$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: dJi1uLJGWFtpZkFS9pa1/1/00JHaPWB/JtctD0upGpg= Subject key identifier: 63:DA:8D:DF:AA:01:7F:0B:01:5A:73:12:30:D9:DE:02:F2:73:65:07 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019A194F2853799056D8B34339D1671775EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1703 Signing time: Sat 25 Oct 2025 03:00:09 +0000 Manifest this update: Sat 25 Oct 2025 03:00:09 +0000 Manifest next update: Sun 26 Oct 2025 03:00:09 +0000 Files and hashes: 1: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (hash: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 6: YaNSkilLvxLgKPrT-xDRiMn7jX4.roa (hash: EZ2qfgMp+bvQiHoGlwVv0eQJIbOoTlAjmgUR8kwZiCU=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (hash: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=) 10: jAY2gqsxgcne6CxwXuSfgMf4P5o.roa (hash: GE2OTsJpTeX1gwmggvr4Bc4mDirZkzPXPMqCMKxyOyI=) 11: k3qjfn2AAdeFPjY3Bp8KUgRaMPA.roa (hash: 4Ifjp85NogHztb45WtYR2OYxyvQl/OdGpjlDDi7JSNQ=) 12: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: kbzfKcy7l8ZoGtt/5U2em0uv2BP4N3NQNEYbd4f6/fw=) 14: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 15: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 16: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 17: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 18: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 19: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 20: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:4f:28:53:79:90:56:d8:b3:43:39:d1:67:17:75:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Oct 25 03:00:09 2025 GMT Not After : Oct 26 03:00:09 2025 GMT Subject: CN=63da8ddfaa017f0b015a731230d9de02f2736507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:b9:dc:b1:11:10:4a:f4:62:57:ce:f4:1f: 18:66:7b:e0:c6:30:5b:9f:bb:4f:e8:8a:b6:47:ed: e1:43:e4:94:70:b8:47:4f:9b:5c:20:b7:ac:75:63: 7e:a4:7d:62:d2:e6:1a:e2:43:b8:d4:39:c4:71:85: 45:8a:3a:d9:a4:ec:32:0e:33:ff:62:92:56:f4:db: e6:50:6f:14:ec:3c:ab:42:8d:83:ea:96:f8:f5:f1: d5:e6:fd:b6:d1:b1:04:71:52:0f:dd:b0:57:c7:f8: 63:28:d2:cb:db:73:8d:c6:52:bc:90:9e:f5:9b:fb: da:7c:4d:ba:ae:bb:f3:dd:04:0a:89:3e:02:34:4d: 45:b7:c2:ff:91:f2:c9:0e:71:31:27:4c:78:96:72: e7:5e:59:29:5d:da:39:aa:9e:f0:e0:fb:ef:56:2c: 79:9c:92:dd:11:30:7d:a0:7f:a6:42:a2:94:7c:6f: c0:fe:69:8c:25:9b:13:80:ba:18:03:76:87:6c:ed: 1a:87:a3:6c:9c:3d:a5:23:0d:44:2c:9c:2b:e4:80: f3:ab:d1:8b:b3:57:0a:e4:3c:ee:de:c1:b9:5e:72: 3b:78:7b:b6:1d:0a:86:6d:12:09:bd:5b:07:9d:a7: 2b:05:d3:3d:08:20:9a:49:f4:61:05:3e:67:da:71: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DA:8D:DF:AA:01:7F:0B:01:5A:73:12:30:D9:DE:02:F2:73:65:07 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:07:0b:34:b1:94:e4:4e:28:2d:1e:5d:06:1b:06:c4:36:1e: 6d:4e:d0:53:51:d8:22:af:e5:b7:d9:0f:38:7e:35:13:ff:5c: e6:2f:ca:10:db:21:a0:fc:2b:62:77:e4:e6:9d:cc:9a:75:b4: 24:5a:67:24:81:2b:31:32:cb:28:44:be:6c:46:d6:cf:44:c2: 18:be:b2:60:18:b1:5b:a4:74:89:e2:00:2f:82:cd:0b:31:07: 56:92:9f:0e:43:75:ea:ea:b9:74:9e:25:3a:a6:72:49:d0:72: 3d:f0:a5:67:7a:9c:c2:ab:87:c9:65:93:ed:c0:79:f9:69:9b: 23:39:ec:7b:9a:dd:6d:99:de:ec:e7:71:f0:1a:82:7c:f0:ce: 30:41:44:26:b2:16:cb:d7:0c:4d:3b:18:1e:d0:0e:05:38:bc: 5e:93:52:b9:3e:b4:fe:ef:d8:54:e0:df:81:84:5c:35:cf:36: a0:49:95:23:27:d9:28:11:a4:41:96:bc:ed:cb:02:f7:b1:33: 48:96:8d:a7:5c:db:35:14:81:f2:4f:09:ed:7b:56:49:d7:3a: 09:56:11:d6:c9:e0:1e:c0:59:cf:94:b2:10:ad:7f:78:28:31: 3e:d7:ff:83:66:41:8f:49:0d:89:2f:94:37:5d:9f:97:d6:89: db:0c:c9:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZTyhTeZBW2LNDOdFnF3XqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUxMDI1MDMwMDA5WhcNMjUxMDI2MDMwMDA5WjAzMTEwLwYDVQQD Eyg2M2RhOGRkZmFhMDE3ZjBiMDE1YTczMTIzMGQ5ZGUwMmYyNzM2NTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/+53LEREEr0YlfO9B8YZnvgxjBb n7tP6Iq2R+3hQ+SUcLhHT5tcILesdWN+pH1i0uYa4kO41DnEcYVFijrZpOwyDjP/ YpJW9NvmUG8U7DyrQo2D6pb49fHV5v220bEEcVIP3bBXx/hjKNLL23ONxlK8kJ71 m/vafE26rrvz3QQKiT4CNE1Ft8L/kfLJDnExJ0x4lnLnXlkpXdo5qp7w4PvvVix5 nJLdETB9oH+mQqKUfG/A/mmMJZsTgLoYA3aHbO0ah6NsnD2lIw1ELJwr5IDzq9GL s1cK5Dzu3sG5XnI7eHu2HQqGbRIJvVsHnacrBdM9CCCaSfRhBT5n2nFFSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPajd+qAX8LAVpzEjDZ3gLyc2UHMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAcLNLGU 5E4oLR5dBhsGxDYebU7QU1HYIq/lt9kPOH41E/9c5i/KENshoPwrYnfk5p3MmnW0 JFpnJIErMTLLKES+bEbWz0TCGL6yYBixW6R0ieIAL4LNCzEHVpKfDkN16uq5dJ4l OqZySdByPfClZ3qcwquHyWWT7cB5+WmbIznse5rdbZne7Odx8BqCfPDOMEFEJrIW y9cMTTsYHtAOBTi8XpNSuT60/u/YVODfgYRcNc82oEmVIyfZKBGkQZa87csC97Ez SJaNp1zbNRSB8k8J7XtWSdc6CVYR1sngHsBZz5SyEK1/eCgxPtf/g2ZBj0kNiS+U N12fl9aJ2wzJSg== -----END CERTIFICATE-----Generated at Sat Oct 25 09:30:13 2025 by rpki-client