$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: nus8RUhKE65rRyff8EgS69CnCMenYDe9+6W8/KKRtn0= Subject key identifier: F2:37:60:66:72:91:C1:E7:F4:DB:06:DD:31:C8:9A:54:B5:B3:27:35 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019961A27ED53DF5912025737184E653811C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 145D Signing time: Fri 19 Sep 2025 11:01:03 +0000 Manifest this update: Fri 19 Sep 2025 11:01:03 +0000 Manifest next update: Sat 20 Sep 2025 11:01:03 +0000 Files and hashes: 1: 4Daq3sRA17ZdprqbzGRyjmXgl1E.roa (hash: VSeTV1A+yIJMWw7g87Rk+9SxMblNEgNbsAxn9i/toOI=) 2: 8QONkg1-sVvu25nrTHQAiE7_PVc.roa (hash: Y3bPcPPsDbmx1nSMSrbsDz9GOPEu4THJBnIThId/cto=) 3: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (hash: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=) 4: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: ckEDqSQ138eCiPI3rH5uIn+qo60pwRHF4ADyG8nnSLY=) 5: TUsdn5UyypZAySyIwD0122dO4hk.roa (hash: qROUQY1/zeBb3m/9z4pmEZOzjkUX8dhi6BLpMApkjMw=) 6: UXKY_-h8u5j67TK9xWF4UA7Jum8.roa (hash: 6VqcQkz1/ixl50Kan0s1XUnUbJsWVx2QWylK6fqZbBI=) 7: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (hash: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=) 8: qdxw7ICFkhNmOD2y920CquCl8Zs.roa (hash: 0IGxrItYdslNNm2Z4pvBdqn/xC9v6YAG/wAr3FTvC0g=) 9: qoKgk8neCLLMajChHz0fftLejzg.roa (hash: ehm4GjwYCbP5+m0/y/D+332hrTelfkErSjs/0NX8/E0=) 10: vIlo6Dk-dYUOv5-nktddKH_zbFQ.roa (hash: dU3Xza9rfoKJOlEJVf8d8iW9v0mUKy4oBSU35lnK1P4=) 11: wqBm7rPN_QCGYMr0G_aOxp5hD2w.roa (hash: luljtEiBvQ077ULzFpsCWlvJ3NF6749HEShaCtOITcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:61:a2:7e:d5:3d:f5:91:20:25:73:71:84:e6:53:81:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Sep 19 11:01:03 2025 GMT Not After : Sep 20 11:01:03 2025 GMT Subject: CN=f23760667291c1e7f4db06dd31c89a54b5b32735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:ac:b3:93:dd:32:7a:99:2f:08:5f:00:66: 9f:d0:a9:1c:95:f2:a4:8e:18:6b:d6:7e:bc:96:4d: 47:08:8b:09:b4:a0:25:66:de:8b:1c:43:7b:13:6d: 66:d8:51:3b:d9:4e:62:35:bb:0f:0d:28:1f:d3:ce: 32:b7:1b:31:51:db:23:85:63:25:b7:13:53:e7:3e: 05:60:ae:5d:fe:37:eb:b6:20:09:9e:31:ab:00:1f: db:e1:a0:5f:c5:70:19:7a:66:a5:15:15:3f:85:b0: fb:16:dc:13:1f:17:a5:99:7d:5e:45:8f:8f:9b:29: ee:f4:2d:d3:79:e8:ea:2f:9b:0d:00:c9:8b:61:8c: 69:16:5d:fa:bf:40:9f:b5:c0:f2:d6:ce:7e:02:c4: 77:91:62:a4:80:fe:e7:36:7a:4f:32:11:d5:9f:ef: 26:de:fb:a8:89:cb:af:99:df:f3:66:3d:19:62:ae: 27:e8:ea:a8:0c:a9:63:8a:b8:01:46:f8:7d:d8:20: 03:56:ab:d6:ef:73:1a:41:b4:16:53:4a:2b:d8:75: 5d:45:db:b1:ef:45:01:60:65:cd:17:c8:1a:07:9c: a9:ed:11:f0:a2:36:65:0e:25:9b:fa:9e:fe:fe:3b: 1f:a2:98:5b:d8:b5:e2:f4:c3:a7:2c:e2:a4:ef:e2: c3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:37:60:66:72:91:C1:E7:F4:DB:06:DD:31:C8:9A:54:B5:B3:27:35 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:b7:de:13:be:2c:05:a8:eb:c8:6b:28:d1:c0:0d:f5:56:b1: df:04:1c:97:27:8e:43:dc:9f:e7:7a:03:29:cb:ab:9c:38:42: c3:0f:79:29:32:88:dc:d2:ba:df:67:a4:36:b9:45:3d:4c:44: a9:32:e2:36:16:42:70:34:94:09:0c:40:c5:9f:e9:9c:52:57: a1:fd:dc:3b:f3:83:28:1a:09:12:6b:c5:4e:6d:95:7e:c5:e8: c3:3d:b8:d1:f2:87:01:4c:8c:0d:b3:f6:4c:1c:ad:83:35:d6: b5:dd:73:f2:9f:9c:48:75:77:f6:29:26:8e:66:b7:53:81:d6: 46:77:ff:7a:8f:c6:65:2a:a4:59:b6:22:e0:9d:9f:47:a5:86: 48:f5:85:d7:2f:e4:f8:67:db:41:7b:ee:20:a8:06:2b:00:62: 9f:27:8d:51:b4:16:27:a4:d7:ee:c6:5b:fd:aa:24:a2:a0:74: e7:1d:76:d0:82:1e:d8:dc:b6:86:92:09:95:78:5e:5d:13:6c: 3f:46:8b:56:4f:21:62:0e:75:a5:84:8d:fb:50:ab:1a:09:12: 64:55:4e:b2:39:d5:e7:e2:7c:7f:d2:29:04:2c:21:3f:ef:6b: 99:f3:c8:20:89:e6:ee:1d:04:f8:be:1a:bb:0d:8b:85:10:c8: 45:12:5e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlhon7VPfWRICVzcYTmU4EcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUwOTE5MTEwMTAzWhcNMjUwOTIwMTEwMTAzWjAzMTEwLwYDVQQD EyhmMjM3NjA2NjcyOTFjMWU3ZjRkYjA2ZGQzMWM4OWE1NGI1YjMyNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKass5PdMnqZLwhfAGaf0KkclfKk jhhr1n68lk1HCIsJtKAlZt6LHEN7E21m2FE72U5iNbsPDSgf084ytxsxUdsjhWMl txNT5z4FYK5d/jfrtiAJnjGrAB/b4aBfxXAZemalFRU/hbD7FtwTHxelmX1eRY+P mynu9C3TeejqL5sNAMmLYYxpFl36v0CftcDy1s5+AsR3kWKkgP7nNnpPMhHVn+8m 3vuoicuvmd/zZj0ZYq4n6OqoDKljirgBRvh92CADVqvW73MaQbQWU0or2HVdRdux 70UBYGXNF8gaB5yp7RHwojZlDiWb+p7+/jsfophb2LXi9MOnLOKk7+LDqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI3YGZykcHn9NsG3THImlS1syc1MB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbfeE74s BajryGso0cAN9Vax3wQclyeOQ9yf53oDKcurnDhCww95KTKI3NK632ekNrlFPUxE qTLiNhZCcDSUCQxAxZ/pnFJXof3cO/ODKBoJEmvFTm2VfsXowz240fKHAUyMDbP2 TBytgzXWtd1z8p+cSHV39ikmjma3U4HWRnf/eo/GZSqkWbYi4J2fR6WGSPWF1y/k +GfbQXvuIKgGKwBinyeNUbQWJ6TX7sZb/aokoqB05x120IIe2Ny2hpIJlXheXRNs P0aLVk8hYg51pYSN+1CrGgkSZFVOsjnV5+J8f9IpBCwhP+9rmfPIIInm7h0E+L4a uw2LhRDIRRJe3Q== -----END CERTIFICATE-----Generated at Fri Sep 19 16:09:32 2025 by rpki-client