$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: 6CSdjbNrGcr6nbC85MVTfW0AjQ81Zx+uAmH4yDGVXQc= Subject key identifier: 48:22:4B:B6:21:40:FD:ED:CB:04:AC:D6:32:36:51:F7:71:79:ED:38 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 0199FD6B3DB465C4CB7C0ACB9BDA152FD3FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 171A Signing time: Sun 19 Oct 2025 17:01:27 +0000 Manifest this update: Sun 19 Oct 2025 17:01:27 +0000 Manifest next update: Mon 20 Oct 2025 17:01:27 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: MFsAIGGhjwkS7QqCImE8k8j0fHE.roa (hash: agrbR9N2CmVo23L0pspB3pCZ8XyUH28RrwKnFVhuak4=) 8: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 9: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 10: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 11: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: 8PYEoFSkl3NxwQCwxUF3PX4D2ul28D+6Moi2Xte4/Ig=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6b:3d:b4:65:c4:cb:7c:0a:cb:9b:da:15:2f:d3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Oct 19 17:01:27 2025 GMT Not After : Oct 20 17:01:27 2025 GMT Subject: CN=48224bb62140fdedcb04acd6323651f77179ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:bc:78:28:5b:91:7c:48:fc:db:51:6c:02: 11:0a:d1:4a:e9:7b:08:47:c8:a1:df:92:a5:bd:f3: d6:ff:c5:54:69:16:71:1a:60:9f:6d:25:83:46:3a: bf:bc:54:6e:15:a6:cd:67:c4:a3:5d:3f:7a:d8:5c: e0:77:2c:37:1f:f7:21:57:3a:72:7b:55:17:97:1f: 49:74:02:20:3b:65:b5:d1:d5:4f:4e:6c:fe:bb:1b: 9f:3a:31:b4:73:72:70:6f:08:d4:c8:96:3b:00:4e: 2b:a2:cf:de:96:28:7c:84:12:23:7e:1b:cf:d7:26: d3:7d:7d:b4:64:11:8c:d1:60:8a:ce:71:70:9f:0f: d7:0a:3a:7e:ac:e1:de:de:e1:6f:fe:5b:e8:15:7c: 52:31:77:95:c3:82:53:c7:83:17:02:af:9d:ac:da: 51:c7:57:bf:8b:e6:54:47:05:cc:ea:52:9c:58:64: 93:cd:6d:ea:02:c3:c3:7f:9f:d2:7e:48:fe:3f:df: 84:96:68:12:d7:b5:0c:7b:79:98:92:23:95:38:88: 4a:fa:f9:be:8f:b1:c2:6f:07:0f:ba:47:c1:b6:38: 63:e5:50:51:a4:a0:19:65:fe:bd:2b:b5:1c:65:a7: 8e:e6:2b:69:6a:2e:8a:dc:b8:63:66:72:52:f8:2d: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:4B:B6:21:40:FD:ED:CB:04:AC:D6:32:36:51:F7:71:79:ED:38 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1b:d8:0f:0c:ba:9e:6a:e2:87:77:06:65:55:e8:f1:be:0a: fe:8b:9c:4e:3d:52:25:f4:51:e2:d8:d6:a5:4e:08:6b:55:4a: f1:26:09:39:36:35:fa:df:b3:c8:f5:71:a7:6a:65:a0:03:f5: 95:7b:24:11:26:fd:30:f5:41:36:0b:5e:87:ad:fa:e7:a8:50: 1c:05:ad:e9:c5:54:7b:0a:a5:3d:f7:ae:b4:5e:56:19:c4:5a: ec:06:b4:5f:bc:24:37:7f:37:3f:d0:69:ba:1e:e9:a0:05:b8: 6a:c2:b0:8b:e0:31:0d:31:30:ce:d1:8e:61:44:38:69:78:84: ad:b0:df:f9:9e:f7:8b:94:df:65:7a:61:45:0f:fa:02:7f:5e: 1f:51:ab:ca:13:dd:e9:72:1d:b3:ae:ab:59:e9:ec:7e:73:ce: 2f:f1:26:28:2b:ee:18:b2:28:24:b2:87:78:01:ec:25:da:f4: 18:d5:91:d8:d2:9d:23:4c:a0:a0:48:5f:90:69:47:f7:09:00: 3a:0b:1b:7f:6e:92:94:98:e7:7a:60:ab:76:b5:6e:93:c9:48: 4d:c4:6a:ac:bc:cb:68:66:39:3c:d9:18:f6:3b:3c:fe:57:10: 41:b4:0d:2a:cf:2c:ca:e5:8e:19:73:7a:8d:1b:a2:c7:85:3f: c1:ee:c7:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9az20ZcTLfArLm9oVL9P/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUxMDE5MTcwMTI3WhcNMjUxMDIwMTcwMTI3WjAzMTEwLwYDVQQD Eyg0ODIyNGJiNjIxNDBmZGVkY2IwNGFjZDYzMjM2NTFmNzcxNzllZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuC8eChbkXxI/NtRbAIRCtFK6XsI R8ih35KlvfPW/8VUaRZxGmCfbSWDRjq/vFRuFabNZ8SjXT962Fzgdyw3H/chVzpy e1UXlx9JdAIgO2W10dVPTmz+uxufOjG0c3JwbwjUyJY7AE4ros/elih8hBIjfhvP 1ybTfX20ZBGM0WCKznFwnw/XCjp+rOHe3uFv/lvoFXxSMXeVw4JTx4MXAq+drNpR x1e/i+ZURwXM6lKcWGSTzW3qAsPDf5/Sfkj+P9+ElmgS17UMe3mYkiOVOIhK+vm+ j7HCbwcPukfBtjhj5VBRpKAZZf69K7UcZaeO5itpai6K3LhjZnJS+C27ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgiS7YhQP3tywSs1jI2Ufdxee04MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExvYDwy6 nmrih3cGZVXo8b4K/oucTj1SJfRR4tjWpU4Ia1VK8SYJOTY1+t+zyPVxp2ploAP1 lXskESb9MPVBNgteh63656hQHAWt6cVUewqlPfeutF5WGcRa7Aa0X7wkN383P9Bp uh7poAW4asKwi+AxDTEwztGOYUQ4aXiErbDf+Z73i5TfZXphRQ/6An9eH1GryhPd 6XIds66rWensfnPOL/EmKCvuGLIoJLKHeAHsJdr0GNWR2NKdI0ygoEhfkGlH9wkA Ogsbf26SlJjnemCrdrVuk8lITcRqrLzLaGY5PNkY9js8/lcQQbQNKs8syuWOGXN6 jRuix4U/we7H6g== -----END CERTIFICATE-----Generated at Sun Oct 19 20:37:55 2025 by rpki-client