$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: S5E4265K02LkVfAOxGRaWuUygVtyw8cR+uFSxF/ClL8= Subject key identifier: 37:00:63:93:73:F9:51:B0:ED:79:1C:95:79:71:6D:7A:AE:10:7C:71 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 0198323978238DB17228663E87271F3EEC75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1603 Signing time: Tue 22 Jul 2025 13:01:23 +0000 Manifest this update: Tue 22 Jul 2025 13:01:23 +0000 Manifest next update: Wed 23 Jul 2025 13:01:23 +0000 Files and hashes: 1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=) 6: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 10: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: 3NehXCjcoqY/DhCb5WjVrWLiPl8F8U6CY8SfBqpDs9k=) 11: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 12: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 13: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 14: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 15: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 16: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 17: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:32:39:78:23:8d:b1:72:28:66:3e:87:27:1f:3e:ec:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jul 22 13:01:23 2025 GMT Not After : Jul 23 13:01:23 2025 GMT Subject: CN=3700639373f951b0ed791c9579716d7aae107c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:69:98:6f:13:80:fc:1d:e9:88:f8:26:73: 0c:04:ad:98:43:8f:e8:b1:32:11:cb:b6:64:be:32: ce:35:53:4b:2a:8a:91:c1:f4:f9:ec:9b:bd:da:9f: 06:94:35:26:50:39:6c:ce:79:ae:e9:f1:a6:63:93: bc:dc:79:74:f5:5b:ac:01:cd:69:ea:38:bb:a5:4c: 95:0b:ef:8f:74:88:d3:19:17:c5:8e:1d:82:50:94: d7:98:e2:58:91:4b:78:19:11:56:ba:77:b7:74:dd: 05:2d:e7:38:78:8b:7f:1c:90:76:35:e2:b4:2f:9f: c6:77:3a:76:e5:08:cf:c9:9a:27:4e:23:c1:85:13: 3b:f6:5a:7a:af:21:39:0a:9a:f6:fd:55:16:14:c7: ec:70:85:81:f3:39:e4:40:45:a0:de:45:8f:27:7b: 51:7a:6d:42:a9:83:59:d5:fb:8d:2b:f6:fa:30:cf: 0c:d3:f0:34:52:8d:f9:4c:d9:b0:c4:bf:8c:59:9e: 36:ff:79:c0:29:aa:c6:96:b1:fd:44:d9:b6:27:07: 8d:3d:f1:ac:bd:47:1c:e1:a6:f2:b7:5d:2d:f7:77: e2:51:e3:e0:06:f6:04:38:ea:3c:f3:f0:1d:56:f2: 03:c9:ee:50:5e:d6:32:67:15:8d:85:45:98:77:3c: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:00:63:93:73:F9:51:B0:ED:79:1C:95:79:71:6D:7A:AE:10:7C:71 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4c:0b:72:27:66:e5:04:04:9e:7a:67:3e:b2:21:e2:c2:e2: fd:1e:7a:05:f5:29:12:27:a5:9c:6b:18:eb:bb:2a:76:1e:e1: c6:93:a9:d2:ac:77:8a:10:9b:96:9f:6e:09:bb:43:aa:a9:cb: 11:f0:4b:0f:1e:79:b3:c2:04:7d:d9:5c:5d:37:7a:c8:64:ff: e1:db:6f:fa:24:59:1f:47:7d:43:b3:55:5e:f5:52:c9:15:cc: c1:00:b3:c7:6d:21:09:c8:9b:2f:db:5c:dd:7b:ab:c6:b7:54: f9:14:9f:85:16:f0:1d:e8:09:f1:97:da:d3:21:7f:51:06:89: d9:c3:3a:f9:14:6f:73:fd:3a:23:81:07:5c:36:79:2c:b9:06: 2f:53:c6:94:25:ea:5c:f0:71:5f:d8:f1:2b:0f:c5:b6:a5:7d: 97:97:3a:e5:37:cd:0b:db:21:76:0d:20:c0:bc:c2:52:70:ea: fc:8b:6b:46:a7:db:3a:9f:be:2a:66:61:b7:34:95:05:f9:5a: e4:27:fb:b1:35:0b:c1:de:bc:55:ef:bd:fa:85:9b:aa:e0:2a: 5f:fe:ac:05:ca:a1:a6:02:a1:52:95:ee:f2:3d:2c:22:be:72: 1a:45:bd:ca:54:e4:2d:bf:7c:09:72:e2:ba:ac:90:0d:56:fe: 38:6a:7b:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgyOXgjjbFyKGY+hycfPux1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUwNzIyMTMwMTIzWhcNMjUwNzIzMTMwMTIzWjAzMTEwLwYDVQQD EygzNzAwNjM5MzczZjk1MWIwZWQ3OTFjOTU3OTcxNmQ3YWFlMTA3YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8FpmG8TgPwd6Yj4JnMMBK2YQ4/o sTIRy7ZkvjLONVNLKoqRwfT57Ju92p8GlDUmUDlsznmu6fGmY5O83Hl09VusAc1p 6ji7pUyVC++PdIjTGRfFjh2CUJTXmOJYkUt4GRFWune3dN0FLec4eIt/HJB2NeK0 L5/Gdzp25QjPyZonTiPBhRM79lp6ryE5Cpr2/VUWFMfscIWB8znkQEWg3kWPJ3tR em1CqYNZ1fuNK/b6MM8M0/A0Uo35TNmwxL+MWZ42/3nAKarGlrH9RNm2JweNPfGs vUcc4abyt10t93fiUePgBvYEOOo88/AdVvIDye5QXtYyZxWNhUWYdzxD0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcAY5Nz+VGw7XkclXlxbXquEHxxMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEwLcidm 5QQEnnpnPrIh4sLi/R56BfUpEielnGsY67sqdh7hxpOp0qx3ihCblp9uCbtDqqnL EfBLDx55s8IEfdlcXTd6yGT/4dtv+iRZH0d9Q7NVXvVSyRXMwQCzx20hCcibL9tc 3XurxrdU+RSfhRbwHegJ8Zfa0yF/UQaJ2cM6+RRvc/06I4EHXDZ5LLkGL1PGlCXq XPBxX9jxKw/FtqV9l5c65TfNC9shdg0gwLzCUnDq/ItrRqfbOp++KmZhtzSVBfla 5Cf7sTULwd68Ve+9+oWbquAqX/6sBcqhpgKhUpXu8j0sIr5yGkW9ylTkLb98CXLi uqyQDVb+OGp7kw== -----END CERTIFICATE-----Generated at Tue Jul 22 19:32:49 2025 by rpki-client