$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: p9nZXZnPopIWru76Bf882lXt39p95uxRyY0s9ymmIHs= Subject key identifier: FD:CA:E8:87:D0:73:DA:60:88:35:94:25:64:AE:52:73:32:EC:73:2F Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 0197B77C37C4411482A55C93CD5CBDF3C3FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 15CD Signing time: Sat 28 Jun 2025 17:01:00 +0000 Manifest this update: Sat 28 Jun 2025 17:01:00 +0000 Manifest next update: Sun 29 Jun 2025 17:01:00 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: 8vBgPIPGmSaFUWOlpF2CMGdNQQc.roa (hash: /PWcEdJnMn2bKRLWHgFiLBb1+zXw/blECB/hDNGzIwY=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: S8Ac4GtjOnlVhhjvq86//Kt7NAPiLcbCx0XauZOYuQ0=) 5: LWD4-OU95_FRda-NCOb6W7qqhlk.roa (hash: /68MHjyM7YGgptvnqCHIzlmysaHHp9CA6NYAUfenFig=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:37:c4:41:14:82:a5:5c:93:cd:5c:bd:f3:c3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jun 28 17:01:00 2025 GMT Not After : Jun 29 17:01:00 2025 GMT Subject: CN=fdcae887d073da608835942564ae527332ec732f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:71:45:9a:56:ea:fa:f2:f9:fe:17:d8:ff:02: b3:eb:bc:e7:4d:b2:fb:28:2c:1e:0d:4a:02:96:f8: 13:01:9a:be:29:96:7f:85:25:84:93:2c:27:34:d7: d9:eb:87:81:78:f3:a5:66:34:aa:aa:50:54:f1:d9: 9a:16:ed:38:3d:57:c3:09:6d:ca:ff:f2:6d:ac:82: b0:31:26:fe:aa:06:f1:81:e5:66:b1:d3:6d:c5:51: d3:13:e5:c5:d1:59:fd:5e:18:1f:94:00:cd:8f:ba: c9:7f:29:72:46:35:ea:ee:cb:76:6b:a5:5b:48:75: 4e:93:d5:ea:03:9f:fc:fe:70:cb:9b:e2:bb:e7:01: 7e:da:1e:2e:ef:a1:92:6d:19:bd:0a:89:49:28:12: 1d:5d:aa:06:aa:80:58:37:e2:a0:16:e2:8c:56:d2: 7b:0d:db:01:01:06:d3:46:2f:40:5f:2e:03:8b:cf: 96:da:27:b7:91:2e:99:75:fd:1c:fe:55:03:cd:70: 7d:2a:ae:b6:24:21:3d:a7:71:d0:96:8e:6a:20:24: a4:66:97:d4:f3:2f:04:0d:69:ee:7a:a0:f0:06:de: 09:e3:b9:aa:7d:19:ba:66:5a:18:d6:49:a1:e7:5d: eb:cd:c8:1b:e3:22:e5:ab:6e:df:9a:8b:45:42:0b: b4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CA:E8:87:D0:73:DA:60:88:35:94:25:64:AE:52:73:32:EC:73:2F X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:29:7c:a2:a1:d5:dc:fa:f3:f9:a8:dd:2d:f9:b2:98:19:86: ef:54:e9:9b:7b:c5:2f:36:b5:6b:b8:57:e4:a1:12:aa:ad:6e: 10:a2:20:cc:42:33:e9:35:5b:02:61:bd:1b:5f:3f:83:ed:b5: c6:b0:54:1c:43:21:7c:0a:13:aa:29:8f:4d:1b:54:86:2d:3c: 3a:6c:23:e8:ec:30:c3:ab:c3:e4:86:72:d7:1d:c2:ab:7b:6c: 03:bd:e5:b5:a3:2d:f2:22:8d:84:8a:03:47:8c:13:c3:53:8e: 7c:fa:a7:38:f7:3c:e2:80:63:88:af:59:13:a9:a9:1e:2d:4b: 86:1e:07:d4:94:75:2e:b4:2e:60:ea:83:72:be:eb:ef:85:ec: a5:95:5b:7a:d1:ec:a9:9d:5e:cc:3e:eb:87:ab:2e:e8:ca:d8: ee:78:26:e5:48:95:23:f7:12:cf:c9:a5:96:82:65:49:31:fd: ed:bb:3e:b4:f1:2c:bf:7c:d9:ea:5c:e9:95:19:a4:df:3a:9f: 9c:d5:b9:7f:f4:0a:21:bf:be:22:84:94:8e:6f:f6:e9:e4:26: 16:57:d8:f9:0d:f4:a1:48:db:ec:40:f6:9f:c4:05:a5:90:16: 86:13:8b:1b:e7:5d:44:55:14:66:73:ad:d3:ee:da:d3:a3:dc: f5:72:1a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fDfEQRSCpVyTzVy988P9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUwNjI4MTcwMTAwWhcNMjUwNjI5MTcwMTAwWjAzMTEwLwYDVQQD EyhmZGNhZTg4N2QwNzNkYTYwODgzNTk0MjU2NGFlNTI3MzMyZWM3MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nFFmlbq+vL5/hfY/wKz67znTbL7 KCweDUoClvgTAZq+KZZ/hSWEkywnNNfZ64eBePOlZjSqqlBU8dmaFu04PVfDCW3K //JtrIKwMSb+qgbxgeVmsdNtxVHTE+XF0Vn9XhgflADNj7rJfylyRjXq7st2a6Vb SHVOk9XqA5/8/nDLm+K75wF+2h4u76GSbRm9ColJKBIdXaoGqoBYN+KgFuKMVtJ7 DdsBAQbTRi9AXy4Di8+W2ie3kS6Zdf0c/lUDzXB9Kq62JCE9p3HQlo5qICSkZpfU 8y8EDWnueqDwBt4J47mqfRm6ZloY1kmh513rzcgb4yLlq27fmotFQgu0aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3K6IfQc9pgiDWUJWSuUnMy7HMvMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSl8oqHV 3Prz+ajdLfmymBmG71Tpm3vFLza1a7hX5KESqq1uEKIgzEIz6TVbAmG9G18/g+21 xrBUHEMhfAoTqimPTRtUhi08Omwj6Owww6vD5IZy1x3Cq3tsA73ltaMt8iKNhIoD R4wTw1OOfPqnOPc84oBjiK9ZE6mpHi1Lhh4H1JR1LrQuYOqDcr7r74XspZVbetHs qZ1ezD7rh6su6MrY7ngm5UiVI/cSz8mlloJlSTH97bs+tPEsv3zZ6lzplRmk3zqf nNW5f/QKIb++IoSUjm/26eQmFlfY+Q30oUjb7ED2n8QFpZAWhhOLG+ddRFUUZnOt 0+7a06Pc9XIaGw== -----END CERTIFICATE-----Generated at Sun Jun 29 00:26:32 2025 by rpki-client