$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: cLToPaBpCizNRDcSbaa1BhRQbJnR9MECGtC6SKob6R4= Subject key identifier: 41:64:B9:18:9E:36:7E:8E:0B:24:2A:9E:A9:80:CD:AF:AF:0B:52:8A Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 0197B70F17223272FFCCFB13AA53D8107698 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 10E4 Signing time: Sat 28 Jun 2025 15:01:48 +0000 Manifest this update: Sat 28 Jun 2025 15:01:48 +0000 Manifest next update: Sun 29 Jun 2025 15:01:48 +0000 Files and hashes: 1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=) 2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=) 3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=) 4: CDi8vSg_fdYRotnSbMRPDSasq6c.roa (hash: 7OEMcqwogdkJNcoA2dzyUv5/KIyWaJVisinKvEvTiik=) 5: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=) 6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=) 7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=) 8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=) 9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=) 10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=) 11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=) 12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=) 13: fyZQsu5bzOst03Al5FJRpvSLsoo.roa (hash: MRRTMhVAXN/buVo3idrb+5O9n9y8Lo0sdRtwg3OeKfA=) 14: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=) 15: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=) 16: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=) 17: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=) 18: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=) 19: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=) 20: t8HA_uc7gb7j7V6zDu16rLSfmbY.roa (hash: 65eTp9NXdbJh5u5INSJT1dWSnT06TM3hY9aEgJ3l7Ew=) 21: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=) 22: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: LF/F4JRqiLyqjaV1dGnyB1M+dXtpQlkEqYPMOpPjWdE=) 23: zvVbccPOezRcenUxgZYT6IshvbM.roa (hash: 012XCVnoNirJiTB9TmAZ50WFMIRiHKAXPZ8XS3U9P3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0f:17:22:32:72:ff:cc:fb:13:aa:53:d8:10:76:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jun 28 15:01:48 2025 GMT Not After : Jun 29 15:01:48 2025 GMT Subject: CN=4164b9189e367e8e0b242a9ea980cdafaf0b528a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:21:6d:4e:78:ad:2a:27:7f:cf:96:6f:ac: 36:64:fc:25:6a:ae:3d:24:f8:d9:eb:14:36:5b:53: c8:91:8b:81:12:fc:bf:5e:7e:2d:02:0c:f0:91:4f: ef:83:ee:38:76:58:3a:d8:31:05:84:8c:f7:fe:88: 16:fb:f0:95:23:5e:6c:ab:72:0e:db:6a:a6:5c:fd: 58:32:50:ec:c9:b7:da:37:0c:70:07:c5:d2:ec:6c: e9:de:e8:61:37:90:ed:95:3a:b1:34:fb:53:7b:a4: dd:9a:3e:e7:28:02:df:35:93:bf:fc:ee:81:ac:88: c3:a9:ea:8f:3b:91:aa:02:14:1a:a1:39:b1:c3:ca: 00:44:fa:33:98:65:95:d4:72:07:86:6d:a9:b5:4b: 59:c1:1b:3a:bb:42:9c:97:d3:cd:21:e9:bc:9b:46: 24:00:7c:64:d3:f5:d1:35:e6:29:09:dc:16:30:41: ee:2f:16:c8:cb:ae:ce:17:90:1a:90:cb:48:8c:e8: 21:e5:8f:92:fa:d9:b6:27:09:40:c7:04:73:58:45: a6:f6:6d:aa:fd:a0:9e:82:4b:bf:59:2d:0c:26:1e: 72:2c:b2:3e:76:c6:40:57:54:6b:02:66:5a:be:ba: e1:63:48:08:75:d8:3b:47:a6:fd:ad:ea:0b:9b:fb: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:64:B9:18:9E:36:7E:8E:0B:24:2A:9E:A9:80:CD:AF:AF:0B:52:8A X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:20:23:cb:72:20:93:61:7f:2e:3b:ce:e5:b7:e4:39:16:db: 4d:4f:37:09:3d:a9:19:cf:f5:4c:a1:ba:eb:f8:7b:bc:0b:33: f8:31:3c:b5:1d:86:01:5c:3b:17:ec:8f:60:ab:a2:6a:26:49: 27:f2:5f:90:2f:f0:2d:b5:0b:f0:59:aa:4e:76:52:c1:5c:85: 2a:4b:26:56:3a:c1:5f:e5:75:59:51:39:dd:ac:7c:7f:92:d3: 11:b8:4b:0a:1d:60:3e:fe:cf:ea:5d:57:f0:d0:d3:aa:aa:b6: 32:0e:85:fb:2c:6c:f8:27:52:a2:9f:9e:10:a3:98:f0:16:fd: 57:f0:34:7c:30:f7:04:80:6f:6c:46:39:dc:41:2c:01:b4:68: d5:d7:69:8b:4b:46:02:2c:62:f5:6d:3b:c9:84:61:85:5c:32: 40:f5:25:e1:9e:97:d0:04:ed:27:ae:a4:71:0e:7a:b0:bd:02: d7:db:89:66:d8:98:8b:fa:a0:69:4d:bc:a4:6d:ee:b1:04:e2: e7:e5:a7:0c:9f:eb:98:05:ae:d8:d4:4b:b4:ff:72:5b:45:7e: f6:83:f8:45:e6:a2:84:15:ee:b4:58:ce:d8:87:6b:da:07:ed: b8:54:b9:d6:17:af:87:97:d0:56:30:cf:43:3e:ef:20:58:dc: 66:69:1c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DxciMnL/zPsTqlPYEHaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUwNjI4MTUwMTQ4WhcNMjUwNjI5MTUwMTQ4WjAzMTEwLwYDVQQD Eyg0MTY0YjkxODllMzY3ZThlMGIyNDJhOWVhOTgwY2RhZmFmMGI1MjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQUhbU54rSonf8+Wb6w2ZPwlaq49 JPjZ6xQ2W1PIkYuBEvy/Xn4tAgzwkU/vg+44dlg62DEFhIz3/ogW+/CVI15sq3IO 22qmXP1YMlDsybfaNwxwB8XS7Gzp3uhhN5DtlTqxNPtTe6Tdmj7nKALfNZO//O6B rIjDqeqPO5GqAhQaoTmxw8oARPozmGWV1HIHhm2ptUtZwRs6u0Kcl9PNIem8m0Yk AHxk0/XRNeYpCdwWMEHuLxbIy67OF5AakMtIjOgh5Y+S+tm2JwlAxwRzWEWm9m2q /aCegku/WS0MJh5yLLI+dsZAV1RrAmZavrrhY0gIddg7R6b9reoLm/u/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFkuRieNn6OCyQqnqmAza+vC1KKMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICAjy3Ig k2F/LjvO5bfkORbbTU83CT2pGc/1TKG66/h7vAsz+DE8tR2GAVw7F+yPYKuiaiZJ J/JfkC/wLbUL8FmqTnZSwVyFKksmVjrBX+V1WVE53ax8f5LTEbhLCh1gPv7P6l1X 8NDTqqq2Mg6F+yxs+CdSop+eEKOY8Bb9V/A0fDD3BIBvbEY53EEsAbRo1ddpi0tG Aixi9W07yYRhhVwyQPUl4Z6X0ATtJ66kcQ56sL0C19uJZtiYi/qgaU28pG3usQTi 5+WnDJ/rmAWu2NRLtP9yW0V+9oP4ReaihBXutFjO2Idr2gftuFS51hevh5fQVjDP Qz7vIFjcZmkcRw== -----END CERTIFICATE-----Generated at Sat Jun 28 21:24:26 2025 by rpki-client