$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: XWSDt/jGCLVWDdT+NAQoXUr9o3f3xOEuSV6YoOZ4Ft4= Subject key identifier: FE:E1:97:E3:10:74:F7:A1:38:6A:72:25:3A:FD:CE:B3:7A:B8:61:41 Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 0199FE7DC1C8D4485C64B2B9A3F785D05A9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 170C Signing time: Sun 19 Oct 2025 22:01:18 +0000 Manifest this update: Sun 19 Oct 2025 22:01:18 +0000 Manifest next update: Mon 20 Oct 2025 22:01:18 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 4: LSEzmCf-9pbHLodIwWO9dZ-9S4g.roa (hash: ylScjAYsZUas0Y33cFez+5LTZoSIJYAsPJd4C0C6L2Y=) 5: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 6: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=) 7: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: XnSpM9E8Jtv7Ov1fCLuU0oghxf0lqFw9r2o5c+NjSIE=) 9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 10: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:7d:c1:c8:d4:48:5c:64:b2:b9:a3:f7:85:d0:5a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Oct 19 22:01:18 2025 GMT Not After : Oct 20 22:01:18 2025 GMT Subject: CN=fee197e31074f7a1386a72253afdceb37ab86141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:80:a5:84:94:7a:83:9b:e4:67:6a:1c:1c: 7d:11:04:4a:5c:aa:64:53:0e:e8:3b:8e:1b:94:01: 3f:e7:1c:1d:1c:09:3e:77:63:66:4e:c1:07:06:d6: c2:e4:10:e4:61:6a:58:97:55:33:48:f0:07:d1:45: 9e:f2:13:59:96:c9:66:0d:20:10:9d:9a:fd:8b:aa: 11:3d:e9:2e:0f:97:9b:f4:d6:64:eb:b0:d7:46:aa: 51:eb:3f:5f:53:0c:07:f8:3b:e1:7b:a3:7b:bd:9a: c0:dd:1f:d6:02:f7:5c:5b:a1:27:16:31:14:41:2f: 47:c3:ae:92:bd:4e:8e:8e:07:62:bf:63:bc:e6:e3: 8b:8f:05:74:2d:b1:47:fa:4a:b1:19:ce:3a:ae:6b: 65:34:43:a7:b3:60:72:91:b4:b4:aa:0b:8f:24:4c: d0:c5:f6:81:f2:6f:9b:c0:6a:1c:9e:9f:b1:03:4f: cd:a5:a7:69:d7:fe:86:01:a0:dd:f0:d9:7a:00:a0: 10:f9:c3:8f:4a:8f:43:f5:75:a1:c0:cc:1f:32:95: 37:31:50:44:f7:c1:c2:5c:c2:73:3d:78:34:ae:8a: 13:c7:e2:36:5e:88:b5:63:12:e1:4e:80:ec:d3:54: f1:50:fc:ba:be:62:19:05:d7:c7:fb:6a:4a:f8:a5: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E1:97:E3:10:74:F7:A1:38:6A:72:25:3A:FD:CE:B3:7A:B8:61:41 X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:aa:2f:75:fd:8d:cc:3a:45:3f:ce:a7:a4:56:48:7c:2e:77: 05:63:32:50:f8:4b:29:f8:ad:6b:a3:e2:3f:46:1e:1d:59:75: 2a:0b:ed:e0:d4:f5:9e:fd:e4:e0:b4:4f:22:e6:93:e2:84:c0: ae:21:ca:8b:14:93:71:58:58:2c:8f:23:c3:1b:7d:21:61:15: 47:2d:47:d7:d9:08:9c:3c:e4:00:1b:9d:f7:c9:66:9e:0e:cd: d5:5d:4a:c4:19:0d:c0:1f:7e:e1:c3:6c:53:3b:81:9d:e7:66: a7:91:58:45:9d:9d:00:51:b2:5b:ec:58:60:21:4c:9a:c8:b4: 8e:8d:ec:80:27:ec:f6:4b:9f:f4:9b:38:e8:f4:44:b6:cf:45: 86:56:ba:b8:f8:46:a1:d3:ac:1e:99:72:3e:4f:c5:71:51:80: 6b:c1:a0:d5:70:82:1c:9d:8e:6f:fc:3e:76:bf:0c:91:ae:c1: 6b:66:02:ab:ab:f6:e0:38:82:25:90:0c:03:5a:7b:38:d8:96: f8:49:60:62:ab:6c:bc:dd:62:06:03:d8:cc:88:af:5e:7c:8b: 02:db:9b:34:7d:20:6e:c2:77:75:93:f8:3b:3f:44:f1:8f:d7: 69:ac:ee:eb:39:fb:57:1b:30:c9:5c:11:35:e4:c0:ff:31:72: 3a:b8:0c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+fcHI1EhcZLK5o/eF0FqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUxMDE5MjIwMTE4WhcNMjUxMDIwMjIwMTE4WjAzMTEwLwYDVQQD EyhmZWUxOTdlMzEwNzRmN2ExMzg2YTcyMjUzYWZkY2ViMzdhYjg2MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T6ApYSUeoOb5GdqHBx9EQRKXKpk Uw7oO44blAE/5xwdHAk+d2NmTsEHBtbC5BDkYWpYl1UzSPAH0UWe8hNZlslmDSAQ nZr9i6oRPekuD5eb9NZk67DXRqpR6z9fUwwH+Dvhe6N7vZrA3R/WAvdcW6EnFjEU QS9Hw66SvU6Ojgdiv2O85uOLjwV0LbFH+kqxGc46rmtlNEOns2BykbS0qguPJEzQ xfaB8m+bwGocnp+xA0/Npadp1/6GAaDd8Nl6AKAQ+cOPSo9D9XWhwMwfMpU3MVBE 98HCXMJzPXg0rooTx+I2Xoi1YxLhToDs01TxUPy6vmIZBdfH+2pK+KVCtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7hl+MQdPehOGpyJTr9zrN6uGFBMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKovdf2N zDpFP86npFZIfC53BWMyUPhLKfita6PiP0YeHVl1Kgvt4NT1nv3k4LRPIuaT4oTA riHKixSTcVhYLI8jwxt9IWEVRy1H19kInDzkABud98lmng7N1V1KxBkNwB9+4cNs UzuBnedmp5FYRZ2dAFGyW+xYYCFMmsi0jo3sgCfs9kuf9Js46PREts9Fhla6uPhG odOsHplyPk/FcVGAa8Gg1XCCHJ2Ob/w+dr8Mka7Ba2YCq6v24DiCJZAMA1p7ONiW +ElgYqtsvN1iBgPYzIivXnyLAtubNH0gbsJ3dZP4Oz9E8Y/Xaazu6zn7VxswyVwR NeTA/zFyOrgMdQ== -----END CERTIFICATE-----Generated at Mon Oct 20 00:18:04 2025 by rpki-client