$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: 1u0tA0qpvSc+Yl9oCV7TqzhsocKF5OBmf6pPQkSfzRk= Subject key identifier: 38:DB:A9:36:84:8F:0A:0D:40:CC:5B:2C:34:D4:EA:FB:59:39:C4:63 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 01992D4856B0AAB0B7B631FFCCB7EC9D8044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 12C8 Signing time: Tue 09 Sep 2025 07:02:19 +0000 Manifest this update: Tue 09 Sep 2025 07:02:19 +0000 Manifest next update: Wed 10 Sep 2025 07:02:19 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: 2dJh6Omlxh8RlnZudDwxk9FmDuhPFJEcPtf+X43XUo8=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 07:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:48:56:b0:aa:b0:b7:b6:31:ff:cc:b7:ec:9d:80:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Sep 9 07:02:19 2025 GMT Not After : Sep 10 07:02:19 2025 GMT Subject: CN=38dba936848f0a0d40cc5b2c34d4eafb5939c463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d2:a8:28:05:ae:01:c8:a0:40:51:69:70:64: 21:fb:3f:27:9a:ad:85:53:23:ec:8d:39:d2:33:da: b3:90:53:7f:30:db:7a:f2:a6:6d:d0:5f:55:a3:ff: aa:ed:c3:8a:85:49:d7:5f:58:22:f1:37:ad:ee:13: 72:04:34:a4:d6:a2:19:ce:17:4e:1f:36:a5:91:b1: 32:30:1b:81:35:a6:b2:0a:13:b4:f4:cd:61:08:8a: 2b:76:98:17:f3:0c:84:e8:6c:51:af:1b:6d:bb:41: da:15:52:15:57:a9:8f:f9:84:b5:3e:64:37:18:84: c4:71:df:97:00:33:51:c2:6f:c5:cc:fa:06:dc:ca: c9:1d:84:96:cd:e1:45:db:ac:1c:db:2d:05:39:97: 5c:5b:01:84:a2:4f:c4:39:d6:e6:2e:ff:02:2e:ad: 58:51:da:30:15:a8:91:a8:54:21:09:8d:1a:38:fc: c5:46:d4:2a:de:de:c9:04:58:1a:d5:37:fd:b5:9d: ca:53:25:87:0d:17:e1:31:59:8b:10:78:1e:f1:f5: ff:19:ef:0e:30:92:ea:08:f7:4b:69:37:3b:1c:87: 1e:05:31:d8:0d:88:57:81:ed:f3:39:65:e7:ab:43: 3c:c4:4c:28:e2:20:a3:8a:72:ee:02:27:be:0f:60: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DB:A9:36:84:8F:0A:0D:40:CC:5B:2C:34:D4:EA:FB:59:39:C4:63 X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:65:27:c7:c5:f5:0d:9f:28:1e:25:04:c6:94:f9:40:87:60: 21:04:cc:a1:d8:4e:67:30:85:97:77:9a:d9:3b:3d:8a:b1:d7: 46:6c:1f:8b:75:18:d3:a5:2b:3f:fd:63:ed:91:d2:7a:1b:b6: 9e:40:c1:c4:fa:ab:b3:57:3e:2e:b3:e6:2f:26:5e:af:8a:37: 77:48:17:48:57:83:af:26:2d:2e:72:b9:3a:15:50:74:24:b6: 0e:94:8b:eb:ad:b8:a0:11:03:f6:7a:31:c2:6e:db:af:7e:df: 13:a7:41:b3:ed:82:79:7e:c8:c9:1e:ec:3e:61:9e:b8:7f:31: 95:ee:40:95:f5:40:5e:9e:b9:93:5d:7f:db:39:6a:ee:f5:c3: c6:77:2f:bc:c5:a4:1c:62:59:47:15:11:82:a7:10:a8:85:b4: 80:8c:be:23:cd:aa:94:67:39:b0:f0:1c:ac:a2:9c:71:34:62: f1:5a:c1:68:e7:79:11:35:0b:0b:29:df:6c:e9:c1:2a:d0:34: 79:bb:06:84:96:f0:71:4f:7d:d3:1d:f0:31:32:db:36:5a:c3: 10:ed:99:af:8f:ea:e6:ff:8b:02:ac:00:10:55:6a:78:a2:b3: e3:11:d0:2f:e4:47:67:7a:81:47:a7:c7:dd:be:39:81:ea:9d: ca:46:09:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZktSFawqrC3tjH/zLfsnYBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUwOTA5MDcwMjE5WhcNMjUwOTEwMDcwMjE5WjAzMTEwLwYDVQQD EygzOGRiYTkzNjg0OGYwYTBkNDBjYzViMmMzNGQ0ZWFmYjU5MzljNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9KoKAWuAcigQFFpcGQh+z8nmq2F UyPsjTnSM9qzkFN/MNt68qZt0F9Vo/+q7cOKhUnXX1gi8Tet7hNyBDSk1qIZzhdO HzalkbEyMBuBNaayChO09M1hCIordpgX8wyE6GxRrxttu0HaFVIVV6mP+YS1PmQ3 GITEcd+XADNRwm/FzPoG3MrJHYSWzeFF26wc2y0FOZdcWwGEok/EOdbmLv8CLq1Y UdowFaiRqFQhCY0aOPzFRtQq3t7JBFga1Tf9tZ3KUyWHDRfhMVmLEHge8fX/Ge8O MJLqCPdLaTc7HIceBTHYDYhXge3zOWXnq0M8xEwo4iCjinLuAie+D2C3uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjbqTaEjwoNQMxbLDTU6vtZOcRjMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2Unx8X1 DZ8oHiUExpT5QIdgIQTModhOZzCFl3ea2Ts9irHXRmwfi3UY06UrP/1j7ZHSehu2 nkDBxPqrs1c+LrPmLyZer4o3d0gXSFeDryYtLnK5OhVQdCS2DpSL6624oBED9nox wm7br37fE6dBs+2CeX7IyR7sPmGeuH8xle5AlfVAXp65k11/2zlq7vXDxncvvMWk HGJZRxURgqcQqIW0gIy+I82qlGc5sPAcrKKccTRi8VrBaOd5ETULCynfbOnBKtA0 ebsGhJbwcU990x3wMTLbNlrDEO2Zr4/q5v+LAqwAEFVqeKKz4xHQL+RHZ3qBR6fH 3b45geqdykYJHQ== -----END CERTIFICATE-----Generated at Tue Sep 9 13:32:15 2025 by rpki-client