$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: Leo5biB5jGKaldksiLPIfSODXymKwkKNahPfrgbWIpA= Subject key identifier: 4C:30:5D:F6:9E:B6:D9:14:49:4B:2E:2A:12:B5:76:A8:3D:72:2D:76 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019A1873C525C82A0B63AFF743B9CAB91C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1742 Signing time: Fri 24 Oct 2025 23:00:31 +0000 Manifest this update: Fri 24 Oct 2025 23:00:31 +0000 Manifest next update: Sat 25 Oct 2025 23:00:31 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: DxWg3FoqPiSPowxTYXf08vKoD9E.roa (hash: Oq/kkmlZEN5XGFpx8HpsuEdCe2L9wxdowthqlyHT7z0=) 4: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=) 7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: nVM0bG6NkdgNFIbi69BgjuR+rP6J4kAaQgKukSzD7s0=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: lPTzeEC6SlsDOEXA7A79FujWsIo.roa (hash: PpirqRAGBkl5coZfBkPSGgFl+pHtqZ6nQGRQ6SpzTvA=) 15: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 16: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:18:73:c5:25:c8:2a:0b:63:af:f7:43:b9:ca:b9:1c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Oct 24 23:00:31 2025 GMT Not After : Oct 25 23:00:31 2025 GMT Subject: CN=4c305df69eb6d914494b2e2a12b576a83d722d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:37:88:a6:38:d4:9f:f6:14:c2:14:a8:96: b4:52:ff:ac:4d:c1:2b:0c:80:ec:b7:49:48:26:fd: 18:c3:08:b8:b5:f7:72:24:6e:c9:17:1d:29:08:cc: bd:ee:da:a1:1c:60:bb:f2:c5:a3:b5:23:5d:87:2b: ef:36:4c:12:4e:45:e4:12:8b:4e:f8:d9:cd:9c:c1: 6f:4b:bc:0d:36:d0:ce:97:2e:25:c1:c1:0b:ad:bc: a1:67:38:dc:56:fa:93:8e:f6:b6:85:de:f0:c0:22: fc:23:fa:b5:72:46:58:9f:a9:d2:43:47:02:4b:a4: 94:51:67:54:92:07:22:81:09:61:83:5f:92:07:55: 29:10:66:02:0d:13:b2:78:d9:bd:f6:ec:b9:7e:53: a2:59:c1:eb:ac:af:08:b8:37:a0:e9:f3:71:8b:1a: 85:e8:4a:cc:1e:8d:20:e0:57:49:de:be:e7:e4:03: 7b:fe:82:d9:b5:07:40:87:39:4e:72:6f:88:fc:33: 57:c4:df:17:2a:65:49:6d:79:0a:55:73:fc:ce:1f: f0:e0:c6:2f:b6:40:15:6c:29:a8:e5:45:3c:cc:3f: 70:ac:bf:54:6e:42:5b:b0:e8:ae:04:40:39:2f:fd: c8:b0:0f:7e:14:e0:16:be:47:9f:3f:46:8b:f5:d2: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:30:5D:F6:9E:B6:D9:14:49:4B:2E:2A:12:B5:76:A8:3D:72:2D:76 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:24:b6:82:8a:42:db:66:fe:86:a5:12:75:6e:82:c5:be:f2: 47:0d:f7:d3:eb:d1:ab:a8:f7:8c:b5:60:de:23:57:b3:ac:b6: 6c:be:b4:1e:92:fe:0e:60:d8:23:43:60:80:37:fa:cc:b5:12: 6e:d5:15:41:ed:af:67:ec:c0:40:2b:df:8e:ff:17:a9:cf:e2: 98:1b:36:02:87:de:b4:d8:22:dc:d9:47:95:55:5e:fa:a8:77: 4f:1b:97:e3:a4:81:6a:72:b3:78:02:81:d1:41:36:75:ee:92: a0:e1:f3:8e:bc:ae:bc:73:ad:bb:9b:86:bf:cc:f1:84:a5:79: ee:33:ad:7a:d9:5a:d3:24:9b:88:8c:f4:67:c2:7a:8f:d9:0f: 40:2d:f2:0b:7e:17:b1:cd:8b:c0:7d:0f:30:cf:a0:23:ad:f5: 19:ce:90:77:a7:e9:9e:02:98:91:7f:cf:69:e2:35:3c:64:23: e5:7e:75:0b:1a:fd:87:b7:bf:03:48:a7:0f:91:07:6f:22:31: 57:bf:b5:83:09:73:bd:f3:65:b2:91:e2:b7:f1:d1:ce:cc:d7: 82:2d:60:49:60:44:cd:7e:16:0c:7b:0e:cb:b2:f5:57:a0:31: cb:d4:58:ff:bd:f4:2f:ee:08:0c:97:53:f2:02:5d:41:a6:31: db:7d:97:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoYc8UlyCoLY6/3Q7nKuRyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUxMDI0MjMwMDMxWhcNMjUxMDI1MjMwMDMxWjAzMTEwLwYDVQQD Eyg0YzMwNWRmNjllYjZkOTE0NDk0YjJlMmExMmI1NzZhODNkNzIyZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ43iKY41J/2FMIUqJa0Uv+sTcEr DIDst0lIJv0Ywwi4tfdyJG7JFx0pCMy97tqhHGC78sWjtSNdhyvvNkwSTkXkEotO +NnNnMFvS7wNNtDOly4lwcELrbyhZzjcVvqTjva2hd7wwCL8I/q1ckZYn6nSQ0cC S6SUUWdUkgcigQlhg1+SB1UpEGYCDROyeNm99uy5flOiWcHrrK8IuDeg6fNxixqF 6ErMHo0g4FdJ3r7n5AN7/oLZtQdAhzlOcm+I/DNXxN8XKmVJbXkKVXP8zh/w4MYv tkAVbCmo5UU8zD9wrL9UbkJbsOiuBEA5L/3IsA9+FOAWvkefP0aL9dKm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwwXfaettkUSUsuKhK1dqg9ci12MB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCS2gopC 22b+hqUSdW6Cxb7yRw330+vRq6j3jLVg3iNXs6y2bL60HpL+DmDYI0NggDf6zLUS btUVQe2vZ+zAQCvfjv8Xqc/imBs2AofetNgi3NlHlVVe+qh3TxuX46SBanKzeAKB 0UE2de6SoOHzjryuvHOtu5uGv8zxhKV57jOtetla0ySbiIz0Z8J6j9kPQC3yC34X sc2LwH0PMM+gI631Gc6Qd6fpngKYkX/PaeI1PGQj5X51Cxr9h7e/A0inD5EHbyIx V7+1gwlzvfNlspHit/HRzszXgi1gSWBEzX4WDHsOy7L1V6Axy9RY/730L+4IDJdT 8gJdQaYx232XCA== -----END CERTIFICATE-----Generated at Sat Oct 25 05:35:33 2025 by rpki-client