$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: aW6qu9c7s7LoqzF6yT91A2zytfSARGcUybmPYGtmpvk= Subject key identifier: F2:54:3F:C3:80:76:BE:59:14:CC:EA:E9:CE:72:C9:2B:0D:8B:B2:0D Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 0198D583B681CA3AC5BD609DFCCED59F390A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 165B Signing time: Sat 23 Aug 2025 06:00:35 +0000 Manifest this update: Sat 23 Aug 2025 06:00:35 +0000 Manifest next update: Sun 24 Aug 2025 06:00:35 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=) 3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 10: AKM5h6Ix-3LMoRtdGUA19KyVLio.roa (hash: P77lNcJ0zrzNLtgfjbd4pt0XLBw/55/N1ocxrR5mz8k=) 11: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 12: IcBXNhcRwC9rqTJrrwBbNq4dyNc.roa (hash: fLLUYVbljHR6MG/7uXWdqM+yUv/JR8Ck06BiCfj9mCQ=) 13: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 14: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 15: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 16: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=) 17: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 18: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 19: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=) 20: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 21: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 22: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 23: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 24: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=) 25: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 26: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 27: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 28: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=) 29: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 30: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 31: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=) 32: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 33: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: unzmPptVKa5JJu4UZo4lhsFcE2Pg0jBfOJQq59mPbg0=) 35: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:b6:81:ca:3a:c5:bd:60:9d:fc:ce:d5:9f:39:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Aug 23 06:00:35 2025 GMT Not After : Aug 24 06:00:35 2025 GMT Subject: CN=f2543fc38076be5914cceae9ce72c92b0d8bb20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:45:22:83:ba:11:29:19:07:34:82:00:54: 02:1b:bc:15:be:53:f6:b2:64:5f:34:33:41:ba:0d: dc:d0:07:9f:10:f9:b1:25:ea:a8:09:65:f0:81:31: 38:b5:05:b9:ed:fb:4f:63:22:e1:d2:ce:a8:16:e2: 67:f6:15:cb:b2:38:8f:13:c8:a9:51:27:c6:bc:bb: b6:98:eb:37:87:0e:59:8c:cf:3b:5f:86:39:89:89: 55:87:7e:fa:7d:59:5a:01:f7:f1:f2:3f:db:88:25: 65:4d:c6:95:3c:83:b1:12:df:44:93:67:d6:83:1b: 5f:f3:93:12:b4:f9:e0:05:5a:6a:f8:b0:28:91:31: 2a:32:c8:17:77:58:b7:65:38:05:84:a6:52:11:29: 25:4d:bc:d4:fc:9d:c3:67:42:56:5b:6f:9d:35:fa: 8a:99:ba:46:9a:20:d5:cd:93:ac:1b:bb:3f:06:9d: 45:26:89:b1:99:12:c3:39:8c:a7:2b:25:a7:11:56: 8e:5a:86:12:62:01:d5:1c:42:e6:af:03:0d:40:bc: 9f:9a:2f:7c:7b:a2:c7:12:2d:e7:b7:92:5d:7b:7d: 48:ea:b4:a7:37:37:12:6e:38:1b:46:6f:17:86:28: e5:56:7c:03:76:c9:ee:0c:4d:df:45:5d:d5:8f:13: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:54:3F:C3:80:76:BE:59:14:CC:EA:E9:CE:72:C9:2B:0D:8B:B2:0D X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6c:4b:bc:52:5f:88:d0:80:c7:92:8a:45:cd:6b:88:38:47: 59:50:5c:ce:24:42:ce:53:8b:53:be:2c:e3:91:6b:71:c9:23: c6:f1:99:6c:95:99:ce:e8:e9:f7:cd:d1:82:6e:cf:29:42:0f: 28:3b:16:e7:23:3d:26:3e:2f:ea:f3:7b:60:8f:bd:87:1e:2a: 9a:90:b6:db:3a:fa:5b:cd:21:40:0e:82:d3:7b:e1:02:30:b5: 21:8c:e5:70:8d:ad:39:86:12:32:6f:5c:22:98:75:71:13:98: 7e:12:85:83:02:e0:15:cf:77:46:7d:82:50:73:0f:11:c6:7a: 26:dd:13:dd:e9:eb:b9:ee:89:0f:cf:04:41:ad:c0:c2:72:d8: 1e:bc:eb:83:31:8b:dd:d3:b6:76:e5:12:74:59:a5:9a:85:2e: 0b:1c:87:13:60:ca:7a:b7:58:e7:fd:cd:89:1a:3b:a0:66:82: ba:c1:3f:28:1a:c4:af:ff:a5:d7:14:24:f4:3b:c2:cd:67:da: ab:08:b1:90:26:bb:10:75:52:13:75:6a:c2:a3:52:ba:8b:5d: b5:b8:c3:b1:ed:dc:87:ad:c2:5d:2a:8f:37:18:3b:68:53:24: 51:df:06:d3:13:54:ad:e6:ff:76:9f:9f:c7:73:cd:9f:e3:2a: 38:da:04:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg7aByjrFvWCd/M7VnzkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUwODIzMDYwMDM1WhcNMjUwODI0MDYwMDM1WjAzMTEwLwYDVQQD EyhmMjU0M2ZjMzgwNzZiZTU5MTRjY2VhZTljZTcyYzkyYjBkOGJiMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOBFIoO6ESkZBzSCAFQCG7wVvlP2 smRfNDNBug3c0AefEPmxJeqoCWXwgTE4tQW57ftPYyLh0s6oFuJn9hXLsjiPE8ip USfGvLu2mOs3hw5ZjM87X4Y5iYlVh376fVlaAffx8j/biCVlTcaVPIOxEt9Ek2fW gxtf85MStPngBVpq+LAokTEqMsgXd1i3ZTgFhKZSESklTbzU/J3DZ0JWW2+dNfqK mbpGmiDVzZOsG7s/Bp1FJomxmRLDOYynKyWnEVaOWoYSYgHVHELmrwMNQLyfmi98 e6LHEi3nt5Jde31I6rSnNzcSbjgbRm8XhijlVnwDdsnuDE3fRV3VjxPz9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJUP8OAdr5ZFMzq6c5yySsNi7INMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGxLvFJf iNCAx5KKRc1riDhHWVBcziRCzlOLU74s45FrcckjxvGZbJWZzujp983Rgm7PKUIP KDsW5yM9Jj4v6vN7YI+9hx4qmpC22zr6W80hQA6C03vhAjC1IYzlcI2tOYYSMm9c Iph1cROYfhKFgwLgFc93Rn2CUHMPEcZ6Jt0T3enrue6JD88EQa3AwnLYHrzrgzGL 3dO2duUSdFmlmoUuCxyHE2DKerdY5/3NiRo7oGaCusE/KBrEr/+l1xQk9DvCzWfa qwixkCa7EHVSE3VqwqNSuotdtbjDse3ch63CXSqPNxg7aFMkUd8G0xNUreb/dp+f x3PNn+MqONoE7A== -----END CERTIFICATE-----Generated at Sat Aug 23 10:50:32 2025 by rpki-client