$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft File: KWi04O-BBvDhKrjlAdKqTja3g8I.mft (raw, json) Hash identifier: TZ13zpVl8cnlzUqumOWVKL3I9EYM++xNxI9nosxkfkQ= Subject key identifier: FF:39:8B:2C:D3:6C:55:42:EC:F6:4B:15:74:0A:C1:FE:7A:E4:43:6B Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019A4EF480D5119D1E9B53B74C0C364E33A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft Manifest number: 04C3 Signing time: Tue 04 Nov 2025 13:00:37 +0000 Manifest this update: Tue 04 Nov 2025 13:00:37 +0000 Manifest next update: Wed 05 Nov 2025 13:00:37 +0000 Files and hashes: 1: 0RDdWF3IBcSYDIn0MLfVBFCjQ7k.roa (hash: JocbkBfhJXWTWCaW/Z+fAOKSZnVwMquu1mYz5s3f9M8=) 2: 1-sXlT3E8V0jDUCM-Ybkr4a6wLlo.roa (hash: CvuY/DdFSGhFi/vthGK/0x8yOd1SW50ze7RG7bTscdY=) 3: 1mE6J0Ktb734aiiaFF4afdLKhqw.roa (hash: 5aiGAF/ZM1vbUoQ3yGhyLelDTTprACTlu0v3uQXTAKE=) 4: 8I731pLlO7OZA-KP6_7Tyd0X0p8.roa (hash: AgOQfpoBY8oNnSKqmzrHEGGLFBw8XUwNyYW1y0VgcFQ=) 5: 9InzsTm0J0FJh6_deGjqmJNOCu0.roa (hash: KQ5YYXT2pBjEDCmfW0eKzjN8cGKuVKrKtN3pdmXsi9U=) 6: 9l0OpnAkxgW32u5vltCU75COEeg.roa (hash: WwX0mv2MzGgM21praCosx9rDAB5MyOdmAOdODbWz70I=) 7: B0Y963Ym8G97yUdy6EGcxKIyrcU.roa (hash: Wao2+az0V0GHaVKw5bKO+AnDXEcdThgJWPQTM7j4WM8=) 8: BI1_IYMcz04ApdAcr2QAYo1Gijc.roa (hash: L+zD+W35uF9Uwlx9BIqDCzEBqTULiJDb8lRlDdA0EUg=) 9: CSZU7wWMyS9jUVQzYbXEcfHL2gY.roa (hash: iqLlew5M42CsnChkC0+xYaVtbHLoz5KoE02bFqOtl7c=) 10: CcxEno_jEtaX0KN3AA2g0Shd474.roa (hash: jA+cvgfVuYtk2xkD4ZpvJ7Suqx69jcihGW9LGglgzLU=) 11: KWi04O-BBvDhKrjlAdKqTja3g8I.crl (hash: HOBwsIypSwpysR0zhUOBY0Rmv9Ivz8OzY6dxbNNyt4s=) 12: OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa (hash: atIx3Wbrqp85enT4nB4Os6srsGzi8BmryGvRtf7uqOE=) 13: P2ImEjHF7rUTH52-Q9QuWPkwmSw.roa (hash: cHgFrkOyvHYjzh8XPdArtRphykJDW+VkpmQUgpfqLMY=) 14: QMiTm2-yiJDC2oOCB78-T7uhy68.roa (hash: ulPDJeSyn/J0aOHbAtmPLp6M9W5etSSNT8E799B3xEE=) 15: QsCDFSI-l5JC6to_qrNHYHmqg7g.roa (hash: BEriwV3dh0T3KvwWaeXKWclUm0zROlAOzgw+CVY7q0Q=) 16: TQMk-vmp9hYfJgEvoyAL-ToRfX8.roa (hash: d8g4cP5OryNJBTn7vQ3J7O1rgxSo1FcZfuUW/yltiyo=) 17: U8FQsy0_ygrjfzDfPCuVUPjhxFI.roa (hash: VMdtwa4FkFy7nwi/xmcQtKtxXBN5sTN7YZIqy4ryF34=) 18: YeWW1PCTf3K6IXfWsiPqRL1xngw.roa (hash: eB/pknTzW+YV8hh7dZBIuVdC4d8+EHVKJgeJu2HkTYg=) 19: ZdiJyoo-l9tkMe9J769OhHUhgMY.roa (hash: AHUi1asCEzcucu2jHRjdz9eQqbhd55OH2AnByHrwu+A=) 20: _JFW_H3_-ep_GUFHoB-Ar3oYW-I.roa (hash: p6GMi/uFbgvbxvmU7TpQgxqqdjW/8BjvFrMefWhNZic=) 21: a1UPsQjeoFgrASQvINSJJ7_1FEI.roa (hash: IUZiF8ty9Ran6Rx7Q+49/A+HVghw43cz7NyFFJcOacw=) 22: amm4UyE6_-2iIfziflS9OWcpi0I.roa (hash: qVhQHcCInjhG6Z1KYAKADs9ZxRsv3Qktzh0alZXqoKY=) 23: bxqRKqA4ZCz-HC5KXbkRpv1VjKY.roa (hash: 1IZMZI5YlnRhnfeBN3K+N1PwHEVvMMcDuqlDUtvJ1nU=) 24: emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa (hash: MGI6nqZElzquCZDFYtpLzQpeiVV6b7oAzJY8DVMAi04=) 25: jbNPTi1OX4LV9fqRCNWiSK9CNY4.roa (hash: q846BJefbYU23y2Errp//9L+MKuaAwbiYTIBl3sEPJY=) 26: nvK7JuR-NbbPLyZr9HRx4WPeTMc.roa (hash: QrMKBATvqmwfhSra2xj16yqBAjFLvHt+4x1PZjAwLeM=) 27: sxNoWpD05QIoi_m8uc_lksfhDKU.roa (hash: wKcDV3z8mFiezwypjA2UNeuoXxV0RwLF2Q6N6uhTmzY=) 28: wFjr7ivDDEhOQrSM9UUePfjq6BM.roa (hash: hoiviRTlIUkKH3GW9AA2j6niz2qq5NnhMhKDwUCKYys=) 29: wkr3-E_-aqAccu5Xsw4WQFstKqc.roa (hash: Ail0xJvQX43faYT+R1FOFCGtCYp7xWL/Q1iaLeJmFoI=) 30: zrIx3F0bpchF38MY3NuMGU_mTx4.roa (hash: xQI4JeS8+tVg+pnfphMJ24bPIXjxEWvAFGvnAUjv++0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:80:d5:11:9d:1e:9b:53:b7:4c:0c:36:4e:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Nov 4 13:00:37 2025 GMT Not After : Nov 5 13:00:37 2025 GMT Subject: CN=ff398b2cd36c5542ecf64b15740ac1fe7ae4436b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:83:51:4d:96:53:2c:d3:27:30:b7:dd:45: d7:9b:aa:bb:14:77:13:26:e7:36:5f:cf:b3:66:0b: 59:e4:22:98:b5:28:32:98:e0:48:f1:47:63:11:7b: 02:23:f0:41:1f:9f:23:79:0a:41:9b:d6:b9:48:33: 9d:c4:1c:e7:88:8f:10:a5:f0:a4:22:0a:26:b9:b3: f1:a7:a0:84:38:5b:cc:ea:db:7e:12:4a:f7:a3:79: 92:41:1f:9e:89:7b:4c:a2:79:ca:bd:f2:e0:62:47: ae:12:54:2e:87:87:b4:53:56:c0:de:ac:bc:cd:10: 23:53:39:b4:e8:38:ed:8e:14:8c:72:4e:d3:a6:4d: 93:be:38:b1:87:7d:b1:e5:7e:0b:70:20:9b:ad:ff: 5e:74:ee:25:99:1a:c0:ef:0a:18:e6:98:e5:28:ab: b3:2c:00:35:33:4a:9f:a1:f4:e1:62:8a:78:d3:27: 10:27:b0:79:55:58:20:0e:a2:06:e8:cc:61:db:44: 2e:74:c1:6a:47:d5:13:b0:e6:9d:e7:4f:ae:51:fd: 39:4a:42:7e:d6:68:e6:4a:8b:2b:5a:4a:bd:24:30: bc:5c:2c:09:db:7a:71:06:6f:9d:fd:31:6f:5d:2f: de:57:0a:82:c4:da:b5:85:e7:4b:21:b6:a1:4f:96: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:8B:2C:D3:6C:55:42:EC:F6:4B:15:74:0A:C1:FE:7A:E4:43:6B X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a0:a1:b1:17:90:58:01:7e:45:37:f8:0d:e7:11:68:8e:0d: a6:26:8a:27:70:fd:d2:60:cd:cb:94:f3:9d:fd:e3:e2:6e:2c: b1:5f:92:1d:6b:d2:b8:0a:a5:37:41:28:01:6c:0b:3d:72:3d: 74:65:03:fc:16:62:6d:a4:ec:b2:68:ac:55:35:4b:c8:90:12: 3d:55:e4:23:93:2f:f2:52:45:c4:ae:27:03:0f:09:7d:82:08: d5:0b:f3:28:fb:8c:c8:3a:60:6a:c2:c7:c9:7e:4c:24:c8:77: bc:05:f4:2e:38:c0:3f:d4:13:61:7c:0e:b3:6f:14:8a:90:62: f1:28:be:c6:4c:17:3b:2f:76:e3:03:db:cd:ac:aa:b0:ce:d9: 37:e3:04:02:84:69:1b:7a:a4:c1:9c:bd:2b:83:dc:0a:64:e2: d0:61:0a:22:b7:da:09:50:6d:10:55:24:f7:b8:df:32:d4:ba: 31:af:6b:b0:1a:90:57:6a:1d:71:bc:c6:15:2d:e6:48:a6:a0: f5:55:b3:1e:76:09:36:86:de:b2:7b:a8:0e:9c:6d:7b:b6:1c: f4:84:f4:95:21:8b:f4:32:70:2d:c0:f6:bd:cd:1e:86:d7:47: 11:e0:d6:6e:21:86:e6:93:c1:39:b7:18:e6:d2:8a:30:ac:b1: 5c:f9:e6:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9IDVEZ0em1O3TAw2TjOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjUxMTA0MTMwMDM3WhcNMjUxMTA1MTMwMDM3WjAzMTEwLwYDVQQD EyhmZjM5OGIyY2QzNmM1NTQyZWNmNjRiMTU3NDBhYzFmZTdhZTQ0MzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvumDUU2WUyzTJzC33UXXm6q7FHcT Juc2X8+zZgtZ5CKYtSgymOBI8UdjEXsCI/BBH58jeQpBm9a5SDOdxBzniI8QpfCk IgomubPxp6CEOFvM6tt+Ekr3o3mSQR+eiXtMonnKvfLgYkeuElQuh4e0U1bA3qy8 zRAjUzm06DjtjhSMck7Tpk2Tvjixh32x5X4LcCCbrf9edO4lmRrA7woY5pjlKKuz LAA1M0qfofThYop40ycQJ7B5VVggDqIG6Mxh20QudMFqR9UTsOad50+uUf05SkJ+ 1mjmSosrWkq9JDC8XCwJ23pxBm+d/TFvXS/eVwqCxNq1hedLIbahT5YwnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP85iyzTbFVC7PZLFXQKwf565ENrMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqChsReQ WAF+RTf4DecRaI4NpiaKJ3D90mDNy5Tznf3j4m4ssV+SHWvSuAqlN0EoAWwLPXI9 dGUD/BZibaTssmisVTVLyJASPVXkI5Mv8lJFxK4nAw8JfYII1QvzKPuMyDpgasLH yX5MJMh3vAX0LjjAP9QTYXwOs28UipBi8Si+xkwXOy924wPbzayqsM7ZN+MEAoRp G3qkwZy9K4PcCmTi0GEKIrfaCVBtEFUk97jfMtS6Ma9rsBqQV2odcbzGFS3mSKag 9VWzHnYJNobesnuoDpxte7Yc9IT0lSGL9DJwLcD2vc0ehtdHEeDWbiGG5pPBObcY 5tKKMKyxXPnm3g== -----END CERTIFICATE-----Generated at Tue Nov 4 22:44:39 2025 by rpki-client