$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: 6otkPVM+FmJqB8X8j20HR7O37K/XLS/baNXro9gsCCo= Subject key identifier: DF:F7:C5:1A:DD:7C:01:FB:7D:5D:9E:B2:CD:71:66:11:F6:B4:A6:B8 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 0198D5BBBD099ED9A14F4EE06143C7E6B2F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1664 Signing time: Sat 23 Aug 2025 07:01:47 +0000 Manifest this update: Sat 23 Aug 2025 07:01:47 +0000 Manifest next update: Sun 24 Aug 2025 07:01:47 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (hash: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=) 4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: fQUj4jPKoVtJaHtAKKqwKaLd4afdludRIyTZ9DRsPyU=) 10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:bd:09:9e:d9:a1:4f:4e:e0:61:43:c7:e6:b2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Aug 23 07:01:47 2025 GMT Not After : Aug 24 07:01:47 2025 GMT Subject: CN=dff7c51add7c01fb7d5d9eb2cd716611f6b4a6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:c2:67:b6:69:91:d7:9a:c3:ba:b7:20:a3: 78:27:83:11:cb:a5:55:8f:70:d5:11:b9:68:e1:b8: 3e:d8:86:b3:bf:95:05:bf:54:36:65:19:6b:93:fd: 41:df:cc:41:d0:57:28:37:9a:4c:ba:9f:ba:33:f6: 8e:05:ad:e9:39:00:b0:2a:38:6e:a5:7e:c2:61:fb: e2:b6:27:05:75:09:14:de:c0:49:dd:fc:54:b3:39: 0f:d7:4d:a5:d8:ee:a7:39:fd:ae:f8:f1:57:45:b8: 65:a1:9e:d6:cf:ff:6e:ee:3b:17:14:03:90:d6:03: 94:7c:2c:54:e3:6b:8a:e5:78:79:cf:fb:96:f7:7c: cb:05:f9:4a:a2:dd:d1:38:47:0d:2a:ff:14:51:02: 4d:7a:e4:35:66:70:9a:62:1a:9d:0b:37:ef:a7:5f: 25:4e:f9:31:ca:0f:ab:d3:a6:ef:8b:50:06:a5:20: 6d:28:52:c0:80:6b:b5:10:19:ce:e7:17:3d:fa:81: 51:aa:22:38:c5:91:9e:21:06:5b:cb:3e:fa:eb:76: bb:9e:c3:c5:9c:a7:d7:94:f3:3c:69:be:59:39:39: 2e:8a:c0:ed:2f:c1:5b:3a:9a:ce:4f:62:08:b2:7a: d9:33:0c:aa:a8:6d:7d:ce:3a:d1:3e:b2:0f:2c:cd: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F7:C5:1A:DD:7C:01:FB:7D:5D:9E:B2:CD:71:66:11:F6:B4:A6:B8 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:68:e3:49:8b:1f:18:c6:34:c8:c2:19:64:3d:66:79:b2:f0: 11:95:d1:75:f6:0b:b3:0d:03:82:c1:5f:7e:dd:97:61:d4:36: 02:48:88:8f:76:4e:fc:a4:62:4e:b6:2f:bd:17:e7:64:ff:59: b6:7e:af:9c:4f:5f:8d:cf:15:28:36:6f:a0:0b:21:fa:1d:de: 55:d6:42:e3:5e:d5:4b:82:e1:23:4c:40:5b:2c:48:8c:61:50: 6c:bb:19:5c:76:d2:7a:d6:5b:a4:23:b7:db:b2:97:cc:84:33: 01:91:df:8c:1f:34:c9:fa:89:49:d9:0a:83:fa:5a:73:94:e7: 0d:e1:31:74:46:94:a5:5d:a7:84:86:c0:93:2f:15:43:0a:ae: b2:49:eb:22:a9:40:7c:c9:94:6c:75:8f:22:ac:1c:2e:44:67: b9:fb:a7:08:ab:f5:0e:9f:f5:f5:67:8c:47:02:41:02:33:7a: 20:6b:56:c6:cc:47:b0:12:e8:31:ca:f0:e1:b5:0d:ee:89:3e: 45:7f:58:95:e0:d1:ce:a4:39:90:a6:fd:d4:64:4a:aa:2d:70: b8:df:1a:77:24:ab:f1:37:e0:5a:d3:ed:cf:a3:d8:c0:b2:0f: db:16:92:52:36:e0:0e:40:ea:70:27:ea:28:20:1c:8f:ed:73: 36:cd:94:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu70JntmhT07gYUPH5rLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUwODIzMDcwMTQ3WhcNMjUwODI0MDcwMTQ3WjAzMTEwLwYDVQQD EyhkZmY3YzUxYWRkN2MwMWZiN2Q1ZDllYjJjZDcxNjYxMWY2YjRhNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUHCZ7Zpkdeaw7q3IKN4J4MRy6VV j3DVEblo4bg+2Iazv5UFv1Q2ZRlrk/1B38xB0FcoN5pMup+6M/aOBa3pOQCwKjhu pX7CYfviticFdQkU3sBJ3fxUszkP102l2O6nOf2u+PFXRbhloZ7Wz/9u7jsXFAOQ 1gOUfCxU42uK5Xh5z/uW93zLBflKot3ROEcNKv8UUQJNeuQ1ZnCaYhqdCzfvp18l Tvkxyg+r06bvi1AGpSBtKFLAgGu1EBnO5xc9+oFRqiI4xZGeIQZbyz7663a7nsPF nKfXlPM8ab5ZOTkuisDtL8FbOprOT2IIsnrZMwyqqG19zjrRPrIPLM2QJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/3xRrdfAH7fV2ess1xZhH2tKa4MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxWjjSYsf GMY0yMIZZD1mebLwEZXRdfYLsw0DgsFfft2XYdQ2AkiIj3ZO/KRiTrYvvRfnZP9Z tn6vnE9fjc8VKDZvoAsh+h3eVdZC417VS4LhI0xAWyxIjGFQbLsZXHbSetZbpCO3 27KXzIQzAZHfjB80yfqJSdkKg/pac5TnDeExdEaUpV2nhIbAky8VQwqusknrIqlA fMmUbHWPIqwcLkRnufunCKv1Dp/19WeMRwJBAjN6IGtWxsxHsBLoMcrw4bUN7ok+ RX9YleDRzqQ5kKb91GRKqi1wuN8adySr8TfgWtPtz6PYwLIP2xaSUjbgDkDqcCfq KCAcj+1zNs2Ujw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:46:01 2025 by rpki-client