$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: L2RjJyT36wPqvAeftp9uPPW3ievr/sKkkItBVWyPOOw= Subject key identifier: 5E:B7:FB:0F:E1:44:65:25:5E:32:3C:E1:2E:90:A4:A8:1C:45:10:3F Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019826C8BA7A7B63AC10EDB59FD397B82193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1577 Signing time: Sun 20 Jul 2025 07:42:25 +0000 Manifest this update: Sun 20 Jul 2025 07:42:25 +0000 Manifest next update: Mon 21 Jul 2025 07:42:25 +0000 Files and hashes: 1: 5NarqgL1IqRhroqsljH0A9V5qCo.roa (hash: 8kRquWjA2VpTsIouS+9omLPNkeJK9gTo7+86zZ6sCIM=) 2: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 3: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 4: DA14YVXL4ttxpCuQVAWVh517Mis.roa (hash: ANdvm72Dmh2KKfct5DW9DsN+E50eBLgJUYmUMaD83z0=) 5: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 6: HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa (hash: kHbTsJD5NdmK1vLZSQigG4P1BUyQFBvibnG4XtzolO8=) 7: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: 3x0maEWjAKX7nKHDJrzJ1D023Y2OGOJ2wyd5ouFV1tA=) 8: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (hash: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=) 9: Uj4ioPjjyq2i6q1RbS_v7BbYhXk.roa (hash: /miAvLKH3DzdtiGSUmMYLssvrEQ8WfCsfOBu4FHPpIE=) 10: VgVq-6TLMiL7Sau_RtgQ3m_Vpv0.roa (hash: 1YKBUCdRYV8CfVZcj+eVWU3GK5hSdpogHam93h2rJ6k=) 11: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 12: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 13: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 14: qm0L2lHJWWrJqK3NBR1H81Pb1_g.roa (hash: fi0XBXL2NKtYqIfL0RgarISWN5TtZRTbbQN1Zvvfv5I=) 15: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 16: uWP5tLXHh8TegI8ITQ2fajYk7Bk.roa (hash: p7cwv0kZBwvZxjXniYwKfKYOtSo5mCVTyzW9YFAlMeU=) 17: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:c8:ba:7a:7b:63:ac:10:ed:b5:9f:d3:97:b8:21:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jul 20 07:42:25 2025 GMT Not After : Jul 21 07:42:25 2025 GMT Subject: CN=5eb7fb0fe14465255e323ce12e90a4a81c45103f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:44:da:d7:1c:6d:26:70:de:27:07:3e:fa: 33:74:75:c2:3a:71:12:59:c5:cd:6d:9c:e4:e4:5d: bf:51:5d:c6:b7:dc:83:06:82:01:86:01:f1:94:58: dc:91:bc:d7:6a:ff:fc:01:91:85:1b:b0:15:2f:e0: 12:69:0a:f7:ec:e9:d3:ea:70:94:98:77:90:48:cc: 23:a5:b7:32:e3:a0:b8:44:3d:7c:7e:58:21:dc:14: 6d:d6:fc:6b:26:ed:bb:5b:5b:3d:fc:75:aa:a2:86: 8b:d5:4a:34:61:62:cf:b8:14:a2:96:e8:19:df:01: 97:46:c3:f0:f4:ad:7e:12:3a:6b:9d:02:7e:f6:f9: e7:8b:49:5a:02:1e:2a:6f:e6:bc:82:97:df:8d:0a: cf:c7:9f:c5:67:40:6b:03:ae:af:ab:f7:b8:76:35: c3:f7:4b:56:39:f2:ed:ed:8a:2f:0e:cb:60:d9:9e: d4:0c:0c:39:e4:3f:9a:6e:68:28:57:bd:14:b2:2d: 1d:7a:b8:8e:8f:aa:50:fa:83:4d:9c:12:09:80:b2: 04:4a:dc:9e:94:73:0f:cf:bd:a9:2f:ab:17:64:51: de:1d:b5:5e:cf:7a:6a:a8:a2:1a:7c:51:6f:d1:81: 24:73:f1:d9:d3:44:88:92:69:20:1a:a8:34:c3:13: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B7:FB:0F:E1:44:65:25:5E:32:3C:E1:2E:90:A4:A8:1C:45:10:3F X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b8:dd:87:20:bf:3d:ae:99:d9:88:91:fd:64:c3:36:05:fa: bf:5c:d4:11:ec:f7:4b:fb:f3:d5:54:b7:a5:9b:d9:40:39:55: c4:5b:52:60:ce:a7:9f:41:b3:52:94:06:a6:85:47:ad:3f:8c: 66:46:93:0a:4c:91:21:88:36:68:83:6d:fa:64:28:97:a6:ef: 6e:14:ed:8c:f2:bd:9e:d2:72:8c:ab:19:fe:d0:42:47:ba:16: 24:58:01:43:ce:f5:b5:d7:e2:58:c1:12:aa:71:76:46:87:2f: e3:2e:07:c6:11:d0:3a:1f:10:f3:e7:ad:16:59:06:b9:14:99: ec:90:d4:93:cc:53:5c:6b:6b:1a:a8:e5:98:60:ed:4e:ab:e7: 6f:00:9e:ab:32:24:41:8a:1c:3a:b7:8d:0a:8d:3f:9b:63:12: a4:e6:bb:bc:24:de:3d:f3:e6:72:e4:f6:34:7c:4b:6b:6d:de: ff:1e:39:9a:23:30:ea:2d:99:22:6b:81:7c:96:87:6d:b1:21: 2b:de:2b:df:dd:23:2a:a7:8f:a1:6c:bc:5a:5e:b4:5c:ab:a0: 91:50:de:b8:1a:65:07:d4:1a:a7:f8:37:ca:e9:32:dc:bd:b6: 36:5e:94:d3:d7:26:55:8d:e6:d6:1b:10:51:6d:6a:c4:5c:7f: 33:a2:37:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgmyLp6e2OsEO21n9OXuCGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUwNzIwMDc0MjI1WhcNMjUwNzIxMDc0MjI1WjAzMTEwLwYDVQQD Eyg1ZWI3ZmIwZmUxNDQ2NTI1NWUzMjNjZTEyZTkwYTRhODFjNDUxMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqxE2tccbSZw3icHPvozdHXCOnES WcXNbZzk5F2/UV3Gt9yDBoIBhgHxlFjckbzXav/8AZGFG7AVL+ASaQr37OnT6nCU mHeQSMwjpbcy46C4RD18flgh3BRt1vxrJu27W1s9/HWqooaL1Uo0YWLPuBSilugZ 3wGXRsPw9K1+EjprnQJ+9vnni0laAh4qb+a8gpffjQrPx5/FZ0BrA66vq/e4djXD 90tWOfLt7YovDstg2Z7UDAw55D+abmgoV70Usi0deriOj6pQ+oNNnBIJgLIEStye lHMPz72pL6sXZFHeHbVez3pqqKIafFFv0YEkc/HZ00SIkmkgGqg0wxMaeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF63+w/hRGUlXjI84S6QpKgcRRA/MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7jdhyC/ Pa6Z2YiR/WTDNgX6v1zUEez3S/vz1VS3pZvZQDlVxFtSYM6nn0GzUpQGpoVHrT+M ZkaTCkyRIYg2aINt+mQol6bvbhTtjPK9ntJyjKsZ/tBCR7oWJFgBQ871tdfiWMES qnF2Rocv4y4HxhHQOh8Q8+etFlkGuRSZ7JDUk8xTXGtrGqjlmGDtTqvnbwCeqzIk QYocOreNCo0/m2MSpOa7vCTePfPmcuT2NHxLa23e/x45miMw6i2ZImuBfJaHbbEh K94r390jKqePoWy8Wl60XKugkVDeuBplB9Qap/g3yuky3L22Nl6U09cmVY3m1hsQ UW1qxFx/M6I37w== -----END CERTIFICATE-----Generated at Sun Jul 20 16:24:46 2025 by rpki-client