$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: 3HW1tu49/3AWAkHBcnEaXsPrUmQGKTSOniFb+9I0eoc= Subject key identifier: A9:C6:16:59:40:3E:E0:17:81:6B:04:05:4A:CC:25:12:76:68:63:AC Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 0199FD348D570116F862D5461F14E6AEBB62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 14D9 Signing time: Sun 19 Oct 2025 16:01:43 +0000 Manifest this update: Sun 19 Oct 2025 16:01:43 +0000 Manifest next update: Mon 20 Oct 2025 16:01:43 +0000 Files and hashes: 1: 5CtTVuQK4Mz0CfCCtM3PbDI1J_A.roa (hash: R54vCclWQ5py1ZVSUREg6/3SsE2Ni7OmnOX0ovimS28=) 2: 8UiaGcKZZcSvThOWGtPXFC0GbP0.roa (hash: QmbEbgGGf7PLuQ8N6Zth9LOKK9P++mzuGI0guAVkPhw=) 3: 9tqxD372UOGf-zL9Og3dZI-GB_E.roa (hash: 1BflUu83I4Fz3YB6j1fHXKTleEcGx3LVxi458xNGCuo=) 4: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 5: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 6: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=) 7: HN-sxkXhsPARhEyjcxF2VA5ULns.roa (hash: XKKXt3nQtVRf5U2SzwHGZlsTijL5Olvfsj7LyZpSgu0=) 8: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 9: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: PrjAJ0w3KqwgxrpIj2Wr8kiT7TDxAWtLm1NeqJkgWUk=) 10: M8bMB2QKSM425kLjRVO2Mv1OLJ0.roa (hash: p7RpCCMMldWNLmjHFuK8nMdCoRWEH97iMYohSON6X1g=) 11: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 12: MfgxEOGAfVTGEvhRZTV_fR1-qXk.roa (hash: k0aQBEKvm4oillc+UIihjgdIum6WVpAkoV036ebhwvc=) 13: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 14: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=) 15: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 16: S5Vx_PwhrUdn6uSPv9B8Pl8fWZ4.roa (hash: XmpSvZLR/cpO3PqSr4aJClVLTWeNmz7xYTDZX7wuFYc=) 17: XdU9ba_H8wvW9YWGekfY-RC6fac.roa (hash: t+t6oWtjjjeUHSoz5gNWccz0VBGlDxWsh2LU4cszm7w=) 18: Xl4qy1Ar5fj8HWfzQeqmdQCXJTo.roa (hash: kyWMPa6QWFz1hTwjuHwt3MREoZfxCYT9GNVy2jSQZZM=) 19: _Ua05IcZ-Kd74uu-acz3zYQ2UXg.roa (hash: VTikAPXKyS/i+ZZ35PgUSzUblUTlMqZmtelGl4Mi2wc=) 20: bZv3S6SjMHuATa5GhC0St5hSsfU.roa (hash: v5Z9NLPnQ7ljIuVsTKQar4zGJUJdgJ7qXeQXJqaqbtI=) 21: bzzTA149jxH2aAs1Hmk0Ldjl1ks.roa (hash: bGv5aLr8TUtk+IAQZ7NNfU+YAcCIl809hdZK242FBfM=) 22: cOWXDby_VAjDBm-QNXyxFV15NYc.roa (hash: d23wa4ZI6ixe2JTopJ8C5Bi1Ca40n6+Q2pIZccoLoNY=) 23: dEipwsI3eN1As0rWuDbWNnqMvTw.roa (hash: +biJe511JtIv65zZKrLUqAD9MG0u+pcvdynZY6XvZoc=) 24: dSiGJnnvpCQoVjLVzMMP9D5h62U.roa (hash: oZzNodfwK7HG6DxcciY7b+7mwyKWd/1xM4QRfRXlG3c=) 25: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=) 26: fFIiPcIZQx033jSV6p41eBFER7E.roa (hash: qhzye0ysaR3MnkAhIOM63hxvVgvo8rQw3JHNBHBliIQ=) 27: fYh96DEUprSlV21wSMnuWBCSwx0.roa (hash: v06BAbDyEGINC47vf0TbEA82PuMPVQcWMD/+BPJ4cCg=) 28: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 29: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 30: uNJMLJU1OW9vcIqjiQSUIVSCjgc.roa (hash: HOHu6WW/4np2LUQoidC7DHY+Djbp+WHZl3/vUb3ayiQ=) 31: wgXSVyqMPOaVRZoRz2DoQs27lno.roa (hash: 5JI0l9I/46gau6VOxIi0gUhDeXleGfmQ+fS0p1j3UPM=) 32: xtO8K8gU2NuYRw1_GbpdGRd3zhQ.roa (hash: 6xBBsXMne/V0DNK57hL+vR0I99KZ2fP45EMjpBaEGFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:8d:57:01:16:f8:62:d5:46:1f:14:e6:ae:bb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Oct 19 16:01:43 2025 GMT Not After : Oct 20 16:01:43 2025 GMT Subject: CN=a9c61659403ee017816b04054acc2512766863ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:f3:60:67:e5:a0:41:22:f0:f4:2f:df:2f: 0a:0e:c8:db:e5:d0:43:0f:6f:3b:72:7c:1a:6e:11: ca:33:bf:3e:08:56:45:67:69:63:ba:cb:97:ee:d7: d0:58:1c:ad:9c:03:75:dc:af:c3:20:d6:6d:e6:be: 20:6b:2e:35:17:0f:a1:6b:a1:ca:41:a7:d8:2a:a0: 80:14:1a:48:e3:0f:83:b2:89:54:50:7e:87:45:cc: 74:0e:60:f8:1b:0c:bb:d6:79:1c:70:f5:9e:d0:be: 95:42:88:98:26:23:78:35:2f:0b:ae:5e:f2:e8:88: 69:3f:be:4c:22:7c:f9:9c:18:b3:c8:88:92:f9:7b: 16:79:db:e2:e0:2a:99:d7:53:59:0d:b0:60:a3:52: cb:d8:11:d2:fe:b1:b7:7f:03:9b:f3:e7:2f:64:42: 1b:db:8c:6f:d8:ad:0c:14:8b:8d:de:b1:8c:13:88: 8f:31:8d:19:09:35:b7:89:7b:62:1f:08:86:60:1c: 7b:73:e8:01:f4:d2:f2:51:49:23:10:c2:7e:9f:16: 24:90:00:8d:fd:70:c8:f9:e6:03:0e:50:2f:89:63: 12:7e:73:68:98:fd:fd:2e:c4:d6:c0:2f:be:58:a1: 5b:cd:b3:45:8a:09:20:59:83:cc:3e:2a:23:b2:cb: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C6:16:59:40:3E:E0:17:81:6B:04:05:4A:CC:25:12:76:68:63:AC X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:92:8d:27:be:99:dc:e2:5d:e5:f4:9a:fe:90:d4:ff:6e:ea: 1f:dc:df:47:24:1c:ba:3b:5b:07:0e:1e:0b:15:bc:b7:92:f5: 66:c2:75:60:24:ad:3a:79:88:5a:22:64:04:dd:81:90:e9:ad: 87:7e:2c:02:4a:fa:ca:4d:3d:23:c9:eb:ce:6f:75:a8:e6:27: b3:35:c3:7c:9c:27:77:47:5a:b8:65:ea:7a:cf:d8:ce:fa:cb: f5:79:00:f0:95:dd:ae:df:c0:d9:76:05:f4:1a:61:03:35:e0: 94:f5:e2:35:a8:1c:f7:6c:0e:a2:98:bd:fe:41:73:a7:25:03: a8:7e:b4:35:dc:34:3b:3d:43:7b:d9:e5:d3:b0:6f:f2:39:91: ec:f6:d8:63:96:9f:a2:36:ff:4f:9c:67:41:0f:b6:18:4d:ce: db:1f:ed:33:83:93:ae:5e:85:7e:2a:48:ac:fb:59:86:ea:90: 52:33:31:98:e1:86:a0:48:a4:24:57:ae:c8:d6:19:73:52:37: 31:d3:43:a4:da:63:c8:2b:5a:0e:85:60:96:63:96:e7:91:8c: be:13:ef:b9:83:82:db:c5:ed:c3:ba:05:54:d8:3a:ae:c9:24: ff:c2:77:f7:ee:8d:1b:7e:1b:0a:df:05:12:a4:37:3d:63:a7: cb:5b:b3:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NI1XARb4YtVGHxTmrrtiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMDE5MTYwMTQzWhcNMjUxMDIwMTYwMTQzWjAzMTEwLwYDVQQD EyhhOWM2MTY1OTQwM2VlMDE3ODE2YjA0MDU0YWNjMjUxMjc2Njg2M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QPzYGfloEEi8PQv3y8KDsjb5dBD D287cnwabhHKM78+CFZFZ2ljusuX7tfQWBytnAN13K/DINZt5r4gay41Fw+ha6HK QafYKqCAFBpI4w+DsolUUH6HRcx0DmD4Gwy71nkccPWe0L6VQoiYJiN4NS8Lrl7y 6IhpP75MInz5nBizyIiS+XsWedvi4CqZ11NZDbBgo1LL2BHS/rG3fwOb8+cvZEIb 24xv2K0MFIuN3rGME4iPMY0ZCTW3iXtiHwiGYBx7c+gB9NLyUUkjEMJ+nxYkkACN /XDI+eYDDlAviWMSfnNomP39LsTWwC++WKFbzbNFigkgWYPMPiojssvUcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnGFllAPuAXgWsEBUrMJRJ2aGOsMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5KNJ76Z 3OJd5fSa/pDU/27qH9zfRyQcujtbBw4eCxW8t5L1ZsJ1YCStOnmIWiJkBN2BkOmt h34sAkr6yk09I8nrzm91qOYnszXDfJwnd0dauGXqes/YzvrL9XkA8JXdrt/A2XYF 9BphAzXglPXiNagc92wOopi9/kFzpyUDqH60Ndw0Oz1De9nl07Bv8jmR7PbYY5af ojb/T5xnQQ+2GE3O2x/tM4OTrl6FfipIrPtZhuqQUjMxmOGGoEikJFeuyNYZc1I3 MdNDpNpjyCtaDoVglmOW55GMvhPvuYOC28Xtw7oFVNg6rskk/8J39+6NG34bCt8F EqQ3PWOny1uznw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:50:04 2025 by rpki-client