$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: 1jUfT+ZS5QQxXjK0OX/6fgsVa83o6/n7p9RUZ4zztBU= Subject key identifier: 7B:E6:E1:C2:BA:8B:4B:42:AE:4C:F5:7A:0D:32:49:19:C9:25:23:6A Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019934248BE25461A8648C07E852879EF3DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 146B Signing time: Wed 10 Sep 2025 15:00:34 +0000 Manifest this update: Wed 10 Sep 2025 15:00:34 +0000 Manifest next update: Thu 11 Sep 2025 15:00:34 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: NbDZzENPb4Hfob59t9LzT0f9qqjcnf+HTKE34yMBIIs=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:34:24:8b:e2:54:61:a8:64:8c:07:e8:52:87:9e:f3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Sep 10 15:00:34 2025 GMT Not After : Sep 11 15:00:34 2025 GMT Subject: CN=7be6e1c2ba8b4b42ae4cf57a0d324919c925236a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:94:4c:fc:dc:93:cd:c5:4b:37:57:61:1f: c3:d4:25:bc:9b:b2:ff:5f:e6:17:af:18:77:db:48: da:3d:35:cd:e6:92:2d:3c:7d:c1:fd:e9:d9:6c:a0: 37:93:c1:62:ba:a2:bf:d0:b9:4b:37:fe:09:27:ae: 9e:0b:4c:ad:7d:3c:57:0c:b2:81:c7:c9:87:e4:98: 77:09:52:45:e9:0d:5d:0e:13:53:38:3b:83:ac:14: a7:8f:ad:8d:66:7a:42:53:19:c6:89:53:1a:96:2b: 50:47:51:69:a4:30:d6:c5:32:88:a8:cc:66:61:9b: 3e:af:3a:04:25:d4:00:58:3d:be:da:6f:68:33:51: b2:ac:bb:2e:c4:b2:cf:6e:79:cb:cc:b6:90:c7:fa: d2:1f:fc:a7:50:0b:e6:fc:b3:36:6a:5d:20:3a:13: 16:55:3f:f9:ac:37:fa:d1:c7:d0:56:6a:0f:6e:07: c9:8c:db:30:70:06:8b:a1:89:9d:c5:14:f5:dc:27: 2e:02:89:96:87:82:69:ba:db:0a:17:1a:e6:1c:fa: 6e:d1:32:f8:25:27:6c:72:43:a3:e7:04:93:c4:ab: 08:2e:ee:3c:89:9e:81:1a:0c:a0:1c:64:fe:90:9e: 70:3a:e7:c6:15:25:24:0e:05:35:52:97:c6:d1:aa: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E6:E1:C2:BA:8B:4B:42:AE:4C:F5:7A:0D:32:49:19:C9:25:23:6A X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7d:08:a8:2d:8e:ce:70:29:0f:83:a7:b6:c6:8d:ad:62:c1: d6:7c:af:8d:1e:66:a9:f7:19:3a:57:33:de:22:8f:a8:78:16: f1:b3:d3:03:b2:a4:f5:b2:cb:6a:7e:81:97:7a:4f:46:1f:ca: 9c:1e:4f:b5:50:d8:90:66:ff:4d:cf:97:9d:be:57:24:95:c0: c5:b2:38:b8:90:fc:3b:64:fb:37:03:91:51:75:e7:27:c8:6e: 9a:6d:f0:76:53:e0:6f:ec:cd:36:3c:81:92:7a:09:b3:94:6e: d4:bf:48:c3:bb:f5:1f:c9:1f:88:f6:64:6a:a1:23:5b:93:03: a5:1c:0e:ad:b1:49:72:8b:8c:81:24:0f:4f:d4:4f:8a:d2:31: f0:9e:a0:fd:04:9a:81:31:54:6c:cb:e9:a0:0a:4d:72:67:c4: 43:78:58:f2:26:d2:ac:cc:0f:ac:29:85:e2:f5:21:2d:12:cb: 8e:77:cb:3c:bf:b6:00:c2:54:ff:ac:0d:ec:fe:e7:56:c8:c9: 34:17:1e:3a:f9:84:28:e8:a0:10:8c:7c:c1:1b:20:7e:8a:3f: 95:08:47:84:6d:e2:6c:9f:0d:1e:81:37:f8:d8:c0:51:24:7d: 52:40:c4:86:bf:b5:70:72:3f:5f:81:48:d9:23:9f:b0:70:4a: 88:48:2b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk0JIviVGGoZIwH6FKHnvPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUwOTEwMTUwMDM0WhcNMjUwOTExMTUwMDM0WjAzMTEwLwYDVQQD Eyg3YmU2ZTFjMmJhOGI0YjQyYWU0Y2Y1N2EwZDMyNDkxOWM5MjUyMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2suUTPzck83FSzdXYR/D1CW8m7L/ X+YXrxh320jaPTXN5pItPH3B/enZbKA3k8FiuqK/0LlLN/4JJ66eC0ytfTxXDLKB x8mH5Jh3CVJF6Q1dDhNTODuDrBSnj62NZnpCUxnGiVMalitQR1FppDDWxTKIqMxm YZs+rzoEJdQAWD2+2m9oM1GyrLsuxLLPbnnLzLaQx/rSH/ynUAvm/LM2al0gOhMW VT/5rDf60cfQVmoPbgfJjNswcAaLoYmdxRT13CcuAomWh4JputsKFxrmHPpu0TL4 JSdsckOj5wSTxKsILu48iZ6BGgygHGT+kJ5wOufGFSUkDgU1UpfG0apZZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvm4cK6i0tCrkz1eg0ySRnJJSNqMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX0IqC2O znApD4OntsaNrWLB1nyvjR5mqfcZOlcz3iKPqHgW8bPTA7Kk9bLLan6Bl3pPRh/K nB5PtVDYkGb/Tc+Xnb5XJJXAxbI4uJD8O2T7NwORUXXnJ8humm3wdlPgb+zNNjyB knoJs5Ru1L9Iw7v1H8kfiPZkaqEjW5MDpRwOrbFJcouMgSQPT9RPitIx8J6g/QSa gTFUbMvpoApNcmfEQ3hY8ibSrMwPrCmF4vUhLRLLjnfLPL+2AMJU/6wN7P7nVsjJ NBceOvmEKOigEIx8wRsgfoo/lQhHhG3ibJ8NHoE3+NjAUSR9UkDEhr+1cHI/X4FI 2SOfsHBKiEgrQA== -----END CERTIFICATE-----Generated at Wed Sep 10 17:37:44 2025 by rpki-client