$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft File: KWWTt0fnalZJJRG7NhLk1eTL5-w.mft (raw, json) Hash identifier: 45CsyJ+k7TVW/LSEVAPL7D5UQCu9ez/MNfi0CEtDTVc= Subject key identifier: 51:A6:1C:12:8A:E8:B1:DC:F0:19:D1:EA:9E:A4:CD:CC:21:26:00:F2 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 0198D773D8F3982D860EEC5C67C401135229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft Manifest number: 16AC Signing time: Sat 23 Aug 2025 15:02:29 +0000 Manifest this update: Sat 23 Aug 2025 15:02:29 +0000 Manifest next update: Sun 24 Aug 2025 15:02:29 +0000 Files and hashes: 1: 1Dk1x9YSG3BVVIbM2O2ifNME7O4.roa (hash: bxHAHEV4CTUi3kyjkeY9dH18wMJTnBz71aOw3+/p61U=) 2: 5b3w5WcrIXEeKH5XOut46ipTc4w.roa (hash: wSQolPimhjlX9rU+wv9xFVShzU/9tCapeIVqocnoaew=) 3: 7WjSgMc07SzfT635zdA34HJuKpY.roa (hash: gHF3rjtW1hun8ETR5As505HwZP4tO+oLSUOaSw28d9o=) 4: 9DHBflpO2zTq-ZsTYT_i7dxcY_g.roa (hash: YT2WyJ5x+F2bOi2viPVWXtqAfg5t81Bc82ekuwDxgjA=) 5: AaMJOJAR_jVCVwMYDwYI3gmD9l0.roa (hash: /UEG6by7QHTYXkIm8jukBNGFEjjmQ4X5Tt6//4m1EmU=) 6: DPwZz44a0SIlqFLCKW0htkdMPoY.roa (hash: d9tgMhBVAbT22h5OLZMfkC+rJIvzIpXwzoTGPpF0N0Q=) 7: Dq1UZ8Za_KiC3ifwJmz4ToXjALA.roa (hash: u6c3kgWrQ3gKS4YbnxoWNnk9GqM2x4eQbdTW0OGphkk=) 8: KWWTt0fnalZJJRG7NhLk1eTL5-w.crl (hash: usJOegG/GtASan7+fgwYjYgFgc5bNK7Z2gaQvMS8wHU=) 9: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (hash: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=) 10: RqiGFoHKY_PvFOmHEK-QxYQhid8.roa (hash: 7Q9q0xcwl3LPjrjXkBmNiQj0PUW+2bCcKvQ2CphVsQc=) 11: Sc0ZcHdx0AbvbolBuMLmmkLg87Y.roa (hash: 3CX34XBdUEqZcEmT7f9t0G55z1zYTbnZZPkwKp6U/uM=) 12: SsU_hevSpCMxRICHNvRhGuqJl1M.roa (hash: 1JAmA6OyEuXd481Jl9UTpVGADh2xyB9dz46taIyZEKE=) 13: WDWdZiJlLEpQPDPG4KnU9lq-n8M.roa (hash: vIhTma8+lG8HgAIfqToXR0NbvqLMHJQtArmEHR9vby8=) 14: WtLdMvYpQzi0fGTL1Q3HQ_DReMY.roa (hash: j430VQypl4xdO0dg2dxgGLE5xR8YBPLi6F+UcN6kXHs=) 15: Zc32tz1ZjSWwVgQorA7lXMaw-xA.roa (hash: HRYYNy4880mDT+crSQhmT3WO1uhHjRCZk7D2GRyCL/w=) 16: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (hash: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=) 17: cVTxJTSeVUmK7pjAVpvnpKuV91M.roa (hash: vq2s7bgsT4XNUVmFsaLuYuUSK79St21lLAq5yACC0dY=) 18: dZb6LzJfL3-kdvJvsoHO1Cpbr_w.roa (hash: H0ViyocRuPlTKb8aGyWdc+7j4FH1LnXvTl2YYbV3uYY=) 19: fqLEL6poBmeg0u3l_HiFBte4OcU.roa (hash: NxCCTmysymeMyc9nVnc5AZBQpbSG/d/tDBkMWDvLXzI=) 20: h54YHi8hM94l9jsvTnRnFWWqS5o.roa (hash: NWwJ0KAawmMd6NhRf5A37uzrf8FPZhmnW7BDAKDpfw0=) 21: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (hash: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=) 22: l_4towjM6IXiQikoqm_Qaaqf6xE.roa (hash: 9m0yhaTrrYhKwESoJQxIhWXl3oVuIFFdoCKFpCN1x68=) 23: mkKJ3-jBO0RnuHX4p2gPe1LiAO0.roa (hash: YsOcjwPDGcx62gouTiDvY21jEpeo8cJ7ctCe2GexDO0=) 24: nFmg1ZbaugFoP4r46DmMM1bx6Dk.roa (hash: 8HuaUsP5wd4g7g+IHer22eSFYfBXdh5/suZjeTrgNVc=) 25: onG_yjL71KBjT6qb1tlriGXEPkI.roa (hash: p0uEFp4aWU/cii43fYdqNq07qdotCor+2MbAKHw7Hr8=) 26: uBvzEXm5VwGZwiUWFNWddxjZq1E.roa (hash: oD/A8OR3XYpgvQFrjXxLCPlCLhedXuhOhlVHK3hjzlw=) 27: uFOFjnpS5WfkiXWuANlN0J-QpVE.roa (hash: AOEC6tTe16mH/5zPTdMGyJX1tIhoZY/G4YVm3ABD8jI=) 28: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (hash: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=) 29: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (hash: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:73:d8:f3:98:2d:86:0e:ec:5c:67:c4:01:13:52:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Aug 23 15:02:29 2025 GMT Not After : Aug 24 15:02:29 2025 GMT Subject: CN=51a61c128ae8b1dcf019d1ea9ea4cdcc212600f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:1d:8a:65:f4:4d:9e:f9:4a:ac:58:08:d8: 09:4d:20:e2:ca:77:1c:dd:0f:6a:7e:14:af:a3:47: 9d:ff:dc:ee:78:05:b1:7e:d4:37:99:85:3c:01:ad: 3b:23:b5:f9:e1:15:1b:d6:cb:7b:42:49:a7:d7:f1: b1:78:32:14:04:b1:d9:23:4b:87:ed:a1:eb:e1:28: 1d:fd:6f:e9:72:13:00:25:a9:0d:79:85:1e:9c:9c: fc:3b:70:54:d3:b0:3e:f6:0b:af:91:ec:58:d7:4d: fa:d7:d9:3e:f3:6f:78:59:3e:e2:ce:7c:3c:3b:85: 91:e5:10:b5:46:1c:2e:f8:bc:69:52:e6:74:16:bc: c2:33:ee:fa:14:70:b1:f1:03:43:07:f2:cd:ea:8a: c7:fe:08:60:aa:82:6d:92:4e:f6:ba:ef:c2:75:e1: 8d:43:ff:e9:3b:73:f9:01:b1:4a:b9:a5:a5:fb:fa: cf:82:d6:bf:d3:fa:01:9f:36:6c:06:10:0c:42:d6: de:42:ba:18:cb:e5:a4:53:5d:d6:bd:10:23:f8:01: d6:9c:66:8a:c1:c6:34:8b:86:39:41:e3:96:46:ff: 81:01:2d:33:bf:46:97:a7:bd:7d:21:a9:45:41:60: 11:23:f0:70:8c:da:b7:b0:1a:5c:ea:7a:0b:00:9a: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A6:1C:12:8A:E8:B1:DC:F0:19:D1:EA:9E:A4:CD:CC:21:26:00:F2 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:66:be:05:1f:1a:c8:83:59:3a:71:0a:09:d7:cd:67:b9:24: 13:f6:97:af:3b:fe:c2:2c:e9:fb:0b:73:ba:6d:c6:a7:51:c1: bf:63:66:5a:2b:a6:5c:e1:5b:c7:9c:85:ad:41:9c:df:4f:5a: 03:08:df:ab:60:94:dd:18:df:54:d0:94:ff:74:4e:5b:5d:d5: 90:3a:7e:5e:f1:6e:1b:eb:2a:a4:2a:ba:af:f4:4d:98:72:0b: 45:cb:49:c5:55:fb:19:df:c4:59:f4:5a:f8:f2:20:83:48:7b: d2:86:c9:7f:ae:9c:70:2f:a7:53:11:47:eb:bb:d1:df:ea:b9: ad:7f:ba:34:f2:71:e4:33:40:a8:47:e1:19:1c:39:0f:ee:45: 3f:0e:1a:f5:6f:9e:c2:ff:66:39:4c:62:66:cb:3a:36:c1:00: f8:4d:06:7c:27:cd:b9:80:4a:78:3c:39:b1:24:1f:a4:e1:d3: 6b:bb:a5:8c:f7:bb:25:67:ac:0b:8c:e4:14:b9:dc:56:70:58: 16:53:4e:cf:87:e2:42:82:ad:25:49:90:b1:ac:2f:90:76:94: 24:0c:ea:44:6d:c7:6b:32:4f:50:2d:0e:6c:01:72:b0:74:b1: 67:92:d6:45:42:e1:03:06:a1:86:ce:f0:fd:00:bf:78:35:65: da:14:ba:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXc9jzmC2GDuxcZ8QBE1IpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjUwODIzMTUwMjI5WhcNMjUwODI0MTUwMjI5WjAzMTEwLwYDVQQD Eyg1MWE2MWMxMjhhZThiMWRjZjAxOWQxZWE5ZWE0Y2RjYzIxMjYwMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9UdimX0TZ75SqxYCNgJTSDiyncc 3Q9qfhSvo0ed/9zueAWxftQ3mYU8Aa07I7X54RUb1st7Qkmn1/GxeDIUBLHZI0uH 7aHr4Sgd/W/pchMAJakNeYUenJz8O3BU07A+9guvkexY103619k+8294WT7iznw8 O4WR5RC1Rhwu+LxpUuZ0FrzCM+76FHCx8QNDB/LN6orH/ghgqoJtkk72uu/CdeGN Q//pO3P5AbFKuaWl+/rPgta/0/oBnzZsBhAMQtbeQroYy+WkU13WvRAj+AHWnGaK wcY0i4Y5QeOWRv+BAS0zv0aXp719IalFQWARI/BwjNq3sBpc6noLAJpQ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGmHBKK6LHc8BnR6p6kzcwhJgDyMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACma+BR8a yINZOnEKCdfNZ7kkE/aXrzv+wizp+wtzum3Gp1HBv2NmWiumXOFbx5yFrUGc309a Awjfq2CU3RjfVNCU/3ROW13VkDp+XvFuG+sqpCq6r/RNmHILRctJxVX7Gd/EWfRa +PIgg0h70obJf66ccC+nUxFH67vR3+q5rX+6NPJx5DNAqEfhGRw5D+5FPw4a9W+e wv9mOUxiZss6NsEA+E0GfCfNuYBKeDw5sSQfpOHTa7uljPe7JWesC4zkFLncVnBY FlNOz4fiQoKtJUmQsawvkHaUJAzqRG3HazJPUC0ObAFysHSxZ5LWRULhAwahhs7w /QC/eDVl2hS61g== -----END CERTIFICATE-----Generated at Sun Aug 24 00:38:53 2025 by rpki-client