$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: I72monQVy20ybNdvbGtc/gwZcLzAQ2IeR+300IeV/rA= Subject key identifier: 36:F5:EC:D3:EE:1A:92:D4:9D:48:14:30:46:58:AE:72:4F:95:BF:25 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 0199FC589D25D04787EC3F4AECD7179DAFCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 1704 Signing time: Sun 19 Oct 2025 12:01:29 +0000 Manifest this update: Sun 19 Oct 2025 12:01:29 +0000 Manifest next update: Mon 20 Oct 2025 12:01:29 +0000 Files and hashes: 1: 2TxyjhsmXIUBo8Zo1YorHOQd5m4.roa (hash: G16L4uDJVkxkt6HibPGk4SuOrzYueNtQRs61VLc/3UQ=) 2: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 3: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 4: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 5: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 6: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 7: X6_TjtQwmeuK02HsdtBqExL53Ns.roa (hash: iFX22eM+S+PXpdOb7LkHEMy7skJnpdQtVRXSFjP8GCY=) 8: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: N1go4c09dTNO6WF6FZNSqaTzXm89rs3NB/PQVb+9noE=) 9: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 10: ZmCMretj_IKNhbhPW7MGGPPg6QY.roa (hash: 4kecTGFd/jV1xEOhbuwNVp/CnF9j4BLYU+5l4DsS6Q4=) 11: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 12: bef2KuKcJAMamvz0TVXs-qJ_V7A.roa (hash: XsMssR0GRIHZKbVFvC5zdkQCQ8TXXybVYnAS1M8uGbw=) 13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 14: hryCAnXILF_v7a6M_L6UbzP1x0E.roa (hash: KffgzjGeNv+fdBscER8L1iiMJC1SCTAbWKtpEJoIDmc=) 15: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 16: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 17: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:9d:25:d0:47:87:ec:3f:4a:ec:d7:17:9d:af:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Oct 19 12:01:29 2025 GMT Not After : Oct 20 12:01:29 2025 GMT Subject: CN=36f5ecd3ee1a92d49d4814304658ae724f95bf25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c6:51:11:1c:be:3e:da:5f:3c:8e:1b:5b:55: 44:50:51:5d:b5:6c:74:35:59:f4:58:3b:73:34:04: c9:3e:79:ef:a5:a2:bf:37:5c:bf:ef:8f:a8:96:a3: 78:33:cb:7a:cb:47:a2:e2:f0:e7:85:08:8c:6c:70: c3:30:57:4f:5f:de:ff:c5:08:8a:bd:25:b5:4d:c4: a8:03:6b:2b:58:70:90:fa:e6:39:a6:9c:f8:e1:31: d7:b7:f0:d3:27:e5:1a:23:e5:37:e0:fe:bc:f4:e9: 43:83:cb:25:df:36:cd:cb:44:90:5b:04:dd:a3:ac: 3b:59:2c:7b:08:98:64:fd:5a:8d:73:f5:43:8d:51: 80:39:d5:13:92:5e:24:a7:8f:80:1e:ef:ec:06:d5: 36:68:4a:fa:db:1d:93:d3:fe:10:14:a4:08:d3:45: 28:ff:a5:3f:8e:97:50:9f:04:e1:4b:bc:b7:14:81: 28:14:ba:d6:c5:21:4b:32:6e:18:64:8f:15:17:4d: 73:ad:b6:4f:18:3e:1d:92:24:0d:15:fd:e6:52:3a: 14:10:05:ad:ba:6a:8c:e0:99:3f:56:52:fa:4d:de: fc:65:5e:99:80:d1:98:79:c2:86:87:81:29:f5:ee: 33:2c:06:51:4d:dd:4a:ba:dc:98:2c:fd:e1:9d:40: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:EC:D3:EE:1A:92:D4:9D:48:14:30:46:58:AE:72:4F:95:BF:25 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:31:ce:de:0d:83:86:e7:7b:49:13:9b:4d:32:af:dc:f4:a0: 9f:57:02:04:6c:9f:a1:dc:c9:6d:e5:70:7c:70:31:92:ef:44: ee:29:f8:f2:87:65:a6:69:10:57:2c:52:dd:79:fc:43:4a:aa: a0:e1:08:43:1c:5f:db:c1:a9:fd:d1:23:29:df:2b:73:fe:7c: c9:3f:60:3e:9e:1a:0e:b2:ff:d7:0c:91:99:d9:c4:22:eb:5c: e8:1f:39:04:97:16:19:21:31:57:b5:cd:c8:21:52:17:57:8e: 97:4e:cb:cd:47:25:dd:e7:a7:30:41:69:b3:51:71:04:44:8c: f2:3d:80:15:61:67:28:95:d4:5c:b6:46:32:af:fc:6f:a1:6d: 03:0f:1a:a3:5c:4a:92:b6:14:2c:43:e4:d2:81:fa:fa:a8:e6: 8f:43:2b:36:ab:61:f5:bf:9d:69:57:67:14:0c:6b:77:e5:f4: 33:a9:a7:c9:d0:3f:68:6f:57:0b:90:ee:cd:a2:68:3e:cb:9a: 29:4e:43:7f:40:73:17:86:39:8d:e0:19:65:72:a5:a7:b4:e1: 31:36:d3:ca:ff:14:78:ef:f5:18:f2:34:1e:48:99:4a:4a:fd: ca:8d:03:0f:4d:27:ee:22:c4:ce:6c:c9:18:57:99:bd:55:20: ff:62:6d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WJ0l0EeH7D9K7NcXna/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMDE5MTIwMTI5WhcNMjUxMDIwMTIwMTI5WjAzMTEwLwYDVQQD EygzNmY1ZWNkM2VlMWE5MmQ0OWQ0ODE0MzA0NjU4YWU3MjRmOTViZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcZRERy+PtpfPI4bW1VEUFFdtWx0 NVn0WDtzNATJPnnvpaK/N1y/74+olqN4M8t6y0ei4vDnhQiMbHDDMFdPX97/xQiK vSW1TcSoA2srWHCQ+uY5ppz44THXt/DTJ+UaI+U34P689OlDg8sl3zbNy0SQWwTd o6w7WSx7CJhk/VqNc/VDjVGAOdUTkl4kp4+AHu/sBtU2aEr62x2T0/4QFKQI00Uo /6U/jpdQnwThS7y3FIEoFLrWxSFLMm4YZI8VF01zrbZPGD4dkiQNFf3mUjoUEAWt umqM4Jk/VlL6Td78ZV6ZgNGYecKGh4Ep9e4zLAZRTd1KutyYLP3hnUCFKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb17NPuGpLUnUgUMEZYrnJPlb8lMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTHO3g2D hud7SRObTTKv3PSgn1cCBGyfodzJbeVwfHAxku9E7in48odlpmkQVyxS3Xn8Q0qq oOEIQxxf28Gp/dEjKd8rc/58yT9gPp4aDrL/1wyRmdnEIutc6B85BJcWGSExV7XN yCFSF1eOl07LzUcl3eenMEFps1FxBESM8j2AFWFnKJXUXLZGMq/8b6FtAw8ao1xK krYULEPk0oH6+qjmj0MrNqth9b+daVdnFAxrd+X0M6mnydA/aG9XC5DuzaJoPsua KU5Df0BzF4Y5jeAZZXKlp7ThMTbTyv8UeO/1GPI0HkiZSkr9yo0DD00n7iLEzmzJ GFeZvVUg/2Jttg== -----END CERTIFICATE-----Generated at Sun Oct 19 18:29:58 2025 by rpki-client