$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: xm4PB82mHNKrfAqUINvzk6fyw0mVVGMim/TTwg1mqRM= Subject key identifier: BE:14:34:E4:93:EA:DC:DF:2D:0E:C5:B2:4F:DC:81:1B:22:6F:58:07 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019839F2964D949C0F4370756D47467B09D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1607 Signing time: Thu 24 Jul 2025 01:00:56 +0000 Manifest this update: Thu 24 Jul 2025 01:00:56 +0000 Manifest next update: Fri 25 Jul 2025 01:00:56 +0000 Files and hashes: 1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=) 6: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 10: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: yoZH1CMSQMxEqWfyXWnPVUnILeqemoXR+43rjInwLeA=) 11: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 12: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 13: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 14: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 15: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 16: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 17: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:39:f2:96:4d:94:9c:0f:43:70:75:6d:47:46:7b:09:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jul 24 01:00:56 2025 GMT Not After : Jul 25 01:00:56 2025 GMT Subject: CN=be1434e493eadcdf2d0ec5b24fdc811b226f5807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a8:02:24:00:0f:a8:89:25:bc:5c:8f:00:f2: d2:9b:21:22:15:95:41:06:59:8f:b1:a5:31:cd:4e: 60:6b:06:1f:53:e1:35:b2:dc:fc:6a:17:7b:09:3b: 44:9c:27:c1:94:1a:e4:50:cb:c6:1a:c8:0e:fc:e6: c9:48:e9:d2:f6:82:30:9f:89:8a:79:a2:62:88:1a: 9b:36:fe:7c:3b:1e:26:9a:e2:6e:25:bb:aa:ad:70: 45:2a:a9:67:ce:02:cf:8a:47:b5:d1:1f:d1:05:96: 3f:1b:61:6f:fc:d0:75:2f:05:5a:c1:24:89:63:fb: e4:1e:a1:e8:28:6e:26:77:40:43:fb:4d:b2:6a:f7: d0:d5:77:e2:14:8a:d9:19:59:c3:50:ae:44:d1:17: d6:77:55:2b:76:75:84:12:a9:e8:c4:c0:b3:1c:49: fa:e2:22:cd:62:80:a2:4b:36:7f:9c:6e:6d:95:82: 8a:10:a6:32:4d:dd:b2:c5:14:52:54:c5:bf:da:0c: 62:83:70:97:95:5b:c9:c5:39:5b:b7:6e:33:4b:66: 82:86:2a:80:3f:69:b2:e7:7e:4d:8f:f8:ff:9f:be: 82:fb:1d:c9:30:e7:9b:00:fc:e4:19:8f:38:c4:6c: 15:27:cc:bb:cd:7b:a1:ea:5a:1d:ef:d6:fd:02:9c: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:34:E4:93:EA:DC:DF:2D:0E:C5:B2:4F:DC:81:1B:22:6F:58:07 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d0:23:8f:2a:57:0f:ed:77:9e:86:de:58:c4:6d:76:1c:8f: f0:3a:0e:67:93:40:75:0a:f1:aa:aa:6f:26:5c:6b:cf:f1:05: a2:69:aa:38:b0:14:fa:41:aa:e3:6d:4d:4a:f7:64:f1:48:9c: 7e:9a:ac:45:02:65:01:22:98:22:b5:a5:92:5a:4b:b3:10:1a: d2:2c:3c:1c:99:fb:87:9a:e0:4b:4e:de:31:bd:1f:a2:a4:33: 00:b6:f0:17:b9:e0:8e:b8:02:fc:bf:5d:da:5e:f6:eb:0f:f1: da:c2:74:a3:d3:04:e0:39:b0:c4:95:f2:1d:e4:a4:10:d2:aa: c2:15:dc:de:67:62:24:cd:93:31:09:08:29:e3:7c:ca:53:25: 12:23:dd:83:9b:00:49:58:09:4c:3f:40:c1:35:f2:87:a3:8d: c6:3a:c9:41:5e:67:28:82:9e:34:bd:4c:28:07:87:82:5d:4b: 48:37:37:bf:75:fe:19:66:89:03:89:8a:c8:95:e2:70:86:09: c8:4d:1c:8a:ec:80:cc:90:e1:eb:a4:1c:1b:17:bb:e7:27:21: d5:03:83:56:47:3d:ce:f9:6a:9a:9e:60:31:13:da:1c:81:a7: c9:07:2b:25:62:b4:21:71:8f:ef:e5:12:a6:4f:cd:08:ae:9b: 88:8d:89:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg58pZNlJwPQ3B1bUdGewnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUwNzI0MDEwMDU2WhcNMjUwNzI1MDEwMDU2WjAzMTEwLwYDVQQD EyhiZTE0MzRlNDkzZWFkY2RmMmQwZWM1YjI0ZmRjODExYjIyNmY1ODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qgCJAAPqIklvFyPAPLSmyEiFZVB BlmPsaUxzU5gawYfU+E1stz8ahd7CTtEnCfBlBrkUMvGGsgO/ObJSOnS9oIwn4mK eaJiiBqbNv58Ox4mmuJuJbuqrXBFKqlnzgLPike10R/RBZY/G2Fv/NB1LwVawSSJ Y/vkHqHoKG4md0BD+02yavfQ1XfiFIrZGVnDUK5E0RfWd1UrdnWEEqnoxMCzHEn6 4iLNYoCiSzZ/nG5tlYKKEKYyTd2yxRRSVMW/2gxig3CXlVvJxTlbt24zS2aChiqA P2my535Nj/j/n76C+x3JMOebAPzkGY84xGwVJ8y7zXuh6lod79b9ApyONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4UNOST6tzfLQ7Fsk/cgRsib1gHMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtAjjypX D+13nobeWMRtdhyP8DoOZ5NAdQrxqqpvJlxrz/EFommqOLAU+kGq421NSvdk8Uic fpqsRQJlASKYIrWlklpLsxAa0iw8HJn7h5rgS07eMb0foqQzALbwF7ngjrgC/L9d 2l726w/x2sJ0o9ME4DmwxJXyHeSkENKqwhXc3mdiJM2TMQkIKeN8ylMlEiPdg5sA SVgJTD9AwTXyh6ONxjrJQV5nKIKeNL1MKAeHgl1LSDc3v3X+GWaJA4mKyJXicIYJ yE0ciuyAzJDh66QcGxe75ych1QODVkc9zvlqmp5gMRPaHIGnyQcrJWK0IXGP7+US pk/NCK6biI2JPw== -----END CERTIFICATE-----Generated at Thu Jul 24 08:15:13 2025 by rpki-client