$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft File: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft (raw, json) Hash identifier: cM8p7D+jxTz05n9reoeS+HXO4vc5W8sBzEB+WEU/kUc= Subject key identifier: 77:3D:C7:EC:14:AA:44:F8:C6:32:4E:FD:63:E0:E5:2C:1F:F1:98:FA Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019A12A8530C97A33FF91D529169A05E3117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft Manifest number: 0861 Signing time: Thu 23 Oct 2025 20:00:12 +0000 Manifest this update: Thu 23 Oct 2025 20:00:12 +0000 Manifest next update: Fri 24 Oct 2025 20:00:12 +0000 Files and hashes: 1: 3ltCFdZy4V3GyE2PWFgAfClRC2E.roa (hash: MvKcHOfmLjkCC6ae2mrrpxSjZGHgMZgVcn/g1k0NPNY=) 2: Hyeufykk73xgcSneHYi8ECCnPYc.roa (hash: 5VqCSOjA5bcQ+XGnXlR3yfwEpjMPFBK+PpNlY2M7gXw=) 3: L1kVVDEFzLMskbG6GJyreD_W07s.roa (hash: 5dzD1L/ZuTcph/ZKFVQ3aoYa39ekNirKhm0sj0J3s7Y=) 4: Mw4DzLJ9A153q_gtADK6A3kEnBY.roa (hash: 9HhbT3XmjLkyekKYjCbpBZ8eHIVc8Kvm9P+X8Pv5KiY=) 5: _YY0UJCJbQTIa1XDSLBMiZ983vo.roa (hash: Gk8qdq6LrPLlWU/Jmg7W6QhRrabuxZ2rc8Fg/yM8yME=) 6: dHqe2g1gPOsNegmLcIQI5U9SNfQ.roa (hash: 9F/5Kpf5xOdn6kNdotAo01R2YGp/WqJkDJDDXyXxvig=) 7: fJTMMWwByN7hphZb0tv_TE2Yvo4.roa (hash: angDRpJs0fbux+XYuzP3Y/VKJHLeYhAHfy7qvUCjIek=) 8: gWkZHgIkZd9yenAGLfTyA3gKWR4.roa (hash: l54n2yyzmR2WNOmjMKZ/OpFoKCDgQWPMUC6iItLiMEs=) 9: iZnCkTImCvQJuWE6Uos60nsBeAc.roa (hash: A+XXsOgpp9E8wrC4jlevUH3rfTq9qVISkfFyAQgNpWw=) 10: lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl (hash: SVHp59EGYNqoQF1QqCILg1y0wPSnztT11pIXw/x7x6E=) 11: pogCClIVQuTAGHMrqdp_DRQP_iw.roa (hash: Tk0SJU87JQDfMtu6wpZcC4NHpxmpDCQmsFrb0+IhQkQ=) 12: x_3yNA2PKdnI1wLd8Ez_YK-zxP4.roa (hash: DlPSxcRx7THUf3XmSC4nmfhGWUpRLK3tS4Z99FqsNaQ=) 13: yUoBCuAM3eeeS5PJtpm_h3BonbI.roa (hash: Yanbkga/qe67IvnuSRaM/Q9sdhNyEQ9ebYUC/TCNJFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 20:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:12:a8:53:0c:97:a3:3f:f9:1d:52:91:69:a0:5e:31:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Oct 23 20:00:12 2025 GMT Not After : Oct 24 20:00:12 2025 GMT Subject: CN=773dc7ec14aa44f8c6324efd63e0e52c1ff198fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:02:e1:21:a5:7e:38:9a:c8:a0:6d:ed:cd: 33:48:59:b5:ab:c6:47:b1:96:a4:5c:0b:eb:99:7d: 6c:20:2d:0e:1a:62:a3:ba:b3:a3:ab:03:39:98:cd: f0:0f:1b:a1:68:a9:72:b3:fe:06:92:18:4d:6a:54: 2b:4b:f9:63:e3:8a:70:f0:06:c6:d9:85:c1:9e:35: 5f:b7:2b:65:9a:8c:06:08:a8:92:a0:4a:63:d9:5b: 0e:01:64:95:cd:f3:44:b1:09:5f:23:fb:0d:d9:5e: 36:52:3f:ce:91:b8:5c:64:60:ea:5e:6e:d7:25:4a: bb:39:be:47:57:30:95:6f:5d:fa:21:3e:c4:29:d1: 3e:9b:05:37:31:7b:b2:b7:b9:62:4b:63:76:e9:b8: de:76:43:85:dc:03:5c:a9:42:21:db:0a:11:ea:c6: ac:46:39:d0:b3:b1:15:42:d0:62:ce:aa:5f:42:f5: b1:8c:df:d4:b0:df:97:22:bf:52:1d:85:39:68:82: 93:09:7b:86:37:32:9c:94:ef:30:de:f0:42:30:dc: da:4d:ed:84:ed:30:4b:51:95:ec:49:11:6b:8a:32: 56:93:07:cc:ab:5e:02:29:c8:d3:78:8e:32:ef:38: 07:76:de:99:6f:cb:48:ed:04:e5:f6:d9:f4:c6:b9: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:C7:EC:14:AA:44:F8:C6:32:4E:FD:63:E0:E5:2C:1F:F1:98:FA X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b9:4b:fa:75:70:da:cd:60:e2:e1:04:00:4a:8a:68:d4:cd: 12:0f:2b:70:40:69:ea:77:09:f2:69:56:5f:2c:20:5a:9f:1a: 06:4b:99:08:e6:e5:10:9b:0b:09:ab:79:f6:b2:a8:74:27:6d: 98:a4:55:72:cd:07:f2:69:6b:f0:3a:69:0e:e7:27:cb:9b:a6: b0:29:a7:61:e1:e6:cc:ad:78:3a:ca:41:9f:55:c0:00:c6:38: 11:d2:48:16:59:ad:86:79:ee:07:05:65:56:ca:8e:c4:dd:22: 5a:0f:e8:32:87:02:80:1b:20:4b:5a:3f:62:65:91:01:41:84: 1d:3b:a4:8b:59:4e:a5:55:1e:16:fb:8f:d4:cd:98:52:35:42: a7:95:d9:ae:e6:fe:7c:6e:b8:f0:68:b1:07:cf:2c:e0:17:4e: 7d:e3:46:2a:6f:af:bf:cb:f6:65:13:62:6b:65:78:cf:bf:4a: 81:4b:bb:e0:29:c1:4f:d6:3d:3a:3d:8d:2b:8f:f0:0c:bf:e0: ff:b6:d0:16:d2:6e:21:6e:4e:ed:45:ba:1b:ae:34:f1:a4:d3: 96:66:82:b3:54:7d:cc:43:02:40:fe:75:95:69:4b:5b:a1:18: 4c:30:ae:22:14:d3:11:17:4a:da:2a:63:85:b2:1b:0c:c4:be: 76:41:0b:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoSqFMMl6M/+R1SkWmgXjEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjUxMDIzMjAwMDEyWhcNMjUxMDI0MjAwMDEyWjAzMTEwLwYDVQQD Eyg3NzNkYzdlYzE0YWE0NGY4YzYzMjRlZmQ2M2UwZTUyYzFmZjE5OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUwC4SGlfjiayKBt7c0zSFm1q8ZH sZakXAvrmX1sIC0OGmKjurOjqwM5mM3wDxuhaKlys/4GkhhNalQrS/lj44pw8AbG 2YXBnjVftytlmowGCKiSoEpj2VsOAWSVzfNEsQlfI/sN2V42Uj/OkbhcZGDqXm7X JUq7Ob5HVzCVb136IT7EKdE+mwU3MXuyt7liS2N26bjedkOF3ANcqUIh2woR6sas RjnQs7EVQtBizqpfQvWxjN/UsN+XIr9SHYU5aIKTCXuGNzKclO8w3vBCMNzaTe2E 7TBLUZXsSRFrijJWkwfMq14CKcjTeI4y7zgHdt6Zb8tI7QTl9tn0xrk/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc9x+wUqkT4xjJO/WPg5Swf8Zj6MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlblL+nVw 2s1g4uEEAEqKaNTNEg8rcEBp6ncJ8mlWXywgWp8aBkuZCOblEJsLCat59rKodCdt mKRVcs0H8mlr8DppDucny5umsCmnYeHmzK14OspBn1XAAMY4EdJIFlmthnnuBwVl VsqOxN0iWg/oMocCgBsgS1o/YmWRAUGEHTuki1lOpVUeFvuP1M2YUjVCp5XZrub+ fG648GixB88s4BdOfeNGKm+vv8v2ZRNia2V4z79KgUu74CnBT9Y9Oj2NK4/wDL/g /7bQFtJuIW5O7UW6G6408aTTlmaCs1R9zEMCQP51lWlLW6EYTDCuIhTTERdK2ipj hbIbDMS+dkELmw== -----END CERTIFICATE-----Generated at Fri Oct 24 02:57:52 2025 by rpki-client