$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft File: _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json) Hash identifier: ug6V8xR2w+dX3aut6BdvDlP41WzW/qm02gHo02lKbbM= Subject key identifier: 31:DF:89:C7:F2:78:C5:E3:DF:D2:20:EB:DC:54:85:5C:B9:BA:88:77 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 0198277E3E6D6EFEC15D03B8CD980DD6B1E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft Manifest number: 1687 Signing time: Sun 20 Jul 2025 11:00:41 +0000 Manifest this update: Sun 20 Jul 2025 11:00:41 +0000 Manifest next update: Mon 21 Jul 2025 11:00:41 +0000 Files and hashes: 1: 0KWI-KG0WB4DWCuGh1gn99tn_N4.roa (hash: h8Vr2MAflmUzVAGtVkIeSE/MSkV47xAfz3GIoaJRtC4=) 2: 1-Gozw0B9Es8Qh2XZ6-i72p9hfXs.roa (hash: xTLReM400TQ2Y4MTK4NUap/tADa+H9TQIAaol/LpbHs=) 3: 1-c2GPlGgYlbEIZJF6cbTGByqiko.roa (hash: Olvi4llScu/0a4L4oL7XrHFcqesIOSSnG3bFQCyxUcQ=) 4: 2NzOCD2bM5a530UIGl2ZsDRbmUU.roa (hash: /+WGidIvg/u0vrSl2pcgEtQoS0FUZmi1tEkbrWlSxL4=) 5: 36nSo4IIIhWGblHml9ipRZ22_wQ.roa (hash: GNtMzAbDBSLg8JfQ+kSp8JSTe4JbTsAOb7fb1iMmRSU=) 6: 3GfV3-LELKfnUeTQu576_MbUd9E.roa (hash: BFBAfHBwGYmTouYuYf2GmULoSMGxaogtjP30rWRQKUI=) 7: 4-EsjAVdf144tiP1S6W0cZWLEr0.roa (hash: aAjI6dZi6XfNi5J1N/GfpcAZ6m9XLEd8XE04/FjSVu4=) 8: 4Ji8DRavs3meQw5qrkJFZHXPeDw.roa (hash: rtTItDBA55d0Kg0FoHNSV2Z7809Glolr/J3tN0PwSW0=) 9: 8l4FtnLwwdEp2oibbUvL_uIxS9E.roa (hash: LQ2IaIcHgt4i0WPp/lDm2yxGoBa1VH4Xl9eLNEo1qbo=) 10: C5VrgkpR7BHkGYBxJu0N38DecAw.roa (hash: tn3iDPLbuK+YDsaCHYiE4d6zImOOupgmoVvqbn+APiI=) 11: E_vNeWHi7no6xEOD4-IFUETrmhw.roa (hash: XXuZ/UPoimaJVHIFLTndlenANUDBTB2Jl0fZ7dp7Ri0=) 12: F-cQvzjqojG98iksKOqY89-HxVM.roa (hash: SAzu/ZYd9aynp8O7I3fVFxtOAPAPfbYe3bEEnXU267Y=) 13: FNBtDziAIANjYCRYc4CVRy1nJyc.roa (hash: NocSr/8xiJz7zrZGhIxvMcAwGrGm7wl9mzw5JTfj4Y0=) 14: Itb9F8_-lcZ_KdRc5siOEO4H89E.roa (hash: XLIfgStgZc44GKy7d8yA6H23MBSze3hjDW/70wwI9b8=) 15: M3_GZcVdFB-kUlBz3CbzHEwugOo.roa (hash: RVTdHVmgLYKRoXRwHS2aSD1uxSSdaXu0WilfMzCHLdQ=) 16: MTzVQqg1OQOZqtTFlcpZ2_VnPng.roa (hash: mMR8wNV9W/fVKlAylzczxRufMEEM5D1dkFEiXzkFtBw=) 17: N_FJ7OIWFvIW9taFHsA2wT2zVwk.roa (hash: bVU4MMFAW33uimGtPgAQzKj41nvECCYfDukXv4e4p0w=) 18: PwrQGIiQo2oQLGMofsy9NAulZOw.roa (hash: hq8SRr3d4IpSTQOcetxXA4f2f+wVNAp0cl14XJ4GrEw=) 19: RAQgzMiCS065NlU1iBXwPiswe10.roa (hash: aXxah/bsFSxVRDhTMQldv6sv0nChjGHbx3sNdnqgxzI=) 20: RvXRvVyvlekCab9ullONcGuemgo.roa (hash: kILuzxt9RHYWDgEffsiWLl3jeXDJ/TZBIJWTp1FRvsM=) 21: XI3HQw49BMQYZ9gTM1XpPBAqpnk.roa (hash: GT0BO5jPtDXyaBbm7jDO2M0rKouFe2Yzs6uTpn17StI=) 22: XpvAs6Tt45TMxISWhloT9Wt5rFA.roa (hash: 3RG2rD9Iheegzvp1N+vn8OKiQ4faJt1Nqt7c2kVsNCo=) 23: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: 8wpEg5OFsJV8Z2+jz5ictHZF0ceCZTcPnS1Tu9RR3oQ=) 24: db3HfgukjmmWQWomG5hjPb2RuPo.roa (hash: HuerYo1+VOoP0CsA2iW7ovnuNivvJL249xI7Vse7fcY=) 25: dsp7kqVP0MzNdwTliVhJeAMNQ1g.roa (hash: OcOQ2uKsSo0YuxZEB31opI6ZblHX6qOV3I408glZcv0=) 26: fpZVpVos_kxzIDGYSqNyyRQDttQ.roa (hash: uV1KfcwolyVJ1mOs8l65+H0qhjLwiOsobMQn9rorxTU=) 27: gpgP_YmTtsmxlSANAlEYmQOs-r4.roa (hash: MsN3w01I4GAkWG1L2v4xb1q5dQkczXCJIOeH3N8wUHE=) 28: hBiwlhhFE44QPsrcqkKUVksncA4.roa (hash: FZdbsMJbgwt6b8G6npHC7QxSGH9CGwXi3IsmuLcEigQ=) 29: jPYMTQLhOkUyChhuk3LT0pzGuKw.roa (hash: WZkVzoTHH8bTxovKv17GI4cgaifA5bg30GZLk+9UE6A=) 30: jjhX0aIZcT544KCIQyZSn1ZrMgI.roa (hash: KgbdxCj+Lc31A78ghx4EPIuyhJon/0ov16MKkHX+ajU=) 31: oZM32iF_dXj13arj49Wk-8MpltE.roa (hash: 5tf4bR4lHe0bW1GmHBLlcRANn/eBaErboF4s852Z1mo=) 32: qDlh24RbeDVjcAyrQ_STBRImmxI.roa (hash: rXKS63u3mI4gIR/Pn3sZ2MevhW2+Svuk4c2ta1D48BU=) 33: qPCt9PHHA0GarUl-Yh1zGcgSUmI.roa (hash: lEoaWY7+8lB8BQWRyHVB/to+pSqQXA3i+f8TwfiT22c=) 34: t3Q23vyUdsRo6zct_9jhJ_Jzlak.roa (hash: ak0F1/bwerUUr/wy5VcyV9l0Exrsc+fsCFd6F1NVmME=) 35: unY0Pu97DEbw_gaGseuduchpyf8.roa (hash: e/KptEgbgebcoV3ZlHJMNabC0RiZYgba0JXcQXlmWNc=) 36: wYj2XX93l48Ok6W1DgazAx4cOqs.roa (hash: h91MsK6joT6C6e1hB/GdrWn534afG+LSY8h0F/FyZ+4=) 37: x6qBPAYYkfaf7DSPbFH-pGxnFp0.roa (hash: E2BXuJB6M/883mL2LF+woF4zVIsSXvo4L6HofVg5TPk=) 38: yEIzEDNlVYG2U9PRbVP1FLxEQxk.roa (hash: Fv9hIbJ4brwrbURruEtIMtsEQKbTJMPhQX18jUCwWZ4=) 39: y_yX2r4gvHvuIbUi0DowIYSNfBg.roa (hash: x14xDtrLZ17AWPiddZKwyfSzNk6zOk9dOft74ZuaztU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:7e:3e:6d:6e:fe:c1:5d:03:b8:cd:98:0d:d6:b1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jul 20 11:00:41 2025 GMT Not After : Jul 21 11:00:41 2025 GMT Subject: CN=31df89c7f278c5e3dfd220ebdc54855cb9ba8877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:ab:5e:05:c7:a9:4d:78:20:d9:fc:2f:02: 71:20:55:0e:cd:9e:d3:56:3e:30:4e:c3:87:4d:e3: f8:3a:96:c4:e7:29:a6:e3:a8:47:00:5d:cc:58:37: 7e:eb:ba:86:81:83:4c:4c:72:76:d3:4d:53:5a:8e: db:ed:cd:53:16:23:68:28:fc:65:a5:ac:ca:ec:65: 57:1f:61:70:a5:8f:6b:74:67:e2:e8:d3:69:6d:a1: 78:3c:25:65:8f:b0:48:fe:37:21:09:83:bf:78:be: 40:6d:1b:71:28:d0:4d:4d:7d:5f:86:0b:1c:93:a4: 8a:8e:e2:60:6f:b8:30:dd:98:17:c0:95:07:4c:63: 6f:9d:54:1e:1a:0a:88:e4:19:0e:ab:fa:63:65:31: c4:5d:ef:0c:7e:97:d3:ac:73:d6:c5:da:57:05:32: 42:91:84:55:d6:be:20:cd:69:c1:13:21:2e:9c:5b: 1b:fa:31:f0:ec:ab:8a:e9:a4:96:93:32:aa:35:3c: 9b:2a:53:1e:89:be:f2:d4:ca:80:7d:a6:0f:39:bf: bc:d0:b9:dd:86:63:81:da:bf:c9:e6:c9:b4:01:2f: 65:60:8f:7e:45:3c:0a:c0:07:42:21:21:eb:f9:ab: 95:81:bc:d1:ad:ee:a7:b6:47:30:ed:7a:79:bd:a1: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DF:89:C7:F2:78:C5:E3:DF:D2:20:EB:DC:54:85:5C:B9:BA:88:77 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4d:f5:c2:f6:11:a2:66:a6:59:7b:23:a5:f6:a2:a5:81:67: bd:09:aa:ae:b7:69:ae:29:4d:10:23:8c:aa:ec:db:87:67:8d: 38:6e:55:0b:72:50:3b:9b:8c:1e:c8:34:9e:f3:c9:7c:48:ce: 7d:a4:e2:9b:83:39:36:6c:5f:9b:6b:d6:d6:29:67:cb:8e:ef: 68:aa:73:58:e2:a6:a0:21:ce:ce:3c:3c:c2:4a:87:0c:97:74: 1e:1d:71:c8:03:2d:e2:49:0c:f2:81:61:08:27:c9:39:29:91: 72:07:7f:0f:3a:48:2d:2a:10:3d:c3:dc:71:e2:61:32:f5:fa: 51:78:e2:12:86:03:7d:87:c8:e0:0a:57:b4:86:11:ad:4b:47: 0b:e3:f0:e8:54:ce:2b:0b:02:57:1c:df:f0:02:60:c8:da:0a: 97:93:a8:63:c1:4b:46:21:c6:6a:75:1f:d9:9a:1b:35:55:95: 33:e6:87:62:64:22:cd:ae:84:19:49:e5:e8:99:0d:1a:71:f2: 6e:03:02:1f:c0:45:c5:8d:91:66:d1:fb:85:e3:49:50:df:95: 9e:cd:89:8c:b7:15:5f:e2:a6:9f:bc:b8:53:53:09:3b:f6:0d: 3e:25:9d:ca:51:54:6a:d8:e6:8f:27:ef:ec:5f:b7:c8:40:46: ab:8d:33:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnfj5tbv7BXQO4zZgN1rHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjUwNzIwMTEwMDQxWhcNMjUwNzIxMTEwMDQxWjAzMTEwLwYDVQQD EygzMWRmODljN2YyNzhjNWUzZGZkMjIwZWJkYzU0ODU1Y2I5YmE4ODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYqrXgXHqU14INn8LwJxIFUOzZ7T Vj4wTsOHTeP4OpbE5ymm46hHAF3MWDd+67qGgYNMTHJ2001TWo7b7c1TFiNoKPxl pazK7GVXH2FwpY9rdGfi6NNpbaF4PCVlj7BI/jchCYO/eL5AbRtxKNBNTX1fhgsc k6SKjuJgb7gw3ZgXwJUHTGNvnVQeGgqI5BkOq/pjZTHEXe8MfpfTrHPWxdpXBTJC kYRV1r4gzWnBEyEunFsb+jHw7KuK6aSWkzKqNTybKlMeib7y1MqAfaYPOb+80Lnd hmOB2r/J5sm0AS9lYI9+RTwKwAdCISHr+auVgbzRre6ntkcw7Xp5vaGcqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHficfyeMXj39Ig69xUhVy5uoh3MB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE31wvYR omamWXsjpfaipYFnvQmqrrdprilNECOMquzbh2eNOG5VC3JQO5uMHsg0nvPJfEjO faTim4M5Nmxfm2vW1ilny47vaKpzWOKmoCHOzjw8wkqHDJd0Hh1xyAMt4kkM8oFh CCfJOSmRcgd/DzpILSoQPcPcceJhMvX6UXjiEoYDfYfI4ApXtIYRrUtHC+Pw6FTO KwsCVxzf8AJgyNoKl5OoY8FLRiHGanUf2ZobNVWVM+aHYmQiza6EGUnl6JkNGnHy bgMCH8BFxY2RZtH7heNJUN+Vns2JjLcVX+Kmn7y4U1MJO/YNPiWdylFUatjmjyfv 7F+3yEBGq40zCA== -----END CERTIFICATE-----Generated at Sun Jul 20 20:11:08 2025 by rpki-client