7X2O7ys5WGwTZHLiwf7YhUkbnpW6dC66Bm7MKrVMmCZrGEELWiw65f iBEiaK0Y1JDdLHax6iWj8dJNHgbIa2aGi8m5QEVORQgYaHlXi4ntOQ2YRu7R3QWu YHyv6wN8Ca+DOr+b9++Jvi0WuO1foaQdRTkEB1DMeakpAGzJKhHVubzMOUStCd7z kZnTd82RH0Xm2+bPO2EOUXvOf1bxdayPcIBhn1tfcbZcpguyjcMOkj+qpnRHPXfK KOHxhIUhryi2zbeQInUrvloeAm0ruRs/dkt4SyLJXgyG69vUr6VdsXcd/nOdHVh4 0S8kZ4wSpStwQQ== -----END CERTIFICATE-----Generated at Fri Aug 8 10:12:08 2025 by rpki-client