$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: 8jUDd8UziCu8tzfyBs4S0aBI/u0UWIowFrpazOKyPbU= Subject key identifier: 38:04:BA:98:30:C0:CB:B9:4E:B4:87:85:6F:F3:DD:AF:68:D4:C6:95 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 01991EB056FB08E6F2C47382709DF71890D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 1455 Signing time: Sat 06 Sep 2025 11:01:37 +0000 Manifest this update: Sat 06 Sep 2025 11:01:37 +0000 Manifest next update: Sun 07 Sep 2025 11:01:37 +0000 Files and hashes: 1: 0CJ7pV2pBkyjn4ci_dk7owBM5Ao.roa (hash: /u9I8G3PvT6eUquBHLuKrk45fMJQUlivaFEDmnzwFSU=) 2: 18CbUvKYWO6PYu_t92D214_TJes.roa (hash: gxubaEnhi8atyxnwW/VBZzNjtAflWsy9V6S18PdX27o=) 3: 4k_ZuHYqDe_Het9axD5evRht3Lw.roa (hash: psQ9n7MA7JcZWMk3LmtdaKPiVMz8GYjL9qmt7ww6xH8=) 4: 5PNj7gNAiL3aJZBztBIerafH1Fg.roa (hash: FrTg71eIR2m7NaZISZU5x7mh470vnoLZc6VjRMUOXfE=) 5: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 6: DPE-lvIaheAb93O4x9ER9Pm0wZA.roa (hash: VKbUVq1CbBMedZ3RYdA6WZaoezc+6KLmQpqvYTQTzcc=) 7: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 8: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=) 9: GP1Cesa5LS14FJBqDWsMjIckzAI.roa (hash: vc/pAYpqFI6+gWwwFh+jiqzj1QLBBkB1WyCakRdnhf8=) 10: HN-sxkXhsPARhEyjcxF2VA5ULns.roa (hash: XKKXt3nQtVRf5U2SzwHGZlsTijL5Olvfsj7LyZpSgu0=) 11: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 12: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: Y4+/sUtDBsJ2AXEBeatOXii4h5qK2rBIka9HcDUjjo4=) 13: M8bMB2QKSM425kLjRVO2Mv1OLJ0.roa (hash: p7RpCCMMldWNLmjHFuK8nMdCoRWEH97iMYohSON6X1g=) 14: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 15: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 16: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=) 17: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 18: S5Vx_PwhrUdn6uSPv9B8Pl8fWZ4.roa (hash: XmpSvZLR/cpO3PqSr4aJClVLTWeNmz7xYTDZX7wuFYc=) 19: XdU9ba_H8wvW9YWGekfY-RC6fac.roa (hash: t+t6oWtjjjeUHSoz5gNWccz0VBGlDxWsh2LU4cszm7w=) 20: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (hash: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=) 21: bYVRCpfiYfuNTOtItmg2qSgXKww.roa (hash: A5c3DgIJi3QdlQD3NgkB4e1o2u7d4JwrE4GhSjzqcqA=) 22: cOWXDby_VAjDBm-QNXyxFV15NYc.roa (hash: d23wa4ZI6ixe2JTopJ8C5Bi1Ca40n6+Q2pIZccoLoNY=) 23: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=) 24: fFIiPcIZQx033jSV6p41eBFER7E.roa (hash: qhzye0ysaR3MnkAhIOM63hxvVgvo8rQw3JHNBHBliIQ=) 25: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 26: j-5W8pge-NiY9ueW_P3OZYSFlKU.roa (hash: q5+GGxhUFSbmXixV2Cois1Bph2dy0EglBHtYWw/nAiU=) 27: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 28: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=) 29: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (hash: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=) 30: xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa (hash: 6xBBsXMne/V0DNK57hL+vR0I99KZ2fP45EMjpBaEGFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 11:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:b0:56:fb:08:e6:f2:c4:73:82:70:9d:f7:18:90:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Sep 6 11:01:37 2025 GMT Not After : Sep 7 11:01:37 2025 GMT Subject: CN=3804ba9830c0cbb94eb487856ff3ddaf68d4c695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:15:7a:cd:e7:bd:64:93:65:a8:bd:1f:97:41: 95:35:25:41:c4:5d:8e:ee:90:df:c3:8b:ed:fa:68: 3c:1a:64:66:df:d9:1c:6e:35:7f:57:93:81:d0:4c: d6:b3:30:51:9d:27:ae:35:1b:de:2e:cb:71:2e:f3: be:ca:ed:11:e3:40:e2:22:0f:8e:17:86:03:85:82: 3f:56:52:9f:59:68:89:c6:6d:fd:46:8f:48:8f:09: 19:21:81:51:d2:6a:44:06:b0:64:2f:d8:89:62:9f: 23:2a:70:a4:9a:0b:7d:f5:d3:eb:6e:2d:3d:0c:25: 4d:93:c2:97:b2:ba:8c:c7:19:64:f7:d8:75:d3:60: 93:eb:e5:d9:8e:a7:03:22:9c:25:ec:30:ac:ce:47: a4:96:b3:90:78:a4:59:45:a2:51:81:c1:6f:34:d0: 92:c7:89:06:5e:ea:a9:9e:69:e5:c1:da:f6:79:79: 3b:19:8b:a5:13:ac:c3:db:d2:23:68:72:90:4f:6f: ca:d1:e5:91:32:c1:56:49:49:08:a4:42:32:fc:7d: 10:4e:09:a2:80:bf:9e:97:6b:6a:9b:44:e8:45:7c: 38:3c:b6:15:2f:f1:33:a0:3a:70:f4:a9:07:c8:4c: 1c:e0:9c:eb:02:75:63:8d:06:16:1a:a3:de:47:d4: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:BA:98:30:C0:CB:B9:4E:B4:87:85:6F:F3:DD:AF:68:D4:C6:95 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3b:1d:23:cf:c8:ab:46:6c:02:3e:22:6a:50:7c:89:ba:24: 58:95:e3:9d:a5:dd:59:20:b1:c4:0e:e4:13:b0:a2:4f:b6:bb: 70:d9:d7:a2:31:0d:35:97:03:1f:44:c6:f7:24:c4:c8:60:92: cd:78:29:d9:9f:2f:f3:e1:d2:e8:5a:a0:e5:5b:74:a1:16:4d: 01:a9:94:34:f8:cc:b0:51:35:ec:a4:d1:77:be:a7:98:ee:3d: cd:bc:a9:d0:a7:1f:4a:40:63:a4:9f:25:20:5d:2a:c0:05:64: 69:34:a8:00:0a:37:0b:04:3d:27:6a:8a:09:b7:2b:68:4c:cb: cc:43:1b:2a:1e:d6:b6:8e:82:88:d7:71:ec:6c:b9:b0:f5:9d: 8e:75:19:0f:7d:48:53:e7:50:77:78:7b:b7:d1:eb:75:56:6d: 2f:91:1d:1d:8e:1e:d7:cd:ff:e2:87:38:39:93:11:28:39:7d: 3d:32:a1:f5:f5:6f:45:08:ad:ec:ef:8d:82:3e:54:f2:85:d7: e6:76:db:b4:2e:0d:b4:e9:1f:62:0c:4d:c7:3f:54:96:67:f6: 7e:e9:df:a8:a7:27:e7:05:02:81:4d:df:6b:37:81:ec:4e:f6: 28:4c:3a:f9:71:4c:d6:98:a1:df:ec:bd:0c:af:d5:42:4b:64: 05:3a:1d:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkesFb7CObyxHOCcJ33GJDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUwOTA2MTEwMTM3WhcNMjUwOTA3MTEwMTM3WjAzMTEwLwYDVQQD EygzODA0YmE5ODMwYzBjYmI5NGViNDg3ODU2ZmYzZGRhZjY4ZDRjNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hV6zee9ZJNlqL0fl0GVNSVBxF2O 7pDfw4vt+mg8GmRm39kcbjV/V5OB0EzWszBRnSeuNRveLstxLvO+yu0R40DiIg+O F4YDhYI/VlKfWWiJxm39Ro9IjwkZIYFR0mpEBrBkL9iJYp8jKnCkmgt99dPrbi09 DCVNk8KXsrqMxxlk99h102CT6+XZjqcDIpwl7DCszkeklrOQeKRZRaJRgcFvNNCS x4kGXuqpnmnlwdr2eXk7GYulE6zD29IjaHKQT2/K0eWRMsFWSUkIpEIy/H0QTgmi gL+el2tqm0ToRXw4PLYVL/EzoDpw9KkHyEwc4JzrAnVjjQYWGqPeR9Tv2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgEupgwwMu5TrSHhW/z3a9o1MaVMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDsdI8/I q0ZsAj4ialB8ibokWJXjnaXdWSCxxA7kE7CiT7a7cNnXojENNZcDH0TG9yTEyGCS zXgp2Z8v8+HS6Fqg5Vt0oRZNAamUNPjMsFE17KTRd76nmO49zbyp0KcfSkBjpJ8l IF0qwAVkaTSoAAo3CwQ9J2qKCbcraEzLzEMbKh7Wto6CiNdx7Gy5sPWdjnUZD31I U+dQd3h7t9HrdVZtL5EdHY4e183/4oc4OZMRKDl9PTKh9fVvRQit7O+Ngj5U8oXX 5nbbtC4NtOkfYgxNxz9Ulmf2funfqKcn5wUCgU3fazeB7E72KEw6+XFM1pih3+y9 DK/VQktkBTodBA== -----END CERTIFICATE-----Generated at Sat Sep 6 14:34:07 2025 by rpki-client