$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: Ey4hSswdDvGrPTXyS2NX7zLa3L8Fby4Et/AhyuLvyro= Subject key identifier: 89:D5:81:07:AC:4C:2B:DA:E5:88:E8:E3:F9:16:67:4B:CF:CF:50:0A Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019A0AEF34209E4A74D29BFA31C354C3D5F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 02F7 Signing time: Wed 22 Oct 2025 08:00:39 +0000 Manifest this update: Wed 22 Oct 2025 08:00:39 +0000 Manifest next update: Thu 23 Oct 2025 08:00:39 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: yNK2g9NqFHl9RDwQRwjKlUrYgnhSF3E7hZ4JMMifAeQ=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: 7nqYSNRgpsvM-UlPtwo-uw5JdC8.roa (hash: zbZzHQxFPE9nkpfPwYSh1rCa28pAH7nN65AJIuORwmA=) 6: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 7: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 8: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 9: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 10: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 11: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 12: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 13: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 14: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 15: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0a:ef:34:20:9e:4a:74:d2:9b:fa:31:c3:54:c3:d5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Oct 22 08:00:39 2025 GMT Not After : Oct 23 08:00:39 2025 GMT Subject: CN=89d58107ac4c2bdae588e8e3f916674bcfcf500a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:5e:a1:2b:27:8a:57:fc:7c:91:8e:b3:f5: 8b:3c:8b:a0:7a:29:96:d4:4f:e0:d3:9a:9f:33:99: d9:11:c6:35:5c:d8:e2:ad:fa:05:f6:fe:cf:d7:4d: 58:1b:e5:4d:40:99:e6:12:44:fa:70:90:ab:dc:88: 8a:ae:ad:30:25:77:01:2b:39:77:e6:1a:54:d7:f3: f9:ff:82:85:ab:17:db:f3:90:b9:a4:20:72:21:66: 1b:91:51:94:a6:c7:61:7c:e8:91:4f:58:63:24:0b: d1:7d:9c:ef:42:3f:f6:66:72:06:23:b3:94:30:19: f8:b7:55:01:4e:da:f7:dd:cf:ba:0e:2b:8b:b3:67: 4c:84:c1:82:5b:96:06:e2:6c:8e:27:32:e9:10:99: e8:9a:8b:f2:09:02:3b:02:d1:2b:83:a2:0a:27:b9: c7:d8:29:09:b9:81:2c:ce:3c:0b:e7:39:69:4a:92: be:fc:ed:20:22:e8:70:7b:26:f5:59:c3:65:ff:19: 49:53:ae:32:10:0e:5a:09:f1:04:e1:f6:2b:8b:ce: 47:e6:fc:d3:d9:23:37:9e:28:05:49:d6:69:6d:15: dc:3a:e6:c5:e0:43:93:48:c2:48:90:7f:8d:dd:07: da:22:be:e5:90:f2:77:b1:ca:83:30:93:f6:a6:93: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D5:81:07:AC:4C:2B:DA:E5:88:E8:E3:F9:16:67:4B:CF:CF:50:0A X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c9:99:21:96:a1:3e:dc:3c:83:6a:24:f0:71:80:be:0f:39: fc:d9:8f:ec:58:8a:5b:ad:16:e2:8c:5e:11:04:10:2d:c5:ac: fe:42:b6:32:14:30:9f:5f:f2:87:95:3b:a0:8e:bc:82:f3:91: ec:b7:41:bc:ed:89:f8:87:14:5a:1b:ba:98:fc:6d:f2:73:a3: 6b:c2:a4:f6:e2:07:42:67:19:31:e4:46:48:38:f8:a5:4e:4f: db:ba:d6:90:12:af:0b:0d:31:dc:c3:fc:4f:1a:57:51:8a:b9: 1f:61:08:83:cd:2d:4c:5a:6a:c9:54:3c:b6:5b:e4:4e:81:d1: 38:0a:3b:5d:00:59:22:6f:7e:fe:21:b6:20:61:61:ee:ab:52: 53:ab:b5:70:01:5b:ae:67:73:f8:c9:52:fb:71:2d:74:0e:9c: e9:f6:8e:ad:4d:d7:af:0b:79:ec:ea:73:14:ec:80:92:eb:ab: 3c:e8:b3:76:7e:ec:19:b8:2f:27:22:bf:d3:c3:cf:c8:04:36: d8:8f:87:28:b7:76:4d:a9:7b:b1:92:66:3c:1c:8a:bc:97:f6: 26:e3:47:7c:cd:58:e6:46:96:a7:ea:ec:2e:69:39:42:eb:96: b2:5b:11:0e:41:44:75:20:9d:d7:7f:a3:60:b3:b1:07:d2:8a: 6b:af:a5:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoK7zQgnkp00pv6McNUw9XwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUxMDIyMDgwMDM5WhcNMjUxMDIzMDgwMDM5WjAzMTEwLwYDVQQD Eyg4OWQ1ODEwN2FjNGMyYmRhZTU4OGU4ZTNmOTE2Njc0YmNmY2Y1MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX5eoSsnilf8fJGOs/WLPIugeimW 1E/g05qfM5nZEcY1XNjirfoF9v7P101YG+VNQJnmEkT6cJCr3IiKrq0wJXcBKzl3 5hpU1/P5/4KFqxfb85C5pCByIWYbkVGUpsdhfOiRT1hjJAvRfZzvQj/2ZnIGI7OU MBn4t1UBTtr33c+6DiuLs2dMhMGCW5YG4myOJzLpEJnomovyCQI7AtErg6IKJ7nH 2CkJuYEszjwL5zlpSpK+/O0gIuhweyb1WcNl/xlJU64yEA5aCfEE4fYri85H5vzT 2SM3nigFSdZpbRXcOubF4EOTSMJIkH+N3QfaIr7lkPJ3scqDMJP2ppPMcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInVgQesTCva5Yjo4/kWZ0vPz1AKMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8mZIZah Ptw8g2ok8HGAvg85/NmP7FiKW60W4oxeEQQQLcWs/kK2MhQwn1/yh5U7oI68gvOR 7LdBvO2J+IcUWhu6mPxt8nOja8Kk9uIHQmcZMeRGSDj4pU5P27rWkBKvCw0x3MP8 TxpXUYq5H2EIg80tTFpqyVQ8tlvkToHROAo7XQBZIm9+/iG2IGFh7qtSU6u1cAFb rmdz+MlS+3EtdA6c6faOrU3Xrwt57OpzFOyAkuurPOizdn7sGbgvJyK/08PPyAQ2 2I+HKLd2Tal7sZJmPByKvJf2JuNHfM1Y5kaWp+rsLmk5QuuWslsRDkFEdSCd13+j YLOxB9KKa6+l5w== -----END CERTIFICATE-----Generated at Wed Oct 22 10:55:04 2025 by rpki-client