$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: lVYlDaQQcqA6+PWJMBuVOXUIem4CyWjkr5ZFlP9d7XY= Subject key identifier: 65:4C:B1:76:F4:82:D4:36:68:93:78:B2:30:CA:C8:83:1E:90:65:B5 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019A05FFDD2A889405B42954EFA0C920D684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 167D Signing time: Tue 21 Oct 2025 09:00:45 +0000 Manifest this update: Tue 21 Oct 2025 09:00:45 +0000 Manifest next update: Wed 22 Oct 2025 09:00:45 +0000 Files and hashes: 1: 4XbrpnYb9fH0wMvekeYaI_ADm2M.roa (hash: KaRiqzoHzlwolVC6yfXNO0R4xyGemvvXu9DHgMiuTFw=) 2: 4o-wPw4Ynf0h1BoxC1fvHbONSvA.roa (hash: tiDaODRy5w9tozgqOg2LpStik670A6Jk8Q3uVbFTurY=) 3: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 4: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=) 5: 8CRAzgsoXZ3R79FWWctj3ImK9Mw.roa (hash: 6NM6Jwn6Hj02hW0yqUwKsiGgHdJV/f7oetsPrh6Xe3M=) 6: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 7: K0UekIqjR-B4QFvYqyuisPoIQxw.roa (hash: 3citoMQ7WPnfAIuUtz455F9SJlw4amcf7l2KAPTkKyU=) 8: LChJCjYTp7k_v-5k2BAu7BZJhF0.roa (hash: szBN38iYKk77yi/AxxkaE9KosMFhroCb+4hbaxv0syg=) 9: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: oQ1T3SuEuMOmIFsgFjE/TYds79UWKNCFGcW7Hqgk9C0=) 10: MW-2s8cwDMPbSQLVpgQ7XfoCHe4.roa (hash: 59nDRjJMjl6CVNUxzi04tooRMQ9pMZEXsmPjG/Tdv7w=) 11: NMmvspbSz_XwW2dzGwRqq7qvcmc.roa (hash: s05EajvvXbwnQJsnmk5mSyf9Jmf5xLLa0C6Z0XLi8as=) 12: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 13: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 14: kCRuq7L98PE6Zt6HyZcUPfIpvh8.roa (hash: fBWG5ks98F3nxnikXxLtKqW0MxF2K/jtQo2UYb1fIsg=) 15: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 16: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=) 17: xVxmxBwyxdPVvoJBeSg8RoTQZq4.roa (hash: ehyf3E2QFU6W31hWkV4qD6umV0NGP3V9uq2ksIR6aeg=) 18: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:05:ff:dd:2a:88:94:05:b4:29:54:ef:a0:c9:20:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Oct 21 09:00:45 2025 GMT Not After : Oct 22 09:00:45 2025 GMT Subject: CN=654cb176f482d436689378b230cac8831e9065b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6c:84:1a:0f:8c:bb:1a:92:79:a4:44:ca:cf: f0:8b:21:d1:10:a6:56:fa:a8:d0:cd:25:f4:92:ce: c8:8c:39:22:fd:cf:85:39:9c:55:33:93:a4:f6:0a: 36:22:cf:e2:0a:a2:e8:72:81:2d:4a:3f:d0:be:66: 93:5b:bf:be:84:c5:99:46:07:45:c7:e6:8a:6d:26: b7:55:f4:a0:d1:75:d1:b2:03:46:1a:87:5d:28:11: 67:91:ba:14:cd:b8:22:82:cf:51:eb:ae:74:2d:88: 21:0f:3c:19:52:b2:01:85:5b:a8:fa:19:03:a7:5c: a2:0f:c8:da:be:31:d1:2e:c5:84:56:1d:76:30:f6: 8f:5d:37:27:1a:ec:58:bc:43:04:77:7c:c5:10:7a: 89:8d:92:69:88:e5:1b:a2:d5:df:1d:a5:df:ab:9c: 03:9f:94:7f:0e:57:05:1d:1f:09:58:ca:83:75:18: 6c:ca:7e:b9:53:0f:2a:09:a1:68:18:98:91:89:0d: 99:de:32:cd:08:68:d0:5c:09:4c:f8:1f:56:b3:0e: 59:3b:b4:9d:f6:fa:6d:70:94:cc:5b:c9:b6:af:ab: aa:ff:a5:96:46:71:42:a8:62:a9:d4:e9:88:3c:3b: 5b:ec:b4:24:31:2d:55:47:38:00:3b:1b:9f:e6:6f: e2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:B1:76:F4:82:D4:36:68:93:78:B2:30:CA:C8:83:1E:90:65:B5 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:25:1a:9f:6a:5d:24:1d:d9:d3:0c:ec:3f:f2:df:63:b8:9f: 7b:6b:f1:08:5b:1d:ce:d0:4e:f0:f2:e4:cd:16:f8:ea:7e:91: fc:89:7e:29:70:6c:09:9e:91:38:f7:27:f3:46:d6:44:0f:94: 8a:f5:a7:bb:30:a3:68:93:13:c8:e3:4c:48:79:a3:63:d2:31: 34:12:9d:e5:6c:3d:85:68:b5:3f:96:01:88:2b:74:c6:02:45: fc:c5:cc:53:7c:bb:d8:d5:e6:e0:e1:e9:bd:da:3b:47:2b:7f: 80:cd:db:58:88:73:aa:f4:aa:0e:3f:28:dd:fd:31:bc:70:9d: 22:9c:e7:53:aa:bc:bd:8a:58:8e:33:59:d3:7f:7f:da:dc:7a: 15:90:e6:e2:f9:b1:a3:23:a3:e5:88:0b:d3:1e:62:e2:08:81: 6b:d6:c0:18:8b:e8:15:05:93:16:e1:8d:c3:6b:8e:f3:1c:ca: 76:2d:33:67:84:fb:26:f0:b8:c9:49:98:de:1d:c0:d6:d0:f8: 9a:ea:f5:4b:3d:72:9a:8a:4c:ff:f9:5e:ca:f7:54:ff:cd:f6: d4:65:ab:f0:33:d9:a1:a4:57:92:88:56:31:42:b3:b7:0e:bb: 45:a2:ea:b3:d9:61:23:a8:6f:21:a8:70:65:de:8e:b9:f9:76: 3a:87:a6:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoF/90qiJQFtClU76DJINaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMDIxMDkwMDQ1WhcNMjUxMDIyMDkwMDQ1WjAzMTEwLwYDVQQD Eyg2NTRjYjE3NmY0ODJkNDM2Njg5Mzc4YjIzMGNhYzg4MzFlOTA2NWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmyEGg+MuxqSeaREys/wiyHREKZW +qjQzSX0ks7IjDki/c+FOZxVM5Ok9go2Is/iCqLocoEtSj/QvmaTW7++hMWZRgdF x+aKbSa3VfSg0XXRsgNGGoddKBFnkboUzbgigs9R6650LYghDzwZUrIBhVuo+hkD p1yiD8javjHRLsWEVh12MPaPXTcnGuxYvEMEd3zFEHqJjZJpiOUbotXfHaXfq5wD n5R/DlcFHR8JWMqDdRhsyn65Uw8qCaFoGJiRiQ2Z3jLNCGjQXAlM+B9Wsw5ZO7Sd 9vptcJTMW8m2r6uq/6WWRnFCqGKp1OmIPDtb7LQkMS1VRzgAOxuf5m/iOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVMsXb0gtQ2aJN4sjDKyIMekGW1MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSUan2pd JB3Z0wzsP/LfY7ife2vxCFsdztBO8PLkzRb46n6R/Il+KXBsCZ6ROPcn80bWRA+U ivWnuzCjaJMTyONMSHmjY9IxNBKd5Ww9hWi1P5YBiCt0xgJF/MXMU3y72NXm4OHp vdo7Ryt/gM3bWIhzqvSqDj8o3f0xvHCdIpznU6q8vYpYjjNZ039/2tx6FZDm4vmx oyOj5YgL0x5i4giBa9bAGIvoFQWTFuGNw2uO8xzKdi0zZ4T7JvC4yUmY3h3A1tD4 mur1Sz1ymopM//leyvdU/8321GWr8DPZoaRXkohWMUKztw67RaLqs9lhI6hvIahw Zd6Oufl2Ooemfg== -----END CERTIFICATE-----Generated at Tue Oct 21 17:09:48 2025 by rpki-client