$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: NRa2I/QUQkmaLeFlw9zAcgSvY2NGf35WFYrjA96lqNw= Subject key identifier: F2:CF:0A:E2:A1:D4:68:BC:27:34:55:DA:D0:89:2F:FF:04:38:92:EF Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019A2477F5360A128DFF0A7FA30362B06026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1348 Signing time: Mon 27 Oct 2025 07:00:32 +0000 Manifest this update: Mon 27 Oct 2025 07:00:32 +0000 Manifest next update: Tue 28 Oct 2025 07:00:32 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: 574jMwlsiOzLPvAy0O5mkv2IEWqifqBVo8li2ce7WQU=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:24:77:f5:36:0a:12:8d:ff:0a:7f:a3:03:62:b0:60:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Oct 27 07:00:32 2025 GMT Not After : Oct 28 07:00:32 2025 GMT Subject: CN=f2cf0ae2a1d468bc273455dad0892fff043892ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:27:68:bf:71:ce:44:25:22:50:b4:5b:70: 23:6e:14:90:82:4c:60:e1:e2:0a:fa:e9:4b:e1:0b: 26:a0:65:4c:f4:41:c0:e4:e9:0b:cb:a8:78:b4:02: fa:cb:12:c8:8b:5c:21:71:e9:e9:dc:f4:29:e9:93: f3:96:b0:8d:7f:cd:e8:fc:d4:94:0e:c6:ea:9e:19: f8:40:4c:23:04:95:c9:63:b0:2e:6b:36:16:f6:c4: 3b:19:1d:bc:82:71:d2:6f:02:5a:70:c3:72:03:91: 76:6d:aa:19:19:35:bd:f5:b1:f7:14:23:aa:a9:01: a1:c8:09:ca:12:c7:fc:46:53:1e:0e:a6:c3:47:13: 06:67:62:bc:bc:d2:54:d7:ea:94:ba:83:94:dc:e6: bb:ae:e8:1c:cd:16:33:67:40:c6:d9:0f:28:f3:64: 11:d2:a6:8e:57:69:01:23:d2:c7:9f:1e:20:be:1d: 71:7f:89:85:c7:a7:bd:86:50:c1:21:a9:94:a8:e3: 3f:de:e2:6f:c4:d2:db:45:5f:50:d9:cb:8e:aa:5c: a8:1c:b3:db:3c:4a:8c:49:c0:f0:8a:76:10:80:89: 1b:d8:4f:70:ea:4a:88:f0:da:3d:26:5c:c0:05:04: 58:b1:6a:fa:fe:e9:de:a3:57:42:93:f2:39:2c:7b: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CF:0A:E2:A1:D4:68:BC:27:34:55:DA:D0:89:2F:FF:04:38:92:EF X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:57:61:88:3b:e9:71:88:6d:00:27:75:90:d0:ef:84:e4:c0: 3d:7a:9c:a1:5a:b6:f7:0f:50:ca:85:b4:29:a5:19:5e:d4:b9: db:1d:80:7c:09:92:75:83:66:46:3d:aa:c6:7f:1d:28:cc:1d: 88:a3:05:e3:f9:91:70:46:7d:bc:7b:ed:1f:56:6f:b5:23:59: c6:3e:0f:45:6e:75:5a:bb:59:29:fa:5e:5b:28:76:d9:8c:d4: 7b:af:35:43:53:57:7b:55:65:f5:54:81:14:ba:16:2d:a2:61: 8f:00:68:f3:97:3d:be:4e:da:23:0d:38:ed:64:7e:6d:1e:90: 66:a1:bf:30:58:72:4e:2b:fe:8a:9e:45:1e:52:08:98:5f:e2: b2:8d:fe:94:54:6d:9d:fa:14:ed:5d:e6:63:8f:c7:f2:0b:cf: 9e:a3:0f:9e:5d:e6:30:72:e2:d0:ea:a3:c0:d1:a1:27:f7:32: be:6b:05:1c:6a:7c:88:25:8a:dc:ca:91:77:d5:4f:6e:5c:e4: 04:d9:27:19:4f:4e:5c:25:03:ae:5f:c4:2b:de:d5:1f:b2:00: 02:97:2b:d7:0d:a3:c5:dd:c5:9e:fc:d9:07:04:a1:ac:f0:ef: 45:fb:f0:09:d1:25:87:2a:70:51:b6:14:e9:e8:2f:1e:81:3c: ca:a6:e0:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZokd/U2ChKN/wp/owNisGAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUxMDI3MDcwMDMyWhcNMjUxMDI4MDcwMDMyWjAzMTEwLwYDVQQD EyhmMmNmMGFlMmExZDQ2OGJjMjczNDU1ZGFkMDg5MmZmZjA0Mzg5MmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBAnaL9xzkQlIlC0W3AjbhSQgkxg 4eIK+ulL4QsmoGVM9EHA5OkLy6h4tAL6yxLIi1whcenp3PQp6ZPzlrCNf83o/NSU Dsbqnhn4QEwjBJXJY7AuazYW9sQ7GR28gnHSbwJacMNyA5F2baoZGTW99bH3FCOq qQGhyAnKEsf8RlMeDqbDRxMGZ2K8vNJU1+qUuoOU3Oa7rugczRYzZ0DG2Q8o82QR 0qaOV2kBI9LHnx4gvh1xf4mFx6e9hlDBIamUqOM/3uJvxNLbRV9Q2cuOqlyoHLPb PEqMScDwinYQgIkb2E9w6kqI8No9JlzABQRYsWr6/uneo1dCk/I5LHvmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLPCuKh1Gi8JzRV2tCJL/8EOJLvMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVdhiDvp cYhtACd1kNDvhOTAPXqcoVq29w9QyoW0KaUZXtS52x2AfAmSdYNmRj2qxn8dKMwd iKMF4/mRcEZ9vHvtH1ZvtSNZxj4PRW51WrtZKfpeWyh22YzUe681Q1NXe1Vl9VSB FLoWLaJhjwBo85c9vk7aIw047WR+bR6QZqG/MFhyTiv+ip5FHlIImF/iso3+lFRt nfoU7V3mY4/H8gvPnqMPnl3mMHLi0OqjwNGhJ/cyvmsFHGp8iCWK3MqRd9VPblzk BNknGU9OXCUDrl/EK97VH7IAApcr1w2jxd3FnvzZBwShrPDvRfvwCdElhypwUbYU 6egvHoE8yqbgtQ== -----END CERTIFICATE-----Generated at Mon Oct 27 14:47:19 2025 by rpki-client