$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: tbMKj+SQlReKQLejEkxrc5jZJIOmOpdRr/QF7iKj004= Subject key identifier: 6A:87:A1:9D:37:85:A1:31:A7:29:66:D8:9D:E4:0E:D7:FB:0B:C9:F6 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019A06DB2B9FE8B0A4BE7BE66B434C68A314 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 14DE Signing time: Tue 21 Oct 2025 13:00:18 +0000 Manifest this update: Tue 21 Oct 2025 13:00:18 +0000 Manifest next update: Wed 22 Oct 2025 13:00:18 +0000 Files and hashes: 1: 5CtTVuQK4Mz0CfCCtM3PbDI1J_A.roa (hash: R54vCclWQ5py1ZVSUREg6/3SsE2Ni7OmnOX0ovimS28=) 2: 8UiaGcKZZcSvThOWGtPXFC0GbP0.roa (hash: QmbEbgGGf7PLuQ8N6Zth9LOKK9P++mzuGI0guAVkPhw=) 3: 9tqxD372UOGf-zL9Og3dZI-GB_E.roa (hash: 1BflUu83I4Fz3YB6j1fHXKTleEcGx3LVxi458xNGCuo=) 4: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 5: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 6: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=) 7: HN-sxkXhsPARhEyjcxF2VA5ULns.roa (hash: XKKXt3nQtVRf5U2SzwHGZlsTijL5Olvfsj7LyZpSgu0=) 8: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 9: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: aX7tFpiAKhB/+XRrJI684rJ9KIfyStdW55cY1rZO4XI=) 10: M8bMB2QKSM425kLjRVO2Mv1OLJ0.roa (hash: p7RpCCMMldWNLmjHFuK8nMdCoRWEH97iMYohSON6X1g=) 11: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 12: MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa (hash: k0aQBEKvm4oillc+UIihjgdIum6WVpAkoV036ebhwvc=) 13: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 14: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=) 15: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 16: S5Vx_PwhrUdn6uSPv9B8Pl8fWZ4.roa (hash: XmpSvZLR/cpO3PqSr4aJClVLTWeNmz7xYTDZX7wuFYc=) 17: XdU9ba_H8wvW9YWGekfY-RC6fac.roa (hash: t+t6oWtjjjeUHSoz5gNWccz0VBGlDxWsh2LU4cszm7w=) 18: Xl4qy1Ar5fj8HWfzQeqmdQCXJTo.roa (hash: kyWMPa6QWFz1hTwjuHwt3MREoZfxCYT9GNVy2jSQZZM=) 19: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (hash: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=) 20: bZv3S6SjMHuATa5GhC0St5hSsfU.roa (hash: v5Z9NLPnQ7ljIuVsTKQar4zGJUJdgJ7qXeQXJqaqbtI=) 21: bzzTA149jxH2aAs1Hmk0Ldjl1ks.roa (hash: bGv5aLr8TUtk+IAQZ7NNfU+YAcCIl809hdZK242FBfM=) 22: cOWXDby_VAjDBm-QNXyxFV15NYc.roa (hash: d23wa4ZI6ixe2JTopJ8C5Bi1Ca40n6+Q2pIZccoLoNY=) 23: dEipwsI3eN1As0rWuDbWNnqMvTw.roa (hash: +biJe511JtIv65zZKrLUqAD9MG0u+pcvdynZY6XvZoc=) 24: dSiGJnnvpCQoVjLVzMMP9D5h62U.roa (hash: oZzNodfwK7HG6DxcciY7b+7mwyKWd/1xM4QRfRXlG3c=) 25: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=) 26: fFIiPcIZQx033jSV6p41eBFER7E.roa (hash: qhzye0ysaR3MnkAhIOM63hxvVgvo8rQw3JHNBHBliIQ=) 27: fYh96DEUprSlV21wSMnuWBCSwx0.roa (hash: v06BAbDyEGINC47vf0TbEA82PuMPVQcWMD/+BPJ4cCg=) 28: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 29: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 30: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=) 31: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (hash: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=) 32: xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa (hash: 6xBBsXMne/V0DNK57hL+vR0I99KZ2fP45EMjpBaEGFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:db:2b:9f:e8:b0:a4:be:7b:e6:6b:43:4c:68:a3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Oct 21 13:00:18 2025 GMT Not After : Oct 22 13:00:18 2025 GMT Subject: CN=6a87a19d3785a131a72966d89de40ed7fb0bc9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a4:b4:84:89:d5:ab:43:45:38:b1:6d:be:2b: e8:4f:21:1a:91:54:f8:66:df:ca:0d:66:88:7b:34: cf:60:68:08:b9:c7:c3:dd:6f:ac:5f:b5:d6:ab:14: 65:47:a1:58:f8:6e:79:65:72:d9:cb:ac:03:9f:e6: 86:eb:b8:a9:e2:91:52:c0:b5:3d:31:4b:0e:0c:fb: 70:17:0a:99:00:6b:c9:68:1a:e3:e4:39:ec:68:94: a5:ca:ca:90:e5:17:e1:7b:73:9e:18:8a:3d:73:65: f7:40:e5:a2:66:8f:42:12:79:35:31:98:74:82:3a: d5:0f:c0:b2:64:f9:5f:84:8c:e1:16:7e:53:d7:3f: 45:ec:3e:ab:f3:b7:3c:7b:6b:e7:da:c6:47:dd:8b: ea:68:9d:0e:ff:41:0c:0d:73:6e:a6:7a:f2:22:38: 9f:2f:e2:59:cb:9f:69:0a:bf:30:db:13:8c:30:c2: 97:bf:a6:99:56:f7:65:10:7e:f9:ce:d2:72:4b:f9: e4:01:58:b1:8b:e6:1f:eb:4c:50:9b:4d:98:67:a0: 65:ed:d5:d9:48:f4:2a:a2:a4:4f:4b:1d:33:f2:37: bc:56:7c:a5:a3:f7:03:ec:0e:9d:03:ae:a7:91:69: a6:43:e8:cd:18:f6:f0:b3:fd:06:9f:c4:51:79:84: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:87:A1:9D:37:85:A1:31:A7:29:66:D8:9D:E4:0E:D7:FB:0B:C9:F6 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:91:ba:a7:1a:27:c3:2b:4a:a2:e1:1f:3c:6d:fd:94:29:24: b2:15:cb:1f:d4:97:23:d4:cf:6c:85:fe:7d:a2:28:ba:cf:42: 4a:a7:31:30:6c:07:5d:58:a1:31:a2:9b:a6:f8:9d:a5:ef:2f: 81:4b:f7:1e:14:c8:80:0c:e5:d7:3c:66:b2:6a:8f:d2:e4:06: 0e:60:f4:fc:8e:7b:41:88:28:00:d9:3c:97:c0:60:e6:4d:f9: 46:f0:e9:1c:6f:22:fa:06:56:9f:77:c4:02:6c:9d:8d:9a:d2: 8c:24:47:ba:1f:00:30:8a:55:4d:d2:4a:b5:40:3b:ca:e0:8b: ad:7e:7e:16:78:d0:2e:83:a8:a8:76:a4:40:f1:16:4d:5d:59: 40:ca:84:a0:8a:e4:4d:a0:b4:3e:0c:4f:74:48:9d:b5:38:ee: 3f:da:b2:7d:fb:47:11:e0:55:dc:92:71:78:08:cf:d1:52:ee: bd:c8:81:64:bb:d1:81:e5:03:b9:7d:27:73:42:04:08:2b:b3: fd:bb:ef:f8:19:c7:ac:c7:53:05:10:b1:eb:60:ca:72:ca:e3: 72:76:7c:28:e4:7b:22:6e:d6:f3:fe:6d:b7:da:b4:33:01:c4: 16:b5:04:83:cf:bc:f3:ce:3f:96:28:64:c3:6c:89:7c:a2:aa: 45:d2:84:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoG2yuf6LCkvnvma0NMaKMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMDIxMTMwMDE4WhcNMjUxMDIyMTMwMDE4WjAzMTEwLwYDVQQD Eyg2YTg3YTE5ZDM3ODVhMTMxYTcyOTY2ZDg5ZGU0MGVkN2ZiMGJjOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qS0hInVq0NFOLFtvivoTyEakVT4 Zt/KDWaIezTPYGgIucfD3W+sX7XWqxRlR6FY+G55ZXLZy6wDn+aG67ip4pFSwLU9 MUsODPtwFwqZAGvJaBrj5DnsaJSlysqQ5Rfhe3OeGIo9c2X3QOWiZo9CEnk1MZh0 gjrVD8CyZPlfhIzhFn5T1z9F7D6r87c8e2vn2sZH3YvqaJ0O/0EMDXNupnryIjif L+JZy59pCr8w2xOMMMKXv6aZVvdlEH75ztJyS/nkAVixi+Yf60xQm02YZ6Bl7dXZ SPQqoqRPSx0z8je8Vnylo/cD7A6dA66nkWmmQ+jNGPbws/0Gn8RReYS69wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqHoZ03haExpylm2J3kDtf7C8n2MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpG6pxon wytKouEfPG39lCkkshXLH9SXI9TPbIX+faIous9CSqcxMGwHXVihMaKbpvidpe8v gUv3HhTIgAzl1zxmsmqP0uQGDmD0/I57QYgoANk8l8Bg5k35RvDpHG8i+gZWn3fE AmydjZrSjCRHuh8AMIpVTdJKtUA7yuCLrX5+FnjQLoOoqHakQPEWTV1ZQMqEoIrk TaC0PgxPdEidtTjuP9qyfftHEeBV3JJxeAjP0VLuvciBZLvRgeUDuX0nc0IECCuz /bvv+BnHrMdTBRCx62DKcsrjcnZ8KOR7Im7W8/5tt9q0MwHEFrUEg8+8884/lihk w2yJfKKqRdKE2w== -----END CERTIFICATE-----Generated at Tue Oct 21 18:14:03 2025 by rpki-client