$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: CVPMfwt0ZZ0sQD3zaw6IG2gVU2QWl0UsjxOAeFAwDtk= Subject key identifier: F1:6C:AB:46:14:42:4F:C1:E5:70:8D:7C:21:D2:C4:BA:51:DD:CB:7F Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 01987D89FF4A2E52F9FC5F336BD52F077D46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 126D Signing time: Wed 06 Aug 2025 04:00:52 +0000 Manifest this update: Wed 06 Aug 2025 04:00:52 +0000 Manifest next update: Thu 07 Aug 2025 04:00:52 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: FjqPP1mMtiXB2yWNC/0Kg94TlwNaSpimdCO5ChVMgk0=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:89:ff:4a:2e:52:f9:fc:5f:33:6b:d5:2f:07:7d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Aug 6 04:00:52 2025 GMT Not After : Aug 7 04:00:52 2025 GMT Subject: CN=f16cab4614424fc1e5708d7c21d2c4ba51ddcb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:f5:7c:28:25:49:b1:35:26:b3:f9:c1:64: f4:54:3c:d7:81:77:f2:f2:ca:67:3b:44:9f:7d:20: 7c:56:5b:c1:9a:7c:fd:73:a8:d3:c4:c7:cb:4e:6f: 5a:5a:53:09:f4:8f:3c:76:99:aa:d4:69:ce:40:99: 40:3c:ca:c2:24:bd:d6:2d:0b:0e:1f:38:41:ed:ce: 55:c5:c0:5a:59:5a:eb:c4:a3:4f:69:3d:6a:9d:65: 71:57:c9:16:85:d1:07:ed:49:4c:60:b2:9e:e7:3a: ed:16:e9:7e:63:aa:56:60:5b:96:26:23:ed:a7:a1: 06:64:48:ad:3d:32:4c:68:fc:63:ed:e9:d7:f0:f1: 73:e6:57:0e:02:2a:7a:aa:ef:11:b4:bb:4f:a8:4f: 23:f9:21:ee:3a:98:b5:1c:2d:70:0f:69:34:af:d2: 29:ab:ee:cb:52:3d:28:b4:9b:b8:a7:0f:4a:7f:15: 7a:f9:d4:91:ee:ae:d1:2e:5e:31:b4:16:05:8b:d4: 08:57:32:92:77:98:51:94:d0:96:64:44:8d:3f:e1: 2d:e4:e2:e0:14:fe:c7:26:33:e5:3d:45:f7:30:ff: 88:01:0e:f6:33:4c:81:45:a8:5e:99:af:13:76:4f: b3:bb:2e:72:04:bc:e2:3d:a8:c2:c1:ad:ec:34:be: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6C:AB:46:14:42:4F:C1:E5:70:8D:7C:21:D2:C4:BA:51:DD:CB:7F X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:18:d8:eb:a2:ee:23:e7:66:d6:0a:31:5f:24:b4:5f:a6:b6: 93:7c:4b:de:a0:fc:49:69:e9:b7:a1:1a:2b:13:99:1d:32:6c: be:fa:76:99:43:9f:20:a1:2a:c5:12:4c:ae:af:8f:55:ae:9a: 45:63:73:94:9d:0e:68:ec:88:94:74:a1:6d:33:a2:aa:a9:e7: 97:79:10:df:c3:b5:96:06:ee:9d:aa:5d:4a:40:94:05:6b:9d: 6f:1e:b5:65:2c:04:1a:9c:29:61:37:0d:af:8a:a7:35:e6:55: 51:12:e2:3a:80:c9:00:c4:f1:65:43:72:51:4f:a8:62:0e:ac: 14:b0:4e:6c:b8:26:52:bd:49:48:9a:02:ac:20:75:b8:58:22: 98:34:aa:3b:1c:3f:02:a6:d1:a5:ef:7b:d3:e6:97:ef:9d:de: 7e:71:77:4c:a2:34:1e:ea:eb:b4:2a:aa:87:91:91:58:10:d7: b7:a0:92:c3:0e:4e:af:e1:7d:63:e8:5f:48:b0:4e:97:04:b3: 65:b5:cf:76:57:29:04:5d:d4:67:5d:fe:69:fa:36:63:90:61: 05:26:e5:fb:91:cf:97:9e:bc:8c:8d:eb:47:13:ad:ed:c6:ea: 4a:75:eb:25:14:be:11:21:b0:a1:3b:68:af:fa:21:38:d2:ed: 49:43:40:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9if9KLlL5/F8za9UvB31GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUwODA2MDQwMDUyWhcNMjUwODA3MDQwMDUyWjAzMTEwLwYDVQQD EyhmMTZjYWI0NjE0NDI0ZmMxZTU3MDhkN2MyMWQyYzRiYTUxZGRjYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1H1fCglSbE1JrP5wWT0VDzXgXfy 8spnO0SffSB8VlvBmnz9c6jTxMfLTm9aWlMJ9I88dpmq1GnOQJlAPMrCJL3WLQsO HzhB7c5VxcBaWVrrxKNPaT1qnWVxV8kWhdEH7UlMYLKe5zrtFul+Y6pWYFuWJiPt p6EGZEitPTJMaPxj7enX8PFz5lcOAip6qu8RtLtPqE8j+SHuOpi1HC1wD2k0r9Ip q+7LUj0otJu4pw9KfxV6+dSR7q7RLl4xtBYFi9QIVzKSd5hRlNCWZESNP+Et5OLg FP7HJjPlPUX3MP+IAQ72M0yBRahema8Tdk+zuy5yBLziPajCwa3sNL4VlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFsq0YUQk/B5XCNfCHSxLpR3ct/MB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhjY66Lu I+dm1goxXyS0X6a2k3xL3qD8SWnpt6EaKxOZHTJsvvp2mUOfIKEqxRJMrq+PVa6a RWNzlJ0OaOyIlHShbTOiqqnnl3kQ38O1lgbunapdSkCUBWudbx61ZSwEGpwpYTcN r4qnNeZVURLiOoDJAMTxZUNyUU+oYg6sFLBObLgmUr1JSJoCrCB1uFgimDSqOxw/ AqbRpe970+aX753efnF3TKI0HurrtCqqh5GRWBDXt6CSww5Or+F9Y+hfSLBOlwSz ZbXPdlcpBF3UZ13+afo2Y5BhBSbl+5HPl568jI3rRxOt7cbqSnXrJRS+ESGwoTto r/ohONLtSUNA2g== -----END CERTIFICATE-----Generated at Wed Aug 6 13:15:26 2025 by rpki-client