$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: UnjQh3Ki9IEUBCNZ3pO8u6rN4nYKZKo6P13+AO4EM3g= Subject key identifier: 3A:DC:3E:34:25:27:97:61:3E:AD:C3:16:FF:71:A9:55:6E:61:D0:D6 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 0197B8C5CBF9AA926AE30C40440D93BFCF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 1386 Signing time: Sat 28 Jun 2025 23:00:59 +0000 Manifest this update: Sat 28 Jun 2025 23:00:59 +0000 Manifest next update: Sun 29 Jun 2025 23:00:59 +0000 Files and hashes: 1: 3E9M_L1qni0gOm9o4JNThdl5mKU.roa (hash: 3QEnMAssy1tNKh1FvcPETtJzWZzXiuRM6bkNkokD5XE=) 2: 4k_ZuHYqDe_Het9axD5evRht3Lw.roa (hash: psQ9n7MA7JcZWMk3LmtdaKPiVMz8GYjL9qmt7ww6xH8=) 3: 7-WiWodRJs8Bs1mQK3Uza98WY7E.roa (hash: 85XLbymQWYall2AaXilmgAPdm2j1Q/Dv2TPBM+pEJdw=) 4: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 5: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 6: FqbcQiC4rQi46n3g99F_M1_Ys0A.roa (hash: OyV3G2Aag4lQbsbY7+qaGlD0xVR3rH5K5z5yPW9zjfE=) 7: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=) 8: GUuYC7cVlHvArBzfO7tfpAP5D60.roa (hash: MBqPwcxZe15O5TCcnQP4rabYZ863Bmk75b+fN9uibnE=) 9: IqfYIzlv9tSOLjBO29wjSPGgm9k.roa (hash: Ruia2gPByc9AoUath3+WUWMFKonyFU90I/aPuiikJtc=) 10: JugFLe6jENz0xFJw2G6fMpeVf-I.roa (hash: LY3Ikb4Kwnv22unGatoglkrWDxveEyc5iDX1fxnI/Kc=) 11: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 12: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: QcfFGh2tfxqq1vHHKh46Q7u+/RbupGHCyx4xbxYIYA4=) 13: M8bMB2QKSM425kLjRVO2Mv1OLJ0.roa (hash: p7RpCCMMldWNLmjHFuK8nMdCoRWEH97iMYohSON6X1g=) 14: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 15: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 16: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=) 17: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 18: bYVRCpfiYfuNTOtItmg2qSgXKww.roa (hash: A5c3DgIJi3QdlQD3NgkB4e1o2u7d4JwrE4GhSjzqcqA=) 19: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=) 20: emo1Q5S85kXcQiS_AOQnJpCv1Ks.roa (hash: nGThIK5KWgFiHgBYn4d6q1DvellcLqYIA1fpLkP2lwY=) 21: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 22: pniJJNnWhCfy3Bn0AhMHiTWAr6k.roa (hash: uHFIjcBGn6an09Ws8UMUg78JE8uxR/arjS4krwd5r7c=) 23: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 24: t7kFFxrGX7b_8JY79xsh7QWePnI.roa (hash: 3NaS6l21qtRZhafFxfFpDNUW1OP8TUGIeUDERM2ms5M=) 25: voV1pHSGjiHjmQ5rvvOxR7Je57c.roa (hash: vGBPYlDzvYjcVIBYHyOvwD8dXv9By2X73KVyoLfQW34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:c5:cb:f9:aa:92:6a:e3:0c:40:44:0d:93:bf:cf:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jun 28 23:00:59 2025 GMT Not After : Jun 29 23:00:59 2025 GMT Subject: CN=3adc3e34252797613eadc316ff71a9556e61d0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:dd:12:a5:7d:60:9a:f2:ba:e4:87:e6:ca: 7c:bc:34:8a:38:1c:f1:53:d6:51:bb:23:a6:a7:79: aa:09:bd:98:e0:a7:01:c3:99:c3:54:d2:e0:30:a2: db:55:4e:0f:f6:a6:e5:5e:b4:81:18:0a:2e:97:e4: 52:cc:28:5b:3b:85:2d:47:48:6c:3c:e4:3f:bc:29: 4a:b2:f6:02:dd:c8:b6:19:d5:90:3c:a5:75:be:80: 8b:fb:89:6d:1f:72:84:2e:d4:7d:a6:04:7e:d4:00: 4a:fb:6f:b4:53:e8:7d:51:99:8b:9f:99:60:50:e1: b3:32:c8:57:c7:8f:dc:76:c2:82:38:b8:ec:52:1f: 27:84:0a:bf:2b:e7:6f:dc:0a:f2:27:37:0a:b1:dd: 69:62:6d:71:eb:6b:05:cb:8b:70:54:5c:d5:a6:1a: 6a:f5:43:9a:56:53:5f:00:d3:aa:d5:85:97:ff:9a: 41:33:c6:7b:05:b1:bb:3a:56:c4:ac:3c:31:ec:24: f3:e4:ba:10:dc:e9:6f:9a:9b:54:89:14:84:6c:b0: 57:1a:62:42:1e:8b:04:0d:b7:36:9b:5e:b3:61:49: 4c:36:e9:74:2a:27:1f:56:93:5e:0f:3e:a5:2b:ea: f0:e9:d1:8c:50:8e:f5:40:e3:65:84:49:a2:15:67: 26:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DC:3E:34:25:27:97:61:3E:AD:C3:16:FF:71:A9:55:6E:61:D0:D6 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:21:73:2e:1f:2a:5e:dc:6a:d2:82:01:40:e7:2c:51:d0:d1: 72:f9:54:dd:03:c2:70:2c:0e:8a:d9:55:13:68:61:91:73:e5: 17:c3:91:51:9a:d3:c3:c5:a3:6c:7b:5c:a1:cb:1e:21:80:d2: 17:39:3b:42:f0:b3:2e:e9:9d:42:4d:fe:c8:a1:dc:e9:d1:f5: 99:b9:cb:fd:4c:70:29:7a:ea:af:b6:11:f9:a6:33:2f:48:19: 18:46:5a:26:92:06:a0:fd:41:98:c9:d5:20:5a:7f:d6:ba:21: 08:ff:26:2e:77:4d:fb:1f:17:a5:ca:0c:15:1b:8b:50:c1:8f: 2f:ae:85:9b:51:34:8c:0c:6a:cb:0a:10:6b:2d:1a:46:ae:3e: b1:35:58:01:68:7a:dc:3b:3c:6f:52:a6:9f:1b:cb:05:c1:b9: 37:35:b6:9d:9f:ca:cf:2e:81:4a:d8:e2:20:df:6c:a7:74:e9: 63:ca:34:1a:91:09:c7:a0:b2:1a:30:39:03:a9:23:87:b8:e0: 5c:da:ef:62:ed:3a:3c:1f:f7:35:0b:c6:7e:c9:aa:8d:f6:55: cd:f6:d3:f0:06:ec:92:5b:93:35:cc:86:67:9d:8b:9b:e8:8a: b0:52:b0:67:5a:d3:07:23:ae:19:e7:e1:64:0f:9c:cb:b6:3f: bb:38:f9:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4xcv5qpJq4wxARA2Tv89NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUwNjI4MjMwMDU5WhcNMjUwNjI5MjMwMDU5WjAzMTEwLwYDVQQD EygzYWRjM2UzNDI1Mjc5NzYxM2VhZGMzMTZmZjcxYTk1NTZlNjFkMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdHdEqV9YJryuuSH5sp8vDSKOBzx U9ZRuyOmp3mqCb2Y4KcBw5nDVNLgMKLbVU4P9qblXrSBGAoul+RSzChbO4UtR0hs POQ/vClKsvYC3ci2GdWQPKV1voCL+4ltH3KELtR9pgR+1ABK+2+0U+h9UZmLn5lg UOGzMshXx4/cdsKCOLjsUh8nhAq/K+dv3AryJzcKsd1pYm1x62sFy4twVFzVphpq 9UOaVlNfANOq1YWX/5pBM8Z7BbG7OlbErDwx7CTz5LoQ3OlvmptUiRSEbLBXGmJC HosEDbc2m16zYUlMNul0KicfVpNeDz6lK+rw6dGMUI71QONlhEmiFWcmSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrcPjQlJ5dhPq3DFv9xqVVuYdDWMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiFzLh8q Xtxq0oIBQOcsUdDRcvlU3QPCcCwOitlVE2hhkXPlF8ORUZrTw8WjbHtcocseIYDS Fzk7QvCzLumdQk3+yKHc6dH1mbnL/UxwKXrqr7YR+aYzL0gZGEZaJpIGoP1BmMnV IFp/1rohCP8mLndN+x8XpcoMFRuLUMGPL66Fm1E0jAxqywoQay0aRq4+sTVYAWh6 3Ds8b1KmnxvLBcG5NzW2nZ/Kzy6BStjiIN9sp3TpY8o0GpEJx6CyGjA5A6kjh7jg XNrvYu06PB/3NQvGfsmqjfZVzfbT8AbskluTNcyGZ52Lm+iKsFKwZ1rTByOuGefh ZA+cy7Y/uzj5yQ== -----END CERTIFICATE-----Generated at Sun Jun 29 04:08:19 2025 by rpki-client