$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: B5Gk9hOojWdBS1SA8W0VEwtx2cGowhmRyVMhu2iz08E= Subject key identifier: 31:E5:D5:94:E7:48:DE:D9:67:C2:54:DE:8D:9F:AC:2E:67:1C:19:D0 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 0199FD34916FD84A439B989A8B9407D07F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 16FD Signing time: Sun 19 Oct 2025 16:01:44 +0000 Manifest this update: Sun 19 Oct 2025 16:01:44 +0000 Manifest next update: Mon 20 Oct 2025 16:01:44 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (hash: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=) 4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: GnpoMuwL+lwf/ASPpd/tieWUZ8MfSYpK18DVY0+cOTA=) 10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:34:91:6f:d8:4a:43:9b:98:9a:8b:94:07:d0:7f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Oct 19 16:01:44 2025 GMT Not After : Oct 20 16:01:44 2025 GMT Subject: CN=31e5d594e748ded967c254de8d9fac2e671c19d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:90:99:f8:e4:6f:15:41:57:73:99:e4:5d: d7:73:2e:c5:9b:4a:cf:0c:76:10:06:c4:ca:6e:24: 20:ba:c4:7e:af:3a:42:05:49:5a:c2:62:91:c1:e5: a1:58:d6:51:a3:a1:cf:e8:b9:51:0e:94:be:03:d4: 43:9b:e5:ea:af:e8:4e:9f:37:e8:a0:92:bd:dd:7b: 64:d6:c0:f1:72:eb:a6:68:f5:c4:ab:30:db:49:00: 1e:62:f2:05:0d:ed:a7:56:44:e9:a1:8b:4c:78:1b: 14:9d:63:a0:10:55:08:c6:88:b8:b1:8e:e6:36:16: 5c:ee:a6:d5:0a:ba:26:24:6d:df:bf:47:ff:97:60: 13:33:82:dd:bd:ee:23:68:72:24:17:ca:6e:c7:0b: fa:5e:77:a1:13:cc:e0:fb:2f:ed:f7:e9:52:3f:03: 14:68:3c:eb:a3:88:59:e4:b5:5f:c9:65:37:ae:20: ed:d0:e2:8d:55:9a:e6:86:78:a3:be:55:3c:f7:89: 7d:e4:b2:2a:57:7a:59:10:84:02:35:b8:cb:f2:f1: 0c:52:86:90:49:6a:b1:4a:d9:02:32:ce:9d:0d:c9: 8c:f0:22:ca:14:82:be:54:70:e4:ce:68:9c:6c:9b: 5c:56:1f:01:67:1c:e1:07:73:e9:1c:3a:3c:57:05: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E5:D5:94:E7:48:DE:D9:67:C2:54:DE:8D:9F:AC:2E:67:1C:19:D0 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:69:ef:d5:0b:84:07:5e:fd:1f:db:1f:fe:44:04:9d:77:da: 76:73:aa:db:53:b3:44:24:5b:b4:23:44:6f:96:2e:ed:ad:43: 5f:4b:43:b1:cb:b2:bc:f8:c8:2d:48:6b:40:a1:0d:29:ea:7e: 59:8f:b2:a3:3c:23:50:fb:62:ce:5f:cb:ce:1c:fd:08:94:50: 94:3d:2c:88:93:18:95:b3:8c:f8:a6:7e:7a:e5:5f:72:1f:4a: 1d:da:9d:39:d9:31:83:d6:cf:8e:f0:94:bb:da:1c:71:6e:dc: 92:19:c2:70:21:c4:40:9e:b9:91:81:51:0c:ab:f2:9b:77:4f: 4b:1a:77:8c:0a:39:99:e1:8f:f5:28:67:2e:1b:f2:16:7c:c0: 3c:70:ca:04:51:39:95:3d:42:b3:1e:19:45:73:2b:0d:22:5e: 0f:05:af:23:9f:95:f6:5f:d0:f6:4c:f1:1f:85:00:df:60:a5: cb:85:bf:57:34:0b:85:1f:07:bf:d2:c3:a2:14:3d:b5:9e:ce: 48:49:4b:a8:00:82:9f:cb:0e:6f:97:c6:55:32:e5:3a:4b:4c: f9:05:e2:dd:1a:89:e4:00:16:3c:f1:df:41:4b:96:57:5c:30: fb:63:3e:02:fd:23:5b:2d:8e:10:ff:3d:49:c1:85:9d:2b:fb: 58:d4:51:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9NJFv2EpDm5iai5QH0H+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUxMDE5MTYwMTQ0WhcNMjUxMDIwMTYwMTQ0WjAzMTEwLwYDVQQD EygzMWU1ZDU5NGU3NDhkZWQ5NjdjMjU0ZGU4ZDlmYWMyZTY3MWMxOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCyQmfjkbxVBV3OZ5F3Xcy7Fm0rP DHYQBsTKbiQgusR+rzpCBUlawmKRweWhWNZRo6HP6LlRDpS+A9RDm+Xqr+hOnzfo oJK93Xtk1sDxcuumaPXEqzDbSQAeYvIFDe2nVkTpoYtMeBsUnWOgEFUIxoi4sY7m NhZc7qbVCromJG3fv0f/l2ATM4Ldve4jaHIkF8puxwv6XnehE8zg+y/t9+lSPwMU aDzro4hZ5LVfyWU3riDt0OKNVZrmhnijvlU894l95LIqV3pZEIQCNbjL8vEMUoaQ SWqxStkCMs6dDcmM8CLKFIK+VHDkzmicbJtcVh8BZxzhB3PpHDo8VwUn4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHl1ZTnSN7ZZ8JU3o2frC5nHBnQMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2nv1QuE B179H9sf/kQEnXfadnOq21OzRCRbtCNEb5Yu7a1DX0tDscuyvPjILUhrQKENKep+ WY+yozwjUPtizl/Lzhz9CJRQlD0siJMYlbOM+KZ+euVfch9KHdqdOdkxg9bPjvCU u9occW7ckhnCcCHEQJ65kYFRDKvym3dPSxp3jAo5meGP9ShnLhvyFnzAPHDKBFE5 lT1Csx4ZRXMrDSJeDwWvI5+V9l/Q9kzxH4UA32Cly4W/VzQLhR8Hv9LDohQ9tZ7O SElLqACCn8sOb5fGVTLlOktM+QXi3RqJ5AAWPPHfQUuWV1ww+2M+Av0jWy2OEP89 ScGFnSv7WNRRvA== -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:10 2025 by rpki-client