$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: F4cbjcsOsSgDI6QppvHTHGj1e6Qik2uz0xn7VD4dp5I= Subject key identifier: 0E:09:CC:D4:CC:29:3F:24:1B:A5:FC:20:9C:1D:40:A3:06:DE:A6:46 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 0197CCF1927B609E9C73C79E6CCDEBDDD6B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 14A1 Signing time: Wed 02 Jul 2025 21:01:13 +0000 Manifest this update: Wed 02 Jul 2025 21:01:13 +0000 Manifest next update: Thu 03 Jul 2025 21:01:13 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 6: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: Pajq4wElpg+6Ukdsaiz+O4v/+P09tZo7mN+6XR5QWVE=) 7: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 8: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 9: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 10: laPe02BW1dF6qI7VPAvoJwJhF4s.roa (hash: v/D94ZtejY8jUNkheDIBk4h8vVHwuUMimac0Kl0P0Sk=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cc:f1:92:7b:60:9e:9c:73:c7:9e:6c:cd:eb:dd:d6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jul 2 21:01:13 2025 GMT Not After : Jul 3 21:01:13 2025 GMT Subject: CN=0e09ccd4cc293f241ba5fc209c1d40a306dea646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:24:00:ef:dc:d7:31:d2:50:e3:3a:63:e1:ac: 18:10:b3:ce:7f:35:76:18:c3:72:84:25:5a:21:44: 6b:ff:9f:3d:6c:3d:71:1f:f4:64:af:02:29:9c:eb: e9:a8:3a:b7:01:ec:82:70:67:07:77:bc:f5:ed:95: 3b:a7:03:cb:e8:8e:3d:03:a3:34:e0:be:32:86:1b: d3:79:a1:08:16:b3:26:9d:8c:64:cd:56:4b:10:e1: 8d:e2:4c:a7:15:2d:18:0e:7c:eb:f3:7b:5b:81:c0: 9d:85:3b:93:fa:e5:66:71:19:79:2b:61:b3:a7:c5: a4:cc:89:21:a7:6b:82:de:77:ce:e7:14:87:bd:37: ce:e3:29:63:e3:b5:63:db:eb:7d:75:a3:67:fe:d4: b0:47:f4:b6:1e:77:59:85:56:f6:aa:b3:55:27:b2: 66:82:7e:65:50:44:ea:d8:bb:22:a9:63:2f:2a:46: 74:ae:d1:ac:69:d2:a1:73:80:08:b6:fd:3a:f6:51: b3:66:92:94:43:43:3a:84:66:f5:3c:cc:e1:fb:88: 84:1e:cd:7e:e6:a0:4d:94:5b:07:0d:da:b2:da:d5: 14:af:42:87:29:c9:75:90:ac:21:3d:14:bc:a6:49: b8:29:be:9f:17:75:ee:28:7e:80:ae:61:b0:76:fa: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:09:CC:D4:CC:29:3F:24:1B:A5:FC:20:9C:1D:40:A3:06:DE:A6:46 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2e:a9:0f:a0:b9:d0:4c:c6:58:b6:f8:e0:3d:eb:35:ec:96: 07:d0:59:cb:02:ac:60:32:a2:e8:13:30:e2:63:2b:c1:99:71: be:3c:6c:e9:d2:a1:32:8a:b3:0e:05:59:02:95:68:f4:dd:b6: 97:0a:ca:84:8a:9d:9f:02:c0:2f:dd:29:4a:04:84:3c:10:cd: 27:30:b1:f7:9e:41:57:f2:90:b7:fc:10:f3:0d:f8:2e:fd:88: a2:52:da:7f:cd:69:07:0b:35:aa:8b:b6:ba:79:38:87:af:f6: a9:b2:4d:c3:6b:01:96:cc:a6:88:0f:07:73:56:7d:ca:d4:95: 19:d1:7e:f1:5f:63:16:9d:ec:20:b5:5d:e6:e2:83:2b:ed:5c: b9:60:88:12:8a:24:04:81:69:da:ab:7b:25:0a:de:d1:3d:c2: 01:eb:a3:bc:e0:6f:d7:a8:47:3a:dc:34:eb:0d:d4:a9:cd:71: c3:6e:f3:ea:ba:d4:82:40:37:d4:91:45:a9:66:40:1b:bb:5d: 3d:0a:85:53:96:8f:8e:b5:42:ac:0a:e3:4d:ec:d4:4a:e9:2a: 42:58:e0:5c:38:31:a1:e4:7d:8b:9d:00:29:b9:a8:00:f3:cb: f7:5e:6c:e8:df:d4:50:08:0e:8a:4d:a8:cb:68:b3:8f:1e:f4: c0:da:4f:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfM8ZJ7YJ6cc8eebM3r3daxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwNzAyMjEwMTEzWhcNMjUwNzAzMjEwMTEzWjAzMTEwLwYDVQQD EygwZTA5Y2NkNGNjMjkzZjI0MWJhNWZjMjA5YzFkNDBhMzA2ZGVhNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCQA79zXMdJQ4zpj4awYELPOfzV2 GMNyhCVaIURr/589bD1xH/RkrwIpnOvpqDq3AeyCcGcHd7z17ZU7pwPL6I49A6M0 4L4yhhvTeaEIFrMmnYxkzVZLEOGN4kynFS0YDnzr83tbgcCdhTuT+uVmcRl5K2Gz p8WkzIkhp2uC3nfO5xSHvTfO4ylj47Vj2+t9daNn/tSwR/S2HndZhVb2qrNVJ7Jm gn5lUETq2LsiqWMvKkZ0rtGsadKhc4AItv069lGzZpKUQ0M6hGb1PMzh+4iEHs1+ 5qBNlFsHDdqy2tUUr0KHKcl1kKwhPRS8pkm4Kb6fF3XuKH6ArmGwdvqcgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4JzNTMKT8kG6X8IJwdQKMG3qZGMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYi6pD6C5 0EzGWLb44D3rNeyWB9BZywKsYDKi6BMw4mMrwZlxvjxs6dKhMoqzDgVZApVo9N22 lwrKhIqdnwLAL90pSgSEPBDNJzCx955BV/KQt/wQ8w34Lv2IolLaf81pBws1qou2 unk4h6/2qbJNw2sBlsymiA8Hc1Z9ytSVGdF+8V9jFp3sILVd5uKDK+1cuWCIEook BIFp2qt7JQre0T3CAeujvOBv16hHOtw06w3Uqc1xw27z6rrUgkA31JFFqWZAG7td PQqFU5aPjrVCrArjTezUSukqQljgXDgxoeR9i50AKbmoAPPL915s6N/UUAgOik2o y2izjx70wNpPKg== -----END CERTIFICATE-----Generated at Thu Jul 3 06:55:06 2025 by rpki-client