$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: dyPVSPRB8oq7b2rBeIqmE4gXwJt1Tc1om/NCc0ngh5A= Subject key identifier: A7:47:8E:12:D8:2A:D1:F9:93:CE:B9:AD:6F:4A:AF:3B:4D:C6:34:A0 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 0198D660619AA3C4F4F4F28D02D9AC767C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1659 Signing time: Sat 23 Aug 2025 10:01:37 +0000 Manifest this update: Sat 23 Aug 2025 10:01:37 +0000 Manifest next update: Sun 24 Aug 2025 10:01:37 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: krvCMMp2/Oi0EEQ6OG0kAM1zIz26B3jhdowHuaZtaXY=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:60:61:9a:a3:c4:f4:f4:f2:8d:02:d9:ac:76:7c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Aug 23 10:01:37 2025 GMT Not After : Aug 24 10:01:37 2025 GMT Subject: CN=a7478e12d82ad1f993ceb9ad6f4aaf3b4dc634a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:d9:47:46:3a:93:46:3c:72:6e:cb:54:8c: c5:ae:29:fa:f6:40:7c:c1:c0:a1:f9:22:cb:d8:af: e0:f1:b2:e7:6b:b0:11:c6:1b:0a:27:c6:41:b6:a3: 00:5a:1b:25:89:70:62:2a:54:72:19:ca:80:5f:da: 24:f9:07:dd:80:17:1a:38:4e:cf:d0:66:e1:97:5a: cb:58:bc:7a:b1:67:c2:4b:1d:2f:7e:55:ae:ef:bc: 75:b1:50:2c:28:ba:e4:41:bc:ad:10:27:63:74:fa: 45:4f:9e:4f:f4:5e:7e:73:53:aa:ff:b8:37:fb:e9: 8a:f2:93:13:3c:3b:ec:71:7e:44:96:36:a3:cf:0a: e0:ff:72:d3:4c:54:55:c3:c1:9e:2c:2d:24:ad:f7: da:78:83:4d:a3:2d:b5:48:a7:99:e1:c1:16:d7:0b: 2f:cb:01:80:4b:32:7a:ca:17:52:cd:eb:d1:6a:c6: 65:11:e9:bc:58:ce:d6:a8:d0:8e:9b:cd:a5:3a:d9: 42:20:49:c5:c4:b7:c1:02:f2:1c:3d:c9:c7:3b:75: ac:6a:97:1a:19:39:91:75:27:67:e0:e0:d4:35:71: e3:21:30:f4:f2:e9:c4:7d:5e:1c:be:de:37:2f:ad: 97:b1:53:4c:05:9e:3e:5d:ee:bd:af:4b:ba:ed:9e: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:47:8E:12:D8:2A:D1:F9:93:CE:B9:AD:6F:4A:AF:3B:4D:C6:34:A0 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:23:b3:b5:1c:4e:1b:75:c1:b0:e1:32:c2:f0:aa:1a:17:ec: 7c:91:e0:e8:c7:6b:9c:78:0f:98:38:2e:cd:fd:bf:e3:ee:b3: 0e:20:8b:be:f2:da:9e:27:6a:5d:27:81:7e:7b:8e:bf:64:7f: e8:70:2a:f3:39:b0:cf:33:18:46:7b:f0:ec:89:d1:5e:cd:2f: aa:8c:99:3f:2e:e9:91:69:eb:ea:3a:89:bc:15:80:fd:82:53: cb:29:6d:c6:84:c1:b3:87:6f:91:28:a5:bb:51:1b:92:2f:cb: 36:6e:b5:14:49:5a:cc:56:40:8f:18:40:d2:c0:7c:2c:63:14: 42:f7:9a:3c:b5:cd:5d:fe:0f:1f:12:4d:8a:8f:30:a4:30:dc: ea:87:13:81:94:35:76:fd:27:81:ee:7b:27:99:43:2a:fa:46: 61:f7:94:fc:94:39:80:a7:f4:ac:0c:3b:6b:ca:05:45:b1:d0: 48:32:b3:3c:57:4d:79:5d:73:09:1e:27:81:a3:bc:a4:4e:bc: d9:df:75:5e:e4:5d:f8:a8:e5:87:87:1e:c6:10:93:2f:46:01: 7a:68:25:2a:9b:29:b3:21:cf:05:87:67:8e:d8:f6:79:ba:6c: 0c:e9:d7:b3:2b:b4:ee:38:9e:20:61:b8:29:47:48:5d:54:52: 4a:a6:c2:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWYGGao8T09PKNAtmsdnx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUwODIzMTAwMTM3WhcNMjUwODI0MTAwMTM3WjAzMTEwLwYDVQQD EyhhNzQ3OGUxMmQ4MmFkMWY5OTNjZWI5YWQ2ZjRhYWYzYjRkYzYzNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqonZR0Y6k0Y8cm7LVIzFrin69kB8 wcCh+SLL2K/g8bLna7ARxhsKJ8ZBtqMAWhsliXBiKlRyGcqAX9ok+QfdgBcaOE7P 0Gbhl1rLWLx6sWfCSx0vflWu77x1sVAsKLrkQbytECdjdPpFT55P9F5+c1Oq/7g3 ++mK8pMTPDvscX5Eljajzwrg/3LTTFRVw8GeLC0krffaeINNoy21SKeZ4cEW1wsv ywGASzJ6yhdSzevRasZlEem8WM7WqNCOm82lOtlCIEnFxLfBAvIcPcnHO3Wsapca GTmRdSdn4ODUNXHjITD08unEfV4cvt43L62XsVNMBZ4+Xe69r0u67Z67DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdHjhLYKtH5k865rW9KrztNxjSgMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyOztRxO G3XBsOEywvCqGhfsfJHg6MdrnHgPmDguzf2/4+6zDiCLvvLanidqXSeBfnuOv2R/ 6HAq8zmwzzMYRnvw7InRXs0vqoyZPy7pkWnr6jqJvBWA/YJTyyltxoTBs4dvkSil u1Ebki/LNm61FElazFZAjxhA0sB8LGMUQveaPLXNXf4PHxJNio8wpDDc6ocTgZQ1 dv0nge57J5lDKvpGYfeU/JQ5gKf0rAw7a8oFRbHQSDKzPFdNeV1zCR4ngaO8pE68 2d91XuRd+Kjlh4cexhCTL0YBemglKpspsyHPBYdnjtj2ebpsDOnXsyu07jieIGG4 KUdIXVRSSqbC7A== -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:03 2025 by rpki-client