$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: mj36GpKhH2frAK+tHf6I6Pp0yL9eTbxkLWbkhit/LW4= Subject key identifier: 16:BA:71:E0:8E:83:06:54:38:17:74:2E:73:1B:24:FE:F4:02:5F:3C Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019A4D060E1F129FE564808B4FCCE176E4CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 135D Signing time: Tue 04 Nov 2025 04:00:33 +0000 Manifest this update: Tue 04 Nov 2025 04:00:33 +0000 Manifest next update: Wed 05 Nov 2025 04:00:33 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: V5UrhXJaIQAIGYrPxYlAySoYvb6QMZhMFkeSc2KoqDk=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:06:0e:1f:12:9f:e5:64:80:8b:4f:cc:e1:76:e4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Nov 4 04:00:33 2025 GMT Not After : Nov 5 04:00:33 2025 GMT Subject: CN=16ba71e08e8306543817742e731b24fef4025f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:41:97:b7:e3:9b:58:43:d3:e1:e6:c4:e7: 28:1e:15:d3:d2:2d:cd:0e:ed:03:3c:e6:ae:9a:e8: 55:a0:59:19:5b:78:b9:b3:6e:81:d2:16:ef:03:ea: 1d:c8:7a:a1:b8:c9:5d:36:c5:46:8e:94:01:96:9f: 50:6e:93:07:e5:48:17:10:ca:89:d0:78:a4:12:28: f1:cd:dd:9e:73:3e:89:d1:e5:96:87:bb:86:d7:d3: 51:6f:38:04:cd:11:97:32:b7:e9:a5:27:7f:2d:9b: 4c:67:20:63:14:ed:df:01:b4:49:fb:49:11:1a:8b: bd:be:fd:20:fe:08:23:93:2c:fe:da:59:60:13:86: d4:e8:06:9b:58:b4:7c:4e:a2:bd:1e:d8:06:90:0f: fa:99:72:ec:e2:4b:69:b8:ae:41:38:81:e1:69:f5: 9a:89:46:b3:bb:8f:7f:c6:d4:f0:89:79:15:13:a8: de:d4:6e:91:31:c8:32:c4:41:d2:fe:0e:bb:17:b9: ba:18:b0:b3:7a:f6:f0:b9:a3:ca:33:71:94:ed:07: 21:b6:75:9b:a4:f6:9c:18:85:46:79:c9:89:38:15: d7:66:7c:8a:80:ba:c5:62:88:05:b5:4b:6d:ed:9b: 21:64:40:8f:5d:ad:86:fc:0e:70:bb:c8:51:71:6d: 7d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:71:E0:8E:83:06:54:38:17:74:2E:73:1B:24:FE:F4:02:5F:3C X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:81:95:bc:b8:83:68:81:32:12:ab:a3:f1:03:cd:4f:4a:69: c8:8b:ab:c7:f6:67:1e:94:b2:3f:18:60:f2:00:8b:1c:ba:2e: 51:3d:c9:f8:22:65:fa:86:7d:1b:71:ca:88:67:1e:c0:42:8f: 2e:84:1c:e7:91:d4:7d:fe:eb:76:8c:4a:70:c8:76:fc:66:6d: 5d:99:af:6f:94:a7:30:31:4e:81:2f:7e:cb:72:ce:dc:c0:3c: 31:8b:4b:74:20:ba:e2:b5:f3:ef:a4:cf:62:40:37:83:5a:a5: 4d:66:27:90:c6:b5:8d:40:2d:2c:74:de:15:be:b7:93:dc:22: b3:b0:06:e5:12:46:9f:e0:37:83:a6:e4:52:5c:72:9f:21:c2: 47:9d:e2:aa:1b:98:d0:d9:e3:61:2a:6e:19:e3:64:34:0d:ab: 41:10:f3:78:30:64:d9:ea:b0:6b:d1:46:e5:1f:d0:9d:a4:dc: 15:c2:0a:8e:79:ff:a3:5e:17:7a:dd:9e:12:bc:8e:ed:30:45: 25:53:73:94:7a:05:1a:14:ae:a1:1e:8b:a1:73:ca:86:98:e2: b1:0a:b0:ef:55:f5:01:68:61:c1:b9:6d:de:99:2f:ac:e7:b9: a1:30:a5:4e:71:c7:83:4f:8e:4a:24:3a:1f:47:0d:49:c4:db: b0:ee:d4:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNBg4fEp/lZICLT8zhduTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUxMTA0MDQwMDMzWhcNMjUxMTA1MDQwMDMzWjAzMTEwLwYDVQQD EygxNmJhNzFlMDhlODMwNjU0MzgxNzc0MmU3MzFiMjRmZWY0MDI1ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxedBl7fjm1hD0+HmxOcoHhXT0i3N Du0DPOaumuhVoFkZW3i5s26B0hbvA+odyHqhuMldNsVGjpQBlp9QbpMH5UgXEMqJ 0HikEijxzd2ecz6J0eWWh7uG19NRbzgEzRGXMrfppSd/LZtMZyBjFO3fAbRJ+0kR Gou9vv0g/ggjkyz+2llgE4bU6AabWLR8TqK9HtgGkA/6mXLs4ktpuK5BOIHhafWa iUazu49/xtTwiXkVE6je1G6RMcgyxEHS/g67F7m6GLCzevbwuaPKM3GU7QchtnWb pPacGIVGecmJOBXXZnyKgLrFYogFtUtt7ZshZECPXa2G/A5wu8hRcW19WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa6ceCOgwZUOBd0LnMbJP70Al88MB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYGVvLiD aIEyEquj8QPNT0ppyIurx/ZnHpSyPxhg8gCLHLouUT3J+CJl+oZ9G3HKiGcewEKP LoQc55HUff7rdoxKcMh2/GZtXZmvb5SnMDFOgS9+y3LO3MA8MYtLdCC64rXz76TP YkA3g1qlTWYnkMa1jUAtLHTeFb63k9wis7AG5RJGn+A3g6bkUlxynyHCR53iqhuY 0NnjYSpuGeNkNA2rQRDzeDBk2eqwa9FG5R/QnaTcFcIKjnn/o14Xet2eEryO7TBF JVNzlHoFGhSuoR6LoXPKhpjisQqw71X1AWhhwblt3pkvrOe5oTClTnHHg0+OSiQ6 H0cNScTbsO7UTA== -----END CERTIFICATE-----Generated at Tue Nov 4 10:48:18 2025 by rpki-client