$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: 4e9uTqawRtuW4t41HVIGNFhWtIkDY+bBdgGoBjAQWGc= Subject key identifier: 8D:D0:01:F1:38:F4:C5:7A:ED:17:DA:F1:B0:BD:1E:C8:A4:BF:83:64 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 0199FC585380049F52EDD635D2DD9729877F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0F43 Signing time: Sun 19 Oct 2025 12:01:10 +0000 Manifest this update: Sun 19 Oct 2025 12:01:10 +0000 Manifest next update: Mon 20 Oct 2025 12:01:10 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: TDLkBsNyPjpUCE/MfAWW3c4Rr6skVhBHerpKVkLu9fo=) 15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:53:80:04:9f:52:ed:d6:35:d2:dd:97:29:87:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Oct 19 12:01:10 2025 GMT Not After : Oct 20 12:01:10 2025 GMT Subject: CN=8dd001f138f4c57aed17daf1b0bd1ec8a4bf8364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:49:b0:0d:46:a3:d2:52:2d:0f:47:7a:25:b3: 70:e7:2a:5a:cd:08:df:1a:f5:d4:a5:d7:f8:94:3a: 29:03:2c:e0:1e:39:85:ba:76:be:a6:61:0d:fb:93: 80:79:bf:03:04:12:71:3c:b0:7e:c0:23:41:42:71: 87:3b:55:65:d2:c4:de:5d:e7:5b:4a:42:1d:d4:23: 35:fc:38:49:89:9f:73:81:48:3b:e6:21:8e:07:47: ae:a1:6c:8d:82:4b:87:07:42:ea:cd:89:7f:31:32: a4:ac:73:9b:0f:f0:6f:0f:4f:b7:59:b5:7c:f2:c6: 5e:b5:26:8f:74:31:cf:5c:db:e4:b6:ea:82:98:4a: 6a:76:e7:f5:c2:35:ad:4c:2e:56:59:95:6a:74:41: c4:2f:29:89:da:46:8b:bd:23:d3:91:84:d9:3a:7d: 56:88:52:75:c0:27:89:92:f0:ce:57:e7:86:74:9b: e7:95:88:f3:d6:2f:95:d1:1b:5b:59:db:bd:60:03: 98:f2:c7:d9:0d:3c:94:80:1f:0e:2e:44:96:57:b5: b0:bb:85:20:09:c4:71:d2:d5:3a:6b:79:a1:b2:76: 79:f2:eb:23:12:8a:6b:b3:d7:18:96:49:32:19:a5: 2d:b7:99:a1:72:3d:80:fc:75:c9:0e:72:fc:6f:07: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D0:01:F1:38:F4:C5:7A:ED:17:DA:F1:B0:BD:1E:C8:A4:BF:83:64 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:68:65:98:53:99:cc:dd:b2:4c:6c:b3:b6:57:b1:f1:aa:f9: d9:b6:73:0f:50:34:74:4e:41:1f:52:4b:5d:eb:2e:cc:a8:d2: 86:31:a5:77:de:b2:83:e8:2b:a1:ec:1b:03:2b:e5:be:bf:e3: fe:4e:7f:01:d0:9d:e2:a6:d6:3a:c9:2e:dc:d0:45:52:02:13: 2e:48:52:b6:8c:dd:0d:28:2c:dd:8e:84:ac:33:d9:c1:c8:5f: 12:84:69:71:d8:af:98:6f:05:aa:c5:de:f4:bb:bb:f4:f2:f3: fb:c9:7e:58:10:b1:ec:ea:35:7d:39:a8:63:45:f0:2f:40:be: 8d:ea:18:4c:b2:78:86:b1:89:25:4e:7a:f0:e4:5b:5f:16:95: 16:a9:71:7f:e4:51:58:e3:73:be:75:e5:d5:ad:5a:ac:19:48: b3:bb:94:18:0b:49:31:54:e1:27:33:f8:d0:8f:95:c3:35:fd: e0:c6:d4:4f:a0:0f:41:2d:0f:dc:77:fa:42:05:4f:ed:39:7e: e4:14:53:6f:c9:fe:40:c9:04:df:ef:58:fa:84:cb:d4:87:fd: f2:81:a8:87:a4:c6:82:84:6b:21:bd:fb:09:3c:97:bd:b5:17: b6:db:97:4d:52:1e:55:0a:be:c0:3c:b0:64:35:77:0c:cb:6d: 29:94:5f:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WFOABJ9S7dY10t2XKYd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUxMDE5MTIwMTEwWhcNMjUxMDIwMTIwMTEwWjAzMTEwLwYDVQQD Eyg4ZGQwMDFmMTM4ZjRjNTdhZWQxN2RhZjFiMGJkMWVjOGE0YmY4MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0mwDUaj0lItD0d6JbNw5ypazQjf GvXUpdf4lDopAyzgHjmFuna+pmEN+5OAeb8DBBJxPLB+wCNBQnGHO1Vl0sTeXedb SkId1CM1/DhJiZ9zgUg75iGOB0euoWyNgkuHB0LqzYl/MTKkrHObD/BvD0+3WbV8 8sZetSaPdDHPXNvktuqCmEpqduf1wjWtTC5WWZVqdEHELymJ2kaLvSPTkYTZOn1W iFJ1wCeJkvDOV+eGdJvnlYjz1i+V0RtbWdu9YAOY8sfZDTyUgB8OLkSWV7Wwu4Ug CcRx0tU6a3mhsnZ58usjEoprs9cYlkkyGaUtt5mhcj2A/HXJDnL8bweTxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3QAfE49MV67Rfa8bC9Hsikv4NkMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmhlmFOZ zN2yTGyztlex8ar52bZzD1A0dE5BH1JLXesuzKjShjGld96yg+groewbAyvlvr/j /k5/AdCd4qbWOsku3NBFUgITLkhStozdDSgs3Y6ErDPZwchfEoRpcdivmG8FqsXe 9Lu79PLz+8l+WBCx7Oo1fTmoY0XwL0C+jeoYTLJ4hrGJJU568ORbXxaVFqlxf+RR WONzvnXl1a1arBlIs7uUGAtJMVThJzP40I+VwzX94MbUT6APQS0P3Hf6QgVP7Tl+ 5BRTb8n+QMkE3+9Y+oTL1If98oGoh6TGgoRrIb37CTyXvbUXttuXTVIeVQq+wDyw ZDV3DMttKZRfNQ== -----END CERTIFICATE-----Generated at Sun Oct 19 21:01:42 2025 by rpki-client