$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: ILPReDT6XTPxstzh9w6p8FrZ6v1/RkGdR4BvoOqMwlo= Subject key identifier: BF:65:64:4F:13:10:20:F4:38:9D:A8:02:0D:77:5E:5B:B7:1C:8A:20 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 01987B9B5F137ED0ACA0DAEF0FF260FA5D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 15A4 Signing time: Tue 05 Aug 2025 19:00:36 +0000 Manifest this update: Tue 05 Aug 2025 19:00:36 +0000 Manifest next update: Wed 06 Aug 2025 19:00:36 +0000 Files and hashes: 1: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 2: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 3: DA14YVXL4ttxpCuQVAWVh517Mis.roa (hash: ANdvm72Dmh2KKfct5DW9DsN+E50eBLgJUYmUMaD83z0=) 4: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 5: HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa (hash: kHbTsJD5NdmK1vLZSQigG4P1BUyQFBvibnG4XtzolO8=) 6: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: Eb/0jnxecAGAeE3HH8QJ+8a6GOfdqiBy6zvKr455SGg=) 7: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (hash: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=) 8: NMmvspbSz_XwW2dzGwRqq7qvcmc.roa (hash: s05EajvvXbwnQJsnmk5mSyf9Jmf5xLLa0C6Z0XLi8as=) 9: Uj4ioPjjyq2i6q1RbS_v7BbYhXk.roa (hash: /miAvLKH3DzdtiGSUmMYLssvrEQ8WfCsfOBu4FHPpIE=) 10: VgVq-6TLMiL7Sau_RtgQ3m_Vpv0.roa (hash: 1YKBUCdRYV8CfVZcj+eVWU3GK5hSdpogHam93h2rJ6k=) 11: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 12: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 13: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 14: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 15: uWP5tLXHh8TegI8ITQ2fajYk7Bk.roa (hash: p7cwv0kZBwvZxjXniYwKfKYOtSo5mCVTyzW9YFAlMeU=) 16: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) 17: z6okcQLqWpa0H9e2fsr0hdRg984.roa (hash: 2XNfwDgPvme4CSwXnV/x4dVeZx9IFOLRYcpQDralhg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:9b:5f:13:7e:d0:ac:a0:da:ef:0f:f2:60:fa:5d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Aug 5 19:00:36 2025 GMT Not After : Aug 6 19:00:36 2025 GMT Subject: CN=bf65644f131020f4389da8020d775e5bb71c8a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:4e:d1:f3:9b:c1:cb:1e:df:82:eb:97:56: b0:28:33:38:1e:62:1c:c9:da:6e:62:c6:9c:0a:fb: ac:b2:97:7a:a3:2e:c5:cf:1d:7e:df:b6:6b:9b:92: 57:05:7e:ff:c2:df:7f:d8:10:1b:48:61:d5:92:92: 94:96:1f:9a:76:0f:b7:0b:b9:7f:b0:4e:27:06:46: 31:9b:60:54:6b:cc:ed:c2:b6:f5:60:53:86:2b:f0: ce:25:63:17:1d:4c:14:e2:57:ea:85:88:9c:78:79: 1a:36:89:9f:e7:c4:00:ac:bd:e0:31:67:d6:fb:02: e3:73:6a:60:4d:61:92:a8:d2:68:4e:16:9f:e4:20: 83:6d:c3:35:0f:8e:32:bf:17:17:6f:cc:2e:21:1e: 55:4f:69:2e:6e:c5:d9:00:ef:3d:94:76:68:4d:62: ec:76:c8:be:cb:31:88:79:f5:ed:43:56:f3:5c:b9: e8:df:5f:de:e2:eb:8a:cb:f0:a6:66:a2:aa:38:91: 71:3e:e9:10:ea:eb:f4:75:55:63:5b:6c:7b:1d:63: d6:89:52:d7:95:d0:3e:a8:17:39:d2:d2:29:7e:2f: 8a:3c:14:ce:45:20:e1:2c:b8:c6:08:53:96:cd:df: 89:45:b2:d9:69:5f:76:6f:1a:4f:de:d5:a3:bb:9e: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:64:4F:13:10:20:F4:38:9D:A8:02:0D:77:5E:5B:B7:1C:8A:20 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c0:1e:19:fa:73:4d:6c:ea:97:cb:f8:d2:cf:56:77:87:83: e4:25:26:87:52:0c:ed:51:85:e8:b1:85:46:e9:d5:01:2e:8f: 60:09:d5:41:20:a9:cb:01:a0:41:18:e0:05:99:d3:79:75:cd: 3e:a9:dd:7b:05:86:2b:b4:31:1a:54:b5:af:d2:29:40:75:d5: 5b:17:65:ca:88:a1:89:30:d0:d5:7c:1b:96:46:fb:ed:0e:5b: 05:4b:53:2e:89:7f:22:da:ac:8f:40:e0:bc:d3:b8:01:0f:d4: bd:38:b2:44:04:b8:16:db:28:3d:d4:2b:68:3d:0a:21:da:d9: 68:61:82:a8:a8:d8:83:42:3b:2f:26:b0:b4:a9:b9:5a:e5:d9: ac:e0:9d:af:f5:5a:4d:3d:1b:a8:97:f4:f9:3c:60:f7:5b:d5: 53:65:31:92:52:87:50:90:53:ff:6e:32:68:dd:75:98:7f:4b: d9:b1:51:1d:60:5c:ef:f9:7e:b7:5c:7d:1b:20:92:cd:9b:42: df:c7:01:a0:dd:10:bf:06:ce:0b:59:35:8e:67:81:e1:2e:23: c7:c5:95:02:d8:dc:af:c0:f6:68:2c:54:58:c7:4a:3e:fa:37: 0e:df:29:d5:85:19:6b:b1:01:6c:6b:1a:7b:53:c0:4a:ca:2d: 77:9f:85:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh7m18TftCsoNrvD/Jg+l2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUwODA1MTkwMDM2WhcNMjUwODA2MTkwMDM2WjAzMTEwLwYDVQQD EyhiZjY1NjQ0ZjEzMTAyMGY0Mzg5ZGE4MDIwZDc3NWU1YmI3MWM4YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuBO0fObwcse34Lrl1awKDM4HmIc ydpuYsacCvusspd6oy7Fzx1+37Zrm5JXBX7/wt9/2BAbSGHVkpKUlh+adg+3C7l/ sE4nBkYxm2BUa8ztwrb1YFOGK/DOJWMXHUwU4lfqhYiceHkaNomf58QArL3gMWfW +wLjc2pgTWGSqNJoThaf5CCDbcM1D44yvxcXb8wuIR5VT2kubsXZAO89lHZoTWLs dsi+yzGIefXtQ1bzXLno31/e4uuKy/CmZqKqOJFxPukQ6uv0dVVjW2x7HWPWiVLX ldA+qBc50tIpfi+KPBTORSDhLLjGCFOWzd+JRbLZaV92bxpP3tWju55RIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9lZE8TECD0OJ2oAg13Xlu3HIogMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMAeGfpz TWzql8v40s9Wd4eD5CUmh1IM7VGF6LGFRunVAS6PYAnVQSCpywGgQRjgBZnTeXXN PqndewWGK7QxGlS1r9IpQHXVWxdlyoihiTDQ1Xwblkb77Q5bBUtTLol/Itqsj0Dg vNO4AQ/UvTiyRAS4FtsoPdQraD0KIdrZaGGCqKjYg0I7LyawtKm5WuXZrOCdr/Va TT0bqJf0+Txg91vVU2UxklKHUJBT/24yaN11mH9L2bFRHWBc7/l+t1x9GyCSzZtC 38cBoN0QvwbOC1k1jmeB4S4jx8WVAtjcr8D2aCxUWMdKPvo3Dt8p1YUZa7EBbGsa e1PASsotd5+Fkw== -----END CERTIFICATE-----Generated at Wed Aug 6 05:26:08 2025 by rpki-client