$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json) Hash identifier: E0qLDDEBtRD0jp2Y1ac3zoocYeoTWUHf3L1TtrA2SwI= Subject key identifier: 96:20:3A:89:0A:EC:DF:F1:9A:C1:63:0A:D4:20:03:C5:5C:5A:56:22 Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Certificate serial: 0197B7EA9FB56DF5CD4745D407CFD8451A32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft Manifest number: 0D30 Signing time: Sat 28 Jun 2025 19:01:36 +0000 Manifest this update: Sat 28 Jun 2025 19:01:36 +0000 Manifest next update: Sun 29 Jun 2025 19:01:36 +0000 Files and hashes: 1: 2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa (hash: 1Gj1gucEHIQe5/suhFpq18I0KHQmpiCbAT8OEer2XJY=) 2: 4zijRX3qFSJj7GUPzn2tNtVGEqU.roa (hash: G11+LD/eIulIMC02GT0rOyORwsGurEkPCQfgsNssMY4=) 3: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=) 4: BOI1awQxdXwnD-j71lBbNJhD_Lc.roa (hash: RDggKzi5X4GzB5qxGRZl8jlJFnbQqP70OHVTn4IeWCs=) 5: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=) 6: EliH32nM72jk5o8srlCb9Qn8SIg.roa (hash: Rtb7C9DazwCLvPY2asNPyAzR9ypSlDn7TK9tDgFH01c=) 7: JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa (hash: g67c4gAiqig1Iyele/QFecJvszyajLNwbzJcH0zM3As=) 8: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=) 9: PvDQaJs3rwqfVhwh7JLmxWdfCnw.roa (hash: kfowhpPS37erJf8EqX+PtveCKI55Da0bOeynOicoCEs=) 10: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: 3xoYsB0y2s3TDP2NkuENhhFP4kp2G/8nMCAKPHQ9YYk=) 11: ZbwUWjs9o76pI3kjzXXqiUmfJWs.roa (hash: z8UzCAWnCWtYZdQcdAh+iDVTaruSoFX/I30w0uTUKuY=) 12: c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa (hash: qo5ZvreioWLB6l4kqymHWyEjF1uBdQswYAIK4BkA1Q8=) 13: n_rP7jWTS4Z479ne6IAs1NmLMNk.roa (hash: tJkrT8kWq9nKGSWE25BO34wrEprXE5qoElSyxJPmjJc=) 14: ya1Qvlz0z2yIW3rWpmZNZE0Mahw.roa (hash: pUh8tSNEyZT8qdNgsK70xOXvpKS7aoBqKqdEgq1Za3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:9f:b5:6d:f5:cd:47:45:d4:07:cf:d8:45:1a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Validity Not Before: Jun 28 19:01:36 2025 GMT Not After : Jun 29 19:01:36 2025 GMT Subject: CN=96203a890aecdff19ac1630ad42003c55c5a5622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:19:44:6e:94:56:26:71:d6:ed:f1:6e:c7: 95:4c:34:e7:9b:8c:9a:81:99:a9:89:6e:18:c0:a4: e4:32:8d:5c:cf:82:f3:a2:d4:56:f8:04:0f:11:da: 78:eb:a8:60:c9:cf:28:6b:5f:6e:87:94:51:69:13: b7:d9:d0:79:2d:69:45:37:f8:72:0b:88:62:c7:de: d9:b7:46:12:64:4e:07:8b:f5:22:e1:e4:26:50:25: 79:d2:56:60:85:b9:ed:ee:30:d5:96:54:b4:20:4b: f9:e8:7a:27:e7:d0:58:65:50:24:93:b3:92:fd:d5: d0:55:c7:a3:4c:22:43:9d:10:17:cf:92:75:ce:1b: 07:a4:ed:90:0f:a3:f1:57:21:15:a2:05:44:8b:f4: 1f:b6:bf:4d:22:32:03:d7:64:34:85:22:d5:20:c4: dd:25:18:b3:bc:bd:43:69:09:d0:9f:96:71:55:31: 5d:ab:c2:0d:f0:c7:13:90:41:d9:b2:1f:0a:47:10: ed:1b:3b:bc:6c:e5:f3:d2:85:f9:1b:6d:25:3d:4a: 0a:c3:70:f6:df:39:a4:aa:50:b0:68:0b:00:48:7f: 75:2e:5b:34:25:81:0d:8e:73:dd:fc:b5:75:80:d6: 3d:17:6f:ba:50:b6:5c:67:5b:96:d3:81:06:7f:0f: 34:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:20:3A:89:0A:EC:DF:F1:9A:C1:63:0A:D4:20:03:C5:5C:5A:56:22 X509v3 Authority Key Identifier: keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:35:e4:92:4f:cd:07:83:c2:28:66:fa:3c:6d:b3:6a:85:9f: b1:db:ea:0a:43:34:f5:48:44:2b:d2:63:4f:62:7f:92:ca:e8: 39:1d:b6:c5:70:5c:b7:84:5a:aa:5e:a2:6a:a1:f6:65:99:ce: ac:bf:6b:a0:5f:a8:eb:50:8f:86:81:c5:e5:b7:38:d8:ab:79: 55:20:12:3e:85:96:65:e8:5e:4a:65:74:b0:68:d5:c5:eb:dd: 2e:aa:fa:91:21:26:bc:00:e8:d6:9c:4e:82:ea:c6:9b:7b:d8: b6:1e:14:dc:89:4b:5f:4d:55:f6:5c:cb:32:37:21:0e:36:fc: 87:38:74:b0:d2:95:02:33:55:a4:95:a2:7d:5c:79:75:cc:9d: f9:ea:ab:b3:13:08:4e:47:0a:4b:05:b4:3f:cf:44:f9:33:d8: a1:21:89:b3:95:5d:74:ec:98:b2:c4:39:1d:c5:2e:09:bc:92: ec:fe:c0:0c:b5:e1:82:ea:b5:5b:a7:57:a3:f3:50:2f:2c:67: 06:30:35:4c:d6:28:90:7d:cc:e3:c0:86:79:6e:ea:bb:4b:e3: f8:01:d7:5f:e6:8e:1d:8f:10:f1:42:80:1e:5a:41:02:6c:75: d4:4a:4c:90:fd:bb:68:f3:0e:ed:1a:e2:f2:97:d4:d8:be:ac: 71:b4:ce:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36p+1bfXNR0XUB8/YRRoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1 NWMzNjEwHhcNMjUwNjI4MTkwMTM2WhcNMjUwNjI5MTkwMTM2WjAzMTEwLwYDVQQD Eyg5NjIwM2E4OTBhZWNkZmYxOWFjMTYzMGFkNDIwMDNjNTVjNWE1NjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVUZRG6UViZx1u3xbseVTDTnm4ya gZmpiW4YwKTkMo1cz4LzotRW+AQPEdp466hgyc8oa19uh5RRaRO32dB5LWlFN/hy C4hix97Zt0YSZE4Hi/Ui4eQmUCV50lZghbnt7jDVllS0IEv56Hon59BYZVAkk7OS /dXQVcejTCJDnRAXz5J1zhsHpO2QD6PxVyEVogVEi/Qftr9NIjID12Q0hSLVIMTd JRizvL1DaQnQn5ZxVTFdq8IN8McTkEHZsh8KRxDtGzu8bOXz0oX5G20lPUoKw3D2 3zmkqlCwaAsASH91Lls0JYENjnPd/LV1gNY9F2+6ULZcZ1uW04EGfw80MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYgOokK7N/xmsFjCtQgA8VcWlYiMB8GA1UdIwQY MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut M2FhN2RhYTlkM2VjLzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzXkkk/N B4PCKGb6PG2zaoWfsdvqCkM09UhEK9JjT2J/ksroOR22xXBct4Raql6iaqH2ZZnO rL9roF+o61CPhoHF5bc42Kt5VSASPoWWZeheSmV0sGjVxevdLqr6kSEmvADo1pxO gurGm3vYth4U3IlLX01V9lzLMjchDjb8hzh0sNKVAjNVpJWifVx5dcyd+eqrsxMI TkcKSwW0P89E+TPYoSGJs5VddOyYssQ5HcUuCbyS7P7ADLXhguq1W6dXo/NQLyxn BjA1TNYokH3M48CGeW7qu0vj+AHXX+aOHY8Q8UKAHlpBAmx11EpMkP27aPMO7Rri 8pfU2L6scbTO3g== -----END CERTIFICATE-----Generated at Sat Jun 28 20:33:03 2025 by rpki-client