$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: iYLLy7ukG9fx/lk2m07Sm9mzieinQjOc/fibwjzSXdo= Subject key identifier: 8D:0A:23:A8:07:C9:F9:89:F6:7E:33:7F:91:AC:8A:23:61:4D:02:62 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 0198D8F2586FF1FE475C39A78B9199A8B071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1666 Signing time: Sat 23 Aug 2025 22:00:17 +0000 Manifest this update: Sat 23 Aug 2025 22:00:17 +0000 Manifest next update: Sun 24 Aug 2025 22:00:17 +0000 Files and hashes: 1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=) 2: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=) 3: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=) 4: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=) 5: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=) 6: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (hash: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=) 7: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 92Lc/sl+z9N26lPi9S0PyoziqQhZhgqPg/XfA/Jbv+Q=) 8: cId8V7j1DXooq_T1g9EFQ0FCvzw.roa (hash: QJXoETg4tOT8lLS3JnVPNBwPS3l57Eztn4NIz3Sxb1s=) 9: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=) 10: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d8:f2:58:6f:f1:fe:47:5c:39:a7:8b:91:99:a8:b0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Aug 23 22:00:17 2025 GMT Not After : Aug 24 22:00:17 2025 GMT Subject: CN=8d0a23a807c9f989f67e337f91ac8a23614d0262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:ce:eb:5d:8c:43:be:43:b3:4b:b9:34:85: a3:91:a5:b3:b7:d8:42:11:bb:2a:60:33:3d:35:79: 3f:02:6f:8e:e3:f8:ad:fd:17:3a:e4:96:84:a4:1b: b0:0b:30:fb:5c:37:e7:c0:c6:23:41:39:51:44:59: 83:e5:be:86:1f:71:33:2b:c8:b1:6d:be:0a:24:ba: 5b:1f:e9:76:5d:5c:ac:62:6e:84:66:d9:f9:20:1f: 00:15:7b:64:6c:83:f2:5d:f9:61:1c:37:0b:eb:98: 83:19:9e:24:d8:99:4c:67:1e:ba:67:4c:18:e0:29: ea:98:c5:83:29:81:f1:56:06:44:6a:46:fe:d1:6f: a2:6f:3b:d2:26:35:b9:bc:ff:ef:85:03:34:e9:76: 78:10:a7:29:7e:2b:76:5e:da:8c:3b:6d:cc:36:42: 08:40:62:0e:53:d5:98:e4:5a:59:45:ab:1f:88:13: 27:2c:7d:88:7d:b4:49:fb:18:f7:a2:9e:48:8a:85: 19:ab:0b:51:eb:d4:fa:20:70:13:70:3b:09:a6:f8: a2:ef:f6:70:1b:fa:86:7a:6a:60:a2:c9:d2:52:73: fe:c0:37:eb:6f:1f:61:9b:c7:31:23:01:38:1b:24: 47:32:65:84:c2:be:ae:8a:a2:d2:9e:ae:60:b7:eb: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0A:23:A8:07:C9:F9:89:F6:7E:33:7F:91:AC:8A:23:61:4D:02:62 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:fc:8e:f1:cb:6d:fc:87:2e:51:db:e8:cb:30:7c:75:fc:82: 64:fb:cf:a5:21:20:41:22:97:ea:8a:2e:c4:57:94:d5:d0:29: 5f:be:c2:c4:9a:34:f2:0f:d3:31:13:44:e5:b5:b8:a8:c1:a7: ef:fa:1c:d9:36:c3:64:98:ee:ee:e2:3f:dc:f8:84:20:49:e4: 4c:78:19:d1:00:68:91:7a:38:e2:8e:d1:80:b7:7f:d6:fb:b5: 5f:9c:78:b1:0e:7b:cb:fc:32:e5:ae:6c:f5:dd:b9:70:d2:46: 10:37:f5:b3:99:cc:49:89:d3:ad:5b:a1:c0:fa:26:f7:c4:a3: 32:15:a9:89:24:7f:08:45:eb:94:ea:e2:a1:24:9c:3e:45:75: a0:1e:54:31:e2:ae:d9:fb:db:3f:3a:af:bd:b2:ae:4b:3c:42: 47:5e:22:9e:b6:a7:52:12:33:4b:3b:1f:da:f3:ec:ca:37:aa: 0b:5e:ca:d3:a8:65:dc:88:c3:f4:e4:de:57:46:a6:e7:fe:d4: 86:23:48:1c:b0:1f:87:18:ca:ea:a5:99:60:96:17:d6:67:6e: a3:51:ee:a4:42:7f:e5:49:8b:65:7f:72:74:52:23:ba:57:00: b5:2c:e9:d8:7e:9d:32:4c:8a:a8:22:fc:58:4a:2a:bc:11:ff: d5:17:a4:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjY8lhv8f5HXDmni5GZqLBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUwODIzMjIwMDE3WhcNMjUwODI0MjIwMDE3WjAzMTEwLwYDVQQD Eyg4ZDBhMjNhODA3YzlmOTg5ZjY3ZTMzN2Y5MWFjOGEyMzYxNGQwMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3fO612MQ75Ds0u5NIWjkaWzt9hC EbsqYDM9NXk/Am+O4/it/Rc65JaEpBuwCzD7XDfnwMYjQTlRRFmD5b6GH3EzK8ix bb4KJLpbH+l2XVysYm6EZtn5IB8AFXtkbIPyXflhHDcL65iDGZ4k2JlMZx66Z0wY 4CnqmMWDKYHxVgZEakb+0W+ibzvSJjW5vP/vhQM06XZ4EKcpfit2XtqMO23MNkII QGIOU9WY5FpZRasfiBMnLH2IfbRJ+xj3op5IioUZqwtR69T6IHATcDsJpvii7/Zw G/qGempgosnSUnP+wDfrbx9hm8cxIwE4GyRHMmWEwr6uiqLSnq5gt+s/CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0KI6gHyfmJ9n4zf5GsiiNhTQJiMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPyO8ctt /IcuUdvoyzB8dfyCZPvPpSEgQSKX6oouxFeU1dApX77CxJo08g/TMRNE5bW4qMGn 7/oc2TbDZJju7uI/3PiEIEnkTHgZ0QBokXo44o7RgLd/1vu1X5x4sQ57y/wy5a5s 9d25cNJGEDf1s5nMSYnTrVuhwPom98SjMhWpiSR/CEXrlOrioSScPkV1oB5UMeKu 2fvbPzqvvbKuSzxCR14inranUhIzSzsf2vPsyjeqC17K06hl3IjD9OTeV0am5/7U hiNIHLAfhxjK6qWZYJYX1mduo1HupEJ/5UmLZX9ydFIjulcAtSzp2H6dMkyKqCL8 WEoqvBH/1Rek/g== -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:31 2025 by rpki-client