$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: oymgQR9IIuWEopkGI7Lk/a/kKrHe39PFlJsM9jULlbA= Subject key identifier: E5:53:24:24:30:BE:92:67:F1:F4:85:F7:FB:01:AC:97:96:44:2D:14 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 01982FDCD68B97C2B2E57F7E3F0B8527D47A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 161A Signing time: Tue 22 Jul 2025 02:00:58 +0000 Manifest this update: Tue 22 Jul 2025 02:00:58 +0000 Manifest next update: Wed 23 Jul 2025 02:00:58 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 5: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=) 6: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 7: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: RNRxx5WgXf94m+xfz6adzWBFUKdb6YRZBwPZ+MIaUtU=) 8: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 9: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) 10: tB4Gwrhu06E3QsikW_2RR3FHl9c.roa (hash: rpxh3Xft3stAaYfa6mVzKU7ubzyBU16e4wSptWKVCrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2f:dc:d6:8b:97:c2:b2:e5:7f:7e:3f:0b:85:27:d4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Jul 22 02:00:58 2025 GMT Not After : Jul 23 02:00:58 2025 GMT Subject: CN=e553242430be9267f1f485f7fb01ac9796442d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:17:a0:f7:87:75:77:c3:0a:4f:cb:81:3f: bf:75:80:8b:9a:b6:01:3f:c2:df:c1:24:ec:d0:86: 3a:ee:4c:53:5b:2c:46:25:43:70:e8:1a:6d:01:b9: b4:54:17:b6:be:17:81:91:8d:ae:78:93:ad:5d:57: 25:8d:63:da:2e:2d:ed:16:9b:e3:de:3c:36:f7:5c: 05:59:99:0c:25:90:25:6d:41:ab:ab:a8:e6:48:2a: f2:4a:ff:08:43:2a:e2:1a:0a:49:0b:95:81:a8:03: 27:2d:58:c2:6d:ea:6b:2a:ff:b0:aa:f3:55:d1:94: a6:27:61:3a:93:cc:8b:3d:95:ea:3f:7d:93:c3:d7: fe:63:b4:9a:39:a1:93:40:10:f2:de:6b:80:cd:20: 3d:90:06:d3:07:f3:94:fa:62:a0:b0:ce:b1:cb:db: 76:6d:4c:85:b5:13:2c:32:a3:e3:ce:be:f8:86:86: fc:13:7f:d2:c7:c6:1c:62:97:ec:ad:64:c3:52:3f: bf:a3:99:96:99:fa:76:59:d3:fc:a1:67:60:34:2d: 1c:5c:14:41:1d:c5:cc:31:d8:d7:e2:6a:48:9e:5f: 77:96:aa:6f:29:f3:e4:f2:07:f5:62:65:5e:db:52: ba:8b:43:9f:d4:83:92:13:ec:77:4c:eb:06:c5:f8: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:53:24:24:30:BE:92:67:F1:F4:85:F7:FB:01:AC:97:96:44:2D:14 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:2f:a6:0c:39:14:35:cc:12:fa:3f:3b:fe:c0:42:ad:85:6b: d0:60:48:0e:e3:c7:e9:33:35:23:86:82:6e:bb:d0:af:dd:e4: 3d:db:6b:71:76:41:74:2b:d1:eb:8d:e0:ea:eb:99:09:a1:61: 88:1d:fe:6a:8e:9c:06:7c:87:5a:17:60:60:90:cb:3b:de:76: 2f:f7:11:b9:a3:d7:08:14:cb:e4:c7:b2:eb:d9:11:23:58:3b: 7c:50:50:f6:77:8a:15:f8:29:69:78:1a:13:e0:01:76:92:34: 75:1b:60:8d:ee:15:80:a5:e3:97:64:25:05:56:f9:25:39:54: 86:2e:02:56:93:f1:c1:4e:44:46:67:0b:10:56:dc:cf:c4:e5: 25:5f:ba:2e:dd:3c:8e:ee:80:b1:d0:e0:38:4d:97:ab:87:df: 47:46:82:93:13:89:58:23:48:26:45:44:63:6c:10:32:b0:a2: b9:4c:2b:7d:75:f6:b4:a2:3f:f8:a9:ad:29:ee:44:d7:27:21: 8c:51:13:1d:38:21:91:ab:03:68:f2:c3:91:e9:ef:f4:0b:16: b7:b1:96:8d:b9:a6:43:21:ff:6a:6f:98:0b:e7:ca:b9:9b:5d: ab:21:ff:71:db:82:12:ad:42:de:33:38:13:74:31:00:fd:f8: 73:5c:de:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgv3NaLl8Ky5X9+PwuFJ9R6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUwNzIyMDIwMDU4WhcNMjUwNzIzMDIwMDU4WjAzMTEwLwYDVQQD EyhlNTUzMjQyNDMwYmU5MjY3ZjFmNDg1ZjdmYjAxYWM5Nzk2NDQyZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1YXoPeHdXfDCk/LgT+/dYCLmrYB P8LfwSTs0IY67kxTWyxGJUNw6BptAbm0VBe2vheBkY2ueJOtXVcljWPaLi3tFpvj 3jw291wFWZkMJZAlbUGrq6jmSCrySv8IQyriGgpJC5WBqAMnLVjCbeprKv+wqvNV 0ZSmJ2E6k8yLPZXqP32Tw9f+Y7SaOaGTQBDy3muAzSA9kAbTB/OU+mKgsM6xy9t2 bUyFtRMsMqPjzr74hob8E3/Sx8YcYpfsrWTDUj+/o5mWmfp2WdP8oWdgNC0cXBRB HcXMMdjX4mpInl93lqpvKfPk8gf1YmVe21K6i0Of1IOSE+x3TOsGxfgxFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVTJCQwvpJn8fSF9/sBrJeWRC0UMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFC+mDDkU NcwS+j87/sBCrYVr0GBIDuPH6TM1I4aCbrvQr93kPdtrcXZBdCvR643g6uuZCaFh iB3+ao6cBnyHWhdgYJDLO952L/cRuaPXCBTL5Mey69kRI1g7fFBQ9neKFfgpaXga E+ABdpI0dRtgje4VgKXjl2QlBVb5JTlUhi4CVpPxwU5ERmcLEFbcz8TlJV+6Lt08 ju6AsdDgOE2Xq4ffR0aCkxOJWCNIJkVEY2wQMrCiuUwrfXX2tKI/+KmtKe5E1ych jFETHTghkasDaPLDkenv9AsWt7GWjbmmQyH/am+YC+fKuZtdqyH/cduCEq1C3jM4 E3QxAP34c1zeIw== -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:07 2025 by rpki-client