$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: eM3/Q4DLCgZgvtszlXmPuj8xsY9bKP9DGvrmuEeaGPY= Subject key identifier: A1:34:06:F6:15:D9:07:7D:F7:8F:CC:CF:96:9E:7B:D6:1D:61:D7:C1 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 01983DCF63A5A7503A796144D4639BF3E3C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1609 Signing time: Thu 24 Jul 2025 19:00:58 +0000 Manifest this update: Thu 24 Jul 2025 19:00:58 +0000 Manifest next update: Fri 25 Jul 2025 19:00:58 +0000 Files and hashes: 1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=) 6: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 10: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: fBMm7yVFSlSNqf1wYQG1+P3Nxc49lq2v/lzJZXGJNGs=) 11: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 12: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 13: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 14: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 15: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 16: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 17: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3d:cf:63:a5:a7:50:3a:79:61:44:d4:63:9b:f3:e3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jul 24 19:00:58 2025 GMT Not After : Jul 25 19:00:58 2025 GMT Subject: CN=a13406f615d9077df78fcccf969e7bd61d61d7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:68:74:f8:40:0f:0e:2f:2a:d0:bb:a0:84: 6b:0a:2e:c0:18:cb:e9:21:ad:c5:7a:de:e7:be:c3: 1e:4d:b3:f8:d5:9f:68:49:ec:8a:ad:fa:6e:ec:64: bc:f7:e5:0c:f7:c1:b6:d5:e8:c1:00:cd:05:5a:5d: 84:ed:68:02:48:aa:6a:f1:5d:ae:1b:1d:a3:86:12: 59:a4:3c:44:02:e5:1d:f9:27:af:3f:5a:2e:18:2a: 52:36:a3:32:f2:be:ea:98:95:bf:16:3a:58:9a:92: d3:1b:ff:fd:c3:2d:ea:d0:57:6f:af:81:e6:55:4c: 74:9c:11:02:25:be:c1:38:d1:5c:ee:44:03:77:91: 61:51:fb:99:ee:69:c7:49:8d:96:29:17:39:39:3a: 0c:f8:f3:d3:b0:a5:d3:c7:b8:b6:3a:0c:4d:ff:97: ce:8e:ce:be:1a:ce:8c:f9:46:75:2d:45:44:bd:6d: 84:4a:02:d9:56:63:29:98:24:36:36:e4:51:7c:0b: 80:4a:50:2f:d2:0c:f7:35:0d:97:ca:2d:cc:27:3a: 52:18:67:69:60:c3:a9:9a:fa:c4:4d:13:9c:72:c9: 4e:c0:78:9d:82:71:d6:e6:95:81:58:7e:f6:c8:3e: c0:6d:27:1d:3c:45:52:90:7f:62:0f:0c:8a:25:5d: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:34:06:F6:15:D9:07:7D:F7:8F:CC:CF:96:9E:7B:D6:1D:61:D7:C1 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:8c:b2:20:09:b9:da:3c:0a:5e:3e:a4:43:55:80:cb:ed:a9: 48:cb:c5:27:49:b0:75:90:8d:39:a3:e3:ad:24:b6:35:78:33: 00:a3:16:58:5c:12:92:a1:fe:c8:9f:2a:21:ca:9e:da:01:31: 4a:2e:6f:9a:55:3f:04:39:cc:db:2e:99:15:dd:f8:0e:fd:04: 35:b4:f8:83:c6:19:8b:d5:0b:cb:bf:3f:04:87:0a:11:6b:a3: af:47:10:f9:7f:3f:fe:63:cc:a2:22:40:8a:74:5e:4f:61:8f: 6b:a0:94:db:27:34:04:8c:ea:24:3d:25:b3:51:c6:e9:71:8b: 16:76:46:89:d3:4b:9f:d7:41:39:0c:e5:3c:cc:22:dc:9a:5a: 8c:d2:4a:c6:f0:83:41:b7:8e:08:18:d9:a9:e7:2e:79:3c:67: fe:5e:91:a4:41:21:e1:6a:93:13:fc:92:e7:f9:cd:ad:49:11: 15:69:48:7f:c3:38:77:10:78:4d:31:ea:5b:cc:c4:5c:0d:ef: 45:54:db:b8:bd:41:29:b5:e8:c1:50:d4:b2:1b:62:d5:39:11: 72:bf:d9:69:ef:95:3c:0b:53:87:c0:f8:23:f5:84:b5:fc:92: 54:92:d8:55:79:a8:0d:6c:f9:bf:47:97:3a:c9:64:2b:e7:38: 09:a7:db:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg9z2Olp1A6eWFE1GOb8+PIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUwNzI0MTkwMDU4WhcNMjUwNzI1MTkwMDU4WjAzMTEwLwYDVQQD EyhhMTM0MDZmNjE1ZDkwNzdkZjc4ZmNjY2Y5NjllN2JkNjFkNjFkN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOpodPhADw4vKtC7oIRrCi7AGMvp Ia3Fet7nvsMeTbP41Z9oSeyKrfpu7GS89+UM98G21ejBAM0FWl2E7WgCSKpq8V2u Gx2jhhJZpDxEAuUd+SevP1ouGCpSNqMy8r7qmJW/FjpYmpLTG//9wy3q0Fdvr4Hm VUx0nBECJb7BONFc7kQDd5FhUfuZ7mnHSY2WKRc5OToM+PPTsKXTx7i2OgxN/5fO js6+Gs6M+UZ1LUVEvW2ESgLZVmMpmCQ2NuRRfAuASlAv0gz3NQ2Xyi3MJzpSGGdp YMOpmvrETROccslOwHidgnHW5pWBWH72yD7AbScdPEVSkH9iDwyKJV0tBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE0BvYV2Qd994/Mz5aee9YdYdfBMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA34yyIAm5 2jwKXj6kQ1WAy+2pSMvFJ0mwdZCNOaPjrSS2NXgzAKMWWFwSkqH+yJ8qIcqe2gEx Si5vmlU/BDnM2y6ZFd34Dv0ENbT4g8YZi9ULy78/BIcKEWujr0cQ+X8//mPMoiJA inReT2GPa6CU2yc0BIzqJD0ls1HG6XGLFnZGidNLn9dBOQzlPMwi3JpajNJKxvCD QbeOCBjZqecueTxn/l6RpEEh4WqTE/yS5/nNrUkRFWlIf8M4dxB4TTHqW8zEXA3v RVTbuL1BKbXowVDUshti1TkRcr/Zae+VPAtTh8D4I/WEtfySVJLYVXmoDWz5v0eX OslkK+c4Cafb5g== -----END CERTIFICATE-----Generated at Fri Jul 25 05:16:22 2025 by rpki-client