$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: WJtlRJVvMrll8LPtETbV4hhWAm0Q6uciqHE5IxBeVTU= Subject key identifier: 44:55:DB:AC:EE:93:FC:16:B2:07:58:AE:BB:C8:8E:EA:D6:89:81:CD Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 0197B8213DFAB8D8153BD54ADB81DB868C9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 118A Signing time: Sat 28 Jun 2025 20:01:15 +0000 Manifest this update: Sat 28 Jun 2025 20:01:15 +0000 Manifest next update: Sun 29 Jun 2025 20:01:15 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=) 4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: e+10RnLG02kZ7jfpMxfKxjDvvmqxCl5l5MmqBmE+O3s=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=) 10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:21:3d:fa:b8:d8:15:3b:d5:4a:db:81:db:86:8c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jun 28 20:01:15 2025 GMT Not After : Jun 29 20:01:15 2025 GMT Subject: CN=4455dbacee93fc16b20758aebbc88eead68981cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:92:17:09:b7:94:18:3c:d9:d5:43:04:89: a1:04:5b:5f:55:f4:e9:00:85:63:e5:fa:eb:83:9a: 82:78:84:b7:ef:65:7c:4f:9f:a0:ed:cf:79:87:a8: 80:8e:80:d3:1b:e8:4d:61:1d:1c:38:26:f5:2a:c4: 0f:ac:76:11:1b:da:e5:0e:8c:4c:9c:91:e9:a8:b1: 32:f6:bd:8a:f9:9e:06:d9:05:33:de:5b:62:72:4b: 00:a8:0c:eb:eb:4d:db:b8:5d:c0:0d:5f:bc:1d:6e: ac:f9:76:a9:46:84:76:ef:69:a8:82:b2:54:95:77: 30:99:e2:02:9f:59:6c:9b:7b:ee:f2:71:38:66:dc: 33:1c:a4:87:a2:0b:b5:aa:2b:9e:5e:8f:db:65:4b: 64:2c:8f:dd:5c:7a:2d:21:b4:5d:a6:5c:ac:15:b2: a5:b8:17:93:f1:cd:57:e2:b1:02:3b:91:16:e4:1f: f8:3d:6c:83:d9:7e:de:19:2c:45:0e:63:8c:af:01: fc:2d:0e:91:73:39:f2:96:b1:f4:99:dd:18:39:4d: 0b:92:20:a6:e8:cc:bb:f5:f5:b4:78:da:f9:ec:76: f1:e3:78:0c:38:b3:ae:84:a1:6e:a9:9f:ac:65:68: 58:7d:1d:a9:de:b7:d2:45:01:08:89:52:f3:7c:c6: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:55:DB:AC:EE:93:FC:16:B2:07:58:AE:BB:C8:8E:EA:D6:89:81:CD X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:35:7c:e2:e1:1b:d2:f6:3c:b1:4c:2a:0e:f7:ac:07:12:b5: 91:2b:ee:1a:9f:3d:4c:62:53:e7:87:3f:19:1a:ac:b1:e4:6a: 25:38:92:d3:e7:ca:66:66:88:3d:8d:36:f4:2c:18:f7:b3:90: 40:7a:44:53:aa:19:a0:8c:e5:89:49:09:bb:4a:0b:8d:be:e0: 18:5e:81:e4:fc:61:af:70:05:3c:80:04:e1:9a:ff:0c:c8:12: 24:e9:41:6d:9f:0c:79:09:d6:fb:a2:53:c2:c1:23:01:b9:91: 10:f6:a7:d4:3f:b4:e1:3c:9e:c4:f3:29:45:85:49:84:7b:44: 79:16:12:59:51:39:b8:50:b7:b9:ec:60:85:0e:ba:f4:e0:58: cf:bf:4d:58:69:73:3a:e0:c9:09:45:80:67:04:87:af:d9:a2: 47:b0:1c:f2:ba:2e:b1:27:5c:ed:25:1e:c8:9c:66:54:a7:c9: c0:eb:a4:bf:7a:3e:f8:7f:83:d9:2d:8f:b1:ac:61:69:dd:d9: 56:7d:43:9f:ce:60:bd:f8:35:3d:ef:9d:15:e9:36:8e:77:07: 82:40:13:6f:03:8b:45:6b:45:bf:5c:a8:8a:97:9e:40:e8:f7: 4d:ab:59:4c:22:0a:c1:cb:f2:e4:0f:1a:ac:e8:8f:4d:60:62: dd:45:ce:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4IT36uNgVO9VK24HbhoyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwNjI4MjAwMTE1WhcNMjUwNjI5MjAwMTE1WjAzMTEwLwYDVQQD Eyg0NDU1ZGJhY2VlOTNmYzE2YjIwNzU4YWViYmM4OGVlYWQ2ODk4MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDCSFwm3lBg82dVDBImhBFtfVfTp AIVj5frrg5qCeIS372V8T5+g7c95h6iAjoDTG+hNYR0cOCb1KsQPrHYRG9rlDoxM nJHpqLEy9r2K+Z4G2QUz3lticksAqAzr603buF3ADV+8HW6s+XapRoR272mogrJU lXcwmeICn1lsm3vu8nE4ZtwzHKSHogu1qiueXo/bZUtkLI/dXHotIbRdplysFbKl uBeT8c1X4rECO5EW5B/4PWyD2X7eGSxFDmOMrwH8LQ6RcznylrH0md0YOU0LkiCm 6My79fW0eNr57Hbx43gMOLOuhKFuqZ+sZWhYfR2p3rfSRQEIiVLzfMZ4MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERV26zuk/wWsgdYrrvIjurWiYHNMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjV84uEb 0vY8sUwqDvesBxK1kSvuGp89TGJT54c/GRqsseRqJTiS0+fKZmaIPY029CwY97OQ QHpEU6oZoIzliUkJu0oLjb7gGF6B5Pxhr3AFPIAE4Zr/DMgSJOlBbZ8MeQnW+6JT wsEjAbmREPan1D+04TyexPMpRYVJhHtEeRYSWVE5uFC3uexghQ669OBYz79NWGlz OuDJCUWAZwSHr9miR7Ac8rousSdc7SUeyJxmVKfJwOukv3o++H+D2S2Psaxhad3Z Vn1Dn85gvfg1Pe+dFek2jncHgkATbwOLRWtFv1yoipeeQOj3TatZTCIKwcvy5A8a rOiPTWBi3UXOsg== -----END CERTIFICATE-----Generated at Sat Jun 28 23:11:08 2025 by rpki-client