$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: xm3RZLjGQdyLeSqfOA7HITllGI8eJZ+zKYWs4Dl1U4c= Subject key identifier: 0C:1E:D0:A7:74:68:9E:74:9A:44:B7:D6:34:C1:64:03:EA:14:70:88 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 0197B857B0DE32B1F7B7532F1FCE1877C5BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0E16 Signing time: Sat 28 Jun 2025 21:00:43 +0000 Manifest this update: Sat 28 Jun 2025 21:00:43 +0000 Manifest next update: Sun 29 Jun 2025 21:00:43 +0000 Files and hashes: 1: 1ICDnEfX5XD_UK1JwX-WloBKmSg.roa (hash: CPg0BBYt0nzcpTqdRLj2ZwaHiFPO8aXCh3Gnavim9Ac=) 2: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 3: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 4: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 5: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 6: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 7: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 12: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 13: X5-V0n6yN80zazhfKC-inEW3Q-g.roa (hash: ltmVmMUB0Wliy/gqDGqir6t9HKhl/Si7s3Wu5L76zuU=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: SbUFFkpCNNPFkTDHKPmoTOW4FQ/JpYuO7JDn9g6DVnk=) 15: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 16: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 17: tfIx9ZETkxJKA8srjzC-PZ_rkuQ.roa (hash: 00UIyNz3q56oJ8XG2YOwH7avd0q0R31I6WrHQTaqyGI=) 18: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:57:b0:de:32:b1:f7:b7:53:2f:1f:ce:18:77:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jun 28 21:00:43 2025 GMT Not After : Jun 29 21:00:43 2025 GMT Subject: CN=0c1ed0a774689e749a44b7d634c16403ea147088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:07:af:6c:13:70:45:17:60:2f:ea:f6:ce: 67:a1:09:06:4f:f9:ff:e7:7f:23:c5:8f:38:66:57: 4b:1b:48:88:0b:29:0a:c5:72:a8:39:50:96:35:87: 39:57:59:20:ff:58:9a:33:83:86:53:f1:5d:71:59: 81:71:cd:e3:91:4c:02:f7:b0:d6:12:58:63:e8:03: 8e:51:36:29:16:ad:bb:c8:30:4c:f6:ed:5c:c6:d3: 1f:37:93:03:9a:9a:73:f8:8e:4f:fb:42:be:70:4d: 4f:44:2f:23:73:b9:1b:9a:ff:8b:13:73:61:b6:ba: ef:f7:31:08:57:f0:89:b5:f0:e6:d0:88:62:d2:8a: 5d:51:58:77:7a:5b:3e:8b:c1:bf:c4:68:2a:fa:20: eb:0c:63:10:14:a9:2c:bd:2c:fd:d4:cb:71:41:e1: 8c:9c:6a:f5:fc:c4:5a:96:69:f4:01:30:2c:66:4b: ea:25:f8:85:51:89:5e:00:27:8d:98:dd:7c:92:b1: 56:53:5b:ca:a8:79:08:74:d6:fe:7b:1b:75:bd:91: 5c:4a:66:d8:20:04:37:8b:01:cd:74:3b:1b:da:25: d6:04:31:e5:cb:d1:c1:e9:98:63:78:b4:d0:d4:5b: ae:d2:fa:9e:2e:b4:68:5a:12:c9:cd:f5:b6:77:d3: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1E:D0:A7:74:68:9E:74:9A:44:B7:D6:34:C1:64:03:EA:14:70:88 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:93:f5:17:9c:a0:be:53:bd:67:8c:9d:22:8b:a9:6f:7c:c0: 22:24:23:9f:06:69:d3:ac:7a:fa:6e:0e:2a:cf:34:88:7a:56: e7:8a:a7:09:77:2d:2c:66:41:10:e8:e2:f4:bc:55:61:6f:15: 23:3e:03:5f:64:bb:fc:6f:10:90:92:e8:dc:bb:c7:0b:ba:39: a2:bd:65:fe:72:1e:05:1e:7c:96:0d:98:e0:a6:0b:79:cf:bf: 21:22:70:89:a3:61:42:ca:e1:bf:b2:ab:62:ab:e0:68:a3:07: 63:52:dd:6c:27:e1:92:3e:63:b8:d2:62:ef:81:11:82:18:a7: 36:f0:bf:0e:a3:8c:4c:cb:03:12:70:87:d2:03:2f:e8:a5:f6: 0c:18:01:40:39:c5:b0:2c:47:a0:a0:39:b0:a8:4a:12:5c:f2: 67:8c:ad:17:7d:53:0d:14:56:8f:27:9f:16:ff:25:96:e0:0c: 8e:43:a7:b5:d1:10:84:ac:0a:92:fc:89:80:44:3d:14:85:08: 89:43:d2:5d:ab:38:a4:57:49:34:37:1f:9b:33:09:2e:7a:ed: 7e:96:ef:39:04:40:cb:fb:d2:27:62:9e:8d:e6:91:1f:39:71: a3:0b:79:40:eb:8d:c1:16:2b:30:ac:e8:fc:d0:f9:2a:2a:d0: 4b:3a:fe:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4V7DeMrH3t1MvH84Yd8W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUwNjI4MjEwMDQzWhcNMjUwNjI5MjEwMDQzWjAzMTEwLwYDVQQD EygwYzFlZDBhNzc0Njg5ZTc0OWE0NGI3ZDYzNGMxNjQwM2VhMTQ3MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszMHr2wTcEUXYC/q9s5noQkGT/n/ 538jxY84ZldLG0iICykKxXKoOVCWNYc5V1kg/1iaM4OGU/FdcVmBcc3jkUwC97DW Elhj6AOOUTYpFq27yDBM9u1cxtMfN5MDmppz+I5P+0K+cE1PRC8jc7kbmv+LE3Nh trrv9zEIV/CJtfDm0Ihi0opdUVh3els+i8G/xGgq+iDrDGMQFKksvSz91MtxQeGM nGr1/MRalmn0ATAsZkvqJfiFUYleACeNmN18krFWU1vKqHkIdNb+ext1vZFcSmbY IAQ3iwHNdDsb2iXWBDHly9HB6ZhjeLTQ1Fuu0vqeLrRoWhLJzfW2d9MHcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwe0Kd0aJ50mkS31jTBZAPqFHCIMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZP1F5yg vlO9Z4ydIoupb3zAIiQjnwZp06x6+m4OKs80iHpW54qnCXctLGZBEOji9LxVYW8V Iz4DX2S7/G8QkJLo3LvHC7o5or1l/nIeBR58lg2Y4KYLec+/ISJwiaNhQsrhv7Kr YqvgaKMHY1LdbCfhkj5juNJi74ERghinNvC/DqOMTMsDEnCH0gMv6KX2DBgBQDnF sCxHoKA5sKhKElzyZ4ytF31TDRRWjyefFv8lluAMjkOntdEQhKwKkvyJgEQ9FIUI iUPSXas4pFdJNDcfmzMJLnrtfpbvOQRAy/vSJ2KejeaRHzlxowt5QOuNwRYrMKzo /ND5KirQSzr+dA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:09:37 2025 by rpki-client