$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: aVYNmG+cMdEkNmY3GyktdZjZM50nboQxtmno8pWe0yU= Subject key identifier: 89:3B:0E:05:F6:87:37:83:C3:AB:16:0E:0B:35:26:35:2E:A5:C0:EA Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 01991D9CAFA3883B06F84D28F4B9B0A43F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 061B Signing time: Sat 06 Sep 2025 06:00:31 +0000 Manifest this update: Sat 06 Sep 2025 06:00:31 +0000 Manifest next update: Sun 07 Sep 2025 06:00:31 +0000 Files and hashes: 1: 1-d_4NnGRWiLNxMtEHTI7liKr9UI.roa (hash: CvRaWUsgFRo0d4EaYRA4VrTo+xf/BVknD8qlBjzpT68=) 2: 7sxmOy-0rAzIdMxxHjWAxKzl7IM.roa (hash: KA9edUubvYsZNpiT8V1e3qBkWy1Wm8VmX9dSsY6ejss=) 3: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 4: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: 8rAP7Hjj/or5LVjChb2N09ddH7FQAz6hTW2JsIM5gAg=) 5: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 6: Pno1SFxbk0xVeOW-JPd8JX-O0mk.roa (hash: fmuEF5lkwyellcCtxWvoihI9gke5w70i2mKnnNxM4gQ=) 7: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 8: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 9: Y71aZPizitb8cfC2jQM8qboeRHE.roa (hash: 2RW7c5X7XS6+cJR57RbMmRPTtinCPQxC9w+xZJdyHfw=) 10: cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa (hash: Xi+GnpcIV9drKvTmQHNYIPB6evWNG3aHkh9CmwgJtg0=) 11: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 12: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 13: w-kia0Dcl-D0S1cF7F9c-RlG748.roa (hash: TI6//HLATO/7mdIMcI1NIKH9FQsgJWUg8coUzNZcuE0=) 14: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1d:9c:af:a3:88:3b:06:f8:4d:28:f4:b9:b0:a4:3f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Sep 6 06:00:31 2025 GMT Not After : Sep 7 06:00:31 2025 GMT Subject: CN=893b0e05f6873783c3ab160e0b3526352ea5c0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:24:34:91:f8:df:98:96:d2:a9:4d:97:a1: 2d:f0:55:e6:9c:6d:ac:40:50:25:ce:1f:ae:74:a9: 95:c5:bf:a8:d5:50:12:60:ea:43:55:2f:85:65:d3: 97:64:94:50:ae:10:48:c3:75:51:4e:ba:1e:51:54: e4:4a:22:ba:4d:50:a6:5e:11:1f:92:d1:c0:24:5e: c7:ad:d9:fa:92:1e:6a:72:c2:43:fb:4d:2a:04:7b: 4b:86:2b:e9:3a:e5:cd:73:30:c5:ee:eb:a4:1c:8f: 4a:24:c0:04:12:e1:b1:9f:13:58:ce:44:01:11:9d: 67:38:c2:e6:d5:a6:59:eb:97:42:7f:2e:56:3c:b7: 3f:f2:ac:0f:7c:be:50:73:d8:29:19:08:87:d9:70: 10:1e:dd:d0:fd:42:19:ed:49:5a:07:c1:28:4a:48: dd:9b:23:a8:7f:bb:15:d0:a3:12:22:55:34:48:f2: 5e:d1:92:84:e2:0a:ce:1d:79:f6:26:a0:44:6f:6f: 65:fc:1e:47:ef:68:40:d2:d9:fe:b7:08:54:ec:6f: 42:96:fd:d0:5f:ed:53:ca:1e:15:60:89:8d:84:8c: 24:6a:2d:ff:25:d8:96:9f:56:3c:b9:35:66:0e:26: 09:aa:0a:f0:82:fa:69:2f:59:9b:6b:09:ac:5b:b8: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3B:0E:05:F6:87:37:83:C3:AB:16:0E:0B:35:26:35:2E:A5:C0:EA X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:26:97:9c:b8:6d:4a:f1:21:97:0d:55:bd:b9:74:e2:9a:ba: 44:12:d0:f5:13:6e:75:02:75:43:08:19:6e:e2:7f:2b:96:45: 50:89:64:f1:9f:4b:03:1a:a9:52:3c:dc:c8:b8:ed:d6:bb:b7: 63:a1:f1:36:ed:9e:39:50:d6:60:d1:09:99:79:a2:58:f1:f0: 46:eb:69:30:2f:46:2e:c0:0b:3f:ea:7c:65:2f:f9:1f:4c:57: d2:6f:0d:96:b9:88:73:7d:c1:28:99:bb:95:8e:1c:d8:9e:94: a0:27:b6:02:0b:2e:18:ee:1d:dc:7d:19:fa:07:92:f9:11:33: 3a:1a:57:61:1c:15:cf:80:70:77:26:c4:59:b3:1c:71:af:79: 61:71:13:93:87:dd:8f:b7:20:0f:c8:60:81:16:e5:fc:34:4e: 99:d7:1a:cb:c9:b9:03:9e:24:64:5c:b1:a4:5b:75:a1:70:a8: eb:97:14:a7:1c:35:0f:90:96:24:8e:55:79:cc:13:d0:a4:28: c4:45:27:42:d8:f0:47:04:dc:00:1a:1b:b4:78:be:50:1d:83: 20:6c:d1:20:20:79:21:44:a1:70:cb:b8:f0:9f:96:51:c7:5d: c8:dd:8d:54:1d:98:07:d9:8b:59:f2:25:fc:a3:45:1c:e9:06: 37:92:58:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkdnK+jiDsG+E0o9LmwpD+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUwOTA2MDYwMDMxWhcNMjUwOTA3MDYwMDMxWjAzMTEwLwYDVQQD Eyg4OTNiMGUwNWY2ODczNzgzYzNhYjE2MGUwYjM1MjYzNTJlYTVjMGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUIkNJH435iW0qlNl6Et8FXmnG2s QFAlzh+udKmVxb+o1VASYOpDVS+FZdOXZJRQrhBIw3VRTroeUVTkSiK6TVCmXhEf ktHAJF7Hrdn6kh5qcsJD+00qBHtLhivpOuXNczDF7uukHI9KJMAEEuGxnxNYzkQB EZ1nOMLm1aZZ65dCfy5WPLc/8qwPfL5Qc9gpGQiH2XAQHt3Q/UIZ7UlaB8EoSkjd myOof7sV0KMSIlU0SPJe0ZKE4grOHXn2JqBEb29l/B5H72hA0tn+twhU7G9Clv3Q X+1Tyh4VYImNhIwkai3/JdiWn1Y8uTVmDiYJqgrwgvppL1mbawmsW7gJmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIk7DgX2hzeDw6sWDgs1JjUupcDqMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCaXnLht SvEhlw1Vvbl04pq6RBLQ9RNudQJ1QwgZbuJ/K5ZFUIlk8Z9LAxqpUjzcyLjt1ru3 Y6HxNu2eOVDWYNEJmXmiWPHwRutpMC9GLsALP+p8ZS/5H0xX0m8NlrmIc33BKJm7 lY4c2J6UoCe2AgsuGO4d3H0Z+geS+REzOhpXYRwVz4BwdybEWbMcca95YXETk4fd j7cgD8hggRbl/DROmdcay8m5A54kZFyxpFt1oXCo65cUpxw1D5CWJI5VecwT0KQo xEUnQtjwRwTcABobtHi+UB2DIGzRICB5IUShcMu48J+WUcddyN2NVB2YB9mLWfIl /KNFHOkGN5JY+Q== -----END CERTIFICATE-----Generated at Sat Sep 6 11:45:39 2025 by rpki-client