$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: lGkkRH/pBBB52Zb5hL4DRZt6fn01aOYjo6tC5OOXWhk= Subject key identifier: 5E:C3:95:42:04:73:C4:C1:1F:58:73:F9:08:1D:07:B7:6A:CC:9E:F7 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 0199FB7CC3E1DF0CA308A44812455E02B289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 0F9E Signing time: Sun 19 Oct 2025 08:01:21 +0000 Manifest this update: Sun 19 Oct 2025 08:01:21 +0000 Manifest next update: Mon 20 Oct 2025 08:01:21 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: yZiz2PacdGgEg2LgQg5vTEQzA4UEiYQpDTiwIJkOIyI=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:c3:e1:df:0c:a3:08:a4:48:12:45:5e:02:b2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Oct 19 08:01:21 2025 GMT Not After : Oct 20 08:01:21 2025 GMT Subject: CN=5ec395420473c4c11f5873f9081d07b76acc9ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:4e:4a:ca:99:64:ec:54:22:a8:5c:b2:d9: cb:ea:5d:f8:7f:87:d2:2e:09:51:3a:7a:37:f5:dd: 5a:27:0c:12:a8:29:5d:0c:9f:90:9f:68:07:92:7a: ab:62:ce:e2:45:65:3c:58:78:6c:7d:39:ef:a6:c6: 27:26:5e:ac:e8:60:a9:14:34:c6:28:af:91:ff:6e: da:f2:4c:f0:18:e2:0c:b2:3a:96:95:81:fd:fd:88: e3:4f:eb:c6:00:41:79:3b:3b:23:49:0e:59:34:f8: 99:6c:44:7e:55:2d:a0:44:c6:cd:c8:bb:96:0e:c1: e5:0e:82:16:90:0f:51:a1:bd:7b:20:60:03:1e:29: 03:f3:5e:2b:be:86:f8:22:b0:b5:da:fd:f6:27:c5: 1a:e5:47:ce:7e:25:15:5e:30:35:30:e5:e8:01:16: 1a:7c:66:6e:96:76:6e:c0:c5:41:77:ec:6a:cb:45: cc:2e:32:29:c6:07:61:ad:ca:95:c6:08:e7:93:21: 86:e8:e1:7f:99:12:13:67:1d:02:6f:4e:c5:3b:fb: 52:22:6b:ef:b6:b8:b2:f5:6c:41:d2:7d:04:56:3d: 65:37:d7:2b:0c:5a:8d:d9:3c:83:a7:6e:c2:84:70: 39:c9:11:53:cb:04:6b:3d:c3:01:ea:01:33:a1:f1: 93:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C3:95:42:04:73:C4:C1:1F:58:73:F9:08:1D:07:B7:6A:CC:9E:F7 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cd:43:92:f6:29:59:38:2b:16:e1:d9:0f:88:85:db:7d:39: b3:00:86:db:8e:eb:92:1b:db:74:c5:0c:29:63:9d:d8:52:50: 6f:c9:1b:04:60:43:29:f3:84:0f:39:fc:30:27:9f:1a:1a:54: 35:a7:b5:98:ab:16:c5:82:e5:29:79:f8:dd:fa:4d:d0:fa:65: 40:37:18:58:fc:8b:85:51:c7:f4:f4:b5:60:55:4e:42:0d:78: cd:cb:6d:c5:22:f2:54:bd:e9:68:ea:c3:72:64:ce:f2:e4:ec: 0c:15:49:53:0b:96:43:84:f8:b8:48:14:fa:5e:1a:5c:8f:8a: 2f:a9:28:54:d9:e1:cd:52:9f:1a:84:88:be:8f:b8:18:46:b8: c1:08:b9:67:35:57:68:30:3b:5f:d7:87:86:93:bb:22:c5:a4: b8:98:29:f4:32:e5:4d:56:f4:c3:1a:5f:83:ac:1e:bc:e9:b8: 79:6d:56:5a:45:22:c9:ad:1a:a0:f9:91:f6:bd:d5:e9:37:39: d0:f9:b4:de:8c:60:3d:59:ac:0f:11:43:c2:92:11:67:67:de: ea:31:f1:3d:ac:cf:0d:2d:a1:31:2c:d4:30:30:b2:f3:ea:8f: 4c:df:9a:32:c2:f3:4b:a6:74:91:52:65:96:dd:8a:91:a8:6d: db:76:04:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fMPh3wyjCKRIEkVeArKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUxMDE5MDgwMTIxWhcNMjUxMDIwMDgwMTIxWjAzMTEwLwYDVQQD Eyg1ZWMzOTU0MjA0NzNjNGMxMWY1ODczZjkwODFkMDdiNzZhY2M5ZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6ZOSsqZZOxUIqhcstnL6l34f4fS LglROno39d1aJwwSqCldDJ+Qn2gHknqrYs7iRWU8WHhsfTnvpsYnJl6s6GCpFDTG KK+R/27a8kzwGOIMsjqWlYH9/YjjT+vGAEF5OzsjSQ5ZNPiZbER+VS2gRMbNyLuW DsHlDoIWkA9Rob17IGADHikD814rvob4IrC12v32J8Ua5UfOfiUVXjA1MOXoARYa fGZulnZuwMVBd+xqy0XMLjIpxgdhrcqVxgjnkyGG6OF/mRITZx0Cb07FO/tSImvv triy9WxB0n0EVj1lN9crDFqN2TyDp27ChHA5yRFTywRrPcMB6gEzofGTKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7DlUIEc8TBH1hz+QgdB7dqzJ73MB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM1DkvYp WTgrFuHZD4iF2305swCG247rkhvbdMUMKWOd2FJQb8kbBGBDKfOEDzn8MCefGhpU Nae1mKsWxYLlKXn43fpN0PplQDcYWPyLhVHH9PS1YFVOQg14zcttxSLyVL3paOrD cmTO8uTsDBVJUwuWQ4T4uEgU+l4aXI+KL6koVNnhzVKfGoSIvo+4GEa4wQi5ZzVX aDA7X9eHhpO7IsWkuJgp9DLlTVb0wxpfg6wevOm4eW1WWkUiya0aoPmR9r3V6Tc5 0Pm03oxgPVmsDxFDwpIRZ2fe6jHxPazPDS2hMSzUMDCy8+qPTN+aMsLzS6Z0kVJl lt2Kkaht23YE9A== -----END CERTIFICATE-----Generated at Sun Oct 19 12:54:52 2025 by rpki-client