$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json) Hash identifier: cjOKvvbMHYnuEkQV3z/nVnfE1KcFXfAjbJiYOV1W3BA= Subject key identifier: 05:DE:D6:18:49:73:DA:17:3B:5D:68:F1:5D:E6:B6:71:67:A5:38:0D Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Certificate serial: 0198D54E54A1BF09F0D3C4B7FE7639499898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft Manifest number: 1670 Signing time: Sat 23 Aug 2025 05:02:17 +0000 Manifest this update: Sat 23 Aug 2025 05:02:17 +0000 Manifest next update: Sun 24 Aug 2025 05:02:17 +0000 Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=) 2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=) 3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=) 4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=) 5: QdfhpKIKlcTR38yzLxH9RRvBSR4.roa (hash: mSy2XkhCALt/lyVqBnl0n7Yn6bh+lGsEurO+w0zuUdA=) 6: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=) 7: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=) 8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: drmkVzNoKnl4YzT0K6lt45emCTWumadu4MZ119sozhE=) 9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=) 10: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:54:a1:bf:09:f0:d3:c4:b7:fe:76:39:49:98:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055 Validity Not Before: Aug 23 05:02:17 2025 GMT Not After : Aug 24 05:02:17 2025 GMT Subject: CN=05ded6184973da173b5d68f15de6b67167a5380d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:28:e3:65:68:a1:6e:c5:d2:fc:2a:ef:90: 28:55:ba:2d:c0:1f:14:2f:2f:7c:1b:86:f5:ba:d0: 6c:9c:01:0f:b5:7c:76:06:6f:c9:dd:52:d9:b9:aa: 24:5d:11:b6:2d:34:85:56:17:dd:b0:eb:ed:d9:96: db:43:4d:96:8d:b7:f3:a9:76:7e:80:96:7c:d2:c7: ca:a5:4f:ea:e9:40:71:5d:f2:15:ce:5d:5d:7e:99: d3:66:7c:38:26:ae:48:71:26:cc:02:11:c8:19:b0: e1:d0:e1:db:ed:58:87:9e:02:7c:b8:42:c9:30:e1: 51:96:43:20:b6:7b:4b:4f:4b:f4:23:eb:1e:21:9a: 38:8c:35:03:89:2f:58:2d:df:8a:b1:47:bf:fe:ce: 6d:b0:74:9f:9d:0b:f2:45:5b:92:c2:5d:73:48:b7: 12:35:36:46:23:91:70:8c:c3:19:a7:8e:2d:88:80: 32:9f:ab:e4:c9:ab:9a:78:ea:d2:f0:92:65:2b:16: 8a:3b:0e:7c:d1:78:29:4d:c4:08:5c:67:bc:78:46: 8d:b8:88:5d:ee:76:16:5c:0a:10:1b:fe:65:51:72: ff:02:db:63:b9:9a:16:d2:7a:3c:fc:e4:b4:f8:da: 6f:10:63:42:75:d5:e7:87:a7:70:98:2f:bb:af:e9: 36:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:D6:18:49:73:DA:17:3B:5D:68:F1:5D:E6:B6:71:67:A5:38:0D X509v3 Authority Key Identifier: keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2d:7b:63:56:61:ac:8b:2a:08:df:bf:d8:c4:d4:19:1c:4a: 34:c6:b6:2a:4b:da:89:ea:54:05:ae:09:c6:3d:7f:98:fd:40: e4:a1:d6:ce:8c:16:26:89:ca:52:89:2d:cf:da:90:57:58:f3: c9:fa:a7:cc:bc:a4:45:30:d4:d3:b7:8f:31:1e:ce:80:bc:0b: 16:da:e2:65:ce:56:c0:83:d3:5a:8a:8a:9d:b4:98:f6:a1:be: 5c:fc:ef:7a:52:b0:fe:a5:bc:cb:d7:41:a3:86:0d:cc:a7:23: 7f:48:b5:89:a1:84:90:8a:d2:6e:64:ba:2e:5a:c6:13:68:27: 65:ca:ee:ff:a5:42:66:76:e0:14:de:71:78:ba:0b:2c:e4:59: 6d:20:7c:2c:04:c3:2d:14:cb:eb:cf:64:ad:4f:a4:57:b5:80: bc:98:d4:c8:b3:be:ae:c8:c1:b1:41:1d:13:24:c2:7b:5f:1f: 99:7a:c6:65:3f:81:3c:ea:ea:91:9a:9d:4a:c5:f8:2c:a3:02: e8:0d:9a:05:e1:8e:25:bd:5e:6a:f4:65:77:14:4d:1c:d3:4b: bf:30:4d:af:70:1f:60:a0:8b:46:39:7a:d2:66:fb:06:27:3d: d0:2b:04:52:53:db:e2:5d:28:ba:a1:35:a3:70:bc:17:96:41: 0d:40:3d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTlShvwnw08S3/nY5SZiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5 ZTUwNTUwHhcNMjUwODIzMDUwMjE3WhcNMjUwODI0MDUwMjE3WjAzMTEwLwYDVQQD EygwNWRlZDYxODQ5NzNkYTE3M2I1ZDY4ZjE1ZGU2YjY3MTY3YTUzODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPEo42VooW7F0vwq75AoVbotwB8U Ly98G4b1utBsnAEPtXx2Bm/J3VLZuaokXRG2LTSFVhfdsOvt2ZbbQ02WjbfzqXZ+ gJZ80sfKpU/q6UBxXfIVzl1dfpnTZnw4Jq5IcSbMAhHIGbDh0OHb7ViHngJ8uELJ MOFRlkMgtntLT0v0I+seIZo4jDUDiS9YLd+KsUe//s5tsHSfnQvyRVuSwl1zSLcS NTZGI5FwjMMZp44tiIAyn6vkyauaeOrS8JJlKxaKOw580XgpTcQIXGe8eEaNuIhd 7nYWXAoQG/5lUXL/AttjuZoW0no8/OS0+NpvEGNCddXnh6dwmC+7r+k2ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXe1hhJc9oXO11o8V3mtnFnpTgNMB8GA1UdIwQY MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt OTA5NmUxNjc0ZTIyLzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAny17Y1Zh rIsqCN+/2MTUGRxKNMa2KkvaiepUBa4Jxj1/mP1A5KHWzowWJonKUoktz9qQV1jz yfqnzLykRTDU07ePMR7OgLwLFtriZc5WwIPTWoqKnbSY9qG+XPzvelKw/qW8y9dB o4YNzKcjf0i1iaGEkIrSbmS6LlrGE2gnZcru/6VCZnbgFN5xeLoLLORZbSB8LATD LRTL689krU+kV7WAvJjUyLO+rsjBsUEdEyTCe18fmXrGZT+BPOrqkZqdSsX4LKMC 6A2aBeGOJb1eavRldxRNHNNLvzBNr3AfYKCLRjl60mb7Bic90CsEUlPb4l0ouqE1 o3C8F5ZBDUA9Fw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:41 2025 by rpki-client