$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: jtg0eV4oPdTqSY9kPniNu7kfKZqHjTrE8QHoa4VJaDk= Subject key identifier: 99:C2:85:B1:0D:BC:75:BC:9E:35:7A:FB:A3:15:8D:5F:7E:F3:ED:3D Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019A4D937EF57FE3892BB8D941B54396F489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 1508 Signing time: Tue 04 Nov 2025 06:35:03 +0000 Manifest this update: Tue 04 Nov 2025 06:35:03 +0000 Manifest next update: Wed 05 Nov 2025 06:35:03 +0000 Files and hashes: 1: 3JFGNuMYTVRE_tgsRB9Dv7TkoAI.roa (hash: cgDSOAUcOV7B/P90698S4nI5hWvg5jhDlyl5V3knjkc=) 2: 5CtTVuQK4Mz0CfCCtM3PbDI1J_A.roa (hash: R54vCclWQ5py1ZVSUREg6/3SsE2Ni7OmnOX0ovimS28=) 3: 9tqxD372UOGf-zL9Og3dZI-GB_E.roa (hash: 1BflUu83I4Fz3YB6j1fHXKTleEcGx3LVxi458xNGCuo=) 4: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 5: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 6: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=) 7: HN-sxkXhsPARhEyjcxF2VA5ULns.roa (hash: XKKXt3nQtVRf5U2SzwHGZlsTijL5Olvfsj7LyZpSgu0=) 8: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 9: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: c3aqgEUKiJsCv4MVH6y5HbItNIereTW8r7cQ5x7qtLo=) 10: M8bMB2QKSM425kLjRVO2Mv1OLJ0.roa (hash: p7RpCCMMldWNLmjHFuK8nMdCoRWEH97iMYohSON6X1g=) 11: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 12: MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa (hash: k0aQBEKvm4oillc+UIihjgdIum6WVpAkoV036ebhwvc=) 13: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 14: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=) 15: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 16: S5Vx_PwhrUdn6uSPv9B8Pl8fWZ4.roa (hash: XmpSvZLR/cpO3PqSr4aJClVLTWeNmz7xYTDZX7wuFYc=) 17: XdU9ba_H8wvW9YWGekfY-RC6fac.roa (hash: t+t6oWtjjjeUHSoz5gNWccz0VBGlDxWsh2LU4cszm7w=) 18: Xl4qy1Ar5fj8HWfzQeqmdQCXJTo.roa (hash: kyWMPa6QWFz1hTwjuHwt3MREoZfxCYT9GNVy2jSQZZM=) 19: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (hash: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=) 20: bZv3S6SjMHuATa5GhC0St5hSsfU.roa (hash: v5Z9NLPnQ7ljIuVsTKQar4zGJUJdgJ7qXeQXJqaqbtI=) 21: bzzTA149jxH2aAs1Hmk0Ldjl1ks.roa (hash: bGv5aLr8TUtk+IAQZ7NNfU+YAcCIl809hdZK242FBfM=) 22: cOWXDby_VAjDBm-QNXyxFV15NYc.roa (hash: d23wa4ZI6ixe2JTopJ8C5Bi1Ca40n6+Q2pIZccoLoNY=) 23: dEipwsI3eN1As0rWuDbWNnqMvTw.roa (hash: +biJe511JtIv65zZKrLUqAD9MG0u+pcvdynZY6XvZoc=) 24: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=) 25: fFIiPcIZQx033jSV6p41eBFER7E.roa (hash: qhzye0ysaR3MnkAhIOM63hxvVgvo8rQw3JHNBHBliIQ=) 26: fYh96DEUprSlV21wSMnuWBCSwx0.roa (hash: v06BAbDyEGINC47vf0TbEA82PuMPVQcWMD/+BPJ4cCg=) 27: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 28: iZaZeEkRfA-qPxq2ngG3cfkXZcs.roa (hash: T0PfM8f9MKiqot92ZRLwnMqkMZ5rdvRshuTN3e9yWu4=) 29: onT2MkF29XmtrGx1gO1FbJGGd64.roa (hash: 9BBTl4rWlge/62o6XB7LJ3UfJ89LN7a5QNMStDRgw1U=) 30: q8QQgA7GC0znR3p7BWyx70W9Wy0.roa (hash: z6ABTs8Ko+RG9NU5x1+aIR6aLmZ/QI4e21dSlsLG9pk=) 31: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 32: s1oa9nzbeeHrOl4i5NEdlUPd2K8.roa (hash: fPPXyZdYCuE1e62BZGRaJfkllSNtfyYHIFWzxLymMVQ=) 33: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=) 34: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (hash: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=) 35: xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa (hash: 6xBBsXMne/V0DNK57hL+vR0I99KZ2fP45EMjpBaEGFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:93:7e:f5:7f:e3:89:2b:b8:d9:41:b5:43:96:f4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Nov 4 06:35:03 2025 GMT Not After : Nov 5 06:35:03 2025 GMT Subject: CN=99c285b10dbc75bc9e357afba3158d5f7ef3ed3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:bc:d4:34:ce:47:fc:b5:09:05:70:1f:04: e4:52:f8:11:34:9a:3c:5a:2f:0a:70:a2:65:96:3e: 6f:a1:51:5c:34:ae:ee:be:92:6b:94:dd:f2:96:a7: 95:86:a6:e2:3a:29:24:92:f0:0c:93:3d:f9:5c:8f: 56:f9:4f:1e:e8:42:8d:91:58:d6:37:a6:4e:b5:3c: 0b:35:88:d7:f7:5f:94:98:c5:b3:a4:72:d9:b0:15: ed:75:d0:12:c4:96:d5:67:7e:6e:a5:4b:ad:81:3e: d7:06:23:f4:da:bc:3a:78:c1:6c:62:59:db:1c:e2: 30:da:38:f2:e0:d1:75:e5:9b:b4:ad:3f:6f:0c:93: a4:ed:a9:88:19:b8:c0:fa:16:64:42:21:58:5b:70: 0c:cc:18:cb:38:b6:12:fb:0a:9c:7e:34:d4:8e:26: 12:18:a8:3a:47:89:33:76:69:7b:92:02:19:6e:fc: 0a:10:68:67:c1:f9:98:ba:2f:16:88:d9:ea:a5:74: 72:b9:45:38:cd:0c:60:c9:c3:df:5b:ef:eb:88:d2: 0e:7e:43:15:7f:e4:08:4c:76:cc:02:b0:fc:e6:45: 7d:b2:8f:6f:9d:00:f8:ae:86:36:87:85:cd:45:34: 7c:74:fc:b3:82:a2:77:fa:97:da:7d:4e:85:96:ef: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C2:85:B1:0D:BC:75:BC:9E:35:7A:FB:A3:15:8D:5F:7E:F3:ED:3D X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:31:b6:24:39:56:8b:ce:d8:0f:18:19:fc:eb:d8:86:c0:88: be:d0:ce:1a:62:5b:b3:34:83:64:07:e5:0a:81:35:2c:02:c7: 00:3c:65:f9:b0:54:9d:2b:9e:de:99:fa:ed:51:6f:c9:89:c9: 74:12:d4:c7:e4:f7:20:7a:da:fb:78:dc:14:6d:52:4f:87:79: 0a:02:f5:96:48:e8:1d:b9:20:75:d3:ba:cd:5e:fe:58:84:56: fb:98:3a:b3:b0:f3:ef:55:71:92:df:f0:8f:20:46:da:28:81: 33:7b:48:d3:90:f4:63:b7:dc:e4:db:84:29:0f:3b:04:1c:ec: 98:4a:84:7e:82:fa:98:10:40:dd:fd:21:be:53:24:ae:69:5c: fe:bd:b1:b4:fc:a4:07:a6:ff:89:1b:d5:12:32:4e:db:4c:09: a9:8b:d3:d8:cc:a4:6f:86:69:99:81:23:86:22:e9:99:d0:56: bf:e0:be:e0:15:0e:85:62:fd:d2:b2:70:87:f9:fc:cf:32:bf: 6d:4b:34:79:0a:b9:dd:b3:c9:da:17:6b:a2:f8:42:61:0f:55: 2c:97:ae:e0:1f:a3:04:bc:f1:ee:11:4a:c9:f7:d3:f5:c5:54: 14:c8:bb:f8:ec:08:72:45:40:e9:8b:bf:71:6d:9f:b4:d8:df: 3f:51:f7:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNk371f+OJK7jZQbVDlvSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMTA0MDYzNTAzWhcNMjUxMTA1MDYzNTAzWjAzMTEwLwYDVQQD Eyg5OWMyODViMTBkYmM3NWJjOWUzNTdhZmJhMzE1OGQ1ZjdlZjNlZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVO81DTOR/y1CQVwHwTkUvgRNJo8 Wi8KcKJllj5voVFcNK7uvpJrlN3ylqeVhqbiOikkkvAMkz35XI9W+U8e6EKNkVjW N6ZOtTwLNYjX91+UmMWzpHLZsBXtddASxJbVZ35upUutgT7XBiP02rw6eMFsYlnb HOIw2jjy4NF15Zu0rT9vDJOk7amIGbjA+hZkQiFYW3AMzBjLOLYS+wqcfjTUjiYS GKg6R4kzdml7kgIZbvwKEGhnwfmYui8WiNnqpXRyuUU4zQxgycPfW+/riNIOfkMV f+QITHbMArD85kV9so9vnQD4roY2h4XNRTR8dPyzgqJ3+pfafU6Flu/n4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnChbENvHW8njV6+6MVjV9+8+09MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzG2JDlW i87YDxgZ/OvYhsCIvtDOGmJbszSDZAflCoE1LALHADxl+bBUnSue3pn67VFvyYnJ dBLUx+T3IHra+3jcFG1ST4d5CgL1lkjoHbkgddO6zV7+WIRW+5g6s7Dz71Vxkt/w jyBG2iiBM3tI05D0Y7fc5NuEKQ87BBzsmEqEfoL6mBBA3f0hvlMkrmlc/r2xtPyk B6b/iRvVEjJO20wJqYvT2Mykb4ZpmYEjhiLpmdBWv+C+4BUOhWL90rJwh/n8zzK/ bUs0eQq53bPJ2hdrovhCYQ9VLJeu4B+jBLzx7hFKyffT9cVUFMi7+OwIckVA6Yu/ cW2ftNjfP1H3QQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:46:36 2025 by rpki-client