$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: QvNRcf1wvUlEdJN7+eTP/QhKGOP5eIEIcaPkwlcZXrI= Subject key identifier: 44:3C:95:8F:2F:3F:AB:8E:BF:9F:AF:42:5D:30:BE:DA:46:14:1B:23 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 0199179B17E33996775143CBF79B832A5F91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0279 Signing time: Fri 05 Sep 2025 02:01:04 +0000 Manifest this update: Fri 05 Sep 2025 02:01:04 +0000 Manifest next update: Sat 06 Sep 2025 02:01:04 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: Q479LhICgSVSglK1xWSG0N6GgozGMuTIkCCwcVOelbE=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: 7nqYSNRgpsvM-UlPtwo-uw5JdC8.roa (hash: zbZzHQxFPE9nkpfPwYSh1rCa28pAH7nN65AJIuORwmA=) 6: FBNO6npvtm0ONb-jYOMfpxVIrnM.roa (hash: FnFMVMWax54UgBMAdC/sjIfxm+ayTB/gAK9ZpT1w5G0=) 7: KJBBbdSFLSNDaaMdsnZ9wzGNr0A.roa (hash: VeFKMfhB0bbaYa6pH5uvWwcQYChEBLxIpD2Q3T7bQJE=) 8: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 9: m_ovUsLqqpp7H0uXhvn428TBx40.roa (hash: d1zfcjVp6OWQCKPNB5rlU/TobZSBt0f8TRcZp54h7Eo=) 10: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 11: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 12: qedyzo2Aki7iZBV6rwCV1N9a00c.roa (hash: QOFb2DLrQQ2grK7W2iUTw5mFL3oTinWGtybuUu2Td0M=) 13: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 14: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 15: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:17:9b:17:e3:39:96:77:51:43:cb:f7:9b:83:2a:5f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Sep 5 02:01:04 2025 GMT Not After : Sep 6 02:01:04 2025 GMT Subject: CN=443c958f2f3fab8ebf9faf425d30beda46141b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:c6:ce:be:32:58:31:0b:7a:8d:92:5d:ba: 5b:c8:f1:45:d4:6e:ab:8b:62:ff:ae:d7:8d:42:f6: 80:cb:c0:ca:56:5d:e6:4f:a7:28:bb:0e:6b:c7:82: c5:09:72:21:c7:b2:54:1d:1e:74:bf:16:35:9e:37: 23:26:26:a0:7e:13:34:c1:3c:04:72:10:ff:38:4d: b0:8a:18:5f:2d:ce:d9:5e:aa:00:00:57:63:98:0b: c3:6f:32:4f:8d:bd:be:bc:1a:a8:8b:35:6d:32:f6: bc:29:5f:25:7c:67:ab:c6:d2:d2:4a:24:e6:f3:47: 06:bb:9a:75:46:af:25:18:c2:85:24:07:24:d7:66: 81:67:f9:6e:b9:53:18:a5:18:26:a7:a3:7c:ec:14: 97:c0:cf:45:24:50:48:b4:85:05:c4:65:d0:ac:af: 1a:33:64:8f:80:20:cc:8d:1f:29:dd:d4:1c:9d:c2: 03:05:23:83:12:fd:5f:79:14:54:36:41:01:e9:fa: 54:af:90:80:02:5a:7a:ab:f0:f6:7d:87:cc:9b:02: 9c:1b:de:fe:f4:09:de:d9:3e:d8:16:f5:4b:3d:8e: 9e:76:f5:5f:ae:85:c1:02:81:1d:5b:97:47:6a:29: 0a:4d:88:1f:e0:8b:e1:0f:41:70:ff:21:d5:87:e0: 69:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3C:95:8F:2F:3F:AB:8E:BF:9F:AF:42:5D:30:BE:DA:46:14:1B:23 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5a:88:7e:91:51:04:c4:bf:09:81:b0:af:5e:83:e9:8c:25: a9:81:12:7e:70:d0:c5:3e:7b:03:e1:4c:54:ff:f7:2a:9d:51: e1:32:42:84:88:5e:36:a2:6d:3f:b5:9b:f7:56:b9:5f:ac:41: 54:cc:82:ef:c2:ea:c1:b8:40:17:0a:b8:59:da:6a:4f:97:e6: f2:7a:33:53:79:a2:f3:07:c8:fa:eb:72:71:7c:7d:89:0a:16: 7b:18:ee:16:c7:86:04:71:d1:7c:18:0c:0d:40:0f:6f:a7:7f: ba:23:e6:74:11:e3:a7:91:9e:10:41:76:66:db:71:78:72:4c: 29:b5:58:64:c2:57:97:ce:40:35:86:6a:c2:75:02:e4:3b:39: 5d:80:68:7f:c3:0c:a9:48:32:a1:76:f4:43:33:11:71:4b:8f: 7f:2c:94:c8:04:ac:5d:00:26:5a:9e:63:f9:44:8b:4f:ff:5d: 80:b5:59:12:5d:52:a8:a7:13:59:89:2e:5c:58:f3:b4:df:b2: e4:82:fc:04:9d:25:18:9d:8d:93:be:b3:93:3f:74:d6:07:df: 66:7c:1a:62:d8:43:9d:90:e5:5f:b6:1f:c4:e3:c5:bb:d3:f0: cf:3a:10:44:e1:e9:7e:3e:4b:5e:ef:32:3b:31:cd:c5:c8:4c: e9:b8:f6:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkXmxfjOZZ3UUPL95uDKl+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUwOTA1MDIwMTA0WhcNMjUwOTA2MDIwMTA0WjAzMTEwLwYDVQQD Eyg0NDNjOTU4ZjJmM2ZhYjhlYmY5ZmFmNDI1ZDMwYmVkYTQ2MTQxYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG3Gzr4yWDELeo2SXbpbyPFF1G6r i2L/rteNQvaAy8DKVl3mT6couw5rx4LFCXIhx7JUHR50vxY1njcjJiagfhM0wTwE chD/OE2wihhfLc7ZXqoAAFdjmAvDbzJPjb2+vBqoizVtMva8KV8lfGerxtLSSiTm 80cGu5p1Rq8lGMKFJAck12aBZ/luuVMYpRgmp6N87BSXwM9FJFBItIUFxGXQrK8a M2SPgCDMjR8p3dQcncIDBSODEv1feRRUNkEB6fpUr5CAAlp6q/D2fYfMmwKcG97+ 9Ane2T7YFvVLPY6edvVfroXBAoEdW5dHaikKTYgf4IvhD0Fw/yHVh+BpYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ8lY8vP6uOv5+vQl0wvtpGFBsjMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVqIfpFR BMS/CYGwr16D6YwlqYESfnDQxT57A+FMVP/3Kp1R4TJChIheNqJtP7Wb91a5X6xB VMyC78LqwbhAFwq4WdpqT5fm8nozU3mi8wfI+utycXx9iQoWexjuFseGBHHRfBgM DUAPb6d/uiPmdBHjp5GeEEF2ZttxeHJMKbVYZMJXl85ANYZqwnUC5Ds5XYBof8MM qUgyoXb0QzMRcUuPfyyUyASsXQAmWp5j+USLT/9dgLVZEl1SqKcTWYkuXFjztN+y 5IL8BJ0lGJ2Nk76zkz901gffZnwaYthDnZDlX7YfxOPFu9PwzzoQROHpfj5LXu8y OzHNxchM6bj2aQ== -----END CERTIFICATE-----Generated at Fri Sep 5 06:03:22 2025 by rpki-client