$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: aqfjKklMFh8Pi8yZMaVXNPHAYSmkAAmW+AneCV8oDgo= Subject key identifier: 50:53:BF:7F:A0:9A:42:7E:56:20:41:9F:C7:79:42:C2:CC:CE:46:98 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019A27792F4305E1156001A38907A487D4D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 14E9 Signing time: Mon 27 Oct 2025 21:00:44 +0000 Manifest this update: Mon 27 Oct 2025 21:00:44 +0000 Manifest next update: Tue 28 Oct 2025 21:00:44 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: Y2L0w+Zz828Nqg0NalOO7g8mgPFOX8xb9xqxNIkZlKw=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 15:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:27:79:2f:43:05:e1:15:60:01:a3:89:07:a4:87:d4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Oct 27 21:00:44 2025 GMT Not After : Oct 28 21:00:44 2025 GMT Subject: CN=5053bf7fa09a427e5620419fc77942c2ccce4698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:42:b9:56:0a:c9:b8:fb:83:d0:44:8e:31: 1c:7c:bd:f2:04:37:8a:b1:54:2d:74:05:26:dd:24: c4:7c:4f:02:d7:8f:df:2d:74:e9:2c:1d:fe:40:25: 9e:81:d5:c0:17:98:05:ec:8f:8a:10:7d:60:61:2d: 87:9d:f1:fb:15:55:fa:78:f2:dc:15:fc:02:69:a5: 9c:f5:d7:3b:20:46:24:18:bd:cb:43:c7:ff:f6:48: ef:5a:ae:50:1a:58:aa:f2:92:a2:69:dd:31:34:d0: 73:5e:80:c5:14:49:9b:2a:30:41:c7:13:23:0b:d7: 5a:6a:eb:f7:11:27:be:c3:9c:96:30:8f:92:b2:ba: 3e:0c:2d:3f:ad:51:6e:e8:4e:07:09:f4:50:58:b9: 79:c9:6a:f8:e9:71:56:20:97:05:8a:06:21:ee:5a: a0:92:94:00:ab:ae:e9:f7:7f:52:b3:ed:5d:ae:89: 7f:53:1d:b2:1e:86:32:99:be:f1:26:68:fa:50:88: 53:25:fa:ab:f7:aa:2e:fd:c0:5e:8b:1c:7d:a6:7c: c2:ef:d7:89:88:7e:fe:b0:bb:56:15:d4:44:2c:8c: 87:47:fe:da:bd:96:b3:4e:a9:79:8c:cf:a4:19:7d: 21:3a:ff:10:e1:8d:70:3a:5e:ae:a2:95:af:89:ac: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:53:BF:7F:A0:9A:42:7E:56:20:41:9F:C7:79:42:C2:CC:CE:46:98 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2c:31:4b:02:a5:a9:b6:2f:4d:51:cb:1d:3a:94:68:40:f4: a3:b8:a8:87:c6:c7:9a:5d:17:92:2b:ee:d1:1a:e8:8d:36:0b: 90:47:19:0f:c3:35:4d:5d:50:5d:f7:f2:3f:a9:40:39:8c:eb: 2d:eb:42:93:2f:ed:c1:d5:fc:17:4b:00:ba:a5:70:7f:14:54: 27:89:35:5a:89:bf:dc:5d:a2:cc:74:82:79:a3:f8:06:8b:c6: 0e:24:8d:40:ad:69:4a:20:83:f2:2a:90:1b:b6:d4:57:f7:64: 82:f8:2d:a0:e8:79:7f:52:56:54:a6:b0:05:60:f5:07:69:7e: 9d:a7:d8:d4:38:60:d3:d8:4d:54:7b:6a:8f:04:c1:aa:95:87: bd:06:5f:97:d9:1d:bc:df:cb:bc:3b:d9:7b:64:bb:3e:cc:ae: 43:52:c8:19:c0:f9:ab:fa:58:0d:b7:98:d7:8c:9f:54:5b:3f: 25:23:b5:9f:68:b5:9e:e2:b0:66:56:0e:26:16:ff:ca:a9:1e: b1:c3:0e:7a:4a:6b:ba:d0:47:58:7d:11:04:3b:48:08:cf:b6: 6f:34:67:c2:70:f4:63:2b:9e:e3:80:80:fd:1b:20:0d:68:ca: 2b:df:3a:24:4e:89:43:08:d7:fc:7a:68:e8:61:ca:47:2a:46: 1a:0c:5d:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoneS9DBeEVYAGjiQekh9TYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUxMDI3MjEwMDQ0WhcNMjUxMDI4MjEwMDQ0WjAzMTEwLwYDVQQD Eyg1MDUzYmY3ZmEwOWE0MjdlNTYyMDQxOWZjNzc5NDJjMmNjY2U0Njk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndRCuVYKybj7g9BEjjEcfL3yBDeK sVQtdAUm3STEfE8C14/fLXTpLB3+QCWegdXAF5gF7I+KEH1gYS2HnfH7FVX6ePLc FfwCaaWc9dc7IEYkGL3LQ8f/9kjvWq5QGliq8pKiad0xNNBzXoDFFEmbKjBBxxMj C9daauv3ESe+w5yWMI+Ssro+DC0/rVFu6E4HCfRQWLl5yWr46XFWIJcFigYh7lqg kpQAq67p939Ss+1drol/Ux2yHoYymb7xJmj6UIhTJfqr96ou/cBeixx9pnzC79eJ iH7+sLtWFdRELIyHR/7avZazTql5jM+kGX0hOv8Q4Y1wOl6uopWviayylwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBTv3+gmkJ+ViBBn8d5QsLMzkaYMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSwxSwKl qbYvTVHLHTqUaED0o7ioh8bHml0Xkivu0RrojTYLkEcZD8M1TV1QXffyP6lAOYzr LetCky/twdX8F0sAuqVwfxRUJ4k1Wom/3F2izHSCeaP4BovGDiSNQK1pSiCD8iqQ G7bUV/dkgvgtoOh5f1JWVKawBWD1B2l+nafY1Dhg09hNVHtqjwTBqpWHvQZfl9kd vN/LvDvZe2S7PsyuQ1LIGcD5q/pYDbeY14yfVFs/JSO1n2i1nuKwZlYOJhb/yqke scMOekprutBHWH0RBDtICM+2bzRnwnD0Yyue44CA/RsgDWjKK986JE6JQwjX/Hpo 6GHKRypGGgxd4w== -----END CERTIFICATE-----Generated at Tue Oct 28 00:37:57 2025 by rpki-client