$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: jHe3G5zeQ+z5GrZZOHvfQe1BSm77uo9tknTTXRrETyo= Subject key identifier: 76:B6:79:E1:5E:9E:BE:89:02:07:DE:3B:8B:BF:A3:4C:F8:DF:B8:10 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019A51508D5A29152A44598A75A9890EB2A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 05BF Signing time: Wed 05 Nov 2025 00:00:24 +0000 Manifest this update: Wed 05 Nov 2025 00:00:24 +0000 Manifest next update: Thu 06 Nov 2025 00:00:24 +0000 Files and hashes: 1: 05o0ilxpLPFj724SFa-brN8vzXk.roa (hash: CPN9MrS7MYDAN7zH2nr9vN3ZoOoKTAOXjde0z1Y3r4g=) 2: 5h88FMdyJ4BKxPsdcgHQyCeiggw.roa (hash: Owv+GMEcs1uONJHFnOZ4mKs3NxskXYOAjZpyCXtz47Y=) 3: 7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa (hash: k5M6cr3ux0zaC3HrK4AQu/eEDnL7gIrijJy4BZ0Nw4M=) 4: 7OOt-MnHsX07hiPdKHIMZaJ8wrg.roa (hash: 7nZ90mtRGZWhPbm1Puw7IzZkWIgR1R3W35D51WFY05w=) 5: BT9PpbhARp2PKEupubiiio8TvBc.roa (hash: PoRHUsj11iEWOHUhXg6p185DLswF97IfYO5dpNwM+4k=) 6: F1OWe033_DuZ-JjrisCh6PYvi1s.roa (hash: bLONjsizRZ/N6QYxCW6KHMn5K6t8a7PJWP3/t57vEJk=) 7: K3PHjFr5iZQBePAHzZD7020H3CQ.roa (hash: cYqNDwyqOAThtjZwtvIGK4yhgMYUiG7kHacZddA60SQ=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: KvOfuADdA6BY2rQyOgAkwYi7/SSZLdOJdhpZG0DDk3U=) 9: PwDUcjqBkiIEULzXxKTVGmmTWG4.roa (hash: FRJ/j45X7Ib31MDYnkP96sRJLV09a4YTIEwHH8GRm+c=) 10: SGJaxM1tftN6eWW_JhWZIZdq6Hs.roa (hash: i3+GB/wkLsPOj8TleSkbJUTDI0kj7dMA6dFb0QRWP+8=) 11: X-V1c33BeHLMq6YPZ6efCsl3cMM.roa (hash: qD2GqEyAmd2okDBw6OR3DlzX+O8r0bDHBHVLHEg9U3g=) 12: X6A7ZOxQkF-N5TBF6hNZ0D-sPxQ.roa (hash: sOJamuYIhYJWJLrvAE1wd1xA2gh7NgXmer7n43KBLdc=) 13: Y68HM_eE8K1w4SS6fxm68_4816Q.roa (hash: j5XSBxx8t0t2IG8jaeix/JPoU5Vp2pcHE0yvoVN43nY=) 14: eM7RoSEq3C715iKtcwBUqsiVTDM.roa (hash: U7xNVv9g2fKrI4EOjzXQcIX1ekwna/aEJqfXxfKaR90=) 15: u-M1H4DlyfJcf3cI4KPf60AAf5E.roa (hash: rqvHkJ1B+GOatMUS6IQfjBMvmK91Ea22MfD3TS1yuVM=) 16: us6ukJjPwguMUHmhc8SpjnjeHOE.roa (hash: RuHDwxtF2zmik+S8Nhu0t8NrGvwHVQJraNmp1nORf/c=) 17: zvMqPtiLMOCgjOxqm6euJp83YNA.roa (hash: jIvx8RFgHAKB/kauSEcxDljiE/0sDn1/Jfcw3a0iCKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:50:8d:5a:29:15:2a:44:59:8a:75:a9:89:0e:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Nov 5 00:00:24 2025 GMT Not After : Nov 6 00:00:24 2025 GMT Subject: CN=76b679e15e9ebe890207de3b8bbfa34cf8dfb810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:6f:ec:58:a4:ad:ea:36:8f:45:2a:78:11: 0f:3e:ba:5f:73:99:9b:c3:b0:6f:8b:c6:a7:48:ce: 6d:7d:70:2b:b5:3c:1a:cf:dc:dc:f3:95:fe:60:fc: aa:4f:f0:46:08:03:df:8b:8a:14:10:52:16:36:a9: 56:72:69:ea:3f:c2:23:0d:d4:6f:bb:ff:3c:10:f6: a1:ba:02:20:7b:f8:e2:a4:96:12:0f:35:ca:5e:45: 54:b3:88:6e:56:6b:c2:91:13:43:ea:cc:c7:ab:77: 7c:7d:21:b4:ea:4b:f2:90:0f:f5:60:6f:b5:61:d0: 50:37:24:37:71:ce:17:73:e7:06:77:50:32:b9:db: 72:de:a1:67:6d:f0:3b:9a:f6:c4:88:7b:38:3e:e7: 5b:21:ca:c2:d2:4c:d7:cf:a5:61:96:1f:54:eb:01: 8b:98:55:dc:b7:90:a4:c2:57:e0:85:74:e8:a3:e3: e1:21:53:19:25:98:65:23:96:a4:de:7a:e6:df:ac: c8:75:66:e9:1f:f3:d6:f3:e0:8e:33:31:54:50:3d: 37:2c:05:00:49:65:9f:d4:7d:6d:47:de:98:66:54: 21:d2:c0:27:4b:b2:fd:bd:66:f2:c7:52:17:ec:b7: 56:34:9d:0b:76:1f:d4:40:aa:0f:75:36:fc:55:1f: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B6:79:E1:5E:9E:BE:89:02:07:DE:3B:8B:BF:A3:4C:F8:DF:B8:10 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cb:c5:34:9b:88:ed:22:6d:16:3f:e9:6c:ad:78:74:30:d7: b8:5d:43:9c:f6:2a:79:b3:6f:b6:cb:2f:2f:10:51:ea:89:97: 0a:cd:51:23:e0:74:44:df:d8:c6:07:02:08:ca:84:9d:70:dd: 1d:2a:a6:6e:24:68:53:07:b3:d9:b2:02:d8:48:b4:5f:c1:49: 31:2b:c1:0c:bd:7c:9b:69:7a:d8:31:11:26:92:38:2c:59:74: 11:62:50:b3:24:f6:02:32:d6:76:3b:07:a2:69:36:cb:aa:9f: 87:1e:97:f5:da:e3:2e:fe:a6:a4:6b:f4:0f:1d:b8:0b:6c:9c: 22:09:fd:bd:1c:8f:62:64:32:5d:09:5e:51:67:73:d4:1a:0d: 26:c8:c5:af:e3:88:14:3e:95:50:dd:2b:5b:1d:34:9e:34:72: fc:fb:8e:5b:bb:d9:56:0f:a1:b4:8d:1f:f8:e7:07:ce:1c:dd: 36:e1:ca:92:47:4f:cf:12:f3:14:c6:c1:97:00:2b:59:5d:98: 50:f5:5c:11:dd:64:41:72:de:fb:7f:05:df:1c:ff:23:2f:d4: e7:4a:cc:16:c5:c5:22:5f:eb:90:95:6c:80:ab:c0:94:03:af: db:45:b6:3a:78:81:a6:02:b5:69:8e:96:9b:e4:8e:ac:92:e4: 5d:67:e4:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRUI1aKRUqRFmKdamJDrKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjUxMTA1MDAwMDI0WhcNMjUxMTA2MDAwMDI0WjAzMTEwLwYDVQQD Eyg3NmI2NzllMTVlOWViZTg5MDIwN2RlM2I4YmJmYTM0Y2Y4ZGZiODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbdv7Fikreo2j0UqeBEPPrpfc5mb w7Bvi8anSM5tfXArtTwaz9zc85X+YPyqT/BGCAPfi4oUEFIWNqlWcmnqP8IjDdRv u/88EPahugIge/jipJYSDzXKXkVUs4huVmvCkRND6szHq3d8fSG06kvykA/1YG+1 YdBQNyQ3cc4Xc+cGd1Ayudty3qFnbfA7mvbEiHs4PudbIcrC0kzXz6Vhlh9U6wGL mFXct5CkwlfghXToo+PhIVMZJZhlI5ak3nrm36zIdWbpH/PW8+COMzFUUD03LAUA SWWf1H1tR96YZlQh0sAnS7L9vWbyx1IX7LdWNJ0Ldh/UQKoPdTb8VR+HbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa2eeFenr6JAgfeO4u/o0z437gQMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8vFNJuI 7SJtFj/pbK14dDDXuF1DnPYqebNvtssvLxBR6omXCs1RI+B0RN/YxgcCCMqEnXDd HSqmbiRoUwez2bIC2Ei0X8FJMSvBDL18m2l62DERJpI4LFl0EWJQsyT2AjLWdjsH omk2y6qfhx6X9drjLv6mpGv0Dx24C2ycIgn9vRyPYmQyXQleUWdz1BoNJsjFr+OI FD6VUN0rWx00njRy/PuOW7vZVg+htI0f+OcHzhzdNuHKkkdPzxLzFMbBlwArWV2Y UPVcEd1kQXLe+38F3xz/Iy/U50rMFsXFIl/rkJVsgKvAlAOv20W2OniBpgK1aY6W m+SOrJLkXWfkdw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:55:45 2025 by rpki-client