$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft File: KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json) Hash identifier: t9yrd/Z52BRMnNeKWT5iaRqBIKtDK6lW6WHrVxMSv6U= Subject key identifier: 38:EF:5D:10:04:DB:D4:AC:D9:A1:38:9A:C2:4C:9D:A0:63:CC:FF:EF Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 0199FBEB55F94A8AB7CD4043FD40FD200C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft Manifest number: 1333 Signing time: Sun 19 Oct 2025 10:02:08 +0000 Manifest this update: Sun 19 Oct 2025 10:02:08 +0000 Manifest next update: Mon 20 Oct 2025 10:02:08 +0000 Files and hashes: 1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=) 2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=) 3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=) 4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=) 5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=) 6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: umHQpKfzEfktV4cBXUU/W8+b1MKNvZ3qB6UNI0KCVos=) 7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=) 8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=) 9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=) 10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:55:f9:4a:8a:b7:cd:40:43:fd:40:fd:20:0c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Oct 19 10:02:08 2025 GMT Not After : Oct 20 10:02:08 2025 GMT Subject: CN=38ef5d1004dbd4acd9a1389ac24c9da063ccffef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:88:31:85:df:2c:5d:fe:59:40:05:c9:f1: bb:ad:a0:ba:bd:6d:8a:4e:f5:87:b5:70:70:41:3e: 4f:4e:57:f2:c4:83:77:48:eb:e8:55:a4:59:e7:af: 3d:b5:51:5a:32:33:0b:61:e6:44:0d:d5:cd:cb:d5: fe:c3:2a:5f:b2:75:db:90:78:b9:98:ef:20:4c:9a: 47:11:fd:17:42:4d:be:ba:bd:1d:3a:18:67:88:31: 3b:12:6f:39:4b:fd:c4:9c:48:17:17:e5:2f:c4:a9: 88:7d:65:2c:11:7e:2c:4b:77:be:db:66:a3:b1:c5: 71:a7:92:c7:ec:d9:7a:b6:71:2b:3d:44:7a:ad:e0: 72:62:63:18:c2:5c:3a:a8:d3:32:a7:b9:a5:a4:0d: de:ca:2e:ad:f0:6e:b8:bb:e6:e7:e4:bb:b8:a1:ca: 59:c8:e6:64:b7:c8:e5:62:36:d8:ee:22:9e:6f:c5: 76:d9:f2:88:99:c0:50:78:98:0b:af:45:28:8b:47: 37:84:71:47:5a:21:5a:d7:70:4a:ec:fb:f8:2b:e2: 9d:2d:97:0a:51:7b:dc:ce:34:fa:19:b8:9d:0b:8b: f2:b0:0a:e0:c4:ac:3b:4f:0f:7e:05:d1:bb:d1:82: 2e:72:37:18:fd:59:d6:ac:2b:d7:b6:fa:b1:dd:c5: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EF:5D:10:04:DB:D4:AC:D9:A1:38:9A:C2:4C:9D:A0:63:CC:FF:EF X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0a:ff:1f:d2:2f:7d:17:7f:0b:91:b4:4d:1e:59:c1:a7:f3: 9d:ad:8b:39:28:f2:8c:7d:a6:8b:73:14:0c:31:42:37:6c:1f: 30:e0:12:34:a5:fd:b8:87:15:d2:ab:a9:17:37:a7:06:dc:fe: d0:c5:5a:68:43:8f:4a:35:33:dc:e2:51:4f:2f:34:72:98:4e: f5:8e:3e:d0:d6:7a:f6:fc:56:83:57:5c:fd:80:24:2f:13:3d: c7:08:c0:1a:a9:2a:25:c6:0b:f1:1c:67:c9:35:7f:9d:d2:bd: 95:10:c6:c2:97:8d:40:80:12:b6:1e:a1:4a:df:b5:df:9f:cc: a1:2c:74:12:7e:79:09:cc:d4:60:58:37:85:0f:f9:ba:14:ba: f2:21:dd:9c:38:18:bc:6b:bf:dc:3c:17:85:cc:91:99:1a:5f: ac:1f:c3:ed:81:16:07:9f:d4:df:4c:c0:97:d3:77:4f:43:f0: a1:64:5d:1e:f5:68:eb:ff:0c:97:29:54:b3:ff:f6:af:28:a4: 42:31:de:a4:8b:d8:a4:45:d8:69:94:60:88:54:76:a5:90:97: 93:a4:f6:c7:c3:f9:98:9f:b1:57:aa:35:25:34:0c:21:59:71: 5b:4e:c4:f8:ff:fa:93:61:b9:38:85:65:08:41:3f:1d:5d:b0: 27:87:0b:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn761X5Soq3zUBD/UD9IAwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjUxMDE5MTAwMjA4WhcNMjUxMDIwMTAwMjA4WjAzMTEwLwYDVQQD EygzOGVmNWQxMDA0ZGJkNGFjZDlhMTM4OWFjMjRjOWRhMDYzY2NmZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vKIMYXfLF3+WUAFyfG7raC6vW2K TvWHtXBwQT5PTlfyxIN3SOvoVaRZ5689tVFaMjMLYeZEDdXNy9X+wypfsnXbkHi5 mO8gTJpHEf0XQk2+ur0dOhhniDE7Em85S/3EnEgXF+UvxKmIfWUsEX4sS3e+22aj scVxp5LH7Nl6tnErPUR6reByYmMYwlw6qNMyp7mlpA3eyi6t8G64u+bn5Lu4ocpZ yOZkt8jlYjbY7iKeb8V22fKImcBQeJgLr0Uoi0c3hHFHWiFa13BK7Pv4K+KdLZcK UXvczjT6GbidC4vysArgxKw7Tw9+BdG70YIucjcY/VnWrCvXtvqx3cWJoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjvXRAE29Ss2aE4msJMnaBjzP/vMB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQr/H9Iv fRd/C5G0TR5Zwafzna2LOSjyjH2mi3MUDDFCN2wfMOASNKX9uIcV0qupFzenBtz+ 0MVaaEOPSjUz3OJRTy80cphO9Y4+0NZ69vxWg1dc/YAkLxM9xwjAGqkqJcYL8Rxn yTV/ndK9lRDGwpeNQIASth6hSt+135/MoSx0En55CczUYFg3hQ/5uhS68iHdnDgY vGu/3DwXhcyRmRpfrB/D7YEWB5/U30zAl9N3T0PwoWRdHvVo6/8MlylUs//2ryik QjHepIvYpEXYaZRgiFR2pZCXk6T2x8P5mJ+xV6o1JTQMIVlxW07E+P/6k2G5OIVl CEE/HV2wJ4cLDQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:01:20 2025 by rpki-client