$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: qxk31BS4IrTSVX1DVyJ7ZZPUPf10pEC0uvKy1/CvLxQ= Subject key identifier: 16:CE:20:DF:3F:41:79:80:F9:4C:0C:78:B3:B2:A9:80:2A:D9:21:0D Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 0199643524DEE7189847448F6590EC858DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 16BA Signing time: Fri 19 Sep 2025 23:00:28 +0000 Manifest this update: Fri 19 Sep 2025 23:00:28 +0000 Manifest next update: Sat 20 Sep 2025 23:00:28 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 5: QdfhpKIKlcTR38yzLxH9RRvBSR4.roa (hash: mSy2XkhCALt/lyVqBnl0n7Yn6bh+lGsEurO+w0zuUdA=) 6: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=) 7: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: oaBuT6hiEqAncyTGGDO0QYQ5o1TByOP2/9JVUp7MIXA=) 9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 10: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Sep 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:64:35:24:de:e7:18:98:47:44:8f:65:90:ec:85:8d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Sep 19 23:00:28 2025 GMT Not After : Sep 20 23:00:28 2025 GMT Subject: CN=16ce20df3f417980f94c0c78b3b2a9802ad9210d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:3c:4c:ba:af:f6:84:9c:12:ee:82:8f:6d: a6:0c:a1:e2:bf:b1:a6:a8:69:e7:36:9e:7f:71:e7: f2:cb:59:c2:8d:da:08:69:e7:fe:f8:2e:ff:29:d9: e5:52:08:39:49:ef:6f:dc:e6:8a:e9:96:76:4a:81: 9d:8b:2f:80:48:cb:07:39:93:57:26:68:32:67:02: 3a:8d:75:f7:a7:71:16:50:77:d7:8c:34:75:3e:a6: 6a:4c:e9:f9:8c:d4:7a:b0:4d:78:aa:12:35:80:df: 4d:6a:56:1a:0f:e7:ec:80:78:69:1c:d7:f1:6c:7c: 5f:08:c1:9d:52:0e:41:5f:c5:64:0e:71:7e:a6:68: 9d:bf:85:7a:e9:59:e5:35:14:70:8c:27:34:e1:84: 95:a3:c3:a6:bb:f2:ed:65:fa:73:28:96:ed:f3:8a: cb:f7:ee:aa:4d:c5:d1:62:78:72:38:e9:65:17:f5: 54:3e:13:da:5c:fd:9b:26:96:7d:5e:b5:99:af:8e: 33:83:e7:38:7f:ad:40:99:c5:b5:9f:4c:a5:f0:fa: c8:ec:ab:3a:0f:42:e3:29:8e:62:a9:5b:ca:34:d2: 26:cf:ce:02:dd:23:8b:1e:d2:ed:02:c2:85:64:7a: 5c:a4:70:05:7c:c4:16:9b:cd:a0:c3:4b:93:73:92: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CE:20:DF:3F:41:79:80:F9:4C:0C:78:B3:B2:A9:80:2A:D9:21:0D X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ea:3c:ac:f7:3b:bd:bc:55:4a:1a:62:1b:20:34:e0:8d:08: c8:47:f3:89:59:ff:df:7a:fc:e4:5b:57:a9:21:83:c1:fe:12: 68:ed:c7:cf:9f:38:72:67:5a:99:ce:25:53:7d:46:59:32:98: 67:f2:5f:95:44:e4:b5:2b:d7:d4:3d:61:50:2a:68:d6:29:d6: df:b2:95:c6:06:0a:59:a3:02:ab:3d:3d:d2:e4:92:54:17:df: 2c:ce:88:23:07:90:87:29:66:74:ff:9a:2f:56:32:35:9b:6f: db:ef:a7:7c:58:8f:5a:0b:c4:13:cc:e0:bb:d0:98:66:77:bf: 8d:20:66:65:38:58:4d:1c:5a:fe:be:3d:f5:79:d8:a0:2d:64: 59:1c:84:df:9c:06:5f:d3:79:31:db:50:ab:ce:23:3b:d0:0a: 3b:85:f3:15:64:46:e7:a1:29:91:05:82:9b:ca:b5:d9:f0:52: 70:d0:47:65:fc:11:d8:78:36:ad:e4:6e:35:13:70:04:9b:0d: 00:5d:5f:43:e0:97:1a:6c:d8:74:51:49:cf:52:70:9d:18:39: c6:e9:6a:6e:da:24:67:14:20:96:4d:96:05:fd:33:e6:dd:95: 62:e8:77:3d:67:73:68:ab:20:f9:08:94:e7:b4:c2:e8:29:d2: c9:79:95:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlkNSTe5xiYR0SPZZDshY3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUwOTE5MjMwMDI4WhcNMjUwOTIwMjMwMDI4WjAzMTEwLwYDVQQD EygxNmNlMjBkZjNmNDE3OTgwZjk0YzBjNzhiM2IyYTk4MDJhZDkyMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SM8TLqv9oScEu6Cj22mDKHiv7Gm qGnnNp5/cefyy1nCjdoIaef++C7/KdnlUgg5Se9v3OaK6ZZ2SoGdiy+ASMsHOZNX JmgyZwI6jXX3p3EWUHfXjDR1PqZqTOn5jNR6sE14qhI1gN9NalYaD+fsgHhpHNfx bHxfCMGdUg5BX8VkDnF+pmidv4V66VnlNRRwjCc04YSVo8Omu/LtZfpzKJbt84rL 9+6qTcXRYnhyOOllF/VUPhPaXP2bJpZ9XrWZr44zg+c4f61AmcW1n0yl8PrI7Ks6 D0LjKY5iqVvKNNImz84C3SOLHtLtAsKFZHpcpHAFfMQWm82gw0uTc5L7FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbOIN8/QXmA+UwMeLOyqYAq2SENMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeo8rPc7 vbxVShpiGyA04I0IyEfziVn/33r85FtXqSGDwf4SaO3Hz584cmdamc4lU31GWTKY Z/JflUTktSvX1D1hUCpo1inW37KVxgYKWaMCqz090uSSVBffLM6IIweQhylmdP+a L1YyNZtv2++nfFiPWgvEE8zgu9CYZne/jSBmZThYTRxa/r499XnYoC1kWRyE35wG X9N5MdtQq84jO9AKO4XzFWRG56EpkQWCm8q12fBScNBHZfwR2Hg2reRuNRNwBJsN AF1fQ+CXGmzYdFFJz1JwnRg5xulqbtokZxQglk2WBf0z5t2VYuh3PWdzaKsg+QiU 57TC6CnSyXmVhw== -----END CERTIFICATE-----Generated at Sat Sep 20 02:19:41 2025 by rpki-client