$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: uSQhEon7h0yxqXX0XV7iCz3bZvxwlic+oGyxJZzqRyU= Subject key identifier: 87:D3:04:63:F4:A3:0A:80:BE:4E:25:1E:92:7D:C9:1A:55:1C:6B:3C Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 0199FC218B44490604F5BBB38F00A854ED5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 12B8 Signing time: Sun 19 Oct 2025 11:01:20 +0000 Manifest this update: Sun 19 Oct 2025 11:01:20 +0000 Manifest next update: Mon 20 Oct 2025 11:01:20 +0000 Files and hashes: 1: 4RKx0TPWpjyqFnYw_5DcC4r--8c.roa (hash: EeJxEgHcgX2POFtcheGSjZ/nSQoAG58B2CWKgWaFLHU=) 2: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 3: B7-nq7_cc4f7Zt868VHWF4evtl4.roa (hash: 8XyukQXz+vjZuY6nqgv3ycX242CL7BTZXHzKPn1lLzs=) 4: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: v2xRS7oD87/j0VpwS7W2f2p8SFptT0VXvdd1ms5/SBE=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: f4_XIVmsIZE5Q2N24spgeU0yDjk.roa (hash: 9PnPL8Uj92c8N0K6S0DkkLyk9Siv5wZEJPC/dCt0/ys=) 10: oZha6b5w9clZtNXo-zdOnTB4ZH4.roa (hash: eJd4ltM6RY/dDJSxWZcaSV6+RgrT6iyc6q41HyI/IVc=) 11: tWNAblpSIHBRwstDjrx69LZTG3c.roa (hash: TOR0ePLyq2A8fQRU7qwOgqkqVyE2uNZxjRQtXz0qxQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:8b:44:49:06:04:f5:bb:b3:8f:00:a8:54:ed:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Oct 19 11:01:20 2025 GMT Not After : Oct 20 11:01:20 2025 GMT Subject: CN=87d30463f4a30a80be4e251e927dc91a551c6b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:36:c0:b8:58:e8:97:c8:46:ee:06:3a:b4: 78:52:da:97:65:f6:75:ad:27:a3:07:f6:84:bc:53: 38:82:eb:6b:b5:16:91:8e:91:f7:fb:2c:83:f4:de: 87:bb:37:5e:7b:a8:32:86:e0:d3:4a:f1:df:44:ea: 24:70:0d:81:69:50:4c:4b:fe:5f:7b:74:4a:37:03: c7:e4:1c:a2:cc:91:04:f2:6a:2b:f2:3d:c3:ed:99: fe:f9:f9:c4:63:e3:5c:01:9d:0e:7e:31:ad:59:2c: 58:f8:10:d0:9a:2a:64:49:d3:ab:2c:07:da:82:21: 7c:7a:a0:5b:b5:39:14:4c:e4:14:13:b9:be:98:51: ad:6c:d5:51:c7:04:c7:66:db:88:76:56:29:38:40: bf:9a:12:91:98:e2:52:26:95:6f:99:5a:0e:f3:45: 0e:95:10:7c:fb:38:21:d2:f2:d8:34:91:1e:58:98: 54:f4:c7:0f:ea:80:58:85:2a:09:11:2e:28:77:c2: 39:e5:cf:42:ea:5f:86:25:28:8b:16:75:e2:6f:46: 40:70:32:ab:c8:69:c2:ed:ee:75:d4:a3:0e:c5:f2: 22:57:de:f3:72:65:89:99:5e:0e:4b:67:4e:36:78: 2e:8d:55:3f:e4:1f:b6:2b:db:c4:b1:3f:54:c1:46: 2f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D3:04:63:F4:A3:0A:80:BE:4E:25:1E:92:7D:C9:1A:55:1C:6B:3C X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a0:e2:f6:fe:51:73:43:d0:19:48:4a:2e:3b:18:d4:e2:00: 00:7e:88:3f:3e:e2:81:f1:30:5d:b4:e7:77:3e:00:2c:67:f6: f5:bb:6f:d1:64:cc:de:b8:37:df:2c:cf:94:a9:b9:73:f2:98: 48:47:01:b4:c8:fe:c0:ec:6d:3c:af:6a:83:8c:b3:c8:5c:c6: 88:5b:07:70:cf:70:32:3a:7c:1b:75:32:1b:b1:bc:46:ca:38: e5:a0:71:a4:e1:e9:25:a7:1e:70:c5:40:e0:53:c0:dc:8f:8a: 32:f3:23:70:af:4a:ab:d3:b6:92:ef:8a:92:dd:00:80:b0:eb: f1:27:21:81:eb:75:bc:7d:82:5d:a4:99:7d:77:21:90:32:08: 09:54:72:fb:92:33:d2:0f:bb:4e:dd:51:c4:4a:30:5d:6a:e5: 5f:c5:86:70:b8:58:2b:aa:a3:42:27:78:64:b1:c6:8b:37:b3: 87:30:77:91:16:71:1e:43:0a:b4:99:c5:fd:99:08:01:a5:e5: 37:da:cf:05:3e:a9:5e:ba:ed:66:bf:ab:53:8b:76:12:7d:54: 31:2a:21:03:85:a7:81:85:3b:40:35:48:8f:91:b7:fd:c6:dd: ba:07:03:1e:1c:6d:27:ea:9d:74:7d:8e:91:b9:7c:1d:74:a2: 5a:9a:1d:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IYtESQYE9buzjwCoVO1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUxMDE5MTEwMTIwWhcNMjUxMDIwMTEwMTIwWjAzMTEwLwYDVQQD Eyg4N2QzMDQ2M2Y0YTMwYTgwYmU0ZTI1MWU5MjdkYzkxYTU1MWM2YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxo2wLhY6JfIRu4GOrR4UtqXZfZ1 rSejB/aEvFM4gutrtRaRjpH3+yyD9N6Huzdee6gyhuDTSvHfROokcA2BaVBMS/5f e3RKNwPH5ByizJEE8mor8j3D7Zn++fnEY+NcAZ0OfjGtWSxY+BDQmipkSdOrLAfa giF8eqBbtTkUTOQUE7m+mFGtbNVRxwTHZtuIdlYpOEC/mhKRmOJSJpVvmVoO80UO lRB8+zgh0vLYNJEeWJhU9McP6oBYhSoJES4od8I55c9C6l+GJSiLFnXib0ZAcDKr yGnC7e511KMOxfIiV97zcmWJmV4OS2dONngujVU/5B+2K9vEsT9UwUYvfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfTBGP0owqAvk4lHpJ9yRpVHGs8MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6Di9v5R c0PQGUhKLjsY1OIAAH6IPz7igfEwXbTndz4ALGf29btv0WTM3rg33yzPlKm5c/KY SEcBtMj+wOxtPK9qg4yzyFzGiFsHcM9wMjp8G3UyG7G8Rso45aBxpOHpJacecMVA 4FPA3I+KMvMjcK9Kq9O2ku+Kkt0AgLDr8Schget1vH2CXaSZfXchkDIICVRy+5Iz 0g+7Tt1RxEowXWrlX8WGcLhYK6qjQid4ZLHGizezhzB3kRZxHkMKtJnF/ZkIAaXl N9rPBT6pXrrtZr+rU4t2En1UMSohA4WngYU7QDVIj5G3/cbdugcDHhxtJ+qddH2O kbl8HXSiWpod4w== -----END CERTIFICATE-----Generated at Sun Oct 19 17:32:01 2025 by rpki-client