$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: 9Io7SiMfeTjByWknNnqvj/qRSac6SX4fYgeJ5OBbsf0= Subject key identifier: C0:13:D8:77:77:32:C8:B4:45:F4:D6:88:5D:1D:FB:A6:A4:D7:E6:3C Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 0198D70616CED10E990C767A5F6B6E5D38F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1681 Signing time: Sat 23 Aug 2025 13:02:37 +0000 Manifest this update: Sat 23 Aug 2025 13:02:37 +0000 Manifest next update: Sun 24 Aug 2025 13:02:37 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 8: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 9: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 10: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 11: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (hash: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: 83GXFlOHdUoV8fGlhLv2ph4Jl9STX6hxzGlD4n+Nn6g=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:06:16:ce:d1:0e:99:0c:76:7a:5f:6b:6e:5d:38:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Aug 23 13:02:37 2025 GMT Not After : Aug 24 13:02:37 2025 GMT Subject: CN=c013d8777732c8b445f4d6885d1dfba6a4d7e63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:6c:62:94:be:f2:72:67:86:93:85:90:13: 27:2b:6d:86:97:de:38:f9:26:13:37:76:72:34:b3: e6:26:d1:75:a5:2a:26:38:90:5b:ab:05:f6:04:7e: 98:5a:ff:d0:e0:0b:c7:2c:ef:68:74:28:59:73:36: 01:00:30:5c:f0:5a:f5:60:84:0b:c9:a6:a2:d8:89: 04:75:2f:fe:70:4c:a0:15:60:a5:60:95:bb:77:09: 02:ed:33:77:71:29:b4:8c:ff:87:95:26:4a:fc:7a: 01:2f:fe:de:0c:0c:54:49:06:df:9f:8b:3d:e3:92: 64:e9:19:20:17:89:a1:31:d4:06:d4:7e:ea:8f:1c: c9:88:4c:be:10:cc:6a:99:88:ea:46:6a:ad:ae:fb: 3c:20:29:c9:02:ed:83:ba:6a:5b:f1:72:85:8d:69: cf:ea:c1:38:71:17:e2:bf:01:02:6d:e8:10:c3:09: cb:7d:9c:c5:35:02:03:c0:af:eb:d6:50:97:30:e8: 87:97:cd:78:0d:71:b2:03:f2:71:83:11:6d:43:f6: 7c:6b:69:72:6b:aa:23:1d:63:5b:cc:4c:39:3d:17: a1:01:2c:94:8f:93:3f:96:44:94:09:50:bf:39:2b: bc:e7:cc:e2:71:ab:13:ad:20:b3:1f:51:12:86:7a: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:13:D8:77:77:32:C8:B4:45:F4:D6:88:5D:1D:FB:A6:A4:D7:E6:3C X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e3:0d:43:07:65:a7:58:97:68:fd:26:12:d5:a7:8b:6d:71: 45:b0:8f:46:eb:89:9f:1a:28:b8:6d:35:6f:cf:58:98:b2:f5: 61:26:37:91:1f:9e:15:72:6d:31:58:94:de:d0:47:f9:fd:59: 11:9e:5f:c8:a2:39:b8:3f:21:60:bb:68:42:1b:97:5e:b4:07: 5b:7a:49:a5:05:ba:83:a1:12:07:1a:e1:77:13:3a:b7:de:d4: ae:5a:cc:d8:94:2b:3c:97:72:fc:68:ec:f1:a0:66:ed:5a:a2: 5e:de:af:fb:e1:50:3b:fb:22:fe:e0:ef:dd:47:a8:35:75:57: f3:47:92:29:31:b7:8a:e5:e0:5f:c8:e2:97:65:b0:d0:43:98: ae:a8:4b:e3:22:8c:25:3c:ea:3e:f1:43:82:27:2b:69:e0:d5: 15:fb:89:92:d5:11:04:c1:7b:ae:f3:e4:64:db:1d:cb:3a:e2: 73:22:e7:79:bb:5e:0c:39:61:39:43:1f:cc:c8:9c:5f:2b:5c: d1:af:80:2c:6d:e3:16:62:af:cb:08:11:51:10:ac:06:42:eb: fa:bc:76:f0:c9:6b:5b:57:ac:31:40:09:30:83:09:71:34:78: 72:be:eb:7d:46:be:0f:27:c6:06:cf:12:32:86:26:1b:13:cf: 81:48:2f:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXBhbO0Q6ZDHZ6X2tuXTjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUwODIzMTMwMjM3WhcNMjUwODI0MTMwMjM3WjAzMTEwLwYDVQQD EyhjMDEzZDg3Nzc3MzJjOGI0NDVmNGQ2ODg1ZDFkZmJhNmE0ZDdlNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLJsYpS+8nJnhpOFkBMnK22Gl944 +SYTN3ZyNLPmJtF1pSomOJBbqwX2BH6YWv/Q4AvHLO9odChZczYBADBc8Fr1YIQL yaai2IkEdS/+cEygFWClYJW7dwkC7TN3cSm0jP+HlSZK/HoBL/7eDAxUSQbfn4s9 45Jk6RkgF4mhMdQG1H7qjxzJiEy+EMxqmYjqRmqtrvs8ICnJAu2Dumpb8XKFjWnP 6sE4cRfivwECbegQwwnLfZzFNQIDwK/r1lCXMOiHl814DXGyA/JxgxFtQ/Z8a2ly a6ojHWNbzEw5PRehASyUj5M/lkSUCVC/OSu858zicasTrSCzH1EShnrUvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAT2Hd3Msi0RfTWiF0d+6ak1+Y8MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeMNQwdl p1iXaP0mEtWni21xRbCPRuuJnxoouG01b89YmLL1YSY3kR+eFXJtMViU3tBH+f1Z EZ5fyKI5uD8hYLtoQhuXXrQHW3pJpQW6g6ESBxrhdxM6t97UrlrM2JQrPJdy/Gjs 8aBm7VqiXt6v++FQO/si/uDv3UeoNXVX80eSKTG3iuXgX8jil2Ww0EOYrqhL4yKM JTzqPvFDgicraeDVFfuJktURBMF7rvPkZNsdyzricyLnebteDDlhOUMfzMicXytc 0a+ALG3jFmKvywgRURCsBkLr+rx28MlrW1esMUAJMIMJcTR4cr7rfUa+DyfGBs8S MoYmGxPPgUgv2w== -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:16 2025 by rpki-client