$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json) Hash identifier: PrOesxzHbMUD9eZ2yPWo9WTEJDJQPT0jXMZPrX6Pd1k= Subject key identifier: BE:D2:82:32:E9:0E:D7:FD:9E:59:92:2F:F9:6D:5B:E3:A4:10:1F:A8 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019A50750A4782A7FAC5811D882A12B0C513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft Manifest number: 1770 Signing time: Tue 04 Nov 2025 20:00:38 +0000 Manifest this update: Tue 04 Nov 2025 20:00:38 +0000 Manifest next update: Wed 05 Nov 2025 20:00:38 +0000 Files and hashes: 1: 1Dk1x9YSG3BVVIbM2O2ifNME7O4.roa (hash: bxHAHEV4CTUi3kyjkeY9dH18wMJTnBz71aOw3+/p61U=) 2: 5b3w5WcrIXEeKH5XOut46ipTc4w.roa (hash: wSQolPimhjlX9rU+wv9xFVShzU/9tCapeIVqocnoaew=) 3: 7WjSgMc07SzfT635zdA34HJuKpY.roa (hash: gHF3rjtW1hun8ETR5As505HwZP4tO+oLSUOaSw28d9o=) 4: 8rDHkLe0TSTwHx4WDDvrR-_Rnow.roa (hash: 29wxN1vn1T45ahVLJ7TowTdHbtjp7jm1ioyZkNKCMeI=) 5: 9DHBflpO2zTq-ZsTYT_i7dxcY_g.roa (hash: YT2WyJ5x+F2bOi2viPVWXtqAfg5t81Bc82ekuwDxgjA=) 6: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (hash: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=) 7: DPwZz44a0SIlqFLCKW0htkdMPoY.roa (hash: d9tgMhBVAbT22h5OLZMfkC+rJIvzIpXwzoTGPpF0N0Q=) 8: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (hash: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=) 9: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: pIXwTYV96F3tLRlYZexZnphfmwHzF4w6npNtxZ9RWog=) 10: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (hash: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=) 11: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (hash: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=) 12: Sc0ZcHdx0AbvbolBuMLmmkLg87Y.roa (hash: 3CX34XBdUEqZcEmT7f9t0G55z1zYTbnZZPkwKp6U/uM=) 13: SsU_hevSpCMxRICHNvRhGuqJl1M.roa (hash: 1JAmA6OyEuXd481Jl9UTpVGADh2xyB9dz46taIyZEKE=) 14: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (hash: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=) 15: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (hash: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=) 16: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (hash: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=) 17: cVTxJTSeVUmK7pjAVpvnpKuV91M.roa (hash: vq2s7bgsT4XNUVmFsaLuYuUSK79St21lLAq5yACC0dY=) 18: dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa (hash: H0ViyocRuPlTKb8aGyWdc+7j4FH1LnXvTl2YYbV3uYY=) 19: fqLEL6poBmeg0u3l_HiFBte4OcU.roa (hash: NxCCTmysymeMyc9nVnc5AZBQpbSG/d/tDBkMWDvLXzI=) 20: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (hash: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=) 21: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (hash: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=) 22: l_4towjM6IXiQikoqm_Qaaqf6xE.roa (hash: 9m0yhaTrrYhKwESoJQxIhWXl3oVuIFFdoCKFpCN1x68=) 23: mkKJ3-jBO0RnuHX4p2gPe1LiAO0.roa (hash: YsOcjwPDGcx62gouTiDvY21jEpeo8cJ7ctCe2GexDO0=) 24: nFmg1ZbaugFoP4r46DmMM1bx6Dk.roa (hash: 8HuaUsP5wd4g7g+IHer22eSFYfBXdh5/suZjeTrgNVc=) 25: onG_yjL71KBjT6qb1tlriGXEPkI.roa (hash: p0uEFp4aWU/cii43fYdqNq07qdotCor+2MbAKHw7Hr8=) 26: uBvzEXm5VwGZwiUWFNWddxjZq1E.roa (hash: oD/A8OR3XYpgvQFrjXxLCPlCLhedXuhOhlVHK3hjzlw=) 27: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (hash: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=) 28: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (hash: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=) 29: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (hash: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:75:0a:47:82:a7:fa:c5:81:1d:88:2a:12:b0:c5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Nov 4 20:00:38 2025 GMT Not After : Nov 5 20:00:38 2025 GMT Subject: CN=bed28232e90ed7fd9e59922ff96d5be3a4101fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:99:d4:a0:5e:e7:ba:5a:e8:95:68:0a:c6: af:96:28:cd:79:7a:54:98:a4:8c:75:b6:8c:43:c6: aa:42:65:61:61:c1:29:04:39:9d:38:d5:0a:01:4b: ef:63:b8:3d:81:ef:8e:82:50:cc:43:33:89:3e:2d: 02:97:ac:f0:d4:80:cc:b4:cd:68:5a:09:ff:a6:18: 53:f9:71:41:c4:c9:ea:ed:e1:34:7e:8a:0a:c4:e0: be:6f:f0:54:a3:65:4d:90:9a:1a:eb:b6:78:25:9a: d6:18:b8:d0:bd:39:ad:8f:65:63:a0:cb:17:e8:ec: 5d:a1:bf:33:fb:54:21:be:ee:60:05:dd:9e:f2:28: ba:16:8e:76:fb:8d:f1:2a:a1:3f:3c:e5:f0:7a:99: 1d:fd:82:93:16:03:ce:6f:d5:87:71:a5:e8:4e:a0: 7f:53:fc:5e:f1:79:b5:86:3e:d5:2c:e6:03:45:13: 7e:01:75:da:59:e7:48:df:6c:77:16:99:9c:dd:d0: c2:d3:0c:68:bc:38:a4:2a:da:2e:3b:0d:68:9b:fe: 67:b9:96:7f:37:09:ea:69:7c:00:a6:f1:32:ff:d5: 94:fb:4a:20:27:b4:b0:57:9d:98:7a:44:2d:9b:88: 31:b4:c3:ca:03:ba:0e:0b:19:2f:0f:00:21:d3:bc: ab:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D2:82:32:E9:0E:D7:FD:9E:59:92:2F:F9:6D:5B:E3:A4:10:1F:A8 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3a:5c:71:db:64:88:33:3a:74:ab:65:8f:94:b0:0a:8a:ec: e1:63:31:3a:55:9a:7f:77:25:a0:ee:b6:4b:66:93:e1:02:da: e6:56:87:af:6b:be:ce:6d:18:97:fb:42:96:60:a6:ab:02:7d: 64:ac:64:c6:8c:41:a4:21:25:b3:e4:f0:05:f1:a0:9d:d1:b4: 02:c7:0e:17:f2:b8:11:73:b7:ae:90:fc:4e:ba:c8:fd:d8:79: cc:8e:9a:44:7b:c8:66:aa:dc:10:9b:8f:f6:46:5b:11:04:68: 73:c1:40:cf:08:92:42:91:64:80:e2:6a:bc:69:a8:8d:a9:77: a8:7c:9d:58:aa:93:6b:28:c0:db:63:39:83:b1:fd:c0:69:03: 09:b4:cb:fc:29:4c:2d:e9:fe:58:29:be:4f:db:eb:d8:d0:fa: d3:d3:2a:d5:99:e1:f8:20:c2:c6:37:67:b3:d5:c5:36:34:f4: 4a:33:ee:15:c7:7f:4d:7e:73:15:97:10:3d:9b:74:58:fd:91: 2c:e1:6e:ad:37:59:09:e5:bb:5d:6e:3a:b4:8b:90:3f:29:2f: b4:55:29:00:e5:f1:d7:62:dd:cb:00:d1:3d:47:25:23:c1:91: 2a:e4:10:ac:3c:3b:c4:b7:c0:84:bb:ec:1e:9e:e1:09:de:54: a6:ae:c9:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdQpHgqf6xYEdiCoSsMUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjUxMTA0MjAwMDM4WhcNMjUxMTA1MjAwMDM4WjAzMTEwLwYDVQQD EyhiZWQyODIzMmU5MGVkN2ZkOWU1OTkyMmZmOTZkNWJlM2E0MTAxZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z+Z1KBe57pa6JVoCsavlijNeXpU mKSMdbaMQ8aqQmVhYcEpBDmdONUKAUvvY7g9ge+OglDMQzOJPi0Cl6zw1IDMtM1o Wgn/phhT+XFBxMnq7eE0fooKxOC+b/BUo2VNkJoa67Z4JZrWGLjQvTmtj2VjoMsX 6Oxdob8z+1Qhvu5gBd2e8ii6Fo52+43xKqE/POXwepkd/YKTFgPOb9WHcaXoTqB/ U/xe8Xm1hj7VLOYDRRN+AXXaWedI32x3Fpmc3dDC0wxovDikKtouOw1om/5nuZZ/ NwnqaXwApvEy/9WU+0ogJ7SwV52YekQtm4gxtMPKA7oOCxkvDwAh07yr+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7SgjLpDtf9nlmSL/ltW+OkEB+oMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDpccdtk iDM6dKtlj5SwCors4WMxOlWaf3cloO62S2aT4QLa5laHr2u+zm0Yl/tClmCmqwJ9 ZKxkxoxBpCEls+TwBfGgndG0AscOF/K4EXO3rpD8TrrI/dh5zI6aRHvIZqrcEJuP 9kZbEQRoc8FAzwiSQpFkgOJqvGmojal3qHydWKqTayjA22M5g7H9wGkDCbTL/ClM Len+WCm+T9vr2ND609Mq1Znh+CDCxjdns9XFNjT0SjPuFcd/TX5zFZcQPZt0WP2R LOFurTdZCeW7XW46tIuQPykvtFUpAOXx12LdywDRPUclI8GRKuQQrDw7xLfAhLvs Hp7hCd5Upq7Jow== -----END CERTIFICATE-----Generated at Tue Nov 4 22:14:56 2025 by rpki-client