$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: Uf9jiZXI0ZS2t4+q5ckoCE9aL+vltxnqexa3hbEKDyc= Subject key identifier: 68:BB:B5:6D:D3:A2:B6:B7:3E:2F:DE:74:6A:F9:98:3B:CA:BE:EA:AB Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019A5074AC39DA77E50C8FC5E3CD7F548ACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 175F Signing time: Tue 04 Nov 2025 20:00:14 +0000 Manifest this update: Tue 04 Nov 2025 20:00:14 +0000 Manifest next update: Wed 05 Nov 2025 20:00:14 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: DxWg3FoqPiSPowxTYXf08vKoD9E.roa (hash: Oq/kkmlZEN5XGFpx8HpsuEdCe2L9wxdowthqlyHT7z0=) 4: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=) 7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: bxjlD+fLpSmROJA9c957sIT2Sac28b+Yfx+CYH0rnGQ=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: lPTzeEC6SlsDOEXA7A79FujWsIo.roa (hash: PpirqRAGBkl5coZfBkPSGgFl+pHtqZ6nQGRQ6SpzTvA=) 15: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 16: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:ac:39:da:77:e5:0c:8f:c5:e3:cd:7f:54:8a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Nov 4 20:00:14 2025 GMT Not After : Nov 5 20:00:14 2025 GMT Subject: CN=68bbb56dd3a2b6b73e2fde746af9983bcabeeaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:7b:b9:95:88:14:1d:4f:70:9b:36:0e:15: b0:8e:db:d6:ae:33:d4:6d:36:72:ab:83:cc:ce:76: 59:c2:b2:79:a9:f8:9b:63:1a:61:06:d5:7d:9d:d9: 59:b4:61:be:7f:62:16:5e:1a:e3:7f:b5:d6:d4:e2: eb:49:d3:8b:0e:60:ad:87:ff:bf:b1:f6:13:19:a3: fd:02:c8:54:f3:c2:1a:d5:a7:a7:2b:22:09:41:f3: 2e:3b:ec:c5:2e:e5:f7:b2:0f:aa:81:eb:4e:3a:c3: b3:77:6f:a8:aa:ef:bb:ef:dc:c7:12:3b:ae:07:f5: b6:28:55:f9:d8:3b:d9:38:07:80:32:4e:b9:b3:d6: 51:31:79:ea:4b:74:4c:a6:d0:fb:e0:a4:06:81:0e: 1f:5b:1b:25:82:62:90:d2:f8:c2:a1:ae:c1:15:55: ac:f7:ef:74:ca:97:a8:0c:d1:4a:7b:fa:37:58:d4: f0:cb:30:63:be:f7:97:62:bc:1a:9e:a2:14:7b:3d: 13:a1:8e:78:a8:ba:1a:3b:89:1b:de:a1:78:98:26: 43:70:20:11:14:84:34:9d:35:51:9e:71:c3:92:ea: 53:9c:59:fe:16:68:a5:00:db:a3:50:3b:6b:fb:6a: e7:0c:9d:0e:d3:4f:6b:bc:15:ca:72:21:4d:db:0b: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:B5:6D:D3:A2:B6:B7:3E:2F:DE:74:6A:F9:98:3B:CA:BE:EA:AB X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ed:2d:32:61:90:60:e3:8e:56:ea:cd:24:17:c9:92:4b:61: d5:5b:b8:bf:a6:0c:35:99:d1:a6:d0:c0:e1:c4:58:a9:f1:ca: d2:89:7e:23:16:52:0f:6a:6b:13:89:97:72:d1:7c:48:96:49: 55:75:d8:30:d8:d1:e5:6f:cd:e1:95:2a:33:24:4d:bc:9b:01: 24:c0:2e:d3:e2:ae:07:d1:5f:36:d6:9a:c9:6e:9b:12:99:28: fa:e5:86:12:36:26:46:97:1d:cc:5b:8d:85:32:ef:5a:c9:fa: c1:2a:ed:b7:2f:78:16:b0:6b:e7:fd:79:a8:15:1c:f9:25:d0: f6:d9:2b:de:ee:56:7f:a4:97:37:96:de:0e:e8:ec:fa:41:4f: f9:55:26:36:b0:6b:99:85:07:10:c4:54:b2:a3:e5:44:43:36: 8e:76:c1:56:81:a0:27:3c:3e:48:c2:38:ae:6f:1d:cb:4e:c2: 5f:df:97:f1:29:86:4a:ee:15:19:4e:ff:e3:0e:03:21:a3:bf: 58:24:c5:ec:94:b9:44:8e:45:6a:1b:db:d1:5a:af:63:2a:b6: 92:5a:50:38:ab:52:46:b9:bf:02:82:58:9a:d9:78:f6:0a:7f: 37:f0:92:b2:ab:5b:4c:4f:a3:cd:f2:af:c3:7e:23:4b:22:14: 42:c6:d7:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdKw52nflDI/F481/VIrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUxMTA0MjAwMDE0WhcNMjUxMTA1MjAwMDE0WjAzMTEwLwYDVQQD Eyg2OGJiYjU2ZGQzYTJiNmI3M2UyZmRlNzQ2YWY5OTgzYmNhYmVlYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEF7uZWIFB1PcJs2DhWwjtvWrjPU bTZyq4PMznZZwrJ5qfibYxphBtV9ndlZtGG+f2IWXhrjf7XW1OLrSdOLDmCth/+/ sfYTGaP9AshU88Ia1aenKyIJQfMuO+zFLuX3sg+qgetOOsOzd2+oqu+779zHEjuu B/W2KFX52DvZOAeAMk65s9ZRMXnqS3RMptD74KQGgQ4fWxslgmKQ0vjCoa7BFVWs 9+90ypeoDNFKe/o3WNTwyzBjvveXYrwanqIUez0ToY54qLoaO4kb3qF4mCZDcCAR FIQ0nTVRnnHDkupTnFn+FmilANujUDtr+2rnDJ0O009rvBXKciFN2wtl7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi7tW3Tora3Pi/edGr5mDvKvuqrMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+0tMmGQ YOOOVurNJBfJkkth1Vu4v6YMNZnRptDA4cRYqfHK0ol+IxZSD2prE4mXctF8SJZJ VXXYMNjR5W/N4ZUqMyRNvJsBJMAu0+KuB9FfNtaayW6bEpko+uWGEjYmRpcdzFuN hTLvWsn6wSrtty94FrBr5/15qBUc+SXQ9tkr3u5Wf6SXN5beDujs+kFP+VUmNrBr mYUHEMRUsqPlREM2jnbBVoGgJzw+SMI4rm8dy07CX9+X8SmGSu4VGU7/4w4DIaO/ WCTF7JS5RI5Fahvb0VqvYyq2klpQOKtSRrm/AoJYmtl49gp/N/CSsqtbTE+jzfKv w34jSyIUQsbXWw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:39 2025 by rpki-client