$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft File: Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json) Hash identifier: 1peU55IotrhuvdVddpUu3zh2usCitdXike1sUR9MS6I= Subject key identifier: 68:9D:1E:44:C1:FC:E5:57:66:6D:7A:57:FF:C5:12:03:13:F7:97:F7 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019A500717D4BA4E01A6DEA18C28D649619B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft Manifest number: 0D71 Signing time: Tue 04 Nov 2025 18:00:33 +0000 Manifest this update: Tue 04 Nov 2025 18:00:33 +0000 Manifest next update: Wed 05 Nov 2025 18:00:33 +0000 Files and hashes: 1: A9GxPF4ifZ6rbABmHPjtyPKjmzE.roa (hash: W77hd6FGDraLnDkaoT1pKx2we4vpUTM+eeqG9pbSJEo=) 2: F6wdCUdNs0S6x-lvMlPtyMpUfZs.roa (hash: 9jMOcYoLdDpo5EB5/0BEoeSC3reaOBGBRYSNiNLwg9k=) 3: FvcaLEo9ePCgEvBVIK2eI87VCIQ.roa (hash: tEu/ql9ub4L5vy+BTuIysc1oUr/aYIo+MTuSlbcYBuk=) 4: GAnOR60hpofm0szlGWoPLIE5k9U.roa (hash: lr43p+6HKeY7jXAlLyQZ1kcGKOOPGZSL2OJ25R36SAo=) 5: HIg12NFUg7Eb_z2q4_r85AxcQMM.roa (hash: +6laq1iJCnub2N6uqVJ0BPm3G2zkWo723oA1FoMeiQM=) 6: Rtf-eqgW1jg7kzfL0pg8e63I-5M.roa (hash: IMz1jRwRZYT/rMcvQ4nY+BdL0NQuZlG7iPglwgBzyqQ=) 7: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: QDRCjcFPfRodq+vQSkbOLrvd5T2vACuVkP5kqfbwjbE=) 8: TdMhRHczxWCfuj6WCF3aHSZcWoE.roa (hash: OExPlz/NvHlKGK16isLHnODAZh99vhb3NAPmGcjd+nw=) 9: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (hash: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=) 10: cYGTSChE9gFQuUNQB0z3uVeo_M4.roa (hash: oMlb77CshXZ5OhhRrgeA3KmMtc/wbw1QuqBFiLFBoVI=) 11: fXIkEQH3meKCBAEQ5mXacq0TJ20.roa (hash: rnj1CDmi4d3j1os+cxi9WBUMoxTK5VvPgUCy380Y0oI=) 12: o979ZrblSrorE9B9zxDq41HUGYA.roa (hash: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=) 13: pa8fQ4jOrZ59vAyb7Lg7bj_QEgQ.roa (hash: Ep011ixCtG+lu/klHXgc5PQt2d4i1uDvMubTIvs6Oro=) 14: peIOlV3OfBEMu-qBfSwFNIMmyUg.roa (hash: 6anSx7OoDk9TVb+rhIIUnKyoMu5IPmI9Uc6n5lkG9F0=) 15: qGL-UUbfc2n5gMthqcDrY6oqiRI.roa (hash: fb04IIPduA2+NhPfcjizdhoAsQqWUl17Qoy+hMnSrwg=) 16: rAiRJTmW8XfVmhpte53A3cU5F0E.roa (hash: 4rCJoUat5Hf3Yqw8erIeJ6FU4KlxG5HpAnlRqviFfYc=) 17: sYn86kZKw4G3fFE4L_epfK7wXCA.roa (hash: fdCIDuHioT3v4CHhE018xXjPJRG+/QyggQzYrvRftpc=) 18: toUQ0_iu6duuq_aTFgLEWgwtLpw.roa (hash: kGnBtrL9aHFWQFQVLy+h7pb0Fwh4bSr9itiOACSqYyk=) 19: twRuprVXnPVVcyrSMrNa_0_uqhM.roa (hash: nog8tSBlkAVSJF5Qw+uLxzczszHatj2ld99hU2zis/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:07:17:d4:ba:4e:01:a6:de:a1:8c:28:d6:49:61:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Nov 4 18:00:33 2025 GMT Not After : Nov 5 18:00:33 2025 GMT Subject: CN=689d1e44c1fce557666d7a57ffc5120313f797f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:1c:76:67:03:ce:38:8e:55:5d:dd:ad:85: f9:24:c1:1d:13:7a:04:fe:06:48:36:8c:82:31:71: 6e:be:45:0d:cb:85:c3:53:f7:81:fc:89:2b:da:04: 6e:df:ab:fc:f7:68:3e:7b:9c:27:22:6e:49:fc:f1: 28:0a:9c:0c:7f:8b:3e:c2:71:9f:c8:f3:bb:05:15: 03:5d:9c:21:01:57:9d:86:ca:1f:eb:be:59:5a:f0: 13:05:99:d1:53:fb:b6:46:2f:a6:26:9b:d3:02:2b: 39:62:e7:01:68:f9:a2:d4:dc:08:28:a9:f1:76:8d: 70:fa:00:8a:d5:ac:30:0f:e6:d1:41:9b:aa:48:58: c9:c6:d1:43:41:28:50:08:fb:4e:85:6d:f2:27:c7: 00:a9:96:2d:68:c7:32:69:1b:d3:d4:b3:8f:62:45: 67:ef:ff:2d:32:3f:b1:7a:eb:dd:62:62:d5:db:c4: 0b:86:ac:14:ed:96:1b:fc:35:2a:9b:f5:ae:2e:13: 7d:4c:10:6d:4f:1a:f4:06:d9:3d:8e:f2:fa:1c:15: da:90:99:ed:63:4f:15:f3:40:fa:33:d6:8e:89:fa: 93:6c:d6:f2:88:e2:26:a2:16:63:cf:7e:9e:92:f6: 36:bf:81:20:87:36:a5:57:37:d1:48:4a:de:cc:90: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9D:1E:44:C1:FC:E5:57:66:6D:7A:57:FF:C5:12:03:13:F7:97:F7 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c2:7f:ad:1c:44:5b:95:52:52:57:46:cc:ee:17:6a:af:bc: dd:72:65:c0:3a:4d:15:42:0b:ce:0c:d3:83:3b:6c:21:79:27: a1:83:d3:6d:36:f7:68:8a:30:b7:a0:ed:f9:8d:e6:dc:02:09: 16:bd:8a:90:b1:92:4c:52:3f:9b:ee:c9:a1:3f:dd:92:34:31: 60:c4:89:92:b5:f6:3d:f1:27:c3:6a:40:93:ac:02:9e:be:21: e4:b6:ea:e3:ec:65:bd:37:9d:20:1c:cd:d2:a7:58:15:2f:1b: 9b:42:b5:b0:dc:2d:94:1d:35:bf:0b:4a:22:5b:ef:d8:93:06: 71:03:cf:7d:54:84:22:46:ab:52:91:7b:6a:ce:98:fe:b6:86: c5:1a:a6:54:55:1e:fa:e4:b0:a2:c2:9e:c8:ea:8d:5a:dc:27: 22:1a:c9:22:86:6c:b4:0e:da:2a:7c:26:6f:67:17:51:d8:83: 8b:04:b9:d2:41:dc:37:88:9e:c1:5b:81:81:9a:ed:32:5f:b6: 71:a2:ad:d1:fb:19:f3:96:bb:72:55:16:d5:e7:83:ba:66:dd: 9b:bb:79:ac:4d:b7:c0:c5:97:34:c7:85:61:ee:3d:f7:fd:d6: 57:4c:63:35:67:2d:6f:09:22:31:ee:15:55:8a:44:2c:27:18: 89:9d:26:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQBxfUuk4Bpt6hjCjWSWGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjUxMTA0MTgwMDMzWhcNMjUxMTA1MTgwMDMzWjAzMTEwLwYDVQQD Eyg2ODlkMWU0NGMxZmNlNTU3NjY2ZDdhNTdmZmM1MTIwMzEzZjc5N2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+gcdmcDzjiOVV3drYX5JMEdE3oE /gZINoyCMXFuvkUNy4XDU/eB/Ikr2gRu36v892g+e5wnIm5J/PEoCpwMf4s+wnGf yPO7BRUDXZwhAVedhsof675ZWvATBZnRU/u2Ri+mJpvTAis5YucBaPmi1NwIKKnx do1w+gCK1awwD+bRQZuqSFjJxtFDQShQCPtOhW3yJ8cAqZYtaMcyaRvT1LOPYkVn 7/8tMj+xeuvdYmLV28QLhqwU7ZYb/DUqm/WuLhN9TBBtTxr0Btk9jvL6HBXakJnt Y08V80D6M9aOifqTbNbyiOImohZjz36ekvY2v4EghzalVzfRSErezJCcVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGidHkTB/OVXZm16V//FEgMT95f3MB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcJ/rRxE W5VSUldGzO4Xaq+83XJlwDpNFUILzgzTgztsIXknoYPTbTb3aIowt6Dt+Y3m3AIJ Fr2KkLGSTFI/m+7JoT/dkjQxYMSJkrX2PfEnw2pAk6wCnr4h5Lbq4+xlvTedIBzN 0qdYFS8bm0K1sNwtlB01vwtKIlvv2JMGcQPPfVSEIkarUpF7as6Y/raGxRqmVFUe +uSwosKeyOqNWtwnIhrJIoZstA7aKnwmb2cXUdiDiwS50kHcN4iewVuBgZrtMl+2 caKt0fsZ85a7clUW1eeDumbdm7t5rE23wMWXNMeFYe499/3WV0xjNWctbwkiMe4V VYpELCcYiZ0moQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:18 2025 by rpki-client