$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: VKkSP+UB7pS1a2FCnZLjMbM0cj9hhjPObzxZShEEe2Y= Subject key identifier: 35:B8:53:A5:64:29:9C:DB:32:A1:C2:97:26:8A:F1:B5:6D:A0:BF:D7 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 0199FC58ED4836F793AF26AD263B86C26A38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 16F4 Signing time: Sun 19 Oct 2025 12:01:50 +0000 Manifest this update: Sun 19 Oct 2025 12:01:50 +0000 Manifest next update: Mon 20 Oct 2025 12:01:50 +0000 Files and hashes: 1: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (hash: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=) 2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=) 3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=) 4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=) 5: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=) 6: YaNSkilLvxLgKPrT-xDRiMn7jX4.roa (hash: EZ2qfgMp+bvQiHoGlwVv0eQJIbOoTlAjmgUR8kwZiCU=) 7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=) 8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=) 9: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (hash: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=) 10: jAY2gqsxgcne6CxwXuSfgMf4P5o.roa (hash: GE2OTsJpTeX1gwmggvr4Bc4mDirZkzPXPMqCMKxyOyI=) 11: k3qjfn2AAdeFPjY3Bp8KUgRaMPA.roa (hash: 4Ifjp85NogHztb45WtYR2OYxyvQl/OdGpjlDDi7JSNQ=) 12: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=) 13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: lz6fUP/eb2w0joa8EYABJsii6oVz6Q3AYWw3Sf7NXto=) 14: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=) 15: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=) 16: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=) 17: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=) 18: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=) 19: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=) 20: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:ed:48:36:f7:93:af:26:ad:26:3b:86:c2:6a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Oct 19 12:01:50 2025 GMT Not After : Oct 20 12:01:50 2025 GMT Subject: CN=35b853a564299cdb32a1c297268af1b56da0bfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:51:59:b5:bc:40:f7:1b:ba:a9:40:7c:0b: 73:72:a0:8a:8c:7e:e5:c9:e3:4c:6c:d1:a8:07:47: 0d:f5:78:15:ea:00:3d:03:99:ab:fc:ba:68:70:25: 28:89:b5:f1:ab:5c:89:bc:1d:da:85:ef:e6:12:d3: 20:bf:1f:8f:84:a7:93:d7:4f:f3:b2:59:db:34:90: bf:a6:96:c2:1c:3d:03:aa:ba:c8:2c:69:1c:74:5c: d2:6f:b8:57:12:a4:ea:e0:94:39:2a:03:16:ad:09: 25:78:61:42:e3:ee:5e:a1:83:ae:c0:62:6d:95:cc: 88:0c:98:d7:ed:6f:18:fc:4f:47:02:8a:f0:e3:f7: ea:10:67:30:cc:0d:93:19:c1:97:5a:93:4b:0f:c3: 5c:4e:f2:de:89:98:5f:4c:b2:fc:49:4f:51:f1:30: f6:c3:b0:da:b6:3f:e7:5a:d7:7d:91:36:fa:c6:40: 6f:f9:f8:ad:b9:61:fb:20:a4:cd:6c:be:86:a5:89: cd:50:be:b4:90:90:2a:b3:f8:06:6f:0a:d8:2c:ed: 8d:70:70:88:1e:ac:aa:e5:f1:ed:f9:82:75:67:33: 98:3d:3c:1f:18:85:87:90:d4:6d:ae:07:11:15:fd: eb:33:6b:17:fc:2f:3a:0d:38:8b:95:3a:0e:f6:54: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:53:A5:64:29:9C:DB:32:A1:C2:97:26:8A:F1:B5:6D:A0:BF:D7 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:f4:e9:8d:b3:3a:e8:3d:77:b8:9b:78:8d:00:7a:1d:ac:a6: c6:00:25:24:d2:15:c9:89:01:a9:d5:56:ca:88:69:80:b4:4e: 56:3a:47:4d:61:71:f4:5c:a8:c8:2d:58:ba:52:7b:5a:fc:5f: 6c:f7:25:5e:0e:e9:94:ac:3b:61:2b:d9:f3:69:2a:b9:59:b4: 5a:54:93:6c:6b:32:68:9d:98:f6:f3:ce:cb:d3:c9:b2:73:5d: 12:09:b5:20:a3:79:8c:e6:41:10:0a:5d:ed:58:14:da:d3:54: 44:ca:fe:3c:3d:c6:c1:ec:48:3f:70:29:df:a8:ae:c9:a5:66: 5d:1b:76:41:7b:ca:1b:0b:53:45:1e:be:58:e6:97:59:2e:c6: 91:2d:8f:31:5f:5d:7a:1b:8e:7e:98:0e:74:99:37:3c:23:21: 11:0d:62:f2:ec:1e:87:0b:1c:09:92:59:0d:3f:71:74:ca:cd: bc:af:b7:4d:69:c8:fb:8d:d9:ff:1c:16:9b:8d:4d:94:d9:ab: f8:9c:58:ef:44:45:e6:e6:64:b7:15:50:fa:26:14:a9:cc:52: 07:7c:91:5c:c4:8f:62:d0:a1:c3:a6:c1:05:3d:2b:33:19:0f: 11:f3:49:60:57:5a:1b:06:c3:38:e0:ef:9a:59:73:f9:e8:38: ab:2e:d7:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WO1INveTryatJjuGwmo4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjUxMDE5MTIwMTUwWhcNMjUxMDIwMTIwMTUwWjAzMTEwLwYDVQQD EygzNWI4NTNhNTY0Mjk5Y2RiMzJhMWMyOTcyNjhhZjFiNTZkYTBiZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstRRWbW8QPcbuqlAfAtzcqCKjH7l yeNMbNGoB0cN9XgV6gA9A5mr/LpocCUoibXxq1yJvB3ahe/mEtMgvx+PhKeT10/z slnbNJC/ppbCHD0DqrrILGkcdFzSb7hXEqTq4JQ5KgMWrQkleGFC4+5eoYOuwGJt lcyIDJjX7W8Y/E9HAorw4/fqEGcwzA2TGcGXWpNLD8NcTvLeiZhfTLL8SU9R8TD2 w7Datj/nWtd9kTb6xkBv+fituWH7IKTNbL6GpYnNUL60kJAqs/gGbwrYLO2NcHCI Hqyq5fHt+YJ1ZzOYPTwfGIWHkNRtrgcRFf3rM2sX/C86DTiLlToO9lRaRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW4U6VkKZzbMqHClyaK8bVtoL/XMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzvTpjbM6 6D13uJt4jQB6HaymxgAlJNIVyYkBqdVWyohpgLROVjpHTWFx9FyoyC1YulJ7Wvxf bPclXg7plKw7YSvZ82kquVm0WlSTbGsyaJ2Y9vPOy9PJsnNdEgm1IKN5jOZBEApd 7VgU2tNURMr+PD3GwexIP3Ap36iuyaVmXRt2QXvKGwtTRR6+WOaXWS7GkS2PMV9d ehuOfpgOdJk3PCMhEQ1i8uwehwscCZJZDT9xdMrNvK+3TWnI+43Z/xwWm41NlNmr +JxY70RF5uZktxVQ+iYUqcxSB3yRXMSPYtChw6bBBT0rMxkPEfNJYFdaGwbDOODv mllz+eg4qy7XIA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:19:12 2025 by rpki-client