$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: RwUKERP7qa5bqgNkJiIauUyJy66r84VuqfHwMDl4cDo= Subject key identifier: 5C:12:3C:F5:56:38:80:47:6D:3C:E2:94:A9:78:5D:B0:D3:E3:22:16 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 0198D439BC26D6ECDF8EF828659A7F011F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 1427 Signing time: Sat 23 Aug 2025 00:00:09 +0000 Manifest this update: Sat 23 Aug 2025 00:00:09 +0000 Manifest next update: Sun 24 Aug 2025 00:00:09 +0000 Files and hashes: 1: 0CJ7pV2pBkyjn4ci_dk7owBM5Ao.roa (hash: /u9I8G3PvT6eUquBHLuKrk45fMJQUlivaFEDmnzwFSU=) 2: 18CbUvKYWO6PYu_t92D214_TJes.roa (hash: gxubaEnhi8atyxnwW/VBZzNjtAflWsy9V6S18PdX27o=) 3: 3E9M_L1qni0gOm9o4JNThdl5mKU.roa (hash: 3QEnMAssy1tNKh1FvcPETtJzWZzXiuRM6bkNkokD5XE=) 4: 4k_ZuHYqDe_Het9axD5evRht3Lw.roa (hash: psQ9n7MA7JcZWMk3LmtdaKPiVMz8GYjL9qmt7ww6xH8=) 5: 6gcOziku0v8dQBqn9i7TAquuuxA.roa (hash: HoHuSuzHO0O4IyS+Skat8F4V/48rWZQkHaRFBSVNWLE=) 6: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 7: DPE-lvIaheAb93O4x9ER9Pm0wZA.roa (hash: VKbUVq1CbBMedZ3RYdA6WZaoezc+6KLmQpqvYTQTzcc=) 8: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 9: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=) 10: GP1Cesa5LS14FJBqDWsMjIckzAI.roa (hash: vc/pAYpqFI6+gWwwFh+jiqzj1QLBBkB1WyCakRdnhf8=) 11: GUuYC7cVlHvArBzfO7tfpAP5D60.roa (hash: MBqPwcxZe15O5TCcnQP4rabYZ863Bmk75b+fN9uibnE=) 12: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 13: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: 2barKbCyEpgVffWw4xRV9B1Dd9fsQ+Kla5O83ACD040=) 14: M8bMB2QKSM425kLjRVO2Mv1OLJ0.roa (hash: p7RpCCMMldWNLmjHFuK8nMdCoRWEH97iMYohSON6X1g=) 15: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 16: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 17: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=) 18: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 19: RQ2crOeOAZ1c0JiP0a-mcGtlHcM.roa (hash: ZR9Fp42cxwAzYr2gVOkUq/pNM4R+mYX08YKosc+6MSc=) 20: XdU9ba_H8wvW9YWGekfY-RC6fac.roa (hash: t+t6oWtjjjeUHSoz5gNWccz0VBGlDxWsh2LU4cszm7w=) 21: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (hash: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=) 22: bYVRCpfiYfuNTOtItmg2qSgXKww.roa (hash: A5c3DgIJi3QdlQD3NgkB4e1o2u7d4JwrE4GhSjzqcqA=) 23: cOWXDby_VAjDBm-QNXyxFV15NYc.roa (hash: d23wa4ZI6ixe2JTopJ8C5Bi1Ca40n6+Q2pIZccoLoNY=) 24: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=) 25: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 26: j-5W8pge-NiY9ueW_P3OZYSFlKU.roa (hash: q5+GGxhUFSbmXixV2Cois1Bph2dy0EglBHtYWw/nAiU=) 27: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 28: ru0yVj1uuIU42lus6xVMmufa4hM.roa (hash: +rKaCOhiekBzFf8GDECn0Q4N7qDQWsCX5OxE0LHrKSg=) 29: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=) 30: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (hash: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=) 31: xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa (hash: 6xBBsXMne/V0DNK57hL+vR0I99KZ2fP45EMjpBaEGFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:39:bc:26:d6:ec:df:8e:f8:28:65:9a:7f:01:1f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Aug 23 00:00:09 2025 GMT Not After : Aug 24 00:00:09 2025 GMT Subject: CN=5c123cf5563880476d3ce294a9785db0d3e32216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:de:89:5f:a3:08:38:de:95:e5:a9:f0:03: 16:0a:6b:59:cc:bc:00:bf:fe:e6:75:c0:f4:de:a2: 30:b8:9d:2e:f9:4d:fc:e0:f3:0a:f4:48:36:b6:46: 80:d9:25:ec:87:43:fe:f4:6e:4d:62:e9:6d:69:3c: 5b:1d:25:ce:9d:d8:52:2e:3b:9d:f0:cd:93:5c:a8: a5:51:f4:51:a9:16:0b:38:52:92:ad:c4:73:88:23: a5:a3:06:18:e0:f5:e5:89:97:b3:5b:4e:71:40:aa: 30:03:ee:fd:fe:c7:c8:5a:1c:90:78:12:19:09:5b: a1:32:6d:6b:7a:0f:49:87:1f:84:14:8b:09:84:e4: 89:d7:d4:20:a8:da:86:f3:67:2d:13:30:f3:c3:bc: 0b:04:3e:06:00:13:43:00:d4:4d:50:9c:82:d2:c1: df:92:a7:b9:e8:02:f2:e3:d9:fc:28:69:19:04:50: 32:a3:bb:c0:89:e0:77:3c:ac:2e:78:04:dc:6f:4b: 2c:d0:7c:03:71:57:28:08:52:e2:49:dc:6d:ee:96: b7:d4:70:52:a1:0a:9a:83:98:e5:6f:20:52:66:e3: 7a:28:67:6d:77:bf:6c:9f:75:ff:69:b3:47:dc:30: e2:cf:ce:6f:bd:96:37:64:4b:34:fd:2f:8a:99:ea: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:3C:F5:56:38:80:47:6D:3C:E2:94:A9:78:5D:B0:D3:E3:22:16 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2a:08:d5:a9:8c:cc:ec:ac:88:34:1b:d3:c6:2a:97:71:a4: b2:6e:8a:d2:46:39:0e:e4:89:d8:fa:60:2e:2b:dd:fe:9e:97: c3:a7:0f:dd:54:58:8b:fe:08:f0:14:18:13:46:34:50:ab:2b: d8:b6:8b:ba:c7:82:ae:f6:26:07:ca:ae:65:25:b6:b0:e6:87: c7:ef:83:e2:8e:49:89:41:10:b3:57:ed:ea:ee:05:1b:91:18: a2:62:13:0f:e8:7e:d6:cb:be:09:d6:c0:8d:a3:a4:8c:5c:3e: a0:0c:9d:71:1f:82:b4:78:33:f9:be:5a:7d:d4:cb:4d:52:94: 3d:53:62:5b:a5:fe:eb:17:1d:cb:32:52:f3:fc:d2:58:e0:c4: d5:dd:3f:60:27:78:33:3e:66:0e:4f:a9:8a:2c:96:87:6f:53: fc:51:f5:d4:3f:f1:6e:dc:16:cb:70:75:db:bb:cd:2e:11:86: ce:9b:70:fc:e2:a4:be:bb:2a:40:b4:b7:6c:6f:46:25:64:45: 28:bc:cc:cb:67:2c:d0:ee:1c:db:34:42:f7:72:13:59:81:ac: cd:b7:1d:5a:2d:20:66:b7:6d:32:fd:5f:be:7f:ff:59:15:79: 5c:f8:7f:5e:43:be:32:7d:1a:87:d8:87:32:d4:e5:ca:98:1b: a2:78:01:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUObwm1uzfjvgoZZp/AR8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUwODIzMDAwMDA5WhcNMjUwODI0MDAwMDA5WjAzMTEwLwYDVQQD Eyg1YzEyM2NmNTU2Mzg4MDQ3NmQzY2UyOTRhOTc4NWRiMGQzZTMyMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jDeiV+jCDjeleWp8AMWCmtZzLwA v/7mdcD03qIwuJ0u+U384PMK9Eg2tkaA2SXsh0P+9G5NYultaTxbHSXOndhSLjud 8M2TXKilUfRRqRYLOFKSrcRziCOlowYY4PXliZezW05xQKowA+79/sfIWhyQeBIZ CVuhMm1reg9Jhx+EFIsJhOSJ19QgqNqG82ctEzDzw7wLBD4GABNDANRNUJyC0sHf kqe56ALy49n8KGkZBFAyo7vAieB3PKwueATcb0ss0HwDcVcoCFLiSdxt7pa31HBS oQqag5jlbyBSZuN6KGdtd79sn3X/abNH3DDiz85vvZY3ZEs0/S+KmeqyCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwSPPVWOIBHbTzilKl4XbDT4yIWMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOioI1amM zOysiDQb08Yql3Gksm6K0kY5DuSJ2PpgLivd/p6Xw6cP3VRYi/4I8BQYE0Y0UKsr 2LaLuseCrvYmB8quZSW2sOaHx++D4o5JiUEQs1ft6u4FG5EYomITD+h+1su+CdbA jaOkjFw+oAydcR+CtHgz+b5afdTLTVKUPVNiW6X+6xcdyzJS8/zSWODE1d0/YCd4 Mz5mDk+piiyWh29T/FH11D/xbtwWy3B127vNLhGGzptw/OKkvrsqQLS3bG9GJWRF KLzMy2cs0O4c2zRC93ITWYGszbcdWi0gZrdtMv1fvn//WRV5XPh/XkO+Mn0ah9iH MtTlypgbongBJA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:40:00 2025 by rpki-client