$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: R1kJNaLwRNK2sWhgbeSVFELbO8fYM2fhxrIp+Kd8JEU= Subject key identifier: 33:03:17:51:42:2C:0C:31:E8:AC:8C:7F:1D:B4:6D:97:87:BB:B1:3B Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 0198D5F14062518F0858653AB2A1616C8672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 0F06 Signing time: Sat 23 Aug 2025 08:00:14 +0000 Manifest this update: Sat 23 Aug 2025 08:00:14 +0000 Manifest next update: Sun 24 Aug 2025 08:00:14 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: LaLS0B5/mOQA2DKc3SaKf57r4bYxefbFpzhONMAmLsA=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:40:62:51:8f:08:58:65:3a:b2:a1:61:6c:86:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Aug 23 08:00:14 2025 GMT Not After : Aug 24 08:00:14 2025 GMT Subject: CN=33031751422c0c31e8ac8c7f1db46d9787bbb13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:b1:25:d4:36:0c:be:14:0e:39:d0:b1:47: 50:64:37:7e:4b:05:46:78:a4:4d:72:91:7d:d5:3e: 62:c8:32:5f:f4:e7:3f:ab:b4:62:1a:55:77:4c:b0: 49:ab:bf:42:fc:16:9c:47:f2:38:96:c8:a1:6f:83: aa:c4:af:4f:5d:4d:b2:b2:e4:51:31:a7:e6:b1:22: 65:46:84:c0:95:56:f4:34:bc:67:1d:34:76:e2:e1: 62:d6:fe:33:20:ed:70:68:71:3c:cd:83:53:5b:23: 08:66:68:8b:1f:55:4a:61:01:6d:fe:d4:8f:fe:f0: 69:91:f8:ab:d8:40:fd:14:75:0c:7b:5d:9b:ce:8b: ab:a5:f7:78:a3:f4:68:f7:f5:5a:ed:27:25:e4:d1: 9f:8a:13:b2:8c:17:a0:ae:d2:2a:ef:b7:94:fc:98: 45:29:49:6a:08:19:1d:ad:19:6a:4b:c5:c7:28:a1: 63:7f:6e:23:e9:68:9a:c3:da:4d:a9:ec:c8:9a:68: d7:97:d9:83:ca:6c:9e:22:06:64:d2:81:8a:b6:b5: a2:aa:10:93:52:a3:27:5b:01:6c:b1:d0:60:4e:86: c8:c8:3b:84:32:29:8e:c2:28:97:c8:51:45:94:a9: aa:65:d6:3f:f1:25:bc:73:1c:af:e5:1a:e9:0d:86: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:03:17:51:42:2C:0C:31:E8:AC:8C:7F:1D:B4:6D:97:87:BB:B1:3B X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:8d:d2:5c:6c:cb:3a:7d:47:a5:3c:29:d4:60:7c:ca:bf:55: 2c:d4:64:e8:52:2e:f5:bb:62:95:6d:fa:12:bc:40:27:a8:44: b4:65:50:c7:5a:35:89:dd:bc:e1:5c:07:f8:69:80:c7:7d:b0: 53:86:3a:ad:c9:5e:45:46:60:94:8d:f8:b1:b0:d0:b6:23:f0: e9:71:f5:53:f5:46:83:47:92:ea:0b:67:d2:50:a7:67:6c:24: 6d:88:87:98:b5:46:92:69:13:16:7b:a6:e9:19:ba:a5:1e:92: 5a:80:d2:ec:17:60:45:d4:7c:61:d2:7c:97:40:e9:5e:84:21: b1:66:a6:f6:40:d1:a0:a3:1b:39:4e:cf:ab:97:27:8f:21:c9: 9f:a3:88:d3:9b:7f:1b:13:02:9f:cf:ed:57:ce:1e:51:f7:59: cb:cf:71:d1:87:45:e3:cf:92:ab:e1:67:28:42:6b:b2:0f:e7: 99:51:94:94:0d:26:cf:72:ba:5f:cb:36:e1:2c:87:c9:27:5c: ce:68:ca:d6:8c:71:93:a4:cc:11:ec:48:40:ce:6a:c6:63:47: a5:19:de:ee:4b:d6:0f:a2:7b:45:30:f5:8c:5b:95:53:9d:be: e1:e2:ab:62:14:97:7a:6d:7b:6f:28:95:e4:f0:3e:85:08:06: 9d:1b:da:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8UBiUY8IWGU6sqFhbIZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUwODIzMDgwMDE0WhcNMjUwODI0MDgwMDE0WjAzMTEwLwYDVQQD EygzMzAzMTc1MTQyMmMwYzMxZThhYzhjN2YxZGI0NmQ5Nzg3YmJiMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsCxJdQ2DL4UDjnQsUdQZDd+SwVG eKRNcpF91T5iyDJf9Oc/q7RiGlV3TLBJq79C/BacR/I4lsihb4OqxK9PXU2ysuRR MafmsSJlRoTAlVb0NLxnHTR24uFi1v4zIO1waHE8zYNTWyMIZmiLH1VKYQFt/tSP /vBpkfir2ED9FHUMe12bzourpfd4o/Ro9/Va7Scl5NGfihOyjBegrtIq77eU/JhF KUlqCBkdrRlqS8XHKKFjf24j6Wiaw9pNqezImmjXl9mDymyeIgZk0oGKtrWiqhCT UqMnWwFssdBgTobIyDuEMimOwiiXyFFFlKmqZdY/8SW8cxyv5RrpDYbd3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMDF1FCLAwx6KyMfx20bZeHu7E7MB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtY3SXGzL On1HpTwp1GB8yr9VLNRk6FIu9btilW36ErxAJ6hEtGVQx1o1id284VwH+GmAx32w U4Y6rcleRUZglI34sbDQtiPw6XH1U/VGg0eS6gtn0lCnZ2wkbYiHmLVGkmkTFnum 6Rm6pR6SWoDS7BdgRdR8YdJ8l0DpXoQhsWam9kDRoKMbOU7Pq5cnjyHJn6OI05t/ GxMCn8/tV84eUfdZy89x0YdF48+Sq+FnKEJrsg/nmVGUlA0mz3K6X8s24SyHySdc zmjK1oxxk6TMEexIQM5qxmNHpRne7kvWD6J7RTD1jFuVU52+4eKrYhSXem17byiV 5PA+hQgGnRva+w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:32 2025 by rpki-client