$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: mIIkgcVRKFtZ3Hcux9atE2RCOXBFMislbGIioTPKf0k= Subject key identifier: 7B:1D:79:E8:45:A3:EB:51:CB:0D:F6:14:AC:63:84:DE:2C:2A:90:67 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 0198D7A927EC1CA92F8551E920FADFA1256E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 166A Signing time: Sat 23 Aug 2025 16:00:43 +0000 Manifest this update: Sat 23 Aug 2025 16:00:43 +0000 Manifest next update: Sun 24 Aug 2025 16:00:43 +0000 Files and hashes: 1: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=) 2: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 3: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 4: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 5: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 6: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 7: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: k0EK7YpNzIzETaksFOXPTY94lXCdf8kp1XR2hVsMeBU=) 8: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 9: ZmCMretj_IKNhbhPW7MGGPPg6QY.roa (hash: 4kecTGFd/jV1xEOhbuwNVp/CnF9j4BLYU+5l4DsS6Q4=) 10: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 11: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 12: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 13: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 14: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) 15: yBjQt0nxOzCTFYaYzTfVvAxNLN4.roa (hash: mRd9L3aVB8Ods5APaINStOPnEMONcl4icTGrN8Xa60U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:a9:27:ec:1c:a9:2f:85:51:e9:20:fa:df:a1:25:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Aug 23 16:00:43 2025 GMT Not After : Aug 24 16:00:43 2025 GMT Subject: CN=7b1d79e845a3eb51cb0df614ac6384de2c2a9067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:db:45:b1:ca:3c:c0:65:a1:4d:23:97:57: dc:8e:23:8e:04:b7:c3:91:cb:80:c4:f8:37:71:e4: 2c:2a:37:45:bd:b1:40:d3:dc:35:72:47:21:c7:11: 7a:95:bb:f0:b4:fc:cb:cd:0f:be:01:46:8e:25:df: df:0e:c8:a0:1f:79:cd:26:51:26:4f:1c:c3:40:cf: 53:16:57:7e:6d:ce:86:91:3b:6d:07:82:81:b9:34: 79:77:cb:87:17:03:b6:16:2c:b7:13:fe:c4:49:d3: 28:65:a5:6a:8e:f5:5a:d0:2c:4f:ed:1f:1b:23:16: 41:33:69:1b:0b:7a:d2:98:b0:e3:b4:30:4b:c7:ae: 30:f9:44:d3:bf:3b:67:30:36:83:97:60:cc:37:0e: ee:d5:8b:e1:db:52:15:04:d7:11:db:02:a1:98:0b: 96:be:18:b7:93:83:06:74:30:76:6a:ef:e4:7e:86: 3b:f5:dc:4d:ac:fb:b4:58:37:ed:4b:21:5c:33:f7: cb:20:0f:0b:b6:45:8a:59:a1:b0:fd:f1:a5:f8:69: 31:02:86:da:f5:80:01:94:ad:e2:d3:8f:aa:12:fe: 8c:a6:0a:0c:c4:88:d1:7f:21:b5:3a:f9:ef:c6:dc: 4d:c8:fc:d5:ab:14:8e:23:8b:fb:eb:72:40:6e:13: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1D:79:E8:45:A3:EB:51:CB:0D:F6:14:AC:63:84:DE:2C:2A:90:67 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:50:cc:f1:82:33:0f:a7:72:10:56:76:12:b2:67:79:df:3b: 29:21:0d:5e:a7:16:a3:61:05:4d:7d:02:3d:c5:a8:16:a8:e9: 94:2e:70:04:8c:d7:cb:24:cd:58:97:61:f4:4b:8c:94:a8:ee: bc:c9:65:a8:71:7e:4b:ad:0f:fb:f6:c8:33:89:5d:6c:67:a8: 47:23:53:42:f4:e5:4c:50:d9:87:51:75:18:21:93:33:86:6e: c8:d3:9f:93:f2:e9:1b:de:55:33:9e:2d:86:61:0f:7a:c1:23: 70:a7:f6:d4:c0:7e:64:25:f3:a1:f0:43:82:b7:30:d1:7a:a2: d7:f2:b2:09:2b:88:2d:80:c1:8a:4f:c6:a3:66:b5:1d:69:7c: 02:94:c8:53:20:bf:1a:a0:30:ca:8a:1e:7a:5f:03:ee:f5:7f: 6f:4a:e8:8c:25:f2:10:4f:ac:47:83:3f:47:7e:f2:96:d5:bd: 33:43:2a:bd:f2:99:90:2d:2c:c0:8f:7a:ab:b9:6d:7f:82:ce: d9:c4:61:e7:0a:6e:ab:2b:4f:05:57:4e:ea:ce:dc:89:f0:c3: 47:62:34:bf:aa:43:10:19:f5:5a:07:01:dc:41:d0:ae:00:1e: 3c:ac:8a:52:32:ef:75:22:fd:29:f9:d6:3c:0f:72:f7:33:08: 41:25:be:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXqSfsHKkvhVHpIPrfoSVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUwODIzMTYwMDQzWhcNMjUwODI0MTYwMDQzWjAzMTEwLwYDVQQD Eyg3YjFkNzllODQ1YTNlYjUxY2IwZGY2MTRhYzYzODRkZTJjMmE5MDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss7bRbHKPMBloU0jl1fcjiOOBLfD kcuAxPg3ceQsKjdFvbFA09w1ckchxxF6lbvwtPzLzQ++AUaOJd/fDsigH3nNJlEm TxzDQM9TFld+bc6GkTttB4KBuTR5d8uHFwO2Fiy3E/7ESdMoZaVqjvVa0CxP7R8b IxZBM2kbC3rSmLDjtDBLx64w+UTTvztnMDaDl2DMNw7u1Yvh21IVBNcR2wKhmAuW vhi3k4MGdDB2au/kfoY79dxNrPu0WDftSyFcM/fLIA8LtkWKWaGw/fGl+GkxAoba 9YABlK3i04+qEv6MpgoMxIjRfyG1OvnvxtxNyPzVqxSOI4v763JAbhPMHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsdeehFo+tRyw32FKxjhN4sKpBnMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFDM8YIz D6dyEFZ2ErJned87KSENXqcWo2EFTX0CPcWoFqjplC5wBIzXyyTNWJdh9EuMlKju vMllqHF+S60P+/bIM4ldbGeoRyNTQvTlTFDZh1F1GCGTM4ZuyNOfk/LpG95VM54t hmEPesEjcKf21MB+ZCXzofBDgrcw0Xqi1/KyCSuILYDBik/Go2a1HWl8ApTIUyC/ GqAwyooeel8D7vV/b0rojCXyEE+sR4M/R37yltW9M0MqvfKZkC0swI96q7ltf4LO 2cRh5wpuqytPBVdO6s7cifDDR2I0v6pDEBn1WgcB3EHQrgAePKyKUjLvdSL9KfnW PA9y9zMIQSW+qQ== -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:19 2025 by rpki-client