$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: ycQCjEAewepKjHGJCI9qE5kTU+aDr1HTgjKY7ATbNI8= Subject key identifier: 52:CA:10:00:8D:51:F5:CB:1A:C7:08:21:2F:1F:B3:40:B1:27:A2:5F Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 0198D4DFF0F6E5307393F5599ECFFF0C6FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0EAA Signing time: Sat 23 Aug 2025 03:01:42 +0000 Manifest this update: Sat 23 Aug 2025 03:01:42 +0000 Manifest next update: Sun 24 Aug 2025 03:01:42 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: ITT9xr/ToSTv1mOoYP/waYCTk/WxSXjUF6GgEsJ2Gs4=) 15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:df:f0:f6:e5:30:73:93:f5:59:9e:cf:ff:0c:6f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Aug 23 03:01:42 2025 GMT Not After : Aug 24 03:01:42 2025 GMT Subject: CN=52ca10008d51f5cb1ac708212f1fb340b127a25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:75:6b:be:16:ed:b4:1e:de:f2:a9:b6:d7: 9b:94:69:80:6c:2c:6b:05:4c:a7:fe:e6:88:c6:ff: d1:05:7d:83:97:40:cc:f2:a2:88:ff:e2:ff:18:4e: e7:73:15:29:f8:93:5c:7c:25:5d:92:af:75:4b:07: bc:9e:c7:66:90:a4:ff:8b:a0:26:3b:9f:37:cb:28: 03:80:f1:cb:ce:e2:bc:a5:bd:16:7a:73:23:f8:3e: 5f:d0:8a:ad:cc:b5:05:70:09:68:8c:19:05:75:f8: e3:02:1a:d3:8c:38:ff:24:c5:36:6d:6f:00:56:06: 66:fd:4c:be:88:cc:ee:91:db:27:c9:cd:78:37:a4: ba:de:bb:57:03:28:f7:5d:d8:2f:b1:c5:5d:f0:87: a3:a4:6c:9b:f3:86:f4:5f:05:46:af:33:43:80:b6: 2c:8c:ba:b4:c2:82:60:89:5b:ad:e9:d4:1b:08:07: f3:54:53:f7:06:7b:de:33:ed:de:e6:43:36:8e:89: d3:6b:00:75:c8:e8:d3:76:8f:cf:d6:86:17:fc:9b: 17:8c:07:ac:25:30:d6:7b:01:8f:45:17:41:1e:4b: e5:50:95:34:b9:66:b4:66:19:4e:9a:e1:ec:9a:a0: d5:1c:0c:c8:32:b2:bb:4d:db:04:90:74:de:ab:61: 7c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CA:10:00:8D:51:F5:CB:1A:C7:08:21:2F:1F:B3:40:B1:27:A2:5F X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bd:ac:f8:62:08:ac:ba:27:ba:ab:0a:44:64:9b:7a:df:5b: f5:8f:d8:ed:d1:68:12:37:40:ea:e2:92:9d:cc:72:d7:35:c2: e9:41:c5:00:3a:bf:5c:22:24:33:d0:b7:10:13:f3:f1:1b:5a: 94:35:07:ba:ae:5a:24:f4:46:d6:1d:a7:1a:0e:3c:30:10:f9: 1e:dd:c8:32:c9:50:6d:c0:9d:27:91:ac:16:60:d6:44:8f:d1: a6:80:4e:24:a9:f6:1d:8d:75:f5:00:00:c6:91:d2:1e:0a:ff: 7a:9d:61:48:3e:e9:39:23:1c:c0:cc:9f:57:cc:51:be:ed:d5: ac:9d:c7:cf:3f:e1:db:c2:d4:bb:06:81:80:e0:22:f6:2a:23: a6:89:3a:47:ed:03:e2:39:f0:01:f6:7b:ed:96:2d:fb:99:96: 9e:24:a0:30:45:18:bf:9a:4b:a6:6e:90:4c:16:87:d7:57:a7: 43:eb:3a:62:e1:49:33:46:a8:cc:f8:9e:fa:39:88:fc:db:64: 31:30:21:e3:52:b0:62:d6:8b:d2:52:7c:b4:ca:2b:ae:bd:2a: dd:88:44:af:62:4a:c4:75:b6:bb:be:dc:7b:4f:c9:d8:60:c8: 1c:b3:31:8c:c5:26:b4:41:d8:57:e9:ab:a0:b7:06:f3:0a:aa: fa:58:da:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU3/D25TBzk/VZns//DG+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUwODIzMDMwMTQyWhcNMjUwODI0MDMwMTQyWjAzMTEwLwYDVQQD Eyg1MmNhMTAwMDhkNTFmNWNiMWFjNzA4MjEyZjFmYjM0MGIxMjdhMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X11a74W7bQe3vKptteblGmAbCxr BUyn/uaIxv/RBX2Dl0DM8qKI/+L/GE7ncxUp+JNcfCVdkq91Swe8nsdmkKT/i6Am O583yygDgPHLzuK8pb0WenMj+D5f0IqtzLUFcAlojBkFdfjjAhrTjDj/JMU2bW8A VgZm/Uy+iMzukdsnyc14N6S63rtXAyj3XdgvscVd8IejpGyb84b0XwVGrzNDgLYs jLq0woJgiVut6dQbCAfzVFP3BnveM+3e5kM2jonTawB1yOjTdo/P1oYX/JsXjAes JTDWewGPRRdBHkvlUJU0uWa0ZhlOmuHsmqDVHAzIMrK7TdsEkHTeq2F8pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLKEACNUfXLGscIIS8fs0CxJ6JfMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA72s+GII rLonuqsKRGSbet9b9Y/Y7dFoEjdA6uKSncxy1zXC6UHFADq/XCIkM9C3EBPz8Rta lDUHuq5aJPRG1h2nGg48MBD5Ht3IMslQbcCdJ5GsFmDWRI/RpoBOJKn2HY119QAA xpHSHgr/ep1hSD7pOSMcwMyfV8xRvu3VrJ3Hzz/h28LUuwaBgOAi9iojpok6R+0D 4jnwAfZ77ZYt+5mWniSgMEUYv5pLpm6QTBaH11enQ+s6YuFJM0aozPie+jmI/Ntk MTAh41KwYtaL0lJ8tMorrr0q3YhEr2JKxHW2u77ce0/J2GDIHLMxjMUmtEHYV+mr oLcG8wqq+ljadQ== -----END CERTIFICATE-----Generated at Sat Aug 23 13:50:31 2025 by rpki-client