$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json) Hash identifier: y5JumbGVeX7nY1NEK7htMHjFtViCcyAQQroAbDjgn1w= Subject key identifier: 35:CA:AD:99:BA:A3:CF:95:10:35:06:D3:4F:AC:32:4A:64:CC:A1:F5 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019A221B6E7D3F335EE6EB0537A4897BB6DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft Manifest number: 1703 Signing time: Sun 26 Oct 2025 20:00:14 +0000 Manifest this update: Sun 26 Oct 2025 20:00:14 +0000 Manifest next update: Mon 27 Oct 2025 20:00:14 +0000 Files and hashes: 1: 0bxtb69WzBUVjdKE20GYmwjET4I.roa (hash: RiCRJs/erh7uqdwd+il/BMZNYORvVEDdS3UwEHhW7yM=) 2: 1-50fUTEZMsqAfXKRVrjaJClUTPo.roa (hash: SmVCW5SnXSQgzJ45PrQg5gb9ODVy5PLQWa7gK9vYWEc=) 3: 1-rkdO3RS7mM1mTwHCfWVGwivLng.roa (hash: BJTIHx9AZNxRytnvkhO+a74x3XvNzoddWw1cmVufMkE=) 4: 1tphX7duVxQmoCj6iTv4JAUaFg0.roa (hash: 27/QMQNGQs+g1Yp+wtV2KRKQWUHGqze2SI6TtsCCM6Y=) 5: 5lE8J4x9aB1mfye1y1Ao8-xAZPs.roa (hash: Iqs5oU7eeMsvFR6e9VBgcLnP6/n0RAHvMJOgpQeeQ8k=) 6: EsH1wGyP_4A3yjvtVJYJ-XBblic.roa (hash: DKgsauljcGZUwZ9qDQvDqIX1wcEbMc0VYZIYyCHtBuo=) 7: HuN4xP77vmRQRTk2kLL4bBeTBzg.roa (hash: cfsClMuW5Wg28hM5IbnYhS3Trbel7XimVvBZYWRkJfs=) 8: IMiFsNnN_p3sRoFH_C0d3qAaG_Q.roa (hash: oWqS9ieXKn+2R3xoqT+UPllXbLVMb7LbQgSB908taWQ=) 9: J8ocfDucYOz1VMSwyoOUgA7bURQ.roa (hash: 0LgKF+X2hpfhBTpNW2fTwMBm/B3MJkvlI1FoopslTw8=) 10: KE6TA5zPoru3bUa_YwQT_Aq4Tew.roa (hash: 6ftLo5kAogsbjk6fggK5ulzLgZYRlhQ2Mq1e7w+2xz0=) 11: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: Zu0BG65fCCIULjKqxgACTKzorXyd51shiJJ/kHHCd54=) 12: MtbsaY1yHn7-MT1fnsMPsz6ewPc.roa (hash: OtSZHtlFSjGonybseZjtwCmp5aSwaiqTCQ92rP98kgk=) 13: PskBO-hDKENpyj5TTl1bEDl9XFc.roa (hash: tVSD5b97fIERDtyitQPZy1bsEOcd19dJWMvlkxpkiNA=) 14: Vr7CtL_FipPK_JMmN6nyOTkF9N4.roa (hash: O291N7rIOeqa+sP7ZzErWn7Ntd1lj5fabHHpKHOsvGs=) 15: Y1Q65_50tcxlLXfWRBA87l5aDQw.roa (hash: g92z5H6lVXAl9mxdMgSPp7qM0b2CPQJ/omh9m+p0QO4=) 16: lTbT7fcRBqHJbpQXZ7bYwj4cd6s.roa (hash: hkud32qK9D0HFgsdXTxJib1cRauOPJylZFOBTpuqyuE=) 17: wajonDxdBm0pS767lGRq06Z84rM.roa (hash: Ne2muvaUoR5VivXU1vdN76aOmdMN56u55EBtWCDX1QI=) 18: yyYpMTy-uoOfGWdAgBKsqlQl5P4.roa (hash: bh3l2F5hAe5r/ruUhfgdEqGkzm/2Cu1kCzAkVz4n/4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:22:1b:6e:7d:3f:33:5e:e6:eb:05:37:a4:89:7b:b6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Oct 26 20:00:14 2025 GMT Not After : Oct 27 20:00:14 2025 GMT Subject: CN=35caad99baa3cf95103506d34fac324a64cca1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:6c:9a:cd:87:70:6a:a6:54:36:db:e7:06: b9:bf:15:00:1c:c3:20:ab:29:d6:71:12:d5:77:85: ee:57:84:81:cd:f5:62:71:89:c5:9e:6c:6e:6b:d9: 9d:b3:d9:a4:c7:86:bc:0e:34:ef:f4:38:e7:23:b0: 79:89:4f:95:f3:41:75:38:0a:ae:51:3d:ad:33:72: 7b:5a:c3:8f:b7:b5:39:54:0c:fc:9e:88:81:61:0b: 6c:11:9f:82:f5:c6:c6:e0:c8:b9:81:6f:24:c5:73: de:bc:00:a0:cc:94:2f:e0:73:a8:d9:d3:a4:45:4b: 68:7a:65:b0:c7:84:ac:eb:3c:14:e0:17:ab:1a:2e: 62:8c:26:5e:80:a5:a3:3d:ed:2c:30:d7:a6:19:db: fc:f5:f5:30:b4:71:cd:a5:51:78:df:f6:1a:41:c2: 6e:a7:e5:d4:f3:f6:4b:b1:09:6c:9c:7b:64:d3:13: ad:aa:bf:61:49:27:91:04:94:79:44:2d:cb:03:b6: 63:84:78:cd:e3:ea:71:c7:f0:34:00:17:55:8e:f9: 84:b6:8e:78:4a:94:bd:1d:40:03:f8:06:d1:40:ee: 49:59:a2:91:26:19:b1:88:32:ac:90:45:01:e8:11: cc:79:95:8c:bd:aa:73:f8:04:be:6f:df:f1:08:55: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CA:AD:99:BA:A3:CF:95:10:35:06:D3:4F:AC:32:4A:64:CC:A1:F5 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c4:51:3b:35:56:67:3f:11:a3:3e:29:67:44:12:50:2f:a6: 49:de:7e:b1:a3:86:26:09:09:83:b3:9e:b7:4c:f9:bf:17:f3: df:95:6a:49:fc:9d:45:61:e3:72:8a:1d:be:83:10:95:ce:be: 31:84:ae:3a:e0:3a:94:e1:b3:5e:fe:e1:31:81:1d:2b:16:81: 53:4b:2f:e0:70:98:5c:99:18:cd:16:af:e2:27:4c:a9:1b:0f: 14:13:77:50:75:30:71:03:57:0f:c2:08:0d:54:70:99:40:44: e7:2a:59:df:2d:d5:9f:04:4a:13:0d:f7:a9:9e:53:61:e1:c3: b9:d3:9b:fe:91:6d:cb:18:d2:4d:68:c4:c4:b3:da:46:5f:1a: 1d:22:a2:4f:e0:a5:ba:eb:84:51:fb:07:b3:0a:a6:11:11:6f: f0:3b:74:42:49:88:2f:66:6b:c1:30:d5:dc:40:2f:fa:a2:91: 6f:05:8d:18:0a:50:11:bb:64:4b:86:dd:aa:59:0c:d1:4e:e2: 28:58:84:4c:fa:7f:29:53:2c:b9:76:23:f3:26:fb:f5:a1:0f: ec:f8:52:db:d1:9d:f3:27:05:9b:a8:0c:9c:37:ac:ea:90:60: a8:08:41:a1:28:46:61:5f:a9:43:c2:71:84:17:9d:bc:8d:a0: c8:52:ee:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoiG259PzNe5usFN6SJe7beMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjUxMDI2MjAwMDE0WhcNMjUxMDI3MjAwMDE0WjAzMTEwLwYDVQQD EygzNWNhYWQ5OWJhYTNjZjk1MTAzNTA2ZDM0ZmFjMzI0YTY0Y2NhMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH9sms2HcGqmVDbb5wa5vxUAHMMg qynWcRLVd4XuV4SBzfVicYnFnmxua9mds9mkx4a8DjTv9DjnI7B5iU+V80F1OAqu UT2tM3J7WsOPt7U5VAz8noiBYQtsEZ+C9cbG4Mi5gW8kxXPevACgzJQv4HOo2dOk RUtoemWwx4Ss6zwU4BerGi5ijCZegKWjPe0sMNemGdv89fUwtHHNpVF43/YaQcJu p+XU8/ZLsQlsnHtk0xOtqr9hSSeRBJR5RC3LA7ZjhHjN4+pxx/A0ABdVjvmEto54 SpS9HUAD+AbRQO5JWaKRJhmxiDKskEUB6BHMeZWMvapz+AS+b9/xCFX6fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXKrZm6o8+VEDUG00+sMkpkzKH1MB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMRROzVW Zz8Roz4pZ0QSUC+mSd5+saOGJgkJg7Oet0z5vxfz35VqSfydRWHjcoodvoMQlc6+ MYSuOuA6lOGzXv7hMYEdKxaBU0sv4HCYXJkYzRav4idMqRsPFBN3UHUwcQNXD8II DVRwmUBE5ypZ3y3VnwRKEw33qZ5TYeHDudOb/pFtyxjSTWjExLPaRl8aHSKiT+Cl uuuEUfsHswqmERFv8Dt0QkmIL2ZrwTDV3EAv+qKRbwWNGApQEbtkS4bdqlkM0U7i KFiETPp/KVMsuXYj8yb79aEP7PhS29Gd8ycFm6gMnDes6pBgqAhBoShGYV+pQ8Jx hBedvI2gyFLung== -----END CERTIFICATE-----Generated at Mon Oct 27 04:21:10 2025 by rpki-client