$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: xz4ehk1wF527lqXCd+5JGa3A2UCPIlk1UdPkFP+qd60= Subject key identifier: 35:5A:0F:F1:BE:01:77:79:B2:8C:9E:2B:31:A2:0C:FF:50:7B:A8:39 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 0199FEEBBEE822C38F32059D2E12D3913189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 15C4 Signing time: Mon 20 Oct 2025 00:01:26 +0000 Manifest this update: Mon 20 Oct 2025 00:01:26 +0000 Manifest next update: Tue 21 Oct 2025 00:01:26 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 6: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: 98JaKYEeECnZmcG28je9ZRP/+vdKtd/V6GeJMTzpijs=) 7: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 8: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 9: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 10: laPe02BW1dF6qI7VPAvoJwJhF4s.roa (hash: v/D94ZtejY8jUNkheDIBk4h8vVHwuUMimac0Kl0P0Sk=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:eb:be:e8:22:c3:8f:32:05:9d:2e:12:d3:91:31:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Oct 20 00:01:26 2025 GMT Not After : Oct 21 00:01:26 2025 GMT Subject: CN=355a0ff1be017779b28c9e2b31a20cff507ba839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:83:c8:7e:c0:72:08:4a:b3:84:dd:aa:34:96: 6e:8a:f6:82:27:32:d8:3a:d5:b7:28:8d:e7:db:82: d4:e0:38:50:5b:49:51:90:21:68:79:77:ba:97:95: e6:fc:97:36:28:fe:2a:15:ea:b9:2e:5a:94:c6:2b: 24:28:61:6b:6d:62:27:1f:56:8d:af:d8:4f:b2:31: a6:14:75:3e:34:4a:38:e9:ef:25:a1:3e:53:cd:ef: 74:df:59:33:fd:8b:13:74:7e:2b:6d:55:cb:bb:c9: 4c:49:04:a7:bc:aa:28:b0:ca:c9:17:53:03:01:cf: 3b:88:a8:7c:76:f6:75:7c:cb:7e:1a:97:28:8f:3a: b5:31:0c:ef:61:e5:99:96:f8:7b:9d:75:ac:ae:29: 82:27:df:93:d2:4b:70:d5:51:80:cd:5b:08:2c:b8: b6:7b:2a:16:20:89:71:83:00:21:c7:c5:33:59:ff: b4:be:2e:98:dc:12:e2:a7:f0:1f:d5:70:53:43:70: 3a:f9:33:b5:51:ad:0e:e0:ae:39:1e:b1:84:44:9b: 42:4a:8b:18:39:37:e1:ea:72:c9:50:4c:2f:a8:74: 02:d8:55:a8:fd:6a:4b:f3:7d:a1:76:55:c7:a0:2d: 3a:d1:8b:24:c7:dd:48:96:17:03:95:a8:d1:d2:ea: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5A:0F:F1:BE:01:77:79:B2:8C:9E:2B:31:A2:0C:FF:50:7B:A8:39 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7e:e4:c4:1f:52:1e:57:45:10:3d:ad:30:77:c4:d4:fd:af: a4:bb:38:9c:87:29:e9:4d:17:a8:d1:d6:17:bb:c2:b3:45:a0: df:c5:46:c6:c3:cf:e2:e1:94:ba:7f:3a:b3:9d:81:4b:25:5b: ff:23:4d:e2:70:b9:75:71:e4:d5:ef:cc:46:4d:5c:5e:07:c5: b1:1a:31:d7:a3:9d:22:10:89:cf:2e:ca:43:9f:7b:6b:a3:01: 8f:27:e4:a9:4d:32:8d:4a:e2:5d:bb:d0:d8:3e:78:3a:43:5d: a1:ba:25:72:7e:64:56:0b:8b:ae:29:c3:d4:c2:96:be:21:b1: 18:3f:7b:c6:b9:e7:72:2b:80:e7:7d:03:72:3f:43:48:f7:8a: 78:41:81:4a:df:94:14:a6:11:73:e8:42:14:2a:f0:b5:9a:5a: ed:c0:26:79:f8:f8:dd:83:17:fe:62:30:7f:cf:b1:d6:e4:09: b8:ae:7e:62:85:42:4d:b5:13:09:84:2d:c7:83:91:bb:56:3b: 4e:5e:c3:db:f6:17:66:8c:56:0c:32:ce:8c:93:02:92:00:67: 29:ea:c4:f3:be:16:ea:50:f1:27:f0:47:cf:a5:d5:1b:07:89: 6c:4f:43:db:8d:b2:e0:5c:b0:b1:e5:2c:df:97:ce:84:f0:ca: 43:70:20:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+677oIsOPMgWdLhLTkTGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUxMDIwMDAwMTI2WhcNMjUxMDIxMDAwMTI2WjAzMTEwLwYDVQQD EygzNTVhMGZmMWJlMDE3Nzc5YjI4YzllMmIzMWEyMGNmZjUwN2JhODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34PIfsByCEqzhN2qNJZuivaCJzLY OtW3KI3n24LU4DhQW0lRkCFoeXe6l5Xm/Jc2KP4qFeq5LlqUxiskKGFrbWInH1aN r9hPsjGmFHU+NEo46e8loT5Tze9031kz/YsTdH4rbVXLu8lMSQSnvKoosMrJF1MD Ac87iKh8dvZ1fMt+Gpcojzq1MQzvYeWZlvh7nXWsrimCJ9+T0ktw1VGAzVsILLi2 eyoWIIlxgwAhx8UzWf+0vi6Y3BLip/Af1XBTQ3A6+TO1Ua0O4K45HrGERJtCSosY OTfh6nLJUEwvqHQC2FWo/WpL832hdlXHoC060Yskx91IlhcDlajR0upSaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVaD/G+AXd5soyeKzGiDP9Qe6g5MB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV37kxB9S HldFED2tMHfE1P2vpLs4nIcp6U0XqNHWF7vCs0Wg38VGxsPP4uGUun86s52BSyVb /yNN4nC5dXHk1e/MRk1cXgfFsRox16OdIhCJzy7KQ597a6MBjyfkqU0yjUriXbvQ 2D54OkNdobolcn5kVguLrinD1MKWviGxGD97xrnnciuA530Dcj9DSPeKeEGBSt+U FKYRc+hCFCrwtZpa7cAmefj43YMX/mIwf8+x1uQJuK5+YoVCTbUTCYQtx4ORu1Y7 Tl7D2/YXZoxWDDLOjJMCkgBnKerE874W6lDxJ/BHz6XVGweJbE9D242y4FywseUs 35fOhPDKQ3Ag9g== -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:23 2025 by rpki-client