$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: 1SrucNgK5n5qNrCW0jFytkF3dpkMpkMR51pk831Sj/Y= Subject key identifier: 52:4D:6A:30:0E:21:50:EA:77:23:5C:B1:2A:7F:1C:2C:76:6C:02:7E Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 0199FAA10CB7C060C4D8A7512A844808718A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 1212 Signing time: Sun 19 Oct 2025 04:01:22 +0000 Manifest this update: Sun 19 Oct 2025 04:01:22 +0000 Manifest next update: Mon 20 Oct 2025 04:01:22 +0000 Files and hashes: 1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=) 2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=) 3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=) 4: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=) 5: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (hash: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=) 6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=) 7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=) 8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=) 9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=) 10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=) 11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=) 12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=) 13: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=) 14: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=) 15: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=) 16: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=) 17: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=) 18: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=) 19: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=) 20: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: HywqgliI0raIQH+Pnl+i92WJdqK4Qw2R5niEmK8hNow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:a1:0c:b7:c0:60:c4:d8:a7:51:2a:84:48:08:71:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Oct 19 04:01:22 2025 GMT Not After : Oct 20 04:01:22 2025 GMT Subject: CN=524d6a300e2150ea77235cb12a7f1c2c766c027e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c8:84:ec:90:14:09:5c:b9:61:81:59:e3:95: fd:b9:9c:b8:36:8a:1c:11:11:dd:78:d5:69:51:65: e1:cd:f1:f1:84:10:16:24:4e:fa:ad:55:05:a0:75: f9:5f:b4:99:00:6f:1a:6c:e8:f6:8d:fb:3c:5a:34: 0f:80:ab:12:a1:8f:8b:c1:ca:43:6c:70:f9:2e:6b: 61:71:98:45:38:78:cf:1b:c4:c6:cd:92:43:ee:0e: d4:a4:a9:2c:36:12:39:34:40:fc:3b:5f:c9:73:c2: 46:90:c5:db:d1:01:b5:f8:53:37:75:b0:db:7f:96: 21:de:a6:36:4c:56:f4:60:e2:f1:36:d3:78:bd:b9: 23:6e:31:cf:9a:c9:fa:71:60:a6:59:a0:b2:9c:96: 40:d1:82:53:fb:93:42:59:d8:4c:31:ed:1b:c1:2e: 8c:e6:16:b7:ed:ba:d2:a6:da:67:60:93:a6:4b:9c: af:b3:c7:2d:e1:c7:69:db:08:da:3a:67:46:b3:f6: 6d:74:25:db:b4:f8:90:ac:94:2d:f6:bd:4e:c4:e5: 83:23:8e:18:72:93:5e:d8:af:cb:6a:f5:1c:f6:47: 37:5f:f5:7a:06:3d:aa:db:9c:90:48:90:48:6c:f7: 9d:db:45:2c:44:f4:8e:87:be:96:3d:0e:c2:00:e0: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4D:6A:30:0E:21:50:EA:77:23:5C:B1:2A:7F:1C:2C:76:6C:02:7E X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0d:62:28:fb:cc:e8:1d:dd:3f:1d:e8:fb:48:bd:2b:76:8f: 2e:bb:ea:86:c3:d2:3b:f1:75:e2:65:e0:28:69:ab:a5:82:4b: f1:ca:86:09:6e:37:90:6e:70:a4:a4:0c:59:0c:4b:5c:e3:68: a6:20:e6:6b:30:fc:60:21:46:9e:26:a4:9c:25:da:97:7b:93: f7:f2:5d:d8:b3:38:01:ce:e4:89:22:fc:5e:a5:63:4e:c1:7e: 09:e0:78:01:36:36:19:f8:7d:1a:e5:34:aa:0d:99:07:4e:65: 36:49:d7:74:0b:8a:bb:cb:2b:82:17:e8:ca:9e:0a:72:5b:14: 89:a4:fa:67:c4:9c:85:b8:07:86:a5:fd:34:62:8b:87:8c:50: f2:2d:ae:5a:ea:e0:57:1d:f4:92:66:e8:5c:dd:68:1b:61:7c: e0:f1:73:c2:c2:8e:d8:fc:c6:db:b7:99:79:f4:08:2c:08:4f: 7b:55:d1:54:ee:e2:3b:b9:a3:82:72:0e:87:27:d0:0c:7b:44: 4f:c5:30:61:98:df:70:5b:a0:34:30:51:ac:11:ec:03:d6:eb: dc:49:c5:9a:e1:fc:11:43:45:72:4e:08:e7:3e:cc:36:54:73: 0b:6e:9f:de:31:33:f2:38:be:3d:24:ac:59:96:84:4b:3f:ff: 43:8c:a7:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn6oQy3wGDE2KdRKoRICHGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUxMDE5MDQwMTIyWhcNMjUxMDIwMDQwMTIyWjAzMTEwLwYDVQQD Eyg1MjRkNmEzMDBlMjE1MGVhNzcyMzVjYjEyYTdmMWMyYzc2NmMwMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ciE7JAUCVy5YYFZ45X9uZy4Nooc ERHdeNVpUWXhzfHxhBAWJE76rVUFoHX5X7SZAG8abOj2jfs8WjQPgKsSoY+LwcpD bHD5LmthcZhFOHjPG8TGzZJD7g7UpKksNhI5NED8O1/Jc8JGkMXb0QG1+FM3dbDb f5Yh3qY2TFb0YOLxNtN4vbkjbjHPmsn6cWCmWaCynJZA0YJT+5NCWdhMMe0bwS6M 5ha37brSptpnYJOmS5yvs8ct4cdp2wjaOmdGs/ZtdCXbtPiQrJQt9r1OxOWDI44Y cpNe2K/LavUc9kc3X/V6Bj2q25yQSJBIbPed20UsRPSOh76WPQ7CAOA/nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJNajAOIVDqdyNcsSp/HCx2bAJ+MB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOw1iKPvM 6B3dPx3o+0i9K3aPLrvqhsPSO/F14mXgKGmrpYJL8cqGCW43kG5wpKQMWQxLXONo piDmazD8YCFGniaknCXal3uT9/Jd2LM4Ac7kiSL8XqVjTsF+CeB4ATY2Gfh9GuU0 qg2ZB05lNknXdAuKu8srghfoyp4KclsUiaT6Z8SchbgHhqX9NGKLh4xQ8i2uWurg Vx30kmboXN1oG2F84PFzwsKO2PzG27eZefQILAhPe1XRVO7iO7mjgnIOhyfQDHtE T8UwYZjfcFugNDBRrBHsA9br3EnFmuH8EUNFck4I5z7MNlRzC26f3jEz8ji+PSSs WZaESz//Q4ynlA== -----END CERTIFICATE-----Generated at Sun Oct 19 13:07:30 2025 by rpki-client