$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: LqWy0Rjba4sXdoJoO9XUyUUwcbZMF3vuuJHRqFfzXDc= Subject key identifier: E8:2A:90:CA:64:D2:A5:79:89:04:F2:9E:A9:7E:30:7F:6A:40:D7:42 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 01987D1C0BEC2B531CF7BD2043C39B43D7CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1642 Signing time: Wed 06 Aug 2025 02:00:46 +0000 Manifest this update: Wed 06 Aug 2025 02:00:46 +0000 Manifest next update: Thu 07 Aug 2025 02:00:46 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 5: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=) 6: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 7: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: TctBRqGrlaOcylxxSvDnFhRVxVbeuGuscmYoRK6Us+I=) 8: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 9: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) 10: tB4Gwrhu06E3QsikW_2RR3FHl9c.roa (hash: rpxh3Xft3stAaYfa6mVzKU7ubzyBU16e4wSptWKVCrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:1c:0b:ec:2b:53:1c:f7:bd:20:43:c3:9b:43:d7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Aug 6 02:00:46 2025 GMT Not After : Aug 7 02:00:46 2025 GMT Subject: CN=e82a90ca64d2a5798904f29ea97e307f6a40d742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:da:c4:0f:90:75:8e:77:02:62:8f:ff:f8: 56:79:e0:17:c2:12:80:64:5e:61:8b:57:10:fb:fa: c6:b8:a9:1e:e3:9d:97:99:1e:c0:0e:29:76:ce:dd: e0:28:ae:07:be:64:98:b5:47:1b:d2:69:bf:ac:02: 6a:fb:5c:29:2a:db:5c:c7:f2:c9:de:fe:96:a0:9c: ec:b6:f9:76:b2:c7:84:9c:e9:4c:a9:a2:8d:20:38: 0c:c4:70:42:a3:53:a7:08:32:31:2e:a3:a3:67:59: 01:f5:04:30:84:aa:bd:b2:d0:e7:ba:72:75:73:29: 33:bb:48:70:64:70:dc:ce:6d:39:5a:db:67:89:ad: 36:d0:b7:f7:b9:0c:85:ee:88:19:05:42:31:fc:27: 66:6b:9f:5b:74:a5:33:7f:71:9c:f3:d7:24:a9:1c: 69:32:18:f7:58:c8:b1:3c:7d:f2:e7:08:63:2e:f9: 14:92:d2:15:a7:a4:30:f0:1c:38:8a:ea:e3:40:07: 32:f4:13:2c:8c:b7:4c:b7:6c:8f:a7:bb:10:0c:ff: a5:b4:a8:75:aa:85:63:d1:d3:ba:53:ba:6d:00:21: a4:ab:41:35:7d:07:68:dc:52:f3:e8:e6:d6:a5:96: ad:9e:d6:b7:51:c5:b7:f2:fa:62:4d:9f:bb:4d:50: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:90:CA:64:D2:A5:79:89:04:F2:9E:A9:7E:30:7F:6A:40:D7:42 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c9:8d:c2:e6:35:f8:55:c7:33:c8:e2:95:0d:0f:5b:69:89: 2f:72:5d:4b:db:c4:e1:88:dc:85:cc:a9:26:71:21:0d:8c:db: 8b:e1:00:22:be:b3:fa:b3:7f:9e:86:d4:30:4a:46:00:3d:0a: ba:0b:49:79:ce:30:11:21:0b:c5:39:d2:75:74:66:4d:17:fa: 55:19:1c:99:48:92:6c:ba:ac:35:6b:01:3a:12:1c:62:b0:18: cc:fd:65:24:b9:4c:4b:8d:8d:ec:8b:0e:7e:eb:a0:07:c8:2c: 1c:f8:7e:29:52:4e:86:85:ea:18:67:7b:da:b4:1d:7b:aa:9c: 97:7c:d8:e5:de:b8:f6:a9:1c:b3:05:8c:54:38:2e:d6:63:2a: d8:d8:77:32:e7:f5:7a:91:4c:e3:33:31:83:78:3d:6d:c4:c0: 07:15:5c:9f:a3:82:93:9b:40:ec:05:74:6c:c0:fe:47:55:55: 69:f4:b3:62:16:1c:b7:10:2b:b8:ab:dd:58:9c:aa:83:65:30: ea:41:1c:2a:b4:39:41:fe:02:13:4b:db:97:e2:9c:cf:b7:95: 9e:bf:01:5c:b0:f0:50:5e:76:f3:d4:8d:d7:64:bb:71:fa:10: 82:51:61:74:54:46:f5:e5:a3:e2:2c:4e:03:53:0e:21:af:96: b5:37:11:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9HAvsK1Mc970gQ8ObQ9fNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUwODA2MDIwMDQ2WhcNMjUwODA3MDIwMDQ2WjAzMTEwLwYDVQQD EyhlODJhOTBjYTY0ZDJhNTc5ODkwNGYyOWVhOTdlMzA3ZjZhNDBkNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT7axA+QdY53AmKP//hWeeAXwhKA ZF5hi1cQ+/rGuKke452XmR7ADil2zt3gKK4HvmSYtUcb0mm/rAJq+1wpKttcx/LJ 3v6WoJzstvl2sseEnOlMqaKNIDgMxHBCo1OnCDIxLqOjZ1kB9QQwhKq9stDnunJ1 cykzu0hwZHDczm05Wttnia020Lf3uQyF7ogZBUIx/Cdma59bdKUzf3Gc89ckqRxp Mhj3WMixPH3y5whjLvkUktIVp6Qw8Bw4iurjQAcy9BMsjLdMt2yPp7sQDP+ltKh1 qoVj0dO6U7ptACGkq0E1fQdo3FLz6ObWpZatnta3UcW38vpiTZ+7TVA18wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgqkMpk0qV5iQTynql+MH9qQNdCMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucmNwuY1 +FXHM8jilQ0PW2mJL3JdS9vE4YjchcypJnEhDYzbi+EAIr6z+rN/nobUMEpGAD0K ugtJec4wESELxTnSdXRmTRf6VRkcmUiSbLqsNWsBOhIcYrAYzP1lJLlMS42N7IsO fuugB8gsHPh+KVJOhoXqGGd72rQde6qcl3zY5d649qkcswWMVDgu1mMq2Nh3Muf1 epFM4zMxg3g9bcTABxVcn6OCk5tA7AV0bMD+R1VVafSzYhYctxAruKvdWJyqg2Uw 6kEcKrQ5Qf4CE0vbl+Kcz7eVnr8BXLDwUF5289SN12S7cfoQglFhdFRG9eWj4ixO A1MOIa+WtTcRiA== -----END CERTIFICATE-----Generated at Wed Aug 6 06:07:36 2025 by rpki-client