$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft File: livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json) Hash identifier: O+sNB+0P730REqfIkKo3ssO6ChjXdbYUqcsJ1JA5bXc= Subject key identifier: 5D:FE:0C:C1:02:05:B6:54:E2:B8:30:E4:6E:03:A5:C1:8E:C6:5A:ED Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 01991CF80754901B94322547332C30019FE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft Manifest number: 29 Signing time: Sat 06 Sep 2025 03:00:40 +0000 Manifest this update: Sat 06 Sep 2025 03:00:40 +0000 Manifest next update: Sun 07 Sep 2025 03:00:40 +0000 Files and hashes: 1: 4GRJUR4vXXkbJXxmZNO0pAVN8no.roa (hash: t1gQYMmTlpYmC9Bxb3uLcdtIlModthZLt22QTmHtD3g=) 2: 4s9-2JVtP2giu2Io6GHUsZ22KZk.roa (hash: 7KfJCLS1AXq205sjqon7m1iopfbESWbrVFHuyd5D9Ss=) 3: 6aGDqB6zTTZjCBfP5YRuloy9Ado.roa (hash: Jsw6J2dvplRCWXPLk7WA0FiHFQe7TiXPeaMlIBY4918=) 4: DxRHYi3CQd120f4p2OEmONB-q_k.roa (hash: Nm9YPsn3d6IoILadqnF7/U4vjvEcTo5EZcDoiQfCWNI=) 5: Gky3WM6DOJSU_16giRDWJ41eEKA.roa (hash: TnCpd95H/6J2xeSLtHFEVqsbxWmaOkgox5gtfxtQD9c=) 6: HRO3d0vD1MhFRdSoqWboZsCNWbw.roa (hash: Ekxu6IECplVn4BvNsNV7ylSUkSXZ8qjRVaCHFN/54ms=) 7: IJwA86yfWxasLC0gUp34HsSsHj0.roa (hash: +RLIosYADN+7XpaLxN/SpQe2XkwdsGukjbGqH12+o3I=) 8: Mu6ijmc_aqBJxzKj_gk2CINhTJY.roa (hash: 0UkVNBd7l+wwHGDngk+/nfAM3QJ5XIIOAEADr4vxqyU=) 9: MxbtV4H3HXjk-oO5rNhIlq8r_iA.roa (hash: fkR1GvOY79D7vr9fC1VGk695rRCxeiV52LMHL4NiGXs=) 10: U1SDk5T7p6egxIx1JRfuo7OCdls.roa (hash: iyjWX/m6G5Id9Wvaphs/kB6FqhArm6Rvb9cBh2phwZ0=) 11: VOcEF0f7WNo4vVl5qC3aLFDgO20.roa (hash: xaWkvZwH2pynHeJG2I3um3vV/6zvwD6eFp9XmnidXp0=) 12: VbO1F3mXAaI-hYmlQLvBPXnwKOM.roa (hash: 1R0P6gMaK3bQlWdyGdOcpLYDnNLujqwH2yF60BoEkOc=) 13: YGSNOkCocvx3kovgnO_-l9-zdRc.roa (hash: BK+U8p9wzCoZ1b9hp3xe8wF3PMuEUE1T98uyrS2lHGI=) 14: b6FcRNX7XsUjrp_KvsdQmPN64w8.roa (hash: GVPLJgY6O9ecyKKO4fYSe4zA+PN70li9WJFB02NFBmM=) 15: b7R6JAQa5S0jjYjErJyVA7ERQUs.roa (hash: ZT6m5lWjg9gU85ZTooiiGt4AAwwJFXpnhBt+b7/N/wk=) 16: bOCPMjkzIIwu9o10H6xAzbzLc_8.roa (hash: vzYpLCHM/3xufjlydAQ6DbR3bMECUWkMtTER/abGULc=) 17: cZLUbnXph6px0pIOSmBIdm0mNFY.roa (hash: x+tZe4exoMlRIARp1hM14I6q6eMLv7Hjtp7jv8g/fpo=) 18: cf6unF5sRhvMUJu4is7AhHXyTKU.roa (hash: IeWKY13tSm6lq+2DmwxVBeNKG99Tav+Q0fSea/lBCZA=) 19: fTdsyBaVrS554TN2UN0VhGeNDls.roa (hash: sXUJowWDLg4BNu9L4rAYmrodb2Pa6x55JbRF2HjEfVM=) 20: i0m66lJKEwjku8K2qLBAQ_oh0Tw.roa (hash: a3BdrMT+vJr+Ngk7fHWk5SVBa8Ekf3aaoW+fXRjcfLE=) 21: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: 9/l4epaonQAKgHiwbfplgyfdgMS+e/eEwjKyZaprkyA=) 22: pBHHVqfa0x1Imx6T_GwMeahEWbo.roa (hash: Xxb+HPPyDbTmwlC2rHka8smyo3kx9QGy/l07UqH4+ZY=) 23: pPvRrv62Pf5A4eU-XGG6b4c1j3g.roa (hash: MwEScQeG4P5xyORfThXLXKRA8rkHJTgnjI9OHulIxQM=) 24: qC9pupdeKTbRm5arViYO-LZXEe0.roa (hash: 1rSDWuh/2Zz+Ot3z1ajd4SQbW5q3+QfeV8TxLGUjh2Q=) 25: rNDX_Wz414jpuXAPR-1sBq-LUR0.roa (hash: CBbmt9SPHuRy5yKBLNwl9qwTWuBK44yED2+gvGIuJzw=) 26: yCBOPaS01iKvqQk_YMaVaTTz234.roa (hash: e9QjMPbYzYYjfH2EZu8+PaBSsGZJBC9gvfRDCWljrsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:f8:07:54:90:1b:94:32:25:47:33:2c:30:01:9f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Sep 6 03:00:40 2025 GMT Not After : Sep 7 03:00:40 2025 GMT Subject: CN=5dfe0cc10205b654e2b830e46e03a5c18ec65aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:9b:78:68:ff:87:30:07:dc:40:f4:21:8e: f1:a6:be:44:85:d2:1c:13:d6:68:f0:d6:a4:b4:64: c6:a8:3b:89:c8:be:74:7b:d0:b6:0c:71:ad:cb:43: ea:b1:ff:12:eb:04:e4:d7:71:f9:4f:97:b5:61:2e: e6:06:43:87:6c:6a:b8:84:96:c8:45:2c:48:f7:d3: 8d:63:ea:02:41:bc:cc:14:69:4a:9d:a1:a0:46:99: dd:4e:d8:dc:1a:a1:7d:89:b1:5d:df:e0:7f:6a:10: 46:4d:e0:9e:56:ec:78:91:1d:b6:53:de:58:c8:da: f8:39:e3:46:a4:04:24:bc:7f:cf:54:08:47:4d:04: 51:0f:48:0a:94:b2:32:5b:80:0a:53:ca:c7:8d:4c: 31:0d:d2:21:43:8f:06:d1:5c:b9:ed:7b:e6:d6:35: 3c:98:a3:30:aa:d2:27:d5:0b:d5:d7:f2:84:89:6c: 62:b2:72:1b:1c:e3:f4:8e:ca:29:4f:a7:e6:1b:bf: e0:b9:51:d3:e2:5d:69:9f:33:38:ff:a3:b9:61:69: 16:76:80:2e:11:c6:32:f1:e4:c1:fb:a0:d4:4c:c6: eb:24:35:53:d1:68:26:83:03:df:14:9c:63:34:a9: 40:16:8f:98:0a:18:0c:74:d9:78:26:65:35:04:d2: 64:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FE:0C:C1:02:05:B6:54:E2:B8:30:E4:6E:03:A5:C1:8E:C6:5A:ED X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e6:2a:74:4f:ec:24:4d:af:0f:13:9e:6f:ea:a9:df:04:b9: 1d:87:17:cd:a4:1f:64:11:e3:2b:85:c2:55:46:d3:0b:dd:80: b1:e5:e3:44:77:b6:66:2b:ca:35:62:a6:e4:b3:fa:c7:45:b5: 31:30:34:5d:50:fd:19:40:40:4b:61:37:ed:a3:fb:97:64:9b: 4d:35:87:16:7e:39:20:21:16:a1:7b:9e:62:0d:10:c4:3a:b2: 70:b5:e6:36:7b:03:17:4c:d2:e2:df:3d:30:aa:ab:f8:9d:a8: 6e:ae:36:a6:5d:5e:17:61:ac:fd:4c:88:ba:27:7b:67:8a:f6: 02:f6:71:e5:0c:ec:04:37:72:ee:49:77:8a:94:f3:14:0b:cc: 8d:68:d7:02:21:b3:49:dc:35:d4:35:31:c6:42:c6:08:41:54: 78:34:bb:01:a8:23:98:a5:81:17:99:3e:94:21:ea:c2:8b:1f: 75:ba:7e:41:02:ce:4a:5d:f2:bd:d0:db:55:d6:8a:a3:bb:12: 64:cf:c0:85:b8:87:9f:6b:84:81:09:aa:e8:0d:47:fd:3c:e6: 41:e0:46:93:06:d9:63:93:2c:93:c6:e9:2e:22:7e:aa:f5:96: b3:fc:a6:93:c4:1f:09:ce:ba:6b:fb:55:1e:73:99:dc:d6:ae: 3e:b0:e9:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkc+AdUkBuUMiVHMywwAZ/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjUwOTA2MDMwMDQwWhcNMjUwOTA3MDMwMDQwWjAzMTEwLwYDVQQD Eyg1ZGZlMGNjMTAyMDViNjU0ZTJiODMwZTQ2ZTAzYTVjMThlYzY1YWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklWbeGj/hzAH3ED0IY7xpr5EhdIc E9Zo8NaktGTGqDuJyL50e9C2DHGty0Pqsf8S6wTk13H5T5e1YS7mBkOHbGq4hJbI RSxI99ONY+oCQbzMFGlKnaGgRpndTtjcGqF9ibFd3+B/ahBGTeCeVux4kR22U95Y yNr4OeNGpAQkvH/PVAhHTQRRD0gKlLIyW4AKU8rHjUwxDdIhQ48G0Vy57Xvm1jU8 mKMwqtIn1QvV1/KEiWxisnIbHOP0jsopT6fmG7/guVHT4l1pnzM4/6O5YWkWdoAu EcYy8eTB+6DUTMbrJDVT0WgmgwPfFJxjNKlAFo+YChgMdNl4JmU1BNJkrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3+DMECBbZU4rgw5G4DpcGOxlrtMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauYqdE/s JE2vDxOeb+qp3wS5HYcXzaQfZBHjK4XCVUbTC92AseXjRHe2ZivKNWKm5LP6x0W1 MTA0XVD9GUBAS2E37aP7l2SbTTWHFn45ICEWoXueYg0QxDqycLXmNnsDF0zS4t89 MKqr+J2obq42pl1eF2Gs/UyIuid7Z4r2AvZx5QzsBDdy7kl3ipTzFAvMjWjXAiGz Sdw11DUxxkLGCEFUeDS7AagjmKWBF5k+lCHqwosfdbp+QQLOSl3yvdDbVdaKo7sS ZM/AhbiHn2uEgQmq6A1H/TzmQeBGkwbZY5Msk8bpLiJ+qvWWs/ymk8QfCc66a/tV HnOZ3NauPrDpcw== -----END CERTIFICATE-----Generated at Sat Sep 6 05:01:52 2025 by rpki-client