$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: W4tGaUq96Ry3AG6KIkdfM4fUkRfExvOFSGItatOZkik= Subject key identifier: 3F:7E:92:B7:4C:3A:B5:64:C6:7A:D3:0A:53:14:FB:87:3E:F9:2C:21 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 0196C3823D431C48FC6E00F58D54BB49FC08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 1555 Signing time: Mon 12 May 2025 08:00:14 +0000 Manifest this update: Mon 12 May 2025 08:00:14 +0000 Manifest next update: Tue 13 May 2025 08:00:14 +0000 Files and hashes: 1: 06heLpkhPZDIbobUdBVrEl7tRaM.roa (hash: 1VfnXVrmD1QJCPPP0yoMA9t0Y95B+NtzKULxpukikqQ=) 2: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (hash: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=) 3: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=) 4: 528KTEkQew3OKB0sdZbyrpr76lo.roa (hash: vzEojXovmM1vbii6xpgBaXVLuyQKtmvj4cwlpTlnTnA=) 5: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 6: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 7: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 8: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 9: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: BAOUYAoatVAAm0F3ok6aXyQh7VBm1D2Vht42ojbhPC0=) 11: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 12: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 14: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 15: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 16: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c3:82:3d:43:1c:48:fc:6e:00:f5:8d:54:bb:49:fc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: May 12 08:00:14 2025 GMT Not After : May 13 08:00:14 2025 GMT Subject: CN=3f7e92b74c3ab564c67ad30a5314fb873ef92c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:62:5a:11:db:4f:bb:d9:e4:78:93:48:34: 1f:4e:80:9b:09:30:3f:c4:e5:84:08:77:3d:83:d3: f2:98:16:8e:7f:c0:02:46:fb:fa:84:ec:d1:cf:bd: 4c:5c:85:a2:3a:3b:0e:cf:e0:06:f7:36:1c:a5:1b: 2b:95:e9:f1:57:54:19:74:38:85:42:96:25:61:68: 5f:3e:d5:35:b5:45:19:fe:f8:9f:40:c6:9b:41:07: 97:ae:b6:21:87:e8:30:8d:bd:82:72:b3:df:e5:dc: ee:df:97:8c:51:02:c1:a1:b4:d4:a5:18:26:ae:a9: ae:2d:47:3d:52:80:89:78:35:fe:c7:08:c3:14:f4: cd:63:24:fa:7b:91:12:1e:5b:85:d5:90:2b:4a:60: 0e:72:4d:d8:10:4d:a6:66:d5:f5:9e:1b:29:9f:4a: 9a:d7:01:c0:23:3e:ec:ad:98:75:7d:d2:73:05:03: be:69:8c:32:1b:e3:4f:04:5a:3a:4b:35:8e:d5:98: 84:ea:3f:a5:e3:3b:a6:27:f2:a8:14:96:dd:2a:83: 6a:7c:fb:d0:ff:44:f5:38:a4:f4:f6:cc:50:bc:1f: 0b:7e:e5:4d:6f:b8:7b:78:3b:ef:56:82:ff:97:fa: 2d:5f:14:82:ed:ee:d9:f1:7b:da:4d:f5:45:8b:7e: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7E:92:B7:4C:3A:B5:64:C6:7A:D3:0A:53:14:FB:87:3E:F9:2C:21 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:96:60:cc:d8:1f:94:45:e4:6d:91:5c:48:6b:48:c7:aa:db: 60:78:b1:30:2a:72:37:40:e1:e5:36:5c:05:8a:be:75:d3:a3: 41:ed:99:35:e5:0e:2d:4e:ef:1b:82:1c:6b:8e:07:2f:d6:e0: 57:90:8a:50:12:2e:6f:ba:41:11:e7:f1:43:b3:f4:b3:71:47: 28:93:bc:3c:3c:44:f4:10:2f:87:f6:7f:74:6a:d6:19:ad:2c: 82:35:91:05:26:77:f8:f6:7b:96:82:dc:f8:b6:7c:9f:d5:1e: 47:06:f2:d4:7f:c8:75:35:ef:cf:f6:5c:cb:c3:5c:4f:34:fe: d4:80:3f:3b:6b:45:c4:4c:16:9d:05:cd:65:46:82:19:b2:5a: fc:31:f2:e8:2b:fb:e9:89:a4:df:26:5f:61:77:3d:e1:4a:de: 5b:cb:12:7b:e1:a1:3b:c2:63:71:49:27:9b:d0:de:98:cf:a1: d2:1c:c0:d0:38:da:fc:d9:0a:67:c7:02:2f:d3:4c:48:f9:32: 23:d5:ef:0e:34:5c:03:84:40:9e:9a:04:8f:d9:61:3a:43:23: ba:b3:8f:d6:24:53:b3:2d:d6:79:00:26:5b:35:91:66:0e:79: f0:59:7a:eb:8f:36:5a:37:63:88:7a:0a:93:5d:8c:d7:64:f5: f0:e4:f4:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbDgj1DHEj8bgD1jVS7SfwIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUwNTEyMDgwMDE0WhcNMjUwNTEzMDgwMDE0WjAzMTEwLwYDVQQD EygzZjdlOTJiNzRjM2FiNTY0YzY3YWQzMGE1MzE0ZmI4NzNlZjkyYzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxBiWhHbT7vZ5HiTSDQfToCbCTA/ xOWECHc9g9PymBaOf8ACRvv6hOzRz71MXIWiOjsOz+AG9zYcpRsrlenxV1QZdDiF QpYlYWhfPtU1tUUZ/vifQMabQQeXrrYhh+gwjb2CcrPf5dzu35eMUQLBobTUpRgm rqmuLUc9UoCJeDX+xwjDFPTNYyT6e5ESHluF1ZArSmAOck3YEE2mZtX1nhspn0qa 1wHAIz7srZh1fdJzBQO+aYwyG+NPBFo6SzWO1ZiE6j+l4zumJ/KoFJbdKoNqfPvQ /0T1OKT09sxQvB8LfuVNb7h7eDvvVoL/l/otXxSC7e7Z8XvaTfVFi36MSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9+krdMOrVkxnrTClMU+4c++SwhMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpZgzNgf lEXkbZFcSGtIx6rbYHixMCpyN0Dh5TZcBYq+ddOjQe2ZNeUOLU7vG4Ica44HL9bg V5CKUBIub7pBEefxQ7P0s3FHKJO8PDxE9BAvh/Z/dGrWGa0sgjWRBSZ3+PZ7loLc +LZ8n9UeRwby1H/IdTXvz/Zcy8NcTzT+1IA/O2tFxEwWnQXNZUaCGbJa/DHy6Cv7 6Ymk3yZfYXc94UreW8sSe+GhO8JjcUknm9DemM+h0hzA0Dja/NkKZ8cCL9NMSPky I9XvDjRcA4RAnpoEj9lhOkMjurOP1iRTsy3WeQAmWzWRZg558Fl66482WjdjiHoK k12M12T18OT0yA== -----END CERTIFICATE-----Generated at Mon May 12 12:58:52 2025 by rpki-client