$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: 0i45YqbQqwTDBop+IUxlj2d+G6uMwmNmctC7ABgW2Po= Subject key identifier: 4A:6E:23:5D:10:4F:98:00:83:D3:23:B5:C8:4C:44:57:15:DF:0A:85 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 0198D6297F45BEBA813FA24F09E4DFEED79D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 05F6 Signing time: Sat 23 Aug 2025 09:01:40 +0000 Manifest this update: Sat 23 Aug 2025 09:01:40 +0000 Manifest next update: Sun 24 Aug 2025 09:01:40 +0000 Files and hashes: 1: 1-d_4NnGRWiLNxMtEHTI7liKr9UI.roa (hash: CvRaWUsgFRo0d4EaYRA4VrTo+xf/BVknD8qlBjzpT68=) 2: 7sxmOy-0rAzIdMxxHjWAxKzl7IM.roa (hash: KA9edUubvYsZNpiT8V1e3qBkWy1Wm8VmX9dSsY6ejss=) 3: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 4: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: zwgaHhNGBv23B2hIordJAxtixmKMsEWhzne0sAwOeG8=) 5: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 6: Pno1SFxbk0xVeOW-JPd8JX-O0mk.roa (hash: fmuEF5lkwyellcCtxWvoihI9gke5w70i2mKnnNxM4gQ=) 7: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 8: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 9: Y71aZPizitb8cfC2jQM8qboeRHE.roa (hash: 2RW7c5X7XS6+cJR57RbMmRPTtinCPQxC9w+xZJdyHfw=) 10: cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa (hash: Xi+GnpcIV9drKvTmQHNYIPB6evWNG3aHkh9CmwgJtg0=) 11: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 12: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 13: w-kia0Dcl-D0S1cF7F9c-RlG748.roa (hash: TI6//HLATO/7mdIMcI1NIKH9FQsgJWUg8coUzNZcuE0=) 14: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:7f:45:be:ba:81:3f:a2:4f:09:e4:df:ee:d7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Aug 23 09:01:40 2025 GMT Not After : Aug 24 09:01:40 2025 GMT Subject: CN=4a6e235d104f980083d323b5c84c445715df0a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:10:2a:df:32:47:c2:52:76:dc:e7:22:50: fc:b7:80:d6:fc:5b:3c:ab:72:15:41:68:98:32:78: f2:74:2b:26:68:fd:74:cc:e6:10:87:b8:1e:75:96: fa:69:cf:5e:0d:ef:f9:90:01:20:55:75:da:9c:52: 52:23:b4:2e:00:70:f4:b7:b5:b6:ab:1c:ab:dc:d0: 0b:76:0b:1e:40:84:93:0a:e4:3a:46:4c:02:fa:2f: 95:78:3a:75:0d:e4:71:6d:ab:f8:3f:03:59:97:d2: 28:e3:cf:4a:ac:c6:3c:9f:1b:54:80:ae:a7:7b:91: f5:b1:06:aa:05:62:56:b6:e3:1a:db:a6:06:67:8a: c2:58:9c:6c:08:be:70:f4:5d:25:ab:8c:31:a0:db: 18:63:4e:7c:4c:cb:bf:3b:80:35:4e:0f:5a:9f:88: fb:3a:ed:0c:81:44:91:20:03:7b:d8:ce:14:c1:6b: a1:ff:1c:77:15:45:80:03:37:bc:03:d5:f6:1d:9f: c5:06:8c:cf:12:f7:cc:7e:1a:2b:bf:99:57:a0:1b: e9:04:03:49:2b:38:ce:75:c4:c1:ec:af:b2:45:14: 70:50:7b:eb:49:23:2b:35:ad:2d:39:3d:81:35:56: f3:39:69:bd:3a:23:7d:ad:f6:ac:ff:ad:e0:44:5b: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6E:23:5D:10:4F:98:00:83:D3:23:B5:C8:4C:44:57:15:DF:0A:85 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:63:0f:55:4b:7b:7a:4b:cb:ad:6b:d1:8f:ae:ba:39:f0:a8: 18:81:f7:f2:01:e6:6e:7e:a6:de:11:b1:6b:4d:c6:40:86:ef: a8:5e:d3:07:27:2c:65:7e:3a:f6:0d:21:7b:57:71:ae:ae:e6: fc:22:fe:36:67:5c:b8:48:84:aa:69:4c:dc:40:cf:4a:bc:07: bf:8a:0d:29:88:ac:f9:e0:e6:68:38:20:ed:07:e9:4e:8f:e2: 9e:bc:1c:11:11:fb:82:9f:49:3f:7a:7b:b0:e4:8c:16:ab:4e: bb:9a:06:7e:14:50:f4:70:04:f8:e0:a9:e2:70:36:77:a7:90: eb:4a:07:69:b0:fb:e3:99:d2:05:01:12:09:a8:4a:64:13:98: 5b:63:34:ea:cb:ec:64:60:d0:b1:c6:0b:99:9e:b1:25:c7:e2: cc:e3:30:32:21:4a:36:08:64:27:dc:a1:f5:5c:e9:c4:0e:dc: 3c:3f:65:88:25:34:00:94:31:75:17:08:d2:79:c4:71:34:c4: 48:33:15:b8:e4:f6:2a:ce:17:1f:30:f2:29:fc:d2:d6:4f:0e: 6f:6f:91:4e:f2:65:f2:79:15:22:fd:a8:5c:ee:b4:ba:76:ed: e7:5e:3c:e5:b9:d3:1a:24:9b:05:dd:ad:f8:41:a0:3d:30:00: a6:1d:ac:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKX9FvrqBP6JPCeTf7tedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUwODIzMDkwMTQwWhcNMjUwODI0MDkwMTQwWjAzMTEwLwYDVQQD Eyg0YTZlMjM1ZDEwNGY5ODAwODNkMzIzYjVjODRjNDQ1NzE1ZGYwYTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAYQKt8yR8JSdtznIlD8t4DW/Fs8 q3IVQWiYMnjydCsmaP10zOYQh7gedZb6ac9eDe/5kAEgVXXanFJSI7QuAHD0t7W2 qxyr3NALdgseQISTCuQ6RkwC+i+VeDp1DeRxbav4PwNZl9Io489KrMY8nxtUgK6n e5H1sQaqBWJWtuMa26YGZ4rCWJxsCL5w9F0lq4wxoNsYY058TMu/O4A1Tg9an4j7 Ou0MgUSRIAN72M4UwWuh/xx3FUWAAze8A9X2HZ/FBozPEvfMfhorv5lXoBvpBANJ KzjOdcTB7K+yRRRwUHvrSSMrNa0tOT2BNVbzOWm9OiN9rfas/63gRFvOmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpuI10QT5gAg9MjtchMRFcV3wqFMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2MPVUt7 ekvLrWvRj666OfCoGIH38gHmbn6m3hGxa03GQIbvqF7TBycsZX469g0he1dxrq7m /CL+NmdcuEiEqmlM3EDPSrwHv4oNKYis+eDmaDgg7QfpTo/inrwcERH7gp9JP3p7 sOSMFqtOu5oGfhRQ9HAE+OCp4nA2d6eQ60oHabD745nSBQESCahKZBOYW2M06svs ZGDQscYLmZ6xJcfizOMwMiFKNghkJ9yh9VzpxA7cPD9liCU0AJQxdRcI0nnEcTTE SDMVuOT2Ks4XHzDyKfzS1k8Ob2+RTvJl8nkVIv2oXO60unbt51485bnTGiSbBd2t +EGgPTAAph2sNQ== -----END CERTIFICATE-----Generated at Sat Aug 23 15:29:52 2025 by rpki-client