$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: uSairyGp3yzLavISyiU4xPj2nhV/ORBruBKp6iDmDjo= Subject key identifier: F3:F0:28:F3:CD:1B:ED:FC:E1:C5:EC:9F:92:E7:41:38:5C:36:F5:06 Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 019A70DC6067EF769776F4E3CEB704F5EF18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 1722 Signing time: Tue 11 Nov 2025 03:01:21 +0000 Manifest this update: Tue 11 Nov 2025 03:01:21 +0000 Manifest next update: Wed 12 Nov 2025 03:01:21 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: bjmQWVktPwZmwAEUOUidUZLyrYKqTfBbkiLsiw+sCAs=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:70:dc:60:67:ef:76:97:76:f4:e3:ce:b7:04:f5:ef:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Nov 11 03:01:21 2025 GMT Not After : Nov 12 03:01:21 2025 GMT Subject: CN=f3f028f3cd1bedfce1c5ec9f92e741385c36f506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:30:1f:a4:71:4d:9d:dd:43:d3:a8:2d:66: f9:4b:36:7f:69:d5:d1:d0:ef:7e:f9:fd:08:c4:06: ea:99:e3:b9:dd:39:83:27:5f:68:f7:be:61:4f:40: ab:e1:aa:6a:4e:2c:dd:e8:91:19:ac:50:87:89:3c: 4d:62:64:03:43:81:bc:9a:b6:99:64:b2:a7:72:dc: f7:3f:33:45:53:68:2e:a0:8c:1d:e2:f8:c5:9c:cd: 4c:a2:6a:88:19:e1:e4:89:65:00:d5:42:50:2b:c6: 06:6f:06:d4:39:5f:aa:a4:d3:f7:37:58:bd:7c:a5: 1f:ba:09:04:d9:5d:f3:84:b1:c0:f6:f9:00:54:e0: f3:2b:31:0e:53:48:30:60:41:a0:fb:34:af:cd:e7: d4:1b:3b:7d:6d:c2:34:15:fd:15:29:4d:74:9b:ce: f2:82:99:29:6b:2b:af:20:bf:74:2f:16:2e:31:31: 0d:e4:bc:42:dc:5a:34:ec:3d:59:2b:e2:54:54:38: 20:4e:22:b7:5c:ed:1c:f8:28:b3:6e:5a:46:df:d3: f0:a6:f8:cf:d2:82:ee:f9:aa:9c:f6:e5:8e:63:0c: c1:ff:29:e9:4e:17:5a:71:d1:a7:03:43:6a:44:29: 7e:84:02:aa:62:56:b5:e5:08:93:09:a8:cf:78:3e: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F0:28:F3:CD:1B:ED:FC:E1:C5:EC:9F:92:E7:41:38:5C:36:F5:06 X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:cc:a9:41:64:d7:cc:98:f3:6c:d9:87:c7:66:d7:08:bb:36: 11:65:7f:1b:66:17:4f:fb:35:80:ff:19:e7:bf:18:47:95:db: a0:43:ef:25:34:4a:03:d1:cb:b6:83:f0:b4:df:28:9f:15:06: 56:f1:48:7d:be:c9:e6:66:77:b9:8f:1c:90:13:fd:33:45:ff: e3:5a:1c:6d:ae:9a:19:b2:2b:06:5e:6f:64:d9:80:cf:be:ad: e2:21:d0:16:ff:cb:12:9a:f7:1d:fc:ac:2c:3e:c1:8e:88:80: a9:48:55:7b:fc:f7:67:87:c3:9b:2d:ed:0a:37:84:9b:67:bc: c5:ba:9b:a6:65:07:8c:b9:d5:38:0f:e5:83:43:f5:59:4a:94: 44:e5:ac:5e:cd:69:c9:6e:ea:82:56:2c:c5:cd:d7:41:48:d4: f4:08:e3:cc:10:e8:58:86:2c:f0:73:45:2c:15:b5:5e:0a:ed: e9:ee:1b:bb:d9:2e:32:2a:5b:49:49:b5:c2:a0:83:27:7e:6e: 55:31:95:e9:61:76:e3:4c:92:a2:05:36:18:dc:f0:50:cb:59: d5:da:bf:6e:26:5d:cf:52:35:bb:70:49:9f:04:30:c2:2a:7b: fe:53:28:d2:18:ef:75:da:86:3e:b1:be:d1:2a:3c:dd:40:59: 2e:1c:53:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpw3GBn73aXdvTjzrcE9e8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUxMTExMDMwMTIxWhcNMjUxMTEyMDMwMTIxWjAzMTEwLwYDVQQD EyhmM2YwMjhmM2NkMWJlZGZjZTFjNWVjOWY5MmU3NDEzODVjMzZmNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWIwH6RxTZ3dQ9OoLWb5SzZ/adXR 0O9++f0IxAbqmeO53TmDJ19o975hT0Cr4apqTizd6JEZrFCHiTxNYmQDQ4G8mraZ ZLKnctz3PzNFU2guoIwd4vjFnM1MomqIGeHkiWUA1UJQK8YGbwbUOV+qpNP3N1i9 fKUfugkE2V3zhLHA9vkAVODzKzEOU0gwYEGg+zSvzefUGzt9bcI0Ff0VKU10m87y gpkpayuvIL90LxYuMTEN5LxC3Fo07D1ZK+JUVDggTiK3XO0c+CizblpG39PwpvjP 0oLu+aqc9uWOYwzB/ynpThdacdGnA0NqRCl+hAKqYla15QiTCajPeD4lgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPwKPPNG+384cXsn5LnQThcNvUGMB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMypQWTX zJjzbNmHx2bXCLs2EWV/G2YXT/s1gP8Z578YR5XboEPvJTRKA9HLtoPwtN8onxUG VvFIfb7J5mZ3uY8ckBP9M0X/41ocba6aGbIrBl5vZNmAz76t4iHQFv/LEpr3Hfys LD7BjoiAqUhVe/z3Z4fDmy3tCjeEm2e8xbqbpmUHjLnVOA/lg0P1WUqUROWsXs1p yW7qglYsxc3XQUjU9AjjzBDoWIYs8HNFLBW1Xgrt6e4bu9kuMipbSUm1wqCDJ35u VTGV6WF240ySogU2GNzwUMtZ1dq/biZdz1I1u3BJnwQwwip7/lMo0hjvddqGPrG+ 0So83UBZLhxT/A== -----END CERTIFICATE-----Generated at Tue Nov 11 11:41:03 2025 by rpki-client