$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: KKZtRyJFp5D6l4a69D4QyMcVoF+ieC6JJNNPLMLbPlI= Subject key identifier: 8F:80:F4:30:49:9B:5A:A5:E0:2A:5D:FC:AC:69:8C:E9:FB:9B:8C:DF Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 0197CA2744CAFF14280720094C1C7607C0AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 15D6 Signing time: Wed 02 Jul 2025 08:01:00 +0000 Manifest this update: Wed 02 Jul 2025 08:01:00 +0000 Manifest next update: Thu 03 Jul 2025 08:01:00 +0000 Files and hashes: 1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=) 2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=) 3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=) 4: AVnx-FGQOCAK5RnaQADitDAO5hM.roa (hash: wCuFWWt6WOwIf0nZWJf9m4qBBL2Jw9B2DHBHaYoTQq0=) 5: FzcrFpqyH1D4pf1jVy8R-w3Yoz8.roa (hash: d2MgEpCCzfC5F2sJAzB1xCta9zKOCk/DnqSVe+ZZziw=) 6: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=) 7: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=) 8: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=) 9: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=) 10: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=) 11: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=) 12: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: p99kcyPj3CXb7nYLuO9N7Xkl4fUjSm5nzbLZNjgA/24=) 13: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=) 14: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=) 15: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=) 16: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ca:27:44:ca:ff:14:28:07:20:09:4c:1c:76:07:c0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: Jul 2 08:01:00 2025 GMT Not After : Jul 3 08:01:00 2025 GMT Subject: CN=8f80f430499b5aa5e02a5dfcac698ce9fb9b8cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:dd:4a:0f:3c:60:14:6c:8f:60:3d:be:0b: c2:0f:45:e2:ba:07:c2:a9:ac:50:90:b3:c4:8c:04: d4:34:44:5d:3a:e7:a3:eb:2c:5a:3e:62:19:82:45: 52:bf:09:db:d7:20:ff:0c:2f:ab:de:38:cd:b5:7e: 49:3b:d3:1f:ee:9d:5e:43:da:c5:ef:bb:a8:b4:1b: 92:01:6b:06:25:fa:dc:55:bb:89:40:7b:c4:d4:7f: 0c:7a:a5:23:a1:3e:9b:40:e4:4e:7c:0e:fd:c1:1f: d6:aa:1e:b3:a6:9f:15:de:55:39:8d:e5:a6:5b:01: fd:b7:f0:a4:08:c5:d0:83:7c:20:33:3f:32:3d:e3: 4c:e1:01:02:17:2d:72:78:c7:89:19:03:2f:c2:be: 38:c9:5a:bf:c0:46:29:8e:f8:af:77:85:8f:c8:4c: 52:85:fc:d7:bc:d1:d4:c1:bd:ba:d5:d7:e9:b1:33: ca:46:3a:5d:d3:52:c0:1e:b0:d4:58:9f:17:6f:a3: 03:2c:3a:f0:f8:ce:22:02:f3:da:de:ac:9e:b9:54: 3f:2c:b9:af:a2:47:91:c9:6c:ec:b2:18:29:cf:6b: cc:68:c1:59:c1:31:f6:f0:f5:00:de:2d:d1:c4:9b: 2b:3e:bd:4e:f4:b1:bb:80:ef:30:13:f7:5b:2b:84: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:F4:30:49:9B:5A:A5:E0:2A:5D:FC:AC:69:8C:E9:FB:9B:8C:DF X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1c:04:7b:4b:08:ae:fc:22:79:7a:e3:8a:d3:1f:3c:46:64: 6c:b3:e7:f7:18:dd:1d:70:6f:33:40:0c:7a:03:02:9c:18:7a: aa:ea:3c:90:1c:1d:64:3f:08:1c:a3:2d:79:46:b4:69:f2:9a: 4a:f2:01:2e:3f:62:ef:64:b2:cd:24:e9:42:a2:13:c4:7a:b8: 7a:15:cf:53:62:5b:d3:29:59:d7:1e:19:76:da:8a:8d:4e:0a: 70:91:e4:7e:95:de:8b:b5:39:d8:1b:05:05:89:eb:92:94:b2: cd:66:c4:9a:31:38:c2:b7:98:a2:44:87:69:cc:9a:d2:bb:27: e4:5e:d4:d2:d2:27:20:b1:76:aa:e2:25:fd:c2:a3:f3:68:c3: 90:ca:d0:e4:e7:ca:b5:ea:ea:bc:c3:94:c7:91:f3:e8:57:0e: d4:52:22:2c:84:eb:4f:46:b1:d0:cc:98:7e:3e:32:70:75:de: e8:af:70:93:6e:9d:e4:f4:77:9e:77:80:72:78:ee:d7:46:0a: 03:26:d1:45:8a:a4:cc:80:c7:0d:8c:92:37:3c:d4:51:f1:23: 47:af:75:0e:63:f3:ca:d4:9e:de:18:d4:62:9e:62:d8:34:61: 86:ab:b3:3a:74:15:41:ba:d7:ae:8c:f6:a6:51:7f:a7:34:44: 8a:45:c2:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfKJ0TK/xQoByAJTBx2B8CrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjUwNzAyMDgwMTAwWhcNMjUwNzAzMDgwMTAwWjAzMTEwLwYDVQQD Eyg4ZjgwZjQzMDQ5OWI1YWE1ZTAyYTVkZmNhYzY5OGNlOWZiOWI4Y2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7XdSg88YBRsj2A9vgvCD0XiugfC qaxQkLPEjATUNERdOuej6yxaPmIZgkVSvwnb1yD/DC+r3jjNtX5JO9Mf7p1eQ9rF 77uotBuSAWsGJfrcVbuJQHvE1H8MeqUjoT6bQOROfA79wR/Wqh6zpp8V3lU5jeWm WwH9t/CkCMXQg3wgMz8yPeNM4QECFy1yeMeJGQMvwr44yVq/wEYpjvivd4WPyExS hfzXvNHUwb261dfpsTPKRjpd01LAHrDUWJ8Xb6MDLDrw+M4iAvPa3qyeuVQ/LLmv okeRyWzsshgpz2vMaMFZwTH28PUA3i3RxJsrPr1O9LG7gO8wE/dbK4SJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+A9DBJm1ql4Cpd/KxpjOn7m4zfMB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhwEe0sI rvwieXrjitMfPEZkbLPn9xjdHXBvM0AMegMCnBh6quo8kBwdZD8IHKMteUa0afKa SvIBLj9i72SyzSTpQqITxHq4ehXPU2Jb0ylZ1x4ZdtqKjU4KcJHkfpXei7U52BsF BYnrkpSyzWbEmjE4wreYokSHacya0rsn5F7U0tInILF2quIl/cKj82jDkMrQ5OfK terqvMOUx5Hz6FcO1FIiLITrT0ax0MyYfj4ycHXe6K9wk26d5PR3nneAcnju10YK AybRRYqkzIDHDYySNzzUUfEjR691DmPzytSe3hjUYp5i2DRhhquzOnQVQbrXroz2 plF/pzREikXCBA== -----END CERTIFICATE-----Generated at Wed Jul 2 15:04:31 2025 by rpki-client