$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: uQqQFUrUtEKNmUzTQixk4hYpBhFjFyJvCct2h8KIRXU= Subject key identifier: 57:23:BD:58:86:F0:36:7E:BB:39:C5:48:5E:C4:E7:67:F2:B6:37:91 Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 019A055A8E73112900BA2D5FB1C61872DB03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 07CF Signing time: Tue 21 Oct 2025 06:00:12 +0000 Manifest this update: Tue 21 Oct 2025 06:00:12 +0000 Manifest next update: Wed 22 Oct 2025 06:00:12 +0000 Files and hashes: 1: 5rhCnbfBQSoAZuVmVMiboeGWu54.roa (hash: 5gqpbrRC+Cdfkm/c1DR9JwMbjBV9KN22IV4kTNfP+nw=) 2: B9i3RiZuSYGN1RhgDnM-0Eme8tg.roa (hash: LBtiQvM+v9zo/IiLv5JEHtXJuteP7xqw+3W3lEbcXeU=) 3: NjwQaw6cGSA62FEIMXZVEfnmYHA.roa (hash: VdZC8D9z93aWtA1IVYybwBtyAxHN+u20jiFNcSx/n9g=) 4: RqmZkHbn2cmEIluG5v7rbAeqbpw.roa (hash: 6U78g4wrF5whyn8ct1we7vADHERR8lR6aS5sR/jCPCE=) 5: WaxKXINg6Xzu68JR5Ej0coeSnt4.roa (hash: 8hb9mqxCqUPFStkJaBiVs6WkeU0jBGoseYjkpGSrCHQ=) 6: Z7A7KyWxooTiH6wLwmFbKOMMYSY.roa (hash: pYIt4u6vmiEaC2CHWHVkCrOye7rWvlAQjMoZfWdSmFM=) 7: __x5Ic-9bwQ1SbZ8epBuTBTo8j4.roa (hash: f7wZGJuveG3jCNyR/mvzX8qDCmg/cdnCEqkzqJwo/p4=) 8: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (hash: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=) 9: ckN51ugpQaovcqL7-uk8cWmLqXg.roa (hash: AbepzMs/Oj4qVnFocQGvyMM251EH9U8v0u27S4AwMCM=) 10: dXlNqs4sctmDAbrW2Mdnb1ZiPQ8.roa (hash: 6XBBbO2dgzMWRftGxWo3IPn8Bba+XglKbu5ydcr5hp4=) 11: eRSJtfbbVKcNm7CUQE2kFLC41Mo.roa (hash: adiHF1RgCBC5CqK/0Oc9QEd3jgDuZtItjpc/ozijHb8=) 12: fwGEa1qMKzWIxGZ5Rx3BvoG9LN4.roa (hash: 9w2zj4YTOzCrlR2dMoFL7n6g98Fr8mnP5vI4EHJkpEQ=) 13: ib7IRNpflzvUY9iDq9IqXPjmzrE.roa (hash: dD+RWzaiUpSyHhqngzsCqyUbgihHnkPQmkeKG+wxYrY=) 14: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (hash: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=) 15: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: TFZAfqs2Z9kM+NQnfWMNFzy2IV8ShY79NsRXiRN6RM0=) 16: lhSh68FljrO7wEKZo-qXGTfhzlE.roa (hash: I914mCRjyHYm2Pwd9b34kWk8XH3x42fFqaYwN5Q9h50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:05:5a:8e:73:11:29:00:ba:2d:5f:b1:c6:18:72:db:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: Oct 21 06:00:12 2025 GMT Not After : Oct 22 06:00:12 2025 GMT Subject: CN=5723bd5886f0367ebb39c5485ec4e767f2b63791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:51:01:0c:02:df:6c:a9:4d:3d:5c:9f:de: c3:3d:e9:bf:5d:aa:75:39:73:72:6f:d1:c6:e8:97: 8b:7a:08:34:79:2f:09:8a:5c:4e:c1:ad:e4:d9:f5: 04:db:e3:4e:5b:2f:65:55:f4:29:de:90:7d:1c:86: a9:fb:e4:54:53:13:b3:b0:64:16:3b:66:4e:a8:6b: 9d:43:6f:81:45:19:37:cb:ee:70:6c:fc:45:a1:d6: b6:16:0e:02:5b:30:cf:a1:a2:c4:ca:54:0f:b1:c3: ca:44:3c:18:74:64:cd:1d:5e:36:7e:80:0f:4b:7b: 9b:a1:92:0e:77:b1:15:9e:66:9c:a0:dc:18:03:dc: 8a:ca:88:c6:de:d3:9b:cf:c7:10:4a:95:5b:63:58: 36:39:fe:ad:ee:30:82:68:25:09:87:9f:cc:0a:68: c1:c3:e5:bc:a5:27:e2:1b:57:26:ba:39:44:b8:a2: c3:e4:c5:41:7f:cf:30:2c:03:c8:62:3a:14:70:f6: 02:e6:27:88:a4:29:f1:ba:c0:53:11:bf:98:73:af: e7:19:c0:f3:cc:5b:d8:8c:ad:62:47:89:bc:c7:fe: a7:bb:1d:ce:19:ab:73:4f:6a:48:bf:3a:c6:9c:1e: b3:b3:75:bb:5a:09:3d:21:51:26:74:73:f9:96:9c: e3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:23:BD:58:86:F0:36:7E:BB:39:C5:48:5E:C4:E7:67:F2:B6:37:91 X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c2:f3:24:be:2e:64:74:46:64:87:41:b7:41:93:89:70:30: 3c:57:24:d0:f5:e0:e3:09:f6:16:eb:b7:57:9d:27:97:74:e6: 61:5b:88:ac:3f:81:55:ce:91:c8:34:8f:62:9c:9f:30:2d:03: 64:1d:59:b6:51:30:c3:1d:ff:da:4f:24:68:8c:7d:cc:1d:85: d8:ff:b8:93:e2:e9:c0:78:a0:15:e5:cd:43:a6:2e:97:41:69: c1:f1:df:5d:3d:85:3e:36:23:f4:45:01:96:86:6d:1a:86:47: e9:57:80:5e:ef:9d:31:6a:1f:bd:89:94:33:7e:ac:7d:0d:18: 76:e8:79:b1:3f:d0:32:89:79:70:da:b8:3f:7f:02:12:23:86: 21:18:fe:4d:4f:62:7c:d0:d9:41:ea:b4:b4:be:42:dc:7e:7d: cd:8a:80:15:73:a1:86:5e:4a:9e:ef:5b:af:f9:36:a4:7f:7f: 1f:a2:59:f6:c9:2d:4e:1b:fa:65:d2:9e:84:55:16:2c:c4:69: 77:a6:1b:b3:0c:60:79:5d:cf:fa:06:64:38:af:53:60:4f:83: e0:1c:1e:20:b0:aa:24:ea:3e:b6:6e:32:56:de:ed:4d:fd:13: b5:19:47:b3:5f:5f:6b:43:a2:53:e6:2c:3b:f0:52:38:e4:60: b0:07:e1:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoFWo5zESkAui1fscYYctsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjUxMDIxMDYwMDEyWhcNMjUxMDIyMDYwMDEyWjAzMTEwLwYDVQQD Eyg1NzIzYmQ1ODg2ZjAzNjdlYmIzOWM1NDg1ZWM0ZTc2N2YyYjYzNzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBpRAQwC32ypTT1cn97DPem/Xap1 OXNyb9HG6JeLegg0eS8JilxOwa3k2fUE2+NOWy9lVfQp3pB9HIap++RUUxOzsGQW O2ZOqGudQ2+BRRk3y+5wbPxFoda2Fg4CWzDPoaLEylQPscPKRDwYdGTNHV42foAP S3uboZIOd7EVnmacoNwYA9yKyojG3tObz8cQSpVbY1g2Of6t7jCCaCUJh5/MCmjB w+W8pSfiG1cmujlEuKLD5MVBf88wLAPIYjoUcPYC5ieIpCnxusBTEb+Yc6/nGcDz zFvYjK1iR4m8x/6nux3OGatzT2pIvzrGnB6zs3W7Wgk9IVEmdHP5lpzjuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcjvViG8DZ+uznFSF7E52fytjeRMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsLzJL4u ZHRGZIdBt0GTiXAwPFck0PXg4wn2Fuu3V50nl3TmYVuIrD+BVc6RyDSPYpyfMC0D ZB1ZtlEwwx3/2k8kaIx9zB2F2P+4k+LpwHigFeXNQ6Yul0FpwfHfXT2FPjYj9EUB loZtGoZH6VeAXu+dMWofvYmUM36sfQ0Yduh5sT/QMol5cNq4P38CEiOGIRj+TU9i fNDZQeq0tL5C3H59zYqAFXOhhl5Knu9br/k2pH9/H6JZ9sktThv6ZdKehFUWLMRp d6YbswxgeV3P+gZkOK9TYE+D4BweILCqJOo+tm4yVt7tTf0TtRlHs19fa0OiU+Ys O/BSOORgsAfhbQ== -----END CERTIFICATE-----Generated at Tue Oct 21 13:14:45 2025 by rpki-client