$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: YJMf8o8c7yYTPUPimEH8tylh0usLQ9IQY6KmhuvMSgU= Subject key identifier: C0:4A:71:7D:58:51:BE:CC:82:6D:DD:22:C6:93:C6:3C:31:E7:87:67 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 0199FC8F9A2CE7F1F53E303D5B16D405FDA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 0690 Signing time: Sun 19 Oct 2025 13:01:33 +0000 Manifest this update: Sun 19 Oct 2025 13:01:33 +0000 Manifest next update: Mon 20 Oct 2025 13:01:33 +0000 Files and hashes: 1: 1-d_4NnGRWiLNxMtEHTI7liKr9UI.roa (hash: CvRaWUsgFRo0d4EaYRA4VrTo+xf/BVknD8qlBjzpT68=) 2: 7m4lOeQqYBEB4ZtdqaGC1ntIwzU.roa (hash: sfdA24wwXEgvg9PIxS/Vj9fLKs9tr5CuykJHD/1DKt0=) 3: 7sxmOy-0rAzIdMxxHjWAxKzl7IM.roa (hash: KA9edUubvYsZNpiT8V1e3qBkWy1Wm8VmX9dSsY6ejss=) 4: 9Q38Q7e7w7x-E5d_pC0yM2_jAJI.roa (hash: DJb5zZemEvlA9nZv0Fj8KOH1873t3PxvR0XGA4DUmug=) 5: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 6: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: NoVTq6eEImR5uxMTU3f6C+tHwr0mnjLkgKAP71lOw5k=) 7: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 8: Pno1SFxbk0xVeOW-JPd8JX-O0mk.roa (hash: fmuEF5lkwyellcCtxWvoihI9gke5w70i2mKnnNxM4gQ=) 9: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 10: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 11: cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa (hash: Xi+GnpcIV9drKvTmQHNYIPB6evWNG3aHkh9CmwgJtg0=) 12: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 13: nE0OXgliNp8A4G7VVUGWDEbIapM.roa (hash: blapwLKKxbaTSgMI1djgGdf4v6BK9yYSBx7kV8mmmio=) 14: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 15: w-kia0Dcl-D0S1cF7F9c-RlG748.roa (hash: TI6//HLATO/7mdIMcI1NIKH9FQsgJWUg8coUzNZcuE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:9a:2c:e7:f1:f5:3e:30:3d:5b:16:d4:05:fd:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Oct 19 13:01:33 2025 GMT Not After : Oct 20 13:01:33 2025 GMT Subject: CN=c04a717d5851becc826ddd22c693c63c31e78767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:97:89:01:d6:9d:65:9f:b8:ca:0a:14:9d: 71:b8:fd:fc:08:81:4e:73:5d:39:3e:5e:94:8d:ac: 2d:a8:b4:af:73:0c:25:ba:c9:59:6f:1c:6d:4e:d5: e1:68:53:07:d3:a9:d7:d5:6a:ac:2e:92:3f:b4:2a: 08:34:da:d9:b4:c4:df:14:94:cb:ad:83:6b:cc:f8: 78:f4:4a:86:13:a6:ba:05:5d:82:cb:c3:d1:c2:dd: 34:de:2b:46:e2:76:4b:a4:19:86:82:ac:f6:65:bf: 98:d7:ed:fd:04:67:21:dd:6a:d3:42:38:ad:03:05: b1:62:7b:80:86:9b:b6:d9:34:36:aa:bf:d7:8a:dd: 83:04:3d:2f:c5:20:d5:96:7a:de:07:c9:07:73:22: 12:06:e1:9a:0a:8c:d9:3b:50:cc:17:73:99:a1:d2: ce:db:dd:b1:15:67:94:a6:7d:4f:67:4f:c2:df:ee: ed:e3:16:b2:43:00:cf:97:71:9c:5e:09:e1:13:19: ae:03:c3:e6:20:fb:2d:6d:21:80:80:1d:02:94:cb: 00:89:4b:4e:d1:a2:1a:cc:ed:df:50:5e:5a:5e:92: 44:b8:ba:42:b6:70:ae:bd:39:d6:6f:75:41:c9:d9: 24:3c:5c:a2:68:d6:c0:3a:33:4c:05:e1:d2:04:b1: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4A:71:7D:58:51:BE:CC:82:6D:DD:22:C6:93:C6:3C:31:E7:87:67 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b2:29:24:08:db:96:be:36:e9:70:48:48:f5:93:c3:c5:51: d3:72:84:63:4e:e8:5b:83:82:85:7f:3a:e1:49:4e:8c:cd:14: 11:f7:84:f9:2e:aa:02:1f:ee:41:e8:80:71:72:cc:32:e7:8c: c5:d6:0f:b6:f1:5e:b3:59:a7:e9:62:67:30:9f:8d:d5:b2:0b: 2c:07:6e:d0:68:e3:6b:52:96:45:1a:e2:4b:4e:86:37:56:c0: 44:01:2e:ef:af:d4:f4:bc:37:a1:34:24:f2:71:6c:f9:4f:21: ef:11:75:ae:e3:3e:2a:e0:6e:ff:7d:b1:45:14:84:0d:a1:f3: 29:5e:e0:37:b0:46:e1:1b:ad:26:25:e4:79:ef:c6:6b:15:ce: fd:ea:70:f3:43:16:19:bc:7c:27:47:10:bd:8d:e7:bf:dc:ea: 42:92:19:7b:05:10:74:ac:60:a0:81:b7:b7:8d:ab:30:fb:4f: a8:40:06:dc:9e:20:ee:32:eb:9d:c6:5f:16:b8:53:4f:0e:3d: ab:9b:3a:92:64:d3:18:3d:33:b5:a8:10:d3:ec:f3:f5:c1:db: 80:c8:5b:f5:b7:e1:36:6f:25:90:76:48:1c:28:86:35:03:5a: 81:77:54:2d:0d:84:30:56:2d:b4:50:e8:3a:f0:21:74:92:46: 47:9b:4e:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j5os5/H1PjA9WxbUBf2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUxMDE5MTMwMTMzWhcNMjUxMDIwMTMwMTMzWjAzMTEwLwYDVQQD EyhjMDRhNzE3ZDU4NTFiZWNjODI2ZGRkMjJjNjkzYzYzYzMxZTc4NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDWXiQHWnWWfuMoKFJ1xuP38CIFO c105Pl6UjawtqLSvcwwluslZbxxtTtXhaFMH06nX1WqsLpI/tCoINNrZtMTfFJTL rYNrzPh49EqGE6a6BV2Cy8PRwt003itG4nZLpBmGgqz2Zb+Y1+39BGch3WrTQjit AwWxYnuAhpu22TQ2qr/Xit2DBD0vxSDVlnreB8kHcyISBuGaCozZO1DMF3OZodLO 292xFWeUpn1PZ0/C3+7t4xayQwDPl3GcXgnhExmuA8PmIPstbSGAgB0ClMsAiUtO 0aIazO3fUF5aXpJEuLpCtnCuvTnWb3VBydkkPFyiaNbAOjNMBeHSBLHpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBKcX1YUb7Mgm3dIsaTxjwx54dnMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7IpJAjb lr426XBISPWTw8VR03KEY07oW4OChX864UlOjM0UEfeE+S6qAh/uQeiAcXLMMueM xdYPtvFes1mn6WJnMJ+N1bILLAdu0Gjja1KWRRriS06GN1bARAEu76/U9Lw3oTQk 8nFs+U8h7xF1ruM+KuBu/32xRRSEDaHzKV7gN7BG4RutJiXkee/GaxXO/epw80MW Gbx8J0cQvY3nv9zqQpIZewUQdKxgoIG3t42rMPtPqEAG3J4g7jLrncZfFrhTTw49 q5s6kmTTGD0ztagQ0+zz9cHbgMhb9bfhNm8lkHZIHCiGNQNagXdULQ2EMFYttFDo OvAhdJJGR5tOVg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:06:21 2025 by rpki-client