$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: faYukRbvJDNZTG8pfu7OIjPveIY5XAA7K9dKrpY/zIk= Subject key identifier: 88:6A:D5:28:25:7B:B1:62:53:CA:64:4E:9F:F4:68:9F:AF:BE:BF:2E Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 0198439BABDC35CD60D09D7DAD7603BCD828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 124F Signing time: Fri 25 Jul 2025 22:02:12 +0000 Manifest this update: Fri 25 Jul 2025 22:02:12 +0000 Manifest next update: Sat 26 Jul 2025 22:02:12 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: VVFRsZSBltNyFuHCBVxfaSYqssSaSY/EIN//isBJRE0=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:43:9b:ab:dc:35:cd:60:d0:9d:7d:ad:76:03:bc:d8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jul 25 22:02:12 2025 GMT Not After : Jul 26 22:02:12 2025 GMT Subject: CN=886ad528257bb16253ca644e9ff4689fafbebf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:09:a1:e3:db:e7:9f:ab:9d:e1:ca:db:40: f2:ff:9e:15:8d:b2:ed:7f:0c:f8:69:24:fd:99:19: 9f:23:4f:f5:c1:96:1f:42:e6:7f:6b:9a:78:05:38: 50:6a:66:42:47:ef:4b:ab:1d:54:29:c7:a0:6d:14: 26:52:90:41:d0:b7:68:0a:28:fb:0f:a5:1a:2d:6a: 8f:55:c0:a4:09:38:d3:da:9e:d3:22:5b:05:29:da: 8b:42:30:3d:48:14:25:9f:76:62:bb:9b:02:4a:e9: 02:87:f3:70:bc:73:7a:99:a6:e4:5d:0b:27:c2:8c: 0e:79:a3:89:cf:32:d2:b4:74:09:9b:a6:fb:fc:59: e1:b6:18:87:00:5f:33:cf:81:01:99:1b:f2:b3:7a: 67:0c:9d:f4:d2:19:58:58:ed:d0:09:d6:49:bb:34: 25:26:2e:65:b4:12:76:d2:b2:c8:1f:ac:b7:ab:80: cc:31:2a:f9:05:6c:36:e5:57:67:8f:8c:74:05:30: 26:c3:b2:af:79:08:e0:d0:98:62:52:71:67:8c:fd: a8:1c:a0:71:bb:5b:d9:6c:59:31:de:02:a9:57:01: ad:d6:36:b8:c3:ba:9f:2d:a5:f9:28:1a:68:97:a6: 13:8c:f3:8d:d3:fe:00:ab:9d:ae:11:c8:b0:63:d5: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6A:D5:28:25:7B:B1:62:53:CA:64:4E:9F:F4:68:9F:AF:BE:BF:2E X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:bc:cd:e8:f2:85:47:b3:0d:8f:34:a5:78:ef:4b:13:26:88: d4:c2:5d:b6:06:af:bf:46:54:43:2b:ba:5c:fa:ac:9d:b8:ac: 91:47:d1:27:a7:f5:0b:b2:21:ce:61:6f:07:ec:51:1e:fe:44: e4:2d:ac:2c:38:a9:bc:f4:1b:b7:46:72:70:76:2f:b3:9a:63: 4a:5c:fd:78:3b:a2:89:2a:90:03:99:d2:ac:40:43:fd:f9:18: bb:c9:bb:af:15:58:49:9a:72:f8:c0:2a:d1:94:bb:c0:ac:67: ae:ed:f6:fb:59:9f:b8:d2:47:1e:c7:ab:fb:8d:4e:ae:7d:54: 14:f9:fb:ab:2b:74:ea:a1:43:a7:2d:23:49:4a:d4:80:a7:02: 76:6b:22:a5:67:63:f8:1f:ac:67:db:89:7f:5b:dc:ce:7c:c4: a1:a2:17:4a:eb:48:69:bf:da:da:86:b8:29:31:43:2a:a8:23: e9:cf:6b:9d:7b:a9:ca:b0:f3:f4:a6:ec:cb:e3:7c:08:60:71: 6c:2f:f3:85:de:22:4c:b9:46:0d:28:d2:25:c2:b2:ea:05:2c: 69:f4:14:81:63:97:d5:f7:91:87:4f:6a:ff:2c:b9:9a:7c:db: ab:c9:a9:44:35:bf:1e:b8:e1:cc:93:ee:99:fa:fd:e3:af:43: da:31:da:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhDm6vcNc1g0J19rXYDvNgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUwNzI1MjIwMjEyWhcNMjUwNzI2MjIwMjEyWjAzMTEwLwYDVQQD Eyg4ODZhZDUyODI1N2JiMTYyNTNjYTY0NGU5ZmY0Njg5ZmFmYmViZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/kJoePb55+rneHK20Dy/54VjbLt fwz4aST9mRmfI0/1wZYfQuZ/a5p4BThQamZCR+9Lqx1UKcegbRQmUpBB0LdoCij7 D6UaLWqPVcCkCTjT2p7TIlsFKdqLQjA9SBQln3Ziu5sCSukCh/NwvHN6mabkXQsn wowOeaOJzzLStHQJm6b7/FnhthiHAF8zz4EBmRvys3pnDJ300hlYWO3QCdZJuzQl Ji5ltBJ20rLIH6y3q4DMMSr5BWw25Vdnj4x0BTAmw7KveQjg0JhiUnFnjP2oHKBx u1vZbFkx3gKpVwGt1ja4w7qfLaX5KBpol6YTjPON0/4Aq52uEciwY9UZ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhq1Sgle7FiU8pkTp/0aJ+vvr8uMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrzN6PKF R7MNjzSleO9LEyaI1MJdtgavv0ZUQyu6XPqsnbiskUfRJ6f1C7IhzmFvB+xRHv5E 5C2sLDipvPQbt0ZycHYvs5pjSlz9eDuiiSqQA5nSrEBD/fkYu8m7rxVYSZpy+MAq 0ZS7wKxnru32+1mfuNJHHser+41Orn1UFPn7qyt06qFDpy0jSUrUgKcCdmsipWdj +B+sZ9uJf1vcznzEoaIXSutIab/a2oa4KTFDKqgj6c9rnXupyrDz9Kbsy+N8CGBx bC/zhd4iTLlGDSjSJcKy6gUsafQUgWOX1feRh09q/yy5mnzbq8mpRDW/HrjhzJPu mfr9469D2jHaYQ== -----END CERTIFICATE-----Generated at Sat Jul 26 06:23:45 2025 by rpki-client