$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: tHTT4VKyOUXHH3ixNNl6LdPAm6twkUy3t2sMz4tsbDk= Subject key identifier: 3E:AE:92:6F:45:1F:29:9A:AB:03:34:E9:D2:0B:62:55:C5:65:3C:5F Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 0199172CE071608D04349FC3C979751B502A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 15FC Signing time: Fri 05 Sep 2025 00:00:40 +0000 Manifest this update: Fri 05 Sep 2025 00:00:40 +0000 Manifest next update: Sat 06 Sep 2025 00:00:40 +0000 Files and hashes: 1: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 2: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 3: E4EO3fVQfns_Atan7LvwnUxSb-U.roa (hash: vCMtsAfqgWBbXg/7LBWpNDaXZdUfwGEZ9HYBIRzNGqg=) 4: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 5: K0UekIqjR-B4QFvYqyuisPoIQxw.roa (hash: 3citoMQ7WPnfAIuUtz455F9SJlw4amcf7l2KAPTkKyU=) 6: LChJCjYTp7k_v-5k2BAu7BZJhF0.roa (hash: szBN38iYKk77yi/AxxkaE9KosMFhroCb+4hbaxv0syg=) 7: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: hEK1W4I4ylfvbNqGtPmhy16hKUWvsTjpFgBQIdKCb8I=) 8: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (hash: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=) 9: NMmvspbSz_XwW2dzGwRqq7qvcmc.roa (hash: s05EajvvXbwnQJsnmk5mSyf9Jmf5xLLa0C6Z0XLi8as=) 10: TrLp4LQGVKKizxXsmdCLRLZwmDo.roa (hash: UJmx6dzRXF6ld9YvoDPMR3Wt4jZTtuoIk+NqvTInIaE=) 11: Uj4ioPjjyq2i6q1RbS_v7BbYhXk.roa (hash: /miAvLKH3DzdtiGSUmMYLssvrEQ8WfCsfOBu4FHPpIE=) 12: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 13: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 14: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 15: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 16: uWP5tLXHh8TegI8ITQ2fajYk7Bk.roa (hash: p7cwv0kZBwvZxjXniYwKfKYOtSo5mCVTyzW9YFAlMeU=) 17: xVxmxBwyxdPVvoJBeSg8RoTQZq4.roa (hash: ehyf3E2QFU6W31hWkV4qD6umV0NGP3V9uq2ksIR6aeg=) 18: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:17:2c:e0:71:60:8d:04:34:9f:c3:c9:79:75:1b:50:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Sep 5 00:00:40 2025 GMT Not After : Sep 6 00:00:40 2025 GMT Subject: CN=3eae926f451f299aab0334e9d20b6255c5653c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:f1:27:4e:f0:7a:c7:00:ad:0b:20:10:e5: c2:11:e9:2d:18:50:67:d2:45:d7:f6:86:6d:03:03: 47:fe:9f:b2:b8:d5:db:15:6d:13:bd:4a:a9:ba:83: cc:6d:57:8d:e5:9c:6b:aa:45:b9:26:48:d8:e6:d8: 3e:31:a6:14:a3:69:39:d9:00:42:9a:d9:68:26:ad: e0:b8:4d:f2:aa:ce:8a:a7:65:1a:2d:1b:7e:e3:d5: 8f:6b:39:17:2a:5e:5f:b3:68:52:59:11:42:21:66: 30:fc:a5:26:ed:4d:96:7e:54:70:45:8e:ce:bf:e0: 92:7c:77:38:47:7f:23:3f:85:63:f0:8a:0a:ef:9f: 2a:69:4d:27:33:81:e7:f9:d5:97:05:86:f7:4a:4a: 77:c3:03:a2:f0:70:a9:32:f8:03:25:79:4b:f9:93: 15:f1:80:40:e9:dc:cf:3c:01:11:49:c4:fd:6e:86: dc:29:d4:d7:14:2a:9d:4a:6b:c3:a7:46:f6:58:5c: c5:de:19:f4:e5:3f:c4:eb:47:97:c5:ea:f8:d4:86: 43:67:7f:b9:78:94:bf:13:e8:60:6c:a6:3f:3d:98: b6:8d:50:e7:14:e9:32:f3:4c:ce:be:99:e5:ae:a7: db:e3:ee:49:2a:54:3c:d3:10:31:3b:5d:53:62:89: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AE:92:6F:45:1F:29:9A:AB:03:34:E9:D2:0B:62:55:C5:65:3C:5F X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:89:53:14:58:d8:b9:a9:88:fe:7c:67:60:88:5a:d7:e6:d5: 99:dc:de:6a:09:4d:f4:2d:49:43:d6:c8:b0:9c:1b:1f:73:61: 14:9a:51:93:b0:9e:65:d0:f6:5b:2b:de:52:53:68:32:00:a3: 99:88:55:af:64:87:b6:e3:4d:4c:35:f6:01:5c:9e:bc:06:96: 24:35:a8:1f:59:d8:5c:ff:be:76:c4:31:fb:ee:ad:16:34:a4: 95:f7:4b:49:bc:34:c3:46:1f:ac:17:42:63:2b:78:3c:34:cd: 4a:67:8a:3c:0d:6a:c7:88:44:39:0c:c4:fb:98:72:87:9c:e6: ee:e5:5a:38:62:08:40:ff:fa:65:69:43:3b:89:54:d5:1c:b7: 9d:fd:e3:9f:9e:e0:87:0f:19:54:27:78:c2:d2:8a:db:18:93: 6b:52:d9:91:ef:a4:28:cf:96:c6:45:0f:de:68:5a:92:4f:e8: fc:9c:c3:26:6a:87:93:44:62:d8:0a:5a:de:13:15:76:fc:82: 9e:da:bc:dc:89:bb:e6:d9:c2:d4:76:b3:a8:0f:7c:00:b8:23: 05:7e:31:72:69:63:1f:b1:c7:80:ef:4b:ed:cd:a1:95:d2:57: 15:8d:f9:f7:5e:50:d7:bb:b5:cb:f7:6a:01:65:47:65:07:cd: 91:37:1b:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkXLOBxYI0ENJ/DyXl1G1AqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUwOTA1MDAwMDQwWhcNMjUwOTA2MDAwMDQwWjAzMTEwLwYDVQQD EygzZWFlOTI2ZjQ1MWYyOTlhYWIwMzM0ZTlkMjBiNjI1NWM1NjUzYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+bxJ07wescArQsgEOXCEektGFBn 0kXX9oZtAwNH/p+yuNXbFW0TvUqpuoPMbVeN5ZxrqkW5JkjY5tg+MaYUo2k52QBC mtloJq3guE3yqs6Kp2UaLRt+49WPazkXKl5fs2hSWRFCIWYw/KUm7U2WflRwRY7O v+CSfHc4R38jP4Vj8IoK758qaU0nM4Hn+dWXBYb3Skp3wwOi8HCpMvgDJXlL+ZMV 8YBA6dzPPAERScT9bobcKdTXFCqdSmvDp0b2WFzF3hn05T/E60eXxer41IZDZ3+5 eJS/E+hgbKY/PZi2jVDnFOky80zOvpnlrqfb4+5JKlQ80xAxO11TYokWAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6ukm9FHymaqwM06dILYlXFZTxfMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMolTFFjY uamI/nxnYIha1+bVmdzeaglN9C1JQ9bIsJwbH3NhFJpRk7CeZdD2WyveUlNoMgCj mYhVr2SHtuNNTDX2AVyevAaWJDWoH1nYXP++dsQx++6tFjSklfdLSbw0w0YfrBdC Yyt4PDTNSmeKPA1qx4hEOQzE+5hyh5zm7uVaOGIIQP/6ZWlDO4lU1Ry3nf3jn57g hw8ZVCd4wtKK2xiTa1LZke+kKM+WxkUP3mhakk/o/JzDJmqHk0Ri2Apa3hMVdvyC ntq83Im75tnC1HazqA98ALgjBX4xcmljH7HHgO9L7c2hldJXFY35915Q17u1y/dq AWVHZQfNkTcbYA== -----END CERTIFICATE-----Generated at Fri Sep 5 07:34:53 2025 by rpki-client