$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: 6eGMYYQ6R7vC2IV8xX6TRmGeUra3JUxiVjN3kNAZvV0= Subject key identifier: 75:49:CC:20:04:D1:CB:C3:9B:B9:C4:65:05:ED:44:62:6E:9A:DA:43 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 019A4F2B8603EB9989DC27C76D10A74BFCDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1736 Signing time: Tue 04 Nov 2025 14:00:43 +0000 Manifest this update: Tue 04 Nov 2025 14:00:43 +0000 Manifest next update: Wed 05 Nov 2025 14:00:43 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: C-0GBSjt5EkrQhuu1z2lCOmwKvs.roa (hash: 2R8h59W8AGB+2kq7TW/8IFolwXE+BsDOT/kw+k3wz9Q=) 4: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 5: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 6: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=) 7: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 8: ZidyNMEgKgNzgx0a-1UdSL_Swps.roa (hash: L/335+kz8KdyP6cK0H7CpTrJY9MXBpPX16IIONAaVQs=) 9: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: /P+n3Ug3sWbuDQnyMtFpezO2tPsfHRBFn3jEQQKCBSo=) 10: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 11: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:86:03:eb:99:89:dc:27:c7:6d:10:a7:4b:fc:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Nov 4 14:00:43 2025 GMT Not After : Nov 5 14:00:43 2025 GMT Subject: CN=7549cc2004d1cbc39bb9c46505ed44626e9ada43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:ce:81:05:df:36:4f:e6:ea:2d:93:1d:40: 12:76:1d:f2:d4:6b:b3:7f:76:37:41:b8:02:6e:8c: b3:d3:7f:5a:11:b0:00:10:ae:01:27:c6:e4:53:2b: 08:1c:e0:cb:6c:06:c3:ff:d8:f4:ca:00:54:91:b8: c5:41:b7:2f:37:db:2a:01:79:4f:b0:24:58:48:e4: d1:c2:21:de:8b:2b:ae:55:2b:32:c0:55:cb:d3:fd: 07:df:b2:ec:8b:75:8b:27:2a:75:68:e5:37:99:d3: 93:c5:4b:6f:b6:9a:d1:90:b2:d1:f4:e1:4f:77:2a: 26:82:08:28:b7:bb:b6:c8:6e:07:ec:10:9b:59:22: 80:3d:fd:8c:c4:b6:01:91:50:79:2a:43:97:98:c8: 77:d9:35:f5:7c:29:b4:eb:b0:37:4b:df:58:af:8f: d5:e5:53:1d:69:7a:0e:03:27:02:5a:14:4b:e2:e1: 4c:10:09:82:63:1e:37:82:02:6b:73:04:6d:05:98: 75:4d:fe:8b:11:0f:5d:86:b6:47:48:de:5c:81:bc: 1f:04:45:d5:e3:fa:f8:99:6f:c3:e3:ee:59:c9:6c: c2:b7:f3:27:b6:e4:a6:87:23:ab:18:9d:f7:d6:82: 0f:e0:f5:3f:d7:cd:df:38:2f:99:a8:54:0c:8d:e0: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:49:CC:20:04:D1:CB:C3:9B:B9:C4:65:05:ED:44:62:6E:9A:DA:43 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5b:aa:2a:e0:98:b3:d4:a2:49:e3:1d:99:29:3d:7b:71:64: 76:b0:6c:0f:49:25:94:56:6e:fe:16:80:e6:b2:59:72:d1:b3: 09:8e:96:df:cb:7d:1f:33:f6:36:4c:3a:4f:3f:ef:0d:43:19: a2:39:b5:3e:ed:8c:64:29:a6:8b:17:34:d3:d8:ab:08:17:9c: da:97:8e:98:6a:96:a4:bc:9b:03:3d:28:2a:48:a9:36:53:5f: f0:55:c7:a4:28:0d:45:33:63:4a:8e:b1:0f:dc:5b:41:3c:23: 94:b4:a0:91:f3:1a:c9:a8:7a:86:e3:84:5e:de:a2:ab:65:47: 29:58:2f:c7:d1:b7:fb:ab:a0:1c:87:16:b1:f1:3d:2a:c5:67: 6c:37:d4:f1:ec:4d:51:10:cb:8e:87:67:97:aa:5c:59:a6:b5: ca:df:94:2f:20:41:aa:0f:05:82:8a:6f:c9:0d:68:3b:12:cc: 2b:86:cc:ea:a7:e9:a6:3a:46:5b:e8:14:d5:db:67:e8:58:b3: 9c:d8:cc:3e:48:39:55:67:85:f5:72:e1:e2:b1:d0:db:e6:c8: 78:08:92:c0:1b:2a:e0:41:af:44:a6:df:ec:85:3b:25:71:a5: 49:4f:1c:b9:9e:c0:00:6b:37:43:03:02:fc:45:9c:4a:19:d6: 1c:57:c8:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK4YD65mJ3CfHbRCnS/zbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUxMTA0MTQwMDQzWhcNMjUxMTA1MTQwMDQzWjAzMTEwLwYDVQQD Eyg3NTQ5Y2MyMDA0ZDFjYmMzOWJiOWM0NjUwNWVkNDQ2MjZlOWFkYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrnOgQXfNk/m6i2THUASdh3y1Guz f3Y3QbgCboyz039aEbAAEK4BJ8bkUysIHODLbAbD/9j0ygBUkbjFQbcvN9sqAXlP sCRYSOTRwiHeiyuuVSsywFXL0/0H37Lsi3WLJyp1aOU3mdOTxUtvtprRkLLR9OFP dyomgggot7u2yG4H7BCbWSKAPf2MxLYBkVB5KkOXmMh32TX1fCm067A3S99Yr4/V 5VMdaXoOAycCWhRL4uFMEAmCYx43ggJrcwRtBZh1Tf6LEQ9dhrZHSN5cgbwfBEXV 4/r4mW/D4+5ZyWzCt/MntuSmhyOrGJ331oIP4PU/183fOC+ZqFQMjeC9dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVJzCAE0cvDm7nEZQXtRGJumtpDMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOluqKuCY s9SiSeMdmSk9e3FkdrBsD0kllFZu/haA5rJZctGzCY6W38t9HzP2Nkw6Tz/vDUMZ ojm1Pu2MZCmmixc009irCBec2peOmGqWpLybAz0oKkipNlNf8FXHpCgNRTNjSo6x D9xbQTwjlLSgkfMayah6huOEXt6iq2VHKVgvx9G3+6ugHIcWsfE9KsVnbDfU8exN URDLjodnl6pcWaa1yt+ULyBBqg8FgopvyQ1oOxLMK4bM6qfppjpGW+gU1dtn6Fiz nNjMPkg5VWeF9XLh4rHQ2+bIeAiSwBsq4EGvRKbf7IU7JXGlSU8cuZ7AAGs3QwMC /EWcShnWHFfIeQ== -----END CERTIFICATE-----Generated at Tue Nov 4 23:37:55 2025 by rpki-client