$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft File: livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json) Hash identifier: 7bOoP1gv3zAJJIdAXH818WTh+dhL9OF04Bo0wJrw9Z4= Subject key identifier: 8E:65:D3:E4:6F:70:92:29:0C:47:72:16:1E:67:9D:0C:B9:0F:A9:50 Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Certificate serial: 019A071243C39554DF22452B93A44EEC2B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft Manifest number: A3 Signing time: Tue 21 Oct 2025 14:00:28 +0000 Manifest this update: Tue 21 Oct 2025 14:00:28 +0000 Manifest next update: Wed 22 Oct 2025 14:00:28 +0000 Files and hashes: 1: 4GRJUR4vXXkbJXxmZNO0pAVN8no.roa (hash: t1gQYMmTlpYmC9Bxb3uLcdtIlModthZLt22QTmHtD3g=) 2: 4s9-2JVtP2giu2Io6GHUsZ22KZk.roa (hash: 7KfJCLS1AXq205sjqon7m1iopfbESWbrVFHuyd5D9Ss=) 3: 6aGDqB6zTTZjCBfP5YRuloy9Ado.roa (hash: Jsw6J2dvplRCWXPLk7WA0FiHFQe7TiXPeaMlIBY4918=) 4: DxRHYi3CQd120f4p2OEmONB-q_k.roa (hash: Nm9YPsn3d6IoILadqnF7/U4vjvEcTo5EZcDoiQfCWNI=) 5: Gky3WM6DOJSU_16giRDWJ41eEKA.roa (hash: TnCpd95H/6J2xeSLtHFEVqsbxWmaOkgox5gtfxtQD9c=) 6: HRO3d0vD1MhFRdSoqWboZsCNWbw.roa (hash: Ekxu6IECplVn4BvNsNV7ylSUkSXZ8qjRVaCHFN/54ms=) 7: IJwA86yfWxasLC0gUp34HsSsHj0.roa (hash: +RLIosYADN+7XpaLxN/SpQe2XkwdsGukjbGqH12+o3I=) 8: Mu6ijmc_aqBJxzKj_gk2CINhTJY.roa (hash: 0UkVNBd7l+wwHGDngk+/nfAM3QJ5XIIOAEADr4vxqyU=) 9: MxbtV4H3HXjk-oO5rNhIlq8r_iA.roa (hash: fkR1GvOY79D7vr9fC1VGk695rRCxeiV52LMHL4NiGXs=) 10: U1SDk5T7p6egxIx1JRfuo7OCdls.roa (hash: iyjWX/m6G5Id9Wvaphs/kB6FqhArm6Rvb9cBh2phwZ0=) 11: VOcEF0f7WNo4vVl5qC3aLFDgO20.roa (hash: xaWkvZwH2pynHeJG2I3um3vV/6zvwD6eFp9XmnidXp0=) 12: VbO1F3mXAaI-hYmlQLvBPXnwKOM.roa (hash: 1R0P6gMaK3bQlWdyGdOcpLYDnNLujqwH2yF60BoEkOc=) 13: YGSNOkCocvx3kovgnO_-l9-zdRc.roa (hash: BK+U8p9wzCoZ1b9hp3xe8wF3PMuEUE1T98uyrS2lHGI=) 14: b6FcRNX7XsUjrp_KvsdQmPN64w8.roa (hash: GVPLJgY6O9ecyKKO4fYSe4zA+PN70li9WJFB02NFBmM=) 15: b7R6JAQa5S0jjYjErJyVA7ERQUs.roa (hash: ZT6m5lWjg9gU85ZTooiiGt4AAwwJFXpnhBt+b7/N/wk=) 16: bOCPMjkzIIwu9o10H6xAzbzLc_8.roa (hash: vzYpLCHM/3xufjlydAQ6DbR3bMECUWkMtTER/abGULc=) 17: cZLUbnXph6px0pIOSmBIdm0mNFY.roa (hash: x+tZe4exoMlRIARp1hM14I6q6eMLv7Hjtp7jv8g/fpo=) 18: cf6unF5sRhvMUJu4is7AhHXyTKU.roa (hash: IeWKY13tSm6lq+2DmwxVBeNKG99Tav+Q0fSea/lBCZA=) 19: d-rcyBh3x14DWt8BVItVhYUTglU.roa (hash: BxFvCRSBNVXYwKz1w18WGBJdtnFiBFx2s6gn0dZvkxI=) 20: fTdsyBaVrS554TN2UN0VhGeNDls.roa (hash: sXUJowWDLg4BNu9L4rAYmrodb2Pa6x55JbRF2HjEfVM=) 21: i0m66lJKEwjku8K2qLBAQ_oh0Tw.roa (hash: a3BdrMT+vJr+Ngk7fHWk5SVBa8Ekf3aaoW+fXRjcfLE=) 22: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: v10mRJcIzy00wztjGVLqOKYWO5BAfHb8Z9u9aUvEoJQ=) 23: pBHHVqfa0x1Imx6T_GwMeahEWbo.roa (hash: Xxb+HPPyDbTmwlC2rHka8smyo3kx9QGy/l07UqH4+ZY=) 24: pPvRrv62Pf5A4eU-XGG6b4c1j3g.roa (hash: MwEScQeG4P5xyORfThXLXKRA8rkHJTgnjI9OHulIxQM=) 25: qC9pupdeKTbRm5arViYO-LZXEe0.roa (hash: 1rSDWuh/2Zz+Ot3z1ajd4SQbW5q3+QfeV8TxLGUjh2Q=) 26: rNDX_Wz414jpuXAPR-1sBq-LUR0.roa (hash: CBbmt9SPHuRy5yKBLNwl9qwTWuBK44yED2+gvGIuJzw=) 27: yCBOPaS01iKvqQk_YMaVaTTz234.roa (hash: e9QjMPbYzYYjfH2EZu8+PaBSsGZJBC9gvfRDCWljrsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:12:43:c3:95:54:df:22:45:2b:93:a4:4e:ec:2b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89 Validity Not Before: Oct 21 14:00:28 2025 GMT Not After : Oct 22 14:00:28 2025 GMT Subject: CN=8e65d3e46f7092290c4772161e679d0cb90fa950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:eb:83:db:a8:6a:60:bf:00:49:85:8d:58: e4:6d:0b:31:23:10:17:2d:eb:e0:df:c2:52:d9:a4: 8c:04:08:d8:c2:65:b9:8f:18:d0:56:0e:6c:c8:a6: 41:b0:7d:34:bf:83:7d:a4:aa:59:24:13:85:50:24: a1:3a:7e:d4:61:f0:1e:4a:87:73:bb:d1:49:58:0b: f7:99:23:77:49:27:98:26:9a:2d:a0:13:8c:2d:eb: ed:48:14:53:dc:89:fa:85:31:24:0e:72:79:dc:9d: 26:48:4a:27:60:da:51:e0:3b:ca:f0:e7:71:b5:b7: 47:62:fe:b6:76:44:00:d9:17:d2:c0:a7:f9:f7:e6: c4:12:8a:be:93:3f:15:86:0c:02:17:6c:f4:45:00: 92:9a:6c:0c:f5:ce:a7:74:d7:a6:f5:53:89:6e:e0: 41:fe:22:57:ac:5b:14:ed:29:0f:a2:d1:0c:19:29: c1:34:62:ab:4d:fd:77:9c:cf:e3:2a:20:6c:75:91: 62:02:09:11:44:be:24:8c:35:16:f4:ed:1e:bf:17: 61:02:8b:54:da:f9:09:1a:1e:c6:ea:1d:cc:cf:e6: f2:09:62:56:f0:13:7b:45:c6:7a:d6:15:e0:6b:e2: 8a:40:37:41:1e:b1:5c:82:7a:fd:4f:c7:8c:d5:32: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:65:D3:E4:6F:70:92:29:0C:47:72:16:1E:67:9D:0C:B9:0F:A9:50 X509v3 Authority Key Identifier: keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a1:4d:2a:2b:46:95:4e:35:10:1c:cf:e3:5b:59:68:7e:7b: 17:06:5e:a0:15:53:9f:5d:89:8e:e1:42:a1:ad:bd:ea:c5:3e: 14:9f:ef:9e:41:07:7f:10:2a:e3:d5:96:ad:24:fe:32:ff:db: c6:89:7e:79:72:6a:29:d6:5b:56:67:49:9b:a5:19:da:9b:68: a2:9c:ae:df:29:e1:f3:c5:9c:39:60:85:7d:0f:f7:7b:1d:5a: 52:1c:af:bc:35:fb:5c:1e:44:32:37:98:88:7b:ac:01:80:81: 98:ff:b2:17:3b:eb:5f:4b:cf:dc:e0:ea:2c:68:91:aa:d6:d5: a4:04:5a:01:2c:8a:84:90:af:1b:12:74:4a:13:1a:0e:58:ac: 64:9f:30:1f:da:00:43:0a:83:ab:5f:8c:fe:15:c6:bd:8d:00: a8:62:b4:fd:93:60:69:be:64:c3:a1:41:1b:d2:a5:ab:a4:fe: a3:e8:e2:a2:bb:5b:71:22:a2:41:c8:64:3b:5d:b6:db:54:ab: 54:27:27:63:73:e5:6c:fe:b9:49:26:1a:26:b2:3c:bd:ce:a4: 30:4d:77:62:21:fc:96:d8:82:39:0d:a1:1e:07:3e:b0:f0:42: 5e:61:d1:0b:98:64:c6:b3:28:9d:02:8f:38:2e:92:46:04:e0: 70:64:50:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHEkPDlVTfIkUrk6RO7Ct6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw MWZiODkwHhcNMjUxMDIxMTQwMDI4WhcNMjUxMDIyMTQwMDI4WjAzMTEwLwYDVQQD Eyg4ZTY1ZDNlNDZmNzA5MjI5MGM0NzcyMTYxZTY3OWQwY2I5MGZhOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJDrg9uoamC/AEmFjVjkbQsxIxAX Levg38JS2aSMBAjYwmW5jxjQVg5syKZBsH00v4N9pKpZJBOFUCShOn7UYfAeSodz u9FJWAv3mSN3SSeYJpotoBOMLevtSBRT3In6hTEkDnJ53J0mSEonYNpR4DvK8Odx tbdHYv62dkQA2RfSwKf59+bEEoq+kz8VhgwCF2z0RQCSmmwM9c6ndNem9VOJbuBB /iJXrFsU7SkPotEMGSnBNGKrTf13nM/jKiBsdZFiAgkRRL4kjDUW9O0evxdhAotU 2vkJGh7G6h3Mz+byCWJW8BN7RcZ61hXga+KKQDdBHrFcgnr9T8eM1TIuMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5l0+RvcJIpDEdyFh5nnQy5D6lQMB8GA1UdIwQY MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt NmFiMTExNTVmNmZiLzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6FNKitG lU41EBzP41tZaH57FwZeoBVTn12JjuFCoa296sU+FJ/vnkEHfxAq49WWrST+Mv/b xol+eXJqKdZbVmdJm6UZ2ptoopyu3ynh88WcOWCFfQ/3ex1aUhyvvDX7XB5EMjeY iHusAYCBmP+yFzvrX0vP3ODqLGiRqtbVpARaASyKhJCvGxJ0ShMaDlisZJ8wH9oA QwqDq1+M/hXGvY0AqGK0/ZNgab5kw6FBG9Klq6T+o+jiortbcSKiQchkO12221Sr VCcnY3PlbP65SSYaJrI8vc6kME13YiH8ltiCOQ2hHgc+sPBCXmHRC5hkxrMonQKP OC6SRgTgcGRQKg== -----END CERTIFICATE-----Generated at Tue Oct 21 22:30:23 2025 by rpki-client