$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: 8j4lDQXyAK63/jmwJRLP1+y/0aPiAE8QWgOHYdHVLPI= Subject key identifier: 68:25:E8:20:29:02:A9:7D:B8:84:63:16:54:79:4E:FC:50:4A:4B:5E Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 0199FC8F62BB15B8A9ACECA2D1C2E7B095F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 16FE Signing time: Sun 19 Oct 2025 13:01:19 +0000 Manifest this update: Sun 19 Oct 2025 13:01:19 +0000 Manifest next update: Mon 20 Oct 2025 13:01:19 +0000 Files and hashes: 1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=) 2: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=) 3: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=) 4: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=) 5: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=) 6: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (hash: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=) 7: XVtsR7QApMnuJxBGbKhRiugNLuM.roa (hash: mBXTHq+MNZP6clXD4om9o4T9lzXQfLi50+F1yKfLWMA=) 8: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: HY6OB077VC0hhseIBXXfQJdEGLTrr5GJCM78U72JfoA=) 9: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=) 10: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:62:bb:15:b8:a9:ac:ec:a2:d1:c2:e7:b0:95:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Oct 19 13:01:19 2025 GMT Not After : Oct 20 13:01:19 2025 GMT Subject: CN=6825e8202902a97db884631654794efc504a4b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:74:7a:2d:65:81:19:ee:b4:d8:16:e2:50:10: 41:2b:bf:75:3e:92:b4:9e:d5:d8:e8:29:1b:99:fe: c3:a8:86:e6:e9:0d:11:da:a7:51:f3:b4:27:06:e6: d9:ac:e8:7e:e3:de:5f:69:7f:bf:fe:05:5d:02:a0: a6:0c:f6:c4:1f:ce:d6:da:c2:1c:e2:d7:29:65:d7: c5:3e:71:ca:0c:b2:c9:29:0b:9e:e9:00:4a:80:61: 40:ea:2f:a8:9d:ec:48:bc:ce:42:f6:e8:b7:dd:a5: f5:4b:7f:60:11:e9:4e:c1:ec:f4:72:e2:be:19:7d: 04:4b:bc:07:4b:6e:52:2f:3b:da:ca:5a:09:fb:ba: c2:e4:73:b5:c7:8f:7c:84:69:d2:62:af:94:89:d6: c4:26:22:a6:8f:ac:65:ba:ca:96:36:63:8a:77:82: 2d:19:db:c0:8f:69:8c:58:94:d9:84:c8:1b:7f:3f: 56:b9:be:75:2b:cd:04:ac:56:6e:17:0b:5e:03:b3: 9b:b6:fd:4e:6f:53:73:73:10:09:9b:74:1b:37:cf: 7c:21:f2:70:68:a9:5a:3a:9e:45:bb:b3:5f:ee:79: 42:bb:65:5c:f2:9a:05:a3:f3:91:e1:c7:8d:03:48: bf:5b:e8:1e:25:57:65:09:d5:10:a5:b7:46:56:c9: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:25:E8:20:29:02:A9:7D:B8:84:63:16:54:79:4E:FC:50:4A:4B:5E X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5a:2a:f7:8a:df:e1:cf:0b:95:bf:63:23:21:b1:50:30:10: 16:0a:b0:78:5f:18:1a:98:de:31:85:5d:9d:e0:08:a6:76:8c: b6:8d:08:16:9d:65:74:db:ac:93:77:78:09:42:cc:5b:d6:00: 41:ff:77:0f:f7:bd:a0:55:82:93:a4:46:25:d3:fb:1b:5b:67: 01:e9:8e:0f:89:3e:98:21:0c:cf:87:77:d4:01:41:87:a6:62: c8:2b:45:7d:b1:c2:ad:a3:6c:a7:2a:43:e3:21:78:54:63:2c: b0:c6:32:0a:15:d4:af:2d:6f:46:2c:61:2f:0f:fe:0c:77:1c: e5:6e:de:e3:71:59:88:3d:18:d1:e4:70:cf:c9:17:ab:23:87: a3:c2:e9:43:74:e2:85:76:d9:97:6e:1a:ac:d6:4e:03:1f:a6: e8:ef:d3:18:97:a3:eb:e3:4a:b6:9f:88:f6:78:27:b8:ce:6a: dd:8b:64:6c:cf:a8:7d:36:44:07:53:bf:a6:54:ab:9f:f8:19: 95:1f:b6:92:75:53:da:92:7a:df:bc:14:56:5d:ae:c4:dc:c6: be:a1:e6:e9:44:0b:97:52:28:2c:74:57:4f:e8:6a:21:38:65: 90:96:d9:2c:e8:15:45:9d:5d:55:0b:51:0d:1c:1a:8b:65:17: a1:d7:50:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j2K7FbiprOyi0cLnsJX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUxMDE5MTMwMTE5WhcNMjUxMDIwMTMwMTE5WjAzMTEwLwYDVQQD Eyg2ODI1ZTgyMDI5MDJhOTdkYjg4NDYzMTY1NDc5NGVmYzUwNGE0YjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73R6LWWBGe602BbiUBBBK791PpK0 ntXY6Ckbmf7DqIbm6Q0R2qdR87QnBubZrOh+495faX+//gVdAqCmDPbEH87W2sIc 4tcpZdfFPnHKDLLJKQue6QBKgGFA6i+onexIvM5C9ui33aX1S39gEelOwez0cuK+ GX0ES7wHS25SLzvayloJ+7rC5HO1x498hGnSYq+UidbEJiKmj6xlusqWNmOKd4It GdvAj2mMWJTZhMgbfz9Wub51K80ErFZuFwteA7Obtv1Ob1NzcxAJm3QbN898IfJw aKlaOp5Fu7Nf7nlCu2Vc8poFo/OR4ceNA0i/W+geJVdlCdUQpbdGVskNjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgl6CApAql9uIRjFlR5TvxQSkteMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVoq94rf 4c8Llb9jIyGxUDAQFgqweF8YGpjeMYVdneAIpnaMto0IFp1ldNusk3d4CULMW9YA Qf93D/e9oFWCk6RGJdP7G1tnAemOD4k+mCEMz4d31AFBh6ZiyCtFfbHCraNspypD 4yF4VGMssMYyChXUry1vRixhLw/+DHcc5W7e43FZiD0Y0eRwz8kXqyOHo8LpQ3Ti hXbZl24arNZOAx+m6O/TGJej6+NKtp+I9ngnuM5q3YtkbM+ofTZEB1O/plSrn/gZ lR+2knVT2pJ637wUVl2uxNzGvqHm6UQLl1IoLHRXT+hqIThlkJbZLOgVRZ1dVQtR DRwai2UXoddQNQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:23:44 2025 by rpki-client