$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: J8SeT6PU5Rd7fecoGGGcDbMQ1OblZX5U1muiji2YUCk= Subject key identifier: E5:0B:7F:5D:5D:C1:5C:87:FB:8F:3E:61:E6:8A:8A:61:7A:21:60:FF Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 0198D54E108CFEA9F1391C6CB6E5321D56D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1661 Signing time: Sat 23 Aug 2025 05:01:59 +0000 Manifest this update: Sat 23 Aug 2025 05:01:59 +0000 Manifest next update: Sun 24 Aug 2025 05:01:59 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: 8vBgPIPGmSaFUWOlpF2CMGdNQQc.roa (hash: /PWcEdJnMn2bKRLWHgFiLBb1+zXw/blECB/hDNGzIwY=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: 4dx+THvzWklIUmtXiFRNnFnkxNg55p5F3rk/sY3XkdM=) 5: LWD4-OU95_FRda-NCOb6W7qqhlk.roa (hash: /68MHjyM7YGgptvnqCHIzlmysaHHp9CA6NYAUfenFig=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:10:8c:fe:a9:f1:39:1c:6c:b6:e5:32:1d:56:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Aug 23 05:01:59 2025 GMT Not After : Aug 24 05:01:59 2025 GMT Subject: CN=e50b7f5d5dc15c87fb8f3e61e68a8a617a2160ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:16:58:53:7f:2d:ea:6f:1f:ec:b1:d1:ad: f6:bf:f3:e5:d2:31:9d:2e:a6:5b:89:54:4c:10:28: a9:16:85:33:80:5d:b2:f1:ee:30:07:58:59:46:22: b8:fc:da:cc:ab:fb:61:39:da:61:93:bf:9d:17:de: 00:1d:ae:f4:85:c5:02:1d:b1:e8:78:bb:18:68:ba: 9b:bd:89:08:11:44:20:59:c9:ca:0c:7b:46:92:48: 6d:b6:53:f5:3c:0e:a4:1b:61:86:9a:4c:be:e5:ce: 36:78:07:5d:6f:dc:ac:d6:da:5e:3e:67:46:3f:6a: 7f:f1:8c:d4:6e:dc:41:00:33:ac:48:7e:f0:47:0d: ea:47:94:cd:ea:70:fa:2d:50:b7:73:60:52:28:84: 61:df:de:f7:e4:e7:27:0c:52:3e:97:9f:69:d7:0f: 20:43:36:57:a8:1a:e4:ce:67:04:6f:dc:f4:d5:ed: 14:1d:14:a8:61:74:6c:3b:6d:aa:a4:5c:20:35:44: 63:1c:90:3c:4b:56:0f:cd:a1:a9:e7:74:f2:fa:24: bb:03:22:bd:13:61:68:45:70:7e:6b:e4:20:c2:aa: 50:08:07:02:56:98:bc:62:b0:06:bc:a5:0a:6a:2a: 5b:db:3f:84:83:31:46:bf:e7:d9:eb:09:8b:e5:3d: c5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0B:7F:5D:5D:C1:5C:87:FB:8F:3E:61:E6:8A:8A:61:7A:21:60:FF X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6a:9a:54:07:dd:0a:86:f4:34:6f:e5:a8:8c:27:66:4a:a3: 22:2d:f3:5a:c5:56:e6:4a:8c:3a:2e:bb:ff:d4:5c:dd:16:42: 29:4d:db:59:d1:c6:ee:fb:c2:d5:4d:9a:ae:86:07:95:a9:64: 66:84:b2:8a:73:74:c5:7b:10:0a:a2:7d:1d:77:aa:80:df:58: 81:99:43:d2:e7:0c:e0:5f:98:fd:a8:18:47:20:25:b9:68:48: 32:42:0d:20:bf:7d:45:44:b5:74:e4:1b:5d:5c:46:35:19:52: 6b:f7:2f:db:0b:69:0b:5c:7c:f2:04:63:c5:5a:56:a7:03:bb: 1e:0f:39:79:f5:5b:5a:b1:84:9b:d4:b4:40:14:2e:af:3b:8b: 72:ee:1a:9b:2c:4f:e7:a1:d5:da:ae:96:25:d2:aa:b9:22:24: b9:6b:1d:36:34:33:b4:92:53:74:52:60:78:64:7f:ef:c2:f8: 12:f8:f0:f8:43:a1:b2:21:45:71:84:2d:85:b9:57:67:b9:14: f1:3d:b7:b6:a4:48:ea:a3:b9:c7:f3:31:25:80:3c:7c:a0:ed: 96:f0:44:68:6d:10:2d:10:f0:46:2b:3b:e8:24:c7:e4:8c:d2: 3f:c9:1f:61:fb:fc:a0:0b:71:83:da:e4:9f:80:cb:7c:1c:93: b5:1f:a6:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVThCM/qnxORxstuUyHVbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUwODIzMDUwMTU5WhcNMjUwODI0MDUwMTU5WjAzMTEwLwYDVQQD EyhlNTBiN2Y1ZDVkYzE1Yzg3ZmI4ZjNlNjFlNjhhOGE2MTdhMjE2MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHIWWFN/LepvH+yx0a32v/Pl0jGd LqZbiVRMECipFoUzgF2y8e4wB1hZRiK4/NrMq/thOdphk7+dF94AHa70hcUCHbHo eLsYaLqbvYkIEUQgWcnKDHtGkkhttlP1PA6kG2GGmky+5c42eAddb9ys1tpePmdG P2p/8YzUbtxBADOsSH7wRw3qR5TN6nD6LVC3c2BSKIRh39735OcnDFI+l59p1w8g QzZXqBrkzmcEb9z01e0UHRSoYXRsO22qpFwgNURjHJA8S1YPzaGp53Ty+iS7AyK9 E2FoRXB+a+QgwqpQCAcCVpi8YrAGvKUKaipb2z+EgzFGv+fZ6wmL5T3FxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOULf11dwVyH+48+YeaKimF6IWD/MB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2qaVAfd Cob0NG/lqIwnZkqjIi3zWsVW5kqMOi67/9Rc3RZCKU3bWdHG7vvC1U2aroYHlalk ZoSyinN0xXsQCqJ9HXeqgN9YgZlD0ucM4F+Y/agYRyAluWhIMkINIL99RUS1dOQb XVxGNRlSa/cv2wtpC1x88gRjxVpWpwO7Hg85efVbWrGEm9S0QBQurzuLcu4amyxP 56HV2q6WJdKquSIkuWsdNjQztJJTdFJgeGR/78L4Evjw+EOhsiFFcYQthblXZ7kU 8T23tqRI6qO5x/MxJYA8fKDtlvBEaG0QLRDwRis76CTH5IzSP8kfYfv8oAtxg9rk n4DLfByTtR+m9g== -----END CERTIFICATE-----Generated at Sat Aug 23 12:52:08 2025 by rpki-client