$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft File: Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json) Hash identifier: WDjWymb9YvxBrFk4N25OP1ve7KFLWlNnaMKsVpiPJhw= Subject key identifier: E8:BF:70:5F:D0:A5:04:D0:78:71:09:94:8A:DA:32:78:AA:96:30:56 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019A06A45DD255FD729A81B5840879DC24BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft Manifest number: 0D4B Signing time: Tue 21 Oct 2025 12:00:26 +0000 Manifest this update: Tue 21 Oct 2025 12:00:26 +0000 Manifest next update: Wed 22 Oct 2025 12:00:26 +0000 Files and hashes: 1: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=) 2: F6wdCUdNs0S6x-lvMlPtyMpUfZs.roa (hash: 9jMOcYoLdDpo5EB5/0BEoeSC3reaOBGBRYSNiNLwg9k=) 3: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=) 4: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=) 5: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=) 6: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=) 7: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: Vrc6QOmMOZSXJi2k7+quS8TJvKeJyit6XoYRAfoMuZQ=) 8: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (hash: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=) 9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=) 10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=) 11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=) 12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=) 13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=) 14: peIOlV3OfBEMu-qBfSwFNIMmyUg.roa (hash: 6anSx7OoDk9TVb+rhIIUnKyoMu5IPmI9Uc6n5lkG9F0=) 15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=) 16: rAiRJTmW8XfVmhpte53A3cU5F0E.roa (hash: 4rCJoUat5Hf3Yqw8erIeJ6FU4KlxG5HpAnlRqviFfYc=) 17: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=) 18: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=) 19: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:a4:5d:d2:55:fd:72:9a:81:b5:84:08:79:dc:24:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Oct 21 12:00:26 2025 GMT Not After : Oct 22 12:00:26 2025 GMT Subject: CN=e8bf705fd0a504d0787109948ada3278aa963056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:90:07:12:dc:bf:67:f4:32:3c:77:96:e2: d7:df:8a:91:dc:7a:2c:f4:08:57:1f:84:31:38:79: 64:d2:76:2b:c4:54:7b:dc:e6:8d:b8:ec:f3:c7:3c: 6d:06:f7:de:49:d1:57:0c:ca:b3:8e:84:79:ed:76: c1:49:c9:a2:ae:50:82:ec:c1:ce:f9:6d:41:8a:53: 99:0b:ec:4f:d9:10:28:92:4f:40:0c:4b:54:75:15: e4:61:6c:3d:f3:68:de:b1:9d:3c:eb:0d:76:8b:00: 44:ee:44:0d:d3:6b:1c:4a:78:48:73:2b:61:b4:1e: 7e:f2:c9:ed:bb:a5:27:e2:05:28:88:2f:1d:c2:a3: ff:00:5a:36:38:2a:c8:d6:75:4d:ee:69:62:e1:28: d3:e4:62:09:b8:b4:10:88:82:17:69:83:a2:51:86: c9:90:8e:44:13:0c:d7:45:78:fa:7f:4a:05:1e:65: 6a:1b:27:bb:9b:05:10:8e:46:d5:8e:e1:ab:64:aa: 97:47:f3:9e:b5:d2:fe:1e:e5:79:f7:13:6d:43:ee: bc:c1:3c:88:a4:90:32:ed:4b:e1:a9:ca:62:00:8a: ff:64:7c:37:a1:f1:41:3b:50:e1:48:27:40:f0:0e: 1c:59:6d:3d:e4:fd:35:94:0d:18:91:22:3a:d8:09: 03:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BF:70:5F:D0:A5:04:D0:78:71:09:94:8A:DA:32:78:AA:96:30:56 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:7c:d5:67:97:5a:7a:24:20:51:8c:40:16:63:bc:e5:2d: 61:47:78:fa:c2:cc:3d:ce:76:5d:13:bd:a7:bc:84:99:c5:ec: a8:2a:97:b2:03:1e:9e:90:91:fe:8c:d8:8c:09:e4:d5:ea:8a: 4a:da:3e:49:34:66:95:84:ed:e4:bd:f1:79:a5:c1:fd:6c:a1: 20:96:38:60:9d:17:54:a3:d1:3e:1e:e7:d1:30:3c:2b:bc:95: 43:96:35:da:46:38:50:17:48:b7:41:bf:e7:d6:50:70:24:61: 0c:6e:48:bb:26:5b:56:6f:dd:7f:b2:f7:86:c9:ba:f5:0d:aa: 0c:19:59:25:d6:a7:23:98:e4:c5:d7:c8:f7:ed:2d:f2:bb:f4: d4:8f:bd:89:01:92:b1:7a:3f:d9:0a:8a:09:7c:e4:11:ad:16: 3e:b2:84:85:46:2e:17:17:79:b4:2d:4e:84:04:04:4a:de:e2: 3d:f0:04:e7:73:85:dd:97:a2:8b:7b:a6:9f:d0:e3:9d:c2:e8: 3a:d1:da:fd:a9:82:d2:ef:67:aa:ac:bb:da:00:6b:fb:58:45: 46:04:89:e6:ac:cc:ee:71:65:bd:01:90:ab:25:f1:db:95:cd: 5b:f5:23:92:03:ee:a9:c0:ce:ca:11:c6:ff:e5:1d:05:1b:56: 32:e8:1e:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGpF3SVf1ymoG1hAh53CS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjUxMDIxMTIwMDI2WhcNMjUxMDIyMTIwMDI2WjAzMTEwLwYDVQQD EyhlOGJmNzA1ZmQwYTUwNGQwNzg3MTA5OTQ4YWRhMzI3OGFhOTYzMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+qQBxLcv2f0Mjx3luLX34qR3Hos 9AhXH4QxOHlk0nYrxFR73OaNuOzzxzxtBvfeSdFXDMqzjoR57XbBScmirlCC7MHO +W1BilOZC+xP2RAokk9ADEtUdRXkYWw982jesZ086w12iwBE7kQN02scSnhIcyth tB5+8sntu6Un4gUoiC8dwqP/AFo2OCrI1nVN7mli4SjT5GIJuLQQiIIXaYOiUYbJ kI5EEwzXRXj6f0oFHmVqGye7mwUQjkbVjuGrZKqXR/OetdL+HuV59xNtQ+68wTyI pJAy7UvhqcpiAIr/ZHw3ofFBO1DhSCdA8A4cWW095P01lA0YkSI62AkDjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOi/cF/QpQTQeHEJlIraMniqljBWMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq181WeX WnokIFGMQBZjvOUtYUd4+sLMPc52XRO9p7yEmcXsqCqXsgMenpCR/ozYjAnk1eqK Sto+STRmlYTt5L3xeaXB/WyhIJY4YJ0XVKPRPh7n0TA8K7yVQ5Y12kY4UBdIt0G/ 59ZQcCRhDG5IuyZbVm/df7L3hsm69Q2qDBlZJdanI5jkxdfI9+0t8rv01I+9iQGS sXo/2QqKCXzkEa0WPrKEhUYuFxd5tC1OhAQESt7iPfAE53OF3Zeii3umn9DjncLo OtHa/amC0u9nqqy72gBr+1hFRgSJ5qzM7nFlvQGQqyXx25XNW/UjkgPuqcDOyhHG /+UdBRtWMuge4g== -----END CERTIFICATE-----Generated at Tue Oct 21 22:36:09 2025 by rpki-client