$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: eb+cS9S4N9ndqvGd/S0mco+WponoxhM7Ac0+4Wx1sDo= Subject key identifier: 47:E6:BC:54:87:F5:14:4B:AF:D9:02:8B:82:5E:83:49:54:CB:74:39 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 0198D583A5376B064F0B322D15721B572090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 152A Signing time: Sat 23 Aug 2025 06:00:31 +0000 Manifest this update: Sat 23 Aug 2025 06:00:31 +0000 Manifest next update: Sun 24 Aug 2025 06:00:31 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 6: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: MetD7mutGnm271iL8d5c5EmXLTI0oQRcLGLr83kAyI0=) 7: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 8: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 9: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 10: laPe02BW1dF6qI7VPAvoJwJhF4s.roa (hash: v/D94ZtejY8jUNkheDIBk4h8vVHwuUMimac0Kl0P0Sk=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:a5:37:6b:06:4f:0b:32:2d:15:72:1b:57:20:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Aug 23 06:00:31 2025 GMT Not After : Aug 24 06:00:31 2025 GMT Subject: CN=47e6bc5487f5144bafd9028b825e834954cb7439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:38:67:da:92:b8:ec:8b:72:13:0f:01:bc: 22:8e:7a:70:7a:07:f9:1d:d8:91:c5:1e:57:12:00: 65:d1:58:e4:15:74:a0:d0:fa:c9:e0:e2:55:ce:02: 8b:20:de:2d:49:b5:84:ff:03:98:9d:1a:eb:d4:0e: 84:a9:3e:07:b4:e1:35:fa:1b:77:dc:be:92:99:51: 98:39:27:ac:3a:36:72:16:8e:d7:e2:64:27:bc:3c: 22:07:86:3c:66:59:f0:8f:6c:83:23:f0:4f:ad:0e: 1f:b0:18:4f:36:f1:b9:dc:89:ab:10:8a:c5:35:41: 68:0d:69:d9:24:0d:df:52:35:e0:62:56:1a:32:84: 28:d6:a2:71:a7:a8:81:20:a3:eb:59:9e:27:63:a2: 41:3b:48:ca:09:9f:50:c2:ed:f6:76:c9:d7:cf:b9: 8a:c9:9f:0b:05:b6:da:7f:ec:80:a1:2d:dc:d2:e0: 5f:a5:d6:d3:c7:0e:f1:d5:42:7d:5b:28:16:b1:87: f4:1e:ac:52:42:34:2d:3d:ac:bd:04:53:96:3c:76: 54:17:f1:80:bc:d8:a2:c8:d4:8d:82:71:63:3b:8f: 54:f7:69:ed:52:f6:b2:c6:20:fd:eb:26:45:11:48: 29:b3:c8:76:58:85:05:47:e2:29:6f:95:a3:8d:f3: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E6:BC:54:87:F5:14:4B:AF:D9:02:8B:82:5E:83:49:54:CB:74:39 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:a6:af:ec:44:81:68:d9:b9:97:5a:23:31:ec:ff:19:4b: dd:bf:fb:a9:ed:06:5f:05:f2:1e:7e:14:79:32:db:4b:74:43: 60:a4:15:8e:b3:0e:57:62:f5:1c:de:8e:10:79:48:16:73:3b: 1d:64:f1:06:a5:a6:da:d3:d6:ad:f1:81:11:c7:7d:bd:aa:4f: d5:ea:e6:d5:4c:ed:15:5a:c8:5b:d2:49:e0:fd:7e:1a:ae:2c: 37:ce:9d:34:e4:8b:a7:c5:cc:30:49:14:28:2a:c4:dd:94:d5: 91:6a:7e:7c:22:2f:9b:7c:1d:f0:f4:eb:21:c7:e6:1d:f2:f8: 4d:8c:4c:b7:b4:ac:d2:ca:cd:f0:ff:9a:11:fd:7e:8b:f1:c0: 51:dd:37:3b:fb:5f:4d:4f:32:8d:11:d0:58:d2:a1:0a:ac:63: c5:31:06:31:48:6c:22:13:ef:6d:a9:ba:9f:d9:6d:be:78:e6: a8:42:89:0d:60:33:4e:aa:f4:56:e1:2a:ed:57:7a:34:ad:81: 67:47:9c:0e:96:30:d3:7c:78:15:fe:50:71:54:31:57:d7:08: 6b:9b:7e:d6:48:5a:65:c5:1d:e6:55:27:81:f5:eb:a3:ed:e4: 61:dc:89:7d:8f:9e:cf:a3:49:01:2f:be:ef:4e:29:78:ab:4e: a3:66:6d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg6U3awZPCzItFXIbVyCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwODIzMDYwMDMxWhcNMjUwODI0MDYwMDMxWjAzMTEwLwYDVQQD Eyg0N2U2YmM1NDg3ZjUxNDRiYWZkOTAyOGI4MjVlODM0OTU0Y2I3NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjI4Z9qSuOyLchMPAbwijnpwegf5 HdiRxR5XEgBl0VjkFXSg0PrJ4OJVzgKLIN4tSbWE/wOYnRrr1A6EqT4HtOE1+ht3 3L6SmVGYOSesOjZyFo7X4mQnvDwiB4Y8Zlnwj2yDI/BPrQ4fsBhPNvG53ImrEIrF NUFoDWnZJA3fUjXgYlYaMoQo1qJxp6iBIKPrWZ4nY6JBO0jKCZ9Qwu32dsnXz7mK yZ8LBbbaf+yAoS3c0uBfpdbTxw7x1UJ9WygWsYf0HqxSQjQtPay9BFOWPHZUF/GA vNiiyNSNgnFjO49U92ntUvayxiD96yZFEUgps8h2WIUFR+Ipb5WjjfP1uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfmvFSH9RRLr9kCi4Jeg0lUy3Q5MB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEGmr+xE gWjZuZdaIzHs/xlL3b/7qe0GXwXyHn4UeTLbS3RDYKQVjrMOV2L1HN6OEHlIFnM7 HWTxBqWm2tPWrfGBEcd9vapP1erm1UztFVrIW9JJ4P1+Gq4sN86dNOSLp8XMMEkU KCrE3ZTVkWp+fCIvm3wd8PTrIcfmHfL4TYxMt7Ss0srN8P+aEf1+i/HAUd03O/tf TU8yjRHQWNKhCqxjxTEGMUhsIhPvbam6n9ltvnjmqEKJDWAzTqr0VuEq7Vd6NK2B Z0ecDpYw03x4Ff5QcVQxV9cIa5t+1khaZcUd5lUngfXro+3kYdyJfY+ez6NJAS++ 704peKtOo2ZtTA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:29:01 2025 by rpki-client