$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: uF8xP6/1jTmBWqbuFO28Ew2RGW5+oWWAA4Y6U06DTHQ= Subject key identifier: 43:04:F7:CC:94:1D:DC:DF:E3:2D:5B:C9:72:5F:0F:A0:8A:87:8C:2C Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019A71EE71470445F3AF324C4A9D870ABCA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1748 Signing time: Tue 11 Nov 2025 08:00:43 +0000 Manifest this update: Tue 11 Nov 2025 08:00:43 +0000 Manifest next update: Wed 12 Nov 2025 08:00:43 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: C-0GBSjt5EkrQhuu1z2lCOmwKvs.roa (hash: 2R8h59W8AGB+2kq7TW/8IFolwXE+BsDOT/kw+k3wz9Q=) 4: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 5: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 6: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=) 7: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 8: ZidyNMEgKgNzgx0a-1UdSL_Swps.roa (hash: L/335+kz8KdyP6cK0H7CpTrJY9MXBpPX16IIONAaVQs=) 9: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: sEtgC6G1ci+a6KWSPNXcP6a1j8+e1vUmkRZiFuDLvy0=) 10: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 11: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:ee:71:47:04:45:f3:af:32:4c:4a:9d:87:0a:bc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Nov 11 08:00:43 2025 GMT Not After : Nov 12 08:00:43 2025 GMT Subject: CN=4304f7cc941ddcdfe32d5bc9725f0fa08a878c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:54:b8:8f:f0:4c:cb:55:ec:61:b9:56:c6: a5:3d:84:33:7a:67:27:73:62:89:33:2f:e9:36:5f: e6:7d:77:93:ea:00:9d:58:c2:52:d7:c8:4c:36:e8: 1f:7b:44:59:d0:6d:3e:51:72:c6:13:45:92:97:6c: 45:a1:f5:8c:c4:41:c6:38:3c:73:92:e8:c7:6c:37: ab:b8:a5:fb:d6:fa:69:5a:31:9c:58:f0:6d:47:c4: d5:b2:7f:37:ed:ee:a1:e4:02:17:4a:f3:d9:07:20: 3e:e3:20:81:a0:40:66:d8:b6:d7:16:eb:eb:bb:5d: 23:9c:02:0f:07:7a:43:f0:43:5d:38:56:1e:db:30: 1a:2e:ad:be:d9:9d:46:f1:b8:b7:62:0b:c8:37:9b: bd:6e:30:12:25:b2:ae:47:54:61:46:80:56:3d:06: 8b:9e:61:cd:6d:a8:22:bf:dd:86:bd:1f:8f:b2:5b: 6a:be:f5:0e:24:f1:9f:7d:0b:29:e3:57:37:2d:e7: 81:76:76:3f:09:cb:2f:1b:e1:a0:e2:09:f0:be:0e: 5c:46:45:52:a6:a6:1b:76:16:33:8c:06:a3:94:e6: ef:49:46:7c:b2:d3:08:77:e3:28:a5:14:85:09:60: 57:68:59:9c:ee:bb:f2:30:27:b1:42:7d:3e:ec:00: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:F7:CC:94:1D:DC:DF:E3:2D:5B:C9:72:5F:0F:A0:8A:87:8C:2C X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c9:52:b1:94:85:7f:0d:1a:48:55:68:0e:93:6b:14:59:4a: fe:ec:7a:f5:9e:73:2f:22:6e:20:40:e9:4e:92:9d:9d:32:f8: 2d:20:20:83:d7:4a:8c:00:a9:3c:6f:14:59:67:ac:d0:5c:3f: 17:8c:6e:ae:0b:b6:40:08:fe:31:42:dc:a2:73:0d:7e:62:0c: a3:c2:36:d2:eb:aa:79:a5:fa:d4:0d:36:75:aa:ea:6f:d6:92: bb:fd:54:9f:d2:3e:5e:6d:75:92:7d:3e:41:79:97:e4:02:e6: 1c:a6:49:61:db:bd:73:0a:f3:29:33:fd:c1:0e:3b:e6:41:42: 13:97:64:36:f4:05:8e:52:94:87:92:b3:2f:ba:88:db:50:05: 6f:f9:4b:c2:e3:10:42:3f:a5:2d:b6:4a:e7:fc:a5:fa:75:93: 7c:7e:2f:7c:78:05:53:57:99:d7:d2:6c:bc:46:73:e8:28:09: 45:bb:a4:98:93:8a:ba:6a:29:7e:8b:3c:4f:99:6b:59:e0:11: fe:c4:2c:85:21:b2:c1:4c:75:5b:89:2b:90:36:b5:bc:01:7e: 73:5f:88:79:7f:f2:51:ae:55:1b:61:11:5c:af:dc:6c:4e:48: 49:5c:5a:5c:6e:62:ab:3a:a9:29:11:2a:5e:70:81:5e:0c:dd: 53:93:03:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpx7nFHBEXzrzJMSp2HCryiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUxMTExMDgwMDQzWhcNMjUxMTEyMDgwMDQzWjAzMTEwLwYDVQQD Eyg0MzA0ZjdjYzk0MWRkY2RmZTMyZDViYzk3MjVmMGZhMDhhODc4YzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cFUuI/wTMtV7GG5VsalPYQzemcn c2KJMy/pNl/mfXeT6gCdWMJS18hMNugfe0RZ0G0+UXLGE0WSl2xFofWMxEHGODxz kujHbDeruKX71vppWjGcWPBtR8TVsn837e6h5AIXSvPZByA+4yCBoEBm2LbXFuvr u10jnAIPB3pD8ENdOFYe2zAaLq2+2Z1G8bi3YgvIN5u9bjASJbKuR1RhRoBWPQaL nmHNbagiv92GvR+PsltqvvUOJPGffQsp41c3LeeBdnY/CcsvG+Gg4gnwvg5cRkVS pqYbdhYzjAajlObvSUZ8stMId+MopRSFCWBXaFmc7rvyMCexQn0+7ADcuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEME98yUHdzf4y1byXJfD6CKh4wsMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIslSsZSF fw0aSFVoDpNrFFlK/ux69Z5zLyJuIEDpTpKdnTL4LSAgg9dKjACpPG8UWWes0Fw/ F4xurgu2QAj+MULconMNfmIMo8I20uuqeaX61A02darqb9aSu/1Un9I+Xm11kn0+ QXmX5ALmHKZJYdu9cwrzKTP9wQ475kFCE5dkNvQFjlKUh5KzL7qI21AFb/lLwuMQ Qj+lLbZK5/yl+nWTfH4vfHgFU1eZ19JsvEZz6CgJRbukmJOKumopfos8T5lrWeAR /sQshSGywUx1W4krkDa1vAF+c1+IeX/yUa5VG2ERXK/cbE5ISVxaXG5iqzqpKREq XnCBXgzdU5MDOw== -----END CERTIFICATE-----Generated at Tue Nov 11 14:15:35 2025 by rpki-client