$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: wLcbYHSWM4pn/bwFxVkeo8uMHc+bggNRIDgZTJwpKyM= Subject key identifier: AD:6E:12:44:37:81:21:A6:AB:CA:0C:CC:CE:AC:75:5C:DE:6A:97:70 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 0199FB7CE69C15D530F894BD1E35B6FDF729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1733 Signing time: Sun 19 Oct 2025 08:01:30 +0000 Manifest this update: Sun 19 Oct 2025 08:01:30 +0000 Manifest next update: Mon 20 Oct 2025 08:01:30 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: DxWg3FoqPiSPowxTYXf08vKoD9E.roa (hash: Oq/kkmlZEN5XGFpx8HpsuEdCe2L9wxdowthqlyHT7z0=) 4: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 5: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 6: WtirBgLdd1QDsDcFh1HdrsUIlWo.roa (hash: GA2Y0Eudc/59qW3vmpiDOm6qcDbR/NWl/VMU6tiADWg=) 7: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 8: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 9: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 10: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 11: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: pQCcSENpcLvuWTMAIeAqxUOsXyjrAGDLBDTdChBaXLo=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: lPTzeEC6SlsDOEXA7A79FujWsIo.roa (hash: PpirqRAGBkl5coZfBkPSGgFl+pHtqZ6nQGRQ6SpzTvA=) 15: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 16: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:e6:9c:15:d5:30:f8:94:bd:1e:35:b6:fd:f7:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Oct 19 08:01:30 2025 GMT Not After : Oct 20 08:01:30 2025 GMT Subject: CN=ad6e1244378121a6abca0cccceac755cde6a9770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:39:97:a9:68:f7:f5:38:3b:f4:40:0a:53: cc:9b:ae:a5:b9:65:e4:75:a7:0b:6e:f7:2c:23:4b: e7:d3:d4:21:13:2f:78:aa:3f:9c:37:20:60:61:ae: c3:0e:8c:05:95:89:20:60:17:2f:bf:9a:02:84:72: ff:2c:ba:4f:55:33:b2:54:de:7c:70:93:5d:85:8c: 88:6c:25:86:1a:b6:56:a6:24:ee:56:0e:d6:57:8c: bd:0b:66:11:03:0a:57:81:89:eb:4d:58:6a:26:0a: aa:45:94:c2:2d:e2:17:f7:76:a0:a2:6b:22:31:57: b6:5f:e6:f0:56:5e:a0:3b:3f:e4:d4:b1:7f:98:12: ca:ac:bd:6f:69:d5:34:e9:4f:c3:7c:9e:23:f8:4b: 16:94:4a:8d:02:5e:a5:6a:05:39:47:a2:56:c4:e7: aa:6c:87:b5:ce:a3:6c:28:50:9d:1a:16:d9:5a:93: 57:aa:fa:f8:33:7e:3d:b0:62:ab:f1:06:56:93:a2: 9d:b8:7d:a0:f2:a4:94:36:bb:d5:0e:38:89:8c:53: 33:74:0e:4a:df:6c:5c:45:10:3d:81:cd:01:d0:82: 5f:e6:36:c4:69:69:28:19:8b:7f:f8:46:ed:75:ea: d3:70:9c:19:14:b5:fd:df:a7:1f:69:cd:52:aa:a1: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:12:44:37:81:21:A6:AB:CA:0C:CC:CE:AC:75:5C:DE:6A:97:70 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3a:e2:cb:67:a8:72:92:c8:3c:09:f0:ff:22:6b:80:ad:78: df:c5:f2:50:82:f3:4c:00:ea:b4:0d:a7:43:30:86:4e:4b:45: a1:7a:c2:3e:07:f4:20:17:d8:d8:2d:9a:92:95:c4:ff:04:c0: d3:40:a7:1f:b6:12:8c:3b:9a:89:e9:87:fc:e4:1a:b8:11:c7: 4a:13:06:c7:3b:56:33:b3:33:9e:0c:30:36:6f:fe:af:dc:dd: 52:9e:10:26:63:3f:47:77:63:b4:44:90:6a:a5:99:b0:4b:28: ec:ca:c3:0a:e6:62:9c:88:c4:f2:26:c2:32:80:3c:5c:3f:3d: 2e:69:30:ef:1e:30:b6:6c:b8:36:47:2d:0e:6e:d4:80:ec:a2: 06:f9:79:27:26:07:0f:8f:6c:20:69:59:24:94:6a:a9:08:5f: a6:3b:dd:1f:c7:95:4d:8c:a5:6e:3a:e6:cc:d6:be:c1:fc:04: bb:73:10:11:07:b4:39:39:a4:9a:69:07:f0:29:6e:b1:9b:a8: 54:59:60:56:3a:09:4a:69:58:a6:70:33:65:3a:58:c1:9b:db: 4a:e1:93:a9:2c:5c:a5:ee:d3:4e:ff:51:2e:4a:5f:87:01:7f: ae:ce:88:86:b8:d9:a6:a4:f4:ca:95:18:48:fc:48:39:d8:d1: 2e:b2:3a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fOacFdUw+JS9HjW2/fcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUxMDE5MDgwMTMwWhcNMjUxMDIwMDgwMTMwWjAzMTEwLwYDVQQD EyhhZDZlMTI0NDM3ODEyMWE2YWJjYTBjY2NjZWFjNzU1Y2RlNmE5NzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVg5l6lo9/U4O/RAClPMm66luWXk dacLbvcsI0vn09QhEy94qj+cNyBgYa7DDowFlYkgYBcvv5oChHL/LLpPVTOyVN58 cJNdhYyIbCWGGrZWpiTuVg7WV4y9C2YRAwpXgYnrTVhqJgqqRZTCLeIX93agomsi MVe2X+bwVl6gOz/k1LF/mBLKrL1vadU06U/DfJ4j+EsWlEqNAl6lagU5R6JWxOeq bIe1zqNsKFCdGhbZWpNXqvr4M349sGKr8QZWk6KduH2g8qSUNrvVDjiJjFMzdA5K 32xcRRA9gc0B0IJf5jbEaWkoGYt/+EbtderTcJwZFLX936cfac1SqqGXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1uEkQ3gSGmq8oMzM6sdVzeapdwMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTriy2eo cpLIPAnw/yJrgK1438XyUILzTADqtA2nQzCGTktFoXrCPgf0IBfY2C2akpXE/wTA 00CnH7YSjDuaiemH/OQauBHHShMGxztWM7MzngwwNm/+r9zdUp4QJmM/R3djtESQ aqWZsEso7MrDCuZinIjE8ibCMoA8XD89Lmkw7x4wtmy4NkctDm7UgOyiBvl5JyYH D49sIGlZJJRqqQhfpjvdH8eVTYylbjrmzNa+wfwEu3MQEQe0OTmkmmkH8ClusZuo VFlgVjoJSmlYpnAzZTpYwZvbSuGTqSxcpe7TTv9RLkpfhwF/rs6IhrjZpqT0ypUY SPxIOdjRLrI63g== -----END CERTIFICATE-----Generated at Sun Oct 19 15:34:27 2025 by rpki-client