$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: 9no5Ipws6WpMDFSiezl9XVgdEClzOXfgbGcuQnj7bbE= Subject key identifier: 23:38:C4:A8:C6:05:24:F8:9B:66:CA:64:2C:3E:7E:09:78:4D:53:74 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 0198745065C9D6CC41344715E07E77B9DA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 04C8 Signing time: Mon 04 Aug 2025 09:01:22 +0000 Manifest this update: Mon 04 Aug 2025 09:01:22 +0000 Manifest next update: Tue 05 Aug 2025 09:01:22 +0000 Files and hashes: 1: 05o0ilxpLPFj724SFa-brN8vzXk.roa (hash: CPN9MrS7MYDAN7zH2nr9vN3ZoOoKTAOXjde0z1Y3r4g=) 2: 5h88FMdyJ4BKxPsdcgHQyCeiggw.roa (hash: Owv+GMEcs1uONJHFnOZ4mKs3NxskXYOAjZpyCXtz47Y=) 3: 7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa (hash: k5M6cr3ux0zaC3HrK4AQu/eEDnL7gIrijJy4BZ0Nw4M=) 4: 7OOt-MnHsX07hiPdKHIMZaJ8wrg.roa (hash: 7nZ90mtRGZWhPbm1Puw7IzZkWIgR1R3W35D51WFY05w=) 5: BT9PpbhARp2PKEupubiiio8TvBc.roa (hash: PoRHUsj11iEWOHUhXg6p185DLswF97IfYO5dpNwM+4k=) 6: F1OWe033_DuZ-JjrisCh6PYvi1s.roa (hash: bLONjsizRZ/N6QYxCW6KHMn5K6t8a7PJWP3/t57vEJk=) 7: K3PHjFr5iZQBePAHzZD7020H3CQ.roa (hash: cYqNDwyqOAThtjZwtvIGK4yhgMYUiG7kHacZddA60SQ=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: IUNtDk3r5RKXu8hPWZigNOS6411CGvzuIEFOi6rKUP0=) 9: PwDUcjqBkiIEULzXxKTVGmmTWG4.roa (hash: FRJ/j45X7Ib31MDYnkP96sRJLV09a4YTIEwHH8GRm+c=) 10: SGJaxM1tftN6eWW_JhWZIZdq6Hs.roa (hash: i3+GB/wkLsPOj8TleSkbJUTDI0kj7dMA6dFb0QRWP+8=) 11: X-V1c33BeHLMq6YPZ6efCsl3cMM.roa (hash: qD2GqEyAmd2okDBw6OR3DlzX+O8r0bDHBHVLHEg9U3g=) 12: X6A7ZOxQkF-N5TBF6hNZ0D-sPxQ.roa (hash: sOJamuYIhYJWJLrvAE1wd1xA2gh7NgXmer7n43KBLdc=) 13: Y68HM_eE8K1w4SS6fxm68_4816Q.roa (hash: j5XSBxx8t0t2IG8jaeix/JPoU5Vp2pcHE0yvoVN43nY=) 14: eM7RoSEq3C715iKtcwBUqsiVTDM.roa (hash: U7xNVv9g2fKrI4EOjzXQcIX1ekwna/aEJqfXxfKaR90=) 15: u-M1H4DlyfJcf3cI4KPf60AAf5E.roa (hash: rqvHkJ1B+GOatMUS6IQfjBMvmK91Ea22MfD3TS1yuVM=) 16: us6ukJjPwguMUHmhc8SpjnjeHOE.roa (hash: RuHDwxtF2zmik+S8Nhu0t8NrGvwHVQJraNmp1nORf/c=) 17: zvMqPtiLMOCgjOxqm6euJp83YNA.roa (hash: jIvx8RFgHAKB/kauSEcxDljiE/0sDn1/Jfcw3a0iCKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:50:65:c9:d6:cc:41:34:47:15:e0:7e:77:b9:da:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Aug 4 09:01:22 2025 GMT Not After : Aug 5 09:01:22 2025 GMT Subject: CN=2338c4a8c60524f89b66ca642c3e7e09784d5374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:fc:f1:38:6b:82:2d:b5:29:42:02:aa:81: 10:ae:77:93:9e:74:49:4b:d3:5b:8d:a3:ce:09:2b: 44:a5:3c:5c:6c:03:53:83:c6:0f:10:96:00:e1:6c: d2:03:47:2e:27:cd:73:ac:2b:2d:c2:54:b9:f2:d5: 91:51:2e:c3:0a:da:d0:09:73:e3:00:cc:bd:be:78: 89:58:f5:32:98:93:31:45:fe:f7:bb:2a:e6:58:2d: 2e:ee:6d:73:07:72:7e:e9:47:76:c8:6f:68:d5:cc: e0:10:c4:69:40:d9:a1:f1:33:a3:54:8d:c0:4b:1d: 79:be:eb:bf:38:70:53:d0:e3:a6:e5:4a:c1:5d:a1: 19:c5:11:2a:bc:bd:90:64:dc:a9:f8:bf:4a:85:80: ca:d2:9e:51:e5:0b:ef:95:29:14:ec:99:de:bc:0b: af:66:9d:b8:08:05:bf:7c:02:f9:11:2e:11:0a:24: 0b:82:7c:96:7a:20:c9:f5:86:53:8d:23:86:fa:a2: 35:e4:34:85:09:21:80:3b:c8:1a:52:68:3f:60:e0: ce:62:af:5e:2d:82:21:4e:2f:f5:f2:8d:04:cd:e8: de:6a:b6:3a:3c:03:f9:57:0f:6d:22:77:9a:16:f1: d0:26:fb:96:01:63:a8:62:2c:c9:31:85:77:ec:ea: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:38:C4:A8:C6:05:24:F8:9B:66:CA:64:2C:3E:7E:09:78:4D:53:74 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9c:32:03:d9:99:d1:ad:e2:aa:d8:62:01:76:4d:9f:39:02: 32:b2:b7:97:45:6b:43:ee:ff:d4:bc:4d:95:b0:39:21:32:20: f3:b9:c2:80:29:a9:46:32:a2:49:bc:b2:96:69:43:10:c9:71: 65:e9:81:eb:17:19:24:e5:bf:d0:b9:cf:99:66:bf:48:35:d4: 78:16:2b:22:78:6f:e5:82:06:b5:b6:e5:cd:16:f5:e6:de:6e: 63:6b:c5:15:15:3e:7b:a4:19:e8:9d:4d:ca:ce:94:a1:9a:5e: fb:b8:ad:ba:19:a8:c8:35:0c:8d:bd:fd:49:d7:7a:7e:f9:11: d8:6e:3b:4d:4a:de:21:9f:11:a4:43:d0:57:06:da:98:00:25: e3:37:fb:e1:d6:e9:18:37:03:5e:c2:79:fa:45:70:4f:73:ab: 41:b8:e3:6d:f2:d3:50:56:6c:f3:2c:d3:ad:30:47:49:ba:0d: 09:a0:de:5b:4f:31:83:2a:cd:2a:b8:e1:2d:6a:e1:92:df:56: 2f:6d:66:e1:4b:68:89:00:5a:65:a5:77:2d:a7:fe:a4:19:fe: 35:50:3a:a5:36:79:04:af:0a:89:f7:ee:6b:b1:3c:8a:86:6c: ad:ea:44:0e:eb:7b:60:44:d1:f1:cb:51:50:87:2f:7c:5c:e6: d9:3e:18:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0UGXJ1sxBNEcV4H53udoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjUwODA0MDkwMTIyWhcNMjUwODA1MDkwMTIyWjAzMTEwLwYDVQQD EygyMzM4YzRhOGM2MDUyNGY4OWI2NmNhNjQyYzNlN2UwOTc4NGQ1Mzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliz88Thrgi21KUICqoEQrneTnnRJ S9NbjaPOCStEpTxcbANTg8YPEJYA4WzSA0cuJ81zrCstwlS58tWRUS7DCtrQCXPj AMy9vniJWPUymJMxRf73uyrmWC0u7m1zB3J+6Ud2yG9o1czgEMRpQNmh8TOjVI3A Sx15vuu/OHBT0OOm5UrBXaEZxREqvL2QZNyp+L9KhYDK0p5R5QvvlSkU7JnevAuv Zp24CAW/fAL5ES4RCiQLgnyWeiDJ9YZTjSOG+qI15DSFCSGAO8gaUmg/YODOYq9e LYIhTi/18o0EzejearY6PAP5Vw9tIneaFvHQJvuWAWOoYizJMYV37OoiTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCM4xKjGBST4m2bKZCw+fgl4TVN0MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJwyA9mZ 0a3iqthiAXZNnzkCMrK3l0VrQ+7/1LxNlbA5ITIg87nCgCmpRjKiSbyylmlDEMlx ZemB6xcZJOW/0LnPmWa/SDXUeBYrInhv5YIGtbblzRb15t5uY2vFFRU+e6QZ6J1N ys6UoZpe+7ituhmoyDUMjb39Sdd6fvkR2G47TUreIZ8RpEPQVwbamAAl4zf74dbp GDcDXsJ5+kVwT3OrQbjjbfLTUFZs8yzTrTBHSboNCaDeW08xgyrNKrjhLWrhkt9W L21m4UtoiQBaZaV3Laf+pBn+NVA6pTZ5BK8Kiffua7E8ioZsrepEDut7YETR8ctR UIcvfFzm2T4YhQ== -----END CERTIFICATE-----Generated at Mon Aug 4 19:00:06 2025 by rpki-client