$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: Vd4wwwk4VyRIKIbOi9kZM4tnoFWSuvEGGBLaTAwLSfc= Subject key identifier: E5:CC:4E:AC:62:5E:E7:C0:9D:D2:F0:70:F9:9C:27:53:DC:7C:36:39 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019A4F62C2B89D15FC990B219C9657B16965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 16A5 Signing time: Tue 04 Nov 2025 15:01:03 +0000 Manifest this update: Tue 04 Nov 2025 15:01:03 +0000 Manifest next update: Wed 05 Nov 2025 15:01:03 +0000 Files and hashes: 1: 4XbrpnYb9fH0wMvekeYaI_ADm2M.roa (hash: KaRiqzoHzlwolVC6yfXNO0R4xyGemvvXu9DHgMiuTFw=) 2: 4o-wPw4Ynf0h1BoxC1fvHbONSvA.roa (hash: tiDaODRy5w9tozgqOg2LpStik670A6Jk8Q3uVbFTurY=) 3: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 4: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 5: 7RHPHSIQ8khk5JCxXSZE_ERL7rI.roa (hash: xT9zhtHfDz9vB4Rh2njS5ZfrqJHBJkmDMbn1xVRE6iI=) 6: 8CRAzgsoXZ3R79FWWctj3ImK9Mw.roa (hash: 6NM6Jwn6Hj02hW0yqUwKsiGgHdJV/f7oetsPrh6Xe3M=) 7: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 8: K0UekIqjR-B4QFvYqyuisPoIQxw.roa (hash: 3citoMQ7WPnfAIuUtz455F9SJlw4amcf7l2KAPTkKyU=) 9: LChJCjYTp7k_v-5k2BAu7BZJhF0.roa (hash: szBN38iYKk77yi/AxxkaE9KosMFhroCb+4hbaxv0syg=) 10: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: GpGZezu5NMfTNecmzmgRwsdxkR4B/Us/hZ+WN/LXx5A=) 11: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (hash: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=) 12: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 13: ihuVfIZiKoCUqlRgbxe1hkhkOfg.roa (hash: yUB6Y4sr8ES8Ky6M6fLnd2Qt8k7kmJzxctcPYJ8AS3w=) 14: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 15: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 16: q05hnkzJzF9nu4-iQoM1iN-hMcc.roa (hash: csTfd7zVjSEqYYA/9FDauw7fNQCSs402Ror/CHKBe70=) 17: qWyS_CCwZbh9szrTAgVuOstQrBA.roa (hash: gGpns1ELE70H6VW/vlMxGJ6HUYrLGjc+DUj4OdunzZs=) 18: xVxmxBwyxdPVvoJBeSg8RoTQZq4.roa (hash: ehyf3E2QFU6W31hWkV4qD6umV0NGP3V9uq2ksIR6aeg=) 19: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:c2:b8:9d:15:fc:99:0b:21:9c:96:57:b1:69:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Nov 4 15:01:03 2025 GMT Not After : Nov 5 15:01:03 2025 GMT Subject: CN=e5cc4eac625ee7c09dd2f070f99c2753dc7c3639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e1:ce:48:5b:65:cc:ff:be:8e:bc:c3:d2:b4: 98:8c:13:e3:b0:e7:df:4a:86:34:d4:c7:1b:50:7a: 1e:b1:59:7b:51:5a:46:fc:01:e0:b0:e0:cc:de:42: c0:15:fd:83:c0:43:42:57:80:09:34:e8:fa:4d:b2: ee:9e:1c:fe:e0:4d:94:47:5c:72:9c:83:a5:0a:c1: 8f:ff:0d:6d:b6:a1:03:39:03:bc:9f:d2:16:9a:21: 14:47:b0:ae:f5:6f:18:04:39:3e:3d:01:44:75:59: 27:e1:a7:67:1e:13:44:84:17:f7:85:01:16:b5:f9: 06:d5:bb:01:bf:0e:5a:f2:85:ba:b9:9e:77:39:c3: 91:4b:d3:7f:9c:5d:d3:92:cf:f8:ad:41:44:a9:a5: c9:92:1f:ca:e3:aa:84:a3:60:9e:83:6b:b7:e7:01: 43:3a:b7:d5:dd:cd:ae:88:23:d5:61:6b:7c:2b:b8: 2d:de:e9:2a:1f:a5:6f:59:91:0f:26:ec:2f:b4:46: 17:be:c1:d7:3a:ec:ab:16:5d:13:0e:b6:3f:0b:51: 07:e9:a7:1c:f7:c7:fa:75:a6:48:c5:96:50:cc:27: db:2b:7c:55:be:45:7e:62:b6:a4:15:a7:ff:58:d0: dd:c1:c4:e8:49:8c:5f:fd:96:21:38:95:39:56:68: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:4E:AC:62:5E:E7:C0:9D:D2:F0:70:F9:9C:27:53:DC:7C:36:39 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:40:cd:15:d9:70:ed:22:c4:5a:6e:25:f6:50:6e:fc:0c:97: 6b:09:b3:96:c8:e7:47:7d:45:8f:49:1d:d9:73:82:da:a0:40: d5:46:07:52:cb:64:5d:47:23:f4:cd:9d:1e:06:92:95:a4:b1: 0c:2e:5e:8d:d9:4f:9a:95:8a:4c:b9:1b:d8:b6:db:96:04:40: 40:92:7f:ab:15:21:ab:c4:c2:ee:bd:99:ff:38:51:8e:54:d2: 23:04:75:44:42:e6:2d:98:d5:6b:46:8f:44:a2:ee:69:0d:40: f4:0c:1a:e1:df:0a:e5:e5:81:08:47:0e:09:9c:b6:75:07:66: 26:aa:67:4b:15:24:c1:1c:39:ac:c8:a2:0f:ff:75:41:67:de: 0b:07:73:ab:ac:ed:1c:b4:1e:19:68:6e:e5:11:0d:2d:b3:b2: e4:2a:2e:fa:5e:2d:02:5d:49:32:38:60:aa:03:d7:25:11:ec: 1d:02:90:1e:d0:60:54:34:00:5c:da:cb:ce:c5:7b:e2:e6:df: 4d:c8:60:dc:80:07:67:86:ba:69:dd:34:68:7c:0e:33:10:de: 34:b9:55:97:2c:82:62:62:34:5b:3f:96:fc:85:fa:2e:d3:cd: 2b:1e:4e:17:26:15:e9:0d:f7:32:57:b3:48:0a:6c:ae:e0:49: a1:a9:fd:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYsK4nRX8mQshnJZXsWllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMTA0MTUwMTAzWhcNMjUxMTA1MTUwMTAzWjAzMTEwLwYDVQQD EyhlNWNjNGVhYzYyNWVlN2MwOWRkMmYwNzBmOTljMjc1M2RjN2MzNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuHOSFtlzP++jrzD0rSYjBPjsOff SoY01McbUHoesVl7UVpG/AHgsODM3kLAFf2DwENCV4AJNOj6TbLunhz+4E2UR1xy nIOlCsGP/w1ttqEDOQO8n9IWmiEUR7Cu9W8YBDk+PQFEdVkn4adnHhNEhBf3hQEW tfkG1bsBvw5a8oW6uZ53OcORS9N/nF3Tks/4rUFEqaXJkh/K46qEo2Ceg2u35wFD OrfV3c2uiCPVYWt8K7gt3ukqH6VvWZEPJuwvtEYXvsHXOuyrFl0TDrY/C1EH6acc 98f6daZIxZZQzCfbK3xVvkV+YrakFaf/WNDdwcToSYxf/ZYhOJU5VmiSrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXMTqxiXufAndLwcPmcJ1PcfDY5MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEDNFdlw 7SLEWm4l9lBu/AyXawmzlsjnR31Fj0kd2XOC2qBA1UYHUstkXUcj9M2dHgaSlaSx DC5ejdlPmpWKTLkb2LbblgRAQJJ/qxUhq8TC7r2Z/zhRjlTSIwR1RELmLZjVa0aP RKLuaQ1A9Awa4d8K5eWBCEcOCZy2dQdmJqpnSxUkwRw5rMiiD/91QWfeCwdzq6zt HLQeGWhu5RENLbOy5Cou+l4tAl1JMjhgqgPXJRHsHQKQHtBgVDQAXNrLzsV74ubf Tchg3IAHZ4a6ad00aHwOMxDeNLlVlyyCYmI0Wz+W/IX6LtPNKx5OFyYV6Q33Mlez SApsruBJoan9dA== -----END CERTIFICATE-----Generated at Tue Nov 4 20:49:02 2025 by rpki-client