$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: izou9J07Vr1Sjjh3wJSd0Ckjqi+EetebJ8IaoIDG5Nw= Subject key identifier: 60:CD:04:41:03:F1:5F:2F:F2:BB:E0:53:6B:2B:1F:CF:0D:29:9B:51 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019A4D745002AF042E476C75472005428599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 171E Signing time: Tue 04 Nov 2025 06:00:59 +0000 Manifest this update: Tue 04 Nov 2025 06:00:59 +0000 Manifest next update: Wed 05 Nov 2025 06:00:59 +0000 Files and hashes: 1: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (hash: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 6: YaNSkilLvxLgKPrT-xDRiMn7jX4.roa (hash: EZ2qfgMp+bvQiHoGlwVv0eQJIbOoTlAjmgUR8kwZiCU=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (hash: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=) 10: jAY2gqsxgcne6CxwXuSfgMf4P5o.roa (hash: GE2OTsJpTeX1gwmggvr4Bc4mDirZkzPXPMqCMKxyOyI=) 11: k3qjfn2AAdeFPjY3Bp8KUgRaMPA.roa (hash: 4Ifjp85NogHztb45WtYR2OYxyvQl/OdGpjlDDi7JSNQ=) 12: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: EM2CnosXttCf5YCU8AbkyLSgfhECoscEXubQ3mLngjI=) 14: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 15: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 16: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 17: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 18: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 19: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 20: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:74:50:02:af:04:2e:47:6c:75:47:20:05:42:85:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Nov 4 06:00:59 2025 GMT Not After : Nov 5 06:00:59 2025 GMT Subject: CN=60cd044103f15f2ff2bbe0536b2b1fcf0d299b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f8:a2:eb:7f:e8:b0:f7:26:4f:aa:df:57:91: 42:c1:0a:59:e8:35:00:72:1d:af:36:29:48:38:a4: 39:dc:3c:2e:f5:e9:2d:a4:83:27:fd:f1:70:d9:36: cf:11:99:ec:3d:93:06:22:b8:44:55:4a:26:c0:af: d6:17:3f:bf:44:40:fd:82:ea:5e:8e:8d:49:d1:46: 80:b9:f8:53:9f:0e:06:12:b2:3c:ce:2d:12:61:51: 8c:8b:95:14:52:48:6e:c4:41:9b:2c:ec:df:10:2e: 98:90:1a:b1:4f:f2:56:15:48:0d:59:9e:13:32:26: f0:02:14:8f:c1:fe:a1:57:e8:c9:0c:68:4b:33:6e: ab:be:be:14:d5:18:a2:51:c0:4c:d9:2d:20:c2:4a: 65:92:8a:8f:18:43:4c:45:00:d4:47:d6:57:7a:65: 16:81:49:7c:f1:25:b5:d5:27:2f:18:32:2d:cd:95: b1:bb:c2:26:88:78:b4:4a:8a:06:a2:0a:a4:44:4f: 69:92:4f:a7:c6:b6:96:de:5d:ca:b5:10:cf:ba:5e: c9:a3:a7:b1:b3:25:b0:9e:20:66:77:21:d3:c1:b6: 18:8b:c8:fa:73:9a:67:1a:30:8a:c3:32:84:cc:fb: de:7a:eb:2d:30:b4:1b:65:32:12:cf:76:3b:20:44: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CD:04:41:03:F1:5F:2F:F2:BB:E0:53:6B:2B:1F:CF:0D:29:9B:51 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:49:d5:ff:13:04:35:1c:12:c9:ac:01:15:c0:8f:89:f4:1a: a2:a7:c4:d2:7f:10:c6:21:0f:b5:d5:c0:c8:3d:b7:b0:de:9d: 51:0d:34:c7:fd:a7:7a:a4:10:50:0c:1f:3a:29:f9:25:5b:09: 49:63:1c:aa:c6:27:f5:4a:18:25:ff:78:41:69:86:58:1c:b4: 27:4e:0a:38:4e:ab:e8:59:5a:6c:85:bc:9d:54:86:d0:82:d5: 98:a4:0b:e1:72:a5:b8:bd:74:a9:02:cf:97:c2:e3:dd:20:0e: 2a:03:70:7d:41:2f:bb:5a:1e:bf:dd:db:63:d4:e9:b8:14:a5: 4e:e0:66:13:e1:ea:53:69:88:b3:ae:b1:33:a3:07:f0:aa:6c: 7b:f1:f0:8d:3e:53:7a:59:3e:dc:4b:64:88:cf:56:a3:6d:0d: aa:43:50:46:27:eb:99:51:14:bd:3e:10:54:e2:f5:8c:b8:7c: 28:fd:7e:41:3f:34:f7:62:e4:19:5c:39:d9:98:e2:d5:b8:14: ed:ac:de:ae:39:78:94:a2:de:21:ec:ef:70:ca:f6:6b:9c:1c: 19:90:e2:c4:7e:6b:d0:c8:0e:6c:62:f8:6e:e8:9a:1a:28:94: 71:0c:a0:e1:58:62:42:b5:41:d9:25:f1:51:bc:e3:aa:cb:ac: ee:da:72:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNdFACrwQuR2x1RyAFQoWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUxMTA0MDYwMDU5WhcNMjUxMTA1MDYwMDU5WjAzMTEwLwYDVQQD Eyg2MGNkMDQ0MTAzZjE1ZjJmZjJiYmUwNTM2YjJiMWZjZjBkMjk5YjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fii63/osPcmT6rfV5FCwQpZ6DUA ch2vNilIOKQ53Dwu9ektpIMn/fFw2TbPEZnsPZMGIrhEVUomwK/WFz+/RED9gupe jo1J0UaAufhTnw4GErI8zi0SYVGMi5UUUkhuxEGbLOzfEC6YkBqxT/JWFUgNWZ4T MibwAhSPwf6hV+jJDGhLM26rvr4U1RiiUcBM2S0gwkplkoqPGENMRQDUR9ZXemUW gUl88SW11ScvGDItzZWxu8ImiHi0SooGogqkRE9pkk+nxraW3l3KtRDPul7Jo6ex syWwniBmdyHTwbYYi8j6c5pnGjCKwzKEzPveeustMLQbZTISz3Y7IERzpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDNBEED8V8v8rvgU2srH88NKZtRMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEnV/xME NRwSyawBFcCPifQaoqfE0n8QxiEPtdXAyD23sN6dUQ00x/2neqQQUAwfOin5JVsJ SWMcqsYn9UoYJf94QWmGWBy0J04KOE6r6FlabIW8nVSG0ILVmKQL4XKluL10qQLP l8Lj3SAOKgNwfUEvu1oev93bY9TpuBSlTuBmE+HqU2mIs66xM6MH8Kpse/HwjT5T elk+3EtkiM9Wo20NqkNQRifrmVEUvT4QVOL1jLh8KP1+QT8092LkGVw52Zji1bgU 7azerjl4lKLeIezvcMr2a5wcGZDixH5r0MgObGL4buiaGiiUcQyg4VhiQrVB2SXx Ubzjqsus7tpy0w== -----END CERTIFICATE-----Generated at Tue Nov 4 14:52:09 2025 by rpki-client