$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: nUC5FSI9mC0jKeF3/KxHSIAY15ba9f1ztabm8siHg4g= Subject key identifier: 4D:3E:1F:89:42:09:E3:9F:83:E1:17:C7:BD:2F:A1:34:13:6F:90:39 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019873E269A5E7D6EFC1F0A3407B4905901B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1625 Signing time: Mon 04 Aug 2025 07:01:14 +0000 Manifest this update: Mon 04 Aug 2025 07:01:14 +0000 Manifest next update: Tue 05 Aug 2025 07:01:14 +0000 Files and hashes: 1: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (hash: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: W4Pp1uZLNY6O8zypTnIooV8OKUw.roa (hash: sz2YvKmGzTepzQeb00hlOadIcmBeFimSpx3Uqur21uI=) 6: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 10: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: Ohfq8fL2nFxLPMqHOXhq3okjK1dvrLeI8EUGasRGcZc=) 11: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 12: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 13: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 14: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 15: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 16: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 17: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:69:a5:e7:d6:ef:c1:f0:a3:40:7b:49:05:90:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Aug 4 07:01:14 2025 GMT Not After : Aug 5 07:01:14 2025 GMT Subject: CN=4d3e1f894209e39f83e117c7bd2fa134136f9039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:3e:65:4f:38:db:b7:ab:4d:3e:cb:3b:8b: 36:b3:cf:fd:cb:f1:61:06:f1:84:e8:e6:6b:03:a9: dd:3c:9f:03:59:86:16:75:25:4f:60:90:6c:ba:3e: 94:a6:a1:e9:f5:80:94:15:81:43:81:88:47:22:77: cf:5a:b8:58:69:68:f5:22:91:34:1a:79:05:c6:59: 93:a7:2c:8a:5c:85:35:82:9a:36:e6:91:10:e4:c7: 0d:9c:bb:6f:55:c1:35:78:7f:66:30:29:af:f4:6b: 21:84:97:84:69:9b:8d:8f:94:99:3a:a4:4f:a9:4e: 04:6e:50:8b:34:5a:35:13:9e:09:b6:bc:7e:f1:0e: eb:da:a5:15:1d:23:8a:d8:3b:10:e1:84:96:57:b6: be:49:65:da:16:ef:d7:3c:da:2d:21:3c:8a:34:19: ee:75:94:2a:21:15:10:03:48:3b:b3:3b:20:57:92: 55:2b:6f:eb:e3:a1:84:1e:5c:53:46:bc:a6:0f:dd: 5f:25:12:fe:35:98:4a:c9:93:ea:7a:0b:a6:e3:c1: d7:cd:60:6d:50:e6:c0:0f:54:f1:4e:3c:4c:dd:78: 38:62:09:3a:3f:8b:ce:30:5d:76:e3:39:fc:c0:7b: 41:87:a5:21:f8:4c:bc:4c:c5:93:8e:48:ab:c7:c1: a3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3E:1F:89:42:09:E3:9F:83:E1:17:C7:BD:2F:A1:34:13:6F:90:39 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0b:b0:ba:36:9b:12:a1:77:34:0a:fb:a2:40:2f:09:fa:aa: ad:79:9b:1f:4f:87:b9:3c:d9:e7:9d:e2:6b:5e:b0:6d:2c:73: 58:42:49:31:85:ea:19:00:3f:9f:71:75:2e:f4:09:59:f6:66: 0f:68:70:ed:b3:69:7f:87:c0:63:2f:69:aa:02:0e:51:30:cc: 4f:4f:85:a8:ae:95:16:cd:a1:2f:20:d3:2d:83:30:d1:48:4e: 6e:db:94:e0:98:20:82:57:d1:c5:fa:7b:fa:5d:64:fa:02:82: 96:84:43:91:77:51:d1:87:49:3f:98:b6:4d:fb:40:b4:de:fd: 86:b3:47:40:16:be:ed:45:52:72:b0:f0:8a:68:30:7c:43:65: e0:99:fe:1c:01:d0:21:59:43:d3:04:a5:58:4d:59:be:77:ef: 78:ba:e6:3d:8b:b8:4d:b7:68:16:84:f5:43:fe:fa:4b:36:a5: 96:1f:1a:fa:44:03:2e:cb:7b:84:8a:ff:38:65:1e:fc:9d:d6: 92:6a:fa:d9:31:18:94:90:02:95:80:d3:e6:dd:3e:f3:6a:61: be:f1:71:ec:1e:3d:97:d2:80:35:f3:8d:bc:2d:9b:8a:af:12: 7d:8c:b2:5d:60:22:68:60:ba:1b:7b:7f:13:34:19:09:26:3f: 2c:89:c6:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4mml59bvwfCjQHtJBZAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUwODA0MDcwMTE0WhcNMjUwODA1MDcwMTE0WjAzMTEwLwYDVQQD Eyg0ZDNlMWY4OTQyMDllMzlmODNlMTE3YzdiZDJmYTEzNDEzNmY5MDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2A+ZU8427erTT7LO4s2s8/9y/Fh BvGE6OZrA6ndPJ8DWYYWdSVPYJBsuj6UpqHp9YCUFYFDgYhHInfPWrhYaWj1IpE0 GnkFxlmTpyyKXIU1gpo25pEQ5McNnLtvVcE1eH9mMCmv9GshhJeEaZuNj5SZOqRP qU4EblCLNFo1E54Jtrx+8Q7r2qUVHSOK2DsQ4YSWV7a+SWXaFu/XPNotITyKNBnu dZQqIRUQA0g7szsgV5JVK2/r46GEHlxTRrymD91fJRL+NZhKyZPqegum48HXzWBt UObAD1TxTjxM3Xg4Ygk6P4vOMF124zn8wHtBh6Uh+Ey8TMWTjkirx8GjoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0+H4lCCeOfg+EXx70voTQTb5A5MB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwuwujab EqF3NAr7okAvCfqqrXmbH0+HuTzZ553ia16wbSxzWEJJMYXqGQA/n3F1LvQJWfZm D2hw7bNpf4fAYy9pqgIOUTDMT0+FqK6VFs2hLyDTLYMw0UhObtuU4JggglfRxfp7 +l1k+gKCloRDkXdR0YdJP5i2TftAtN79hrNHQBa+7UVScrDwimgwfENl4Jn+HAHQ IVlD0wSlWE1ZvnfveLrmPYu4TbdoFoT1Q/76Szallh8a+kQDLst7hIr/OGUe/J3W kmr62TEYlJAClYDT5t0+82phvvFx7B49l9KANfONvC2biq8SfYyyXWAiaGC6G3t/ EzQZCSY/LInGPw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:09:51 2025 by rpki-client