$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: Mu9pCxpTz0rygt2+vWETlzpGpIijCUaJQFLzNfzRSv8= Subject key identifier: 16:AC:33:3A:90:C5:C4:3B:0F:16:D0:9C:65:63:1B:A9:C4:2A:51:AA Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019A4E866E8046854E8D10AD92C4BE1B60FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0880 Signing time: Tue 04 Nov 2025 11:00:24 +0000 Manifest this update: Tue 04 Nov 2025 11:00:24 +0000 Manifest next update: Wed 05 Nov 2025 11:00:24 +0000 Files and hashes: 1: 3ltCFdZy4V3GyE2PWFgAfClRC2E.roa (hash: MvKcHOfmLjkCC6ae2mrrpxSjZGHgMZgVcn/g1k0NPNY=) 2: Hyeufykk73xgcSneHYi8ECCnPYc.roa (hash: 5VqCSOjA5bcQ+XGnXlR3yfwEpjMPFBK+PpNlY2M7gXw=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: _YY0UJCJbQTIa1XDSLBMiZ983vo.roa (hash: Gk8qdq6LrPLlWU/Jmg7W6QhRrabuxZ2rc8Fg/yM8yME=) 6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 7: fJTMMWwByN7hphZb0tv_TE2Yvo4.roa (hash: angDRpJs0fbux+XYuzP3Y/VKJHLeYhAHfy7qvUCjIek=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: iZnCkTImCvQJuWE6Uos60nsBeAc.roa (hash: A+XXsOgpp9E8wrC4jlevUH3rfTq9qVISkfFyAQgNpWw=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: ZCmx7M1/erYsJE60JF6dcTWjBpOUoOla7jmTKrehrKw=) 11: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 12: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 13: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:6e:80:46:85:4e:8d:10:ad:92:c4:be:1b:60:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Nov 4 11:00:24 2025 GMT Not After : Nov 5 11:00:24 2025 GMT Subject: CN=16ac333a90c5c43b0f16d09c65631ba9c42a51aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ef:4b:55:03:62:5f:9d:6d:e2:0d:92:29:06: d9:d3:24:c4:d0:1d:8e:dd:e5:15:3b:68:8a:8f:05: 8b:61:d7:80:0e:a7:22:41:0f:2e:c9:e0:a2:86:25: a3:75:d1:a6:3b:fe:80:a6:a8:3a:17:da:9d:9d:6e: dd:50:25:39:0a:17:7f:0a:a0:87:05:83:f7:41:19: 6a:33:aa:50:b1:d1:e2:e8:44:85:82:7f:c2:68:d5: 14:7f:c8:f0:93:a7:59:0d:86:d1:09:84:f3:86:4e: 46:cd:df:26:fb:88:e3:e0:95:4e:a5:f1:d6:00:0a: ab:40:c1:33:24:73:37:85:d8:ca:34:10:3c:20:78: 5c:a8:8b:79:47:29:58:5b:b9:6e:ab:4f:6b:9b:60: 6e:70:13:2e:b6:df:68:d8:bd:af:b1:43:0c:0f:9d: f8:07:f0:21:07:5f:c9:4d:6b:0d:bf:b8:6d:e9:03: eb:32:9b:81:df:2d:4f:3a:df:e2:00:a9:42:88:43: e6:5e:d6:8a:1e:b9:68:64:a6:b3:ec:76:da:ff:83: c9:e0:b3:6b:ad:b2:a6:33:ef:5e:8f:7c:c1:74:84: 7c:52:98:4b:ee:4b:1d:24:5d:da:4c:8f:0a:65:a9: 3d:f5:b2:7e:4b:dd:75:b7:f6:eb:4a:cc:71:2e:5e: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AC:33:3A:90:C5:C4:3B:0F:16:D0:9C:65:63:1B:A9:C4:2A:51:AA X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a2:19:d7:dc:a8:0a:e2:03:85:9c:77:04:cc:1b:e8:fa:66: 05:7b:7d:17:19:c8:d7:6c:14:5d:0b:58:79:cb:50:83:92:5d: cd:50:19:4c:e8:21:25:20:2a:0e:78:91:2a:5b:ac:f0:8a:b7: 80:28:36:46:0b:87:fa:b0:c9:bc:d4:96:27:94:37:9f:bc:d3: c9:81:e3:2b:51:53:c0:78:b6:bc:7d:93:39:4e:98:73:6b:f0: cf:9b:cb:db:0d:ce:18:3c:51:86:6f:81:59:35:5d:19:28:8e: 74:87:17:1c:11:87:af:80:d8:27:fc:bf:51:fb:47:c6:25:d0: 46:15:c7:1f:c9:1f:0a:05:8f:60:98:25:73:53:99:52:85:a9: bd:76:1c:76:1e:b2:68:3f:3a:08:af:e3:49:9e:4c:04:ec:f4: 72:a8:de:de:23:e9:ad:3e:91:b3:1d:66:54:dc:4e:52:0e:71: f6:94:7a:73:7d:1a:cd:39:64:55:1d:f4:de:ac:b7:19:ad:55: f5:3a:0d:fa:db:3e:51:e4:e6:b9:d9:b5:5d:7b:e6:29:fb:2b: 70:b7:ff:79:84:6a:5e:6b:63:af:78:12:e2:b2:b6:a2:1b:58: 3a:37:33:d4:52:fd:f2:e1:12:41:20:48:89:57:f2:15:02:50: 8c:72:3f:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhm6ARoVOjRCtksS+G2D6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUxMTA0MTEwMDI0WhcNMjUxMTA1MTEwMDI0WjAzMTEwLwYDVQQD EygxNmFjMzMzYTkwYzVjNDNiMGYxNmQwOWM2NTYzMWJhOWM0MmE1MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku9LVQNiX51t4g2SKQbZ0yTE0B2O 3eUVO2iKjwWLYdeADqciQQ8uyeCihiWjddGmO/6Apqg6F9qdnW7dUCU5Chd/CqCH BYP3QRlqM6pQsdHi6ESFgn/CaNUUf8jwk6dZDYbRCYTzhk5Gzd8m+4jj4JVOpfHW AAqrQMEzJHM3hdjKNBA8IHhcqIt5RylYW7luq09rm2BucBMutt9o2L2vsUMMD534 B/AhB1/JTWsNv7ht6QPrMpuB3y1POt/iAKlCiEPmXtaKHrloZKaz7Hba/4PJ4LNr rbKmM+9ej3zBdIR8UphL7ksdJF3aTI8KZak99bJ+S911t/brSsxxLl6yuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBasMzqQxcQ7DxbQnGVjG6nEKlGqMB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaIZ19yo CuIDhZx3BMwb6PpmBXt9FxnI12wUXQtYectQg5JdzVAZTOghJSAqDniRKlus8Iq3 gCg2RguH+rDJvNSWJ5Q3n7zTyYHjK1FTwHi2vH2TOU6Yc2vwz5vL2w3OGDxRhm+B WTVdGSiOdIcXHBGHr4DYJ/y/UftHxiXQRhXHH8kfCgWPYJglc1OZUoWpvXYcdh6y aD86CK/jSZ5MBOz0cqje3iPprT6Rsx1mVNxOUg5x9pR6c30azTlkVR303qy3Ga1V 9ToN+ts+UeTmudm1XXvmKfsrcLf/eYRqXmtjr3gS4rK2ohtYOjcz1FL98uESQSBI iVfyFQJQjHI/Kg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:55:03 2025 by rpki-client