$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: 4KBKToLN/8Vqqi85T2CJHAmpdBLMKZZ0TDeV272ZZfU= Subject key identifier: 94:BB:6D:21:AE:C2:61:CC:16:60:D5:63:B1:15:0A:28:25:EF:B1:9F Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 0198D515DEB7BD8F7606F7951471C07BABA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0CDE Signing time: Sat 23 Aug 2025 04:00:36 +0000 Manifest this update: Sat 23 Aug 2025 04:00:36 +0000 Manifest next update: Sun 24 Aug 2025 04:00:36 +0000 Files and hashes: 1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=) 2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: PXS3pakDWawHDq8FrXgcytQ71UXUXGREiTk0PtNqUhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:de:b7:bd:8f:76:06:f7:95:14:71:c0:7b:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Aug 23 04:00:36 2025 GMT Not After : Aug 24 04:00:36 2025 GMT Subject: CN=94bb6d21aec261cc1660d563b1150a2825efb19f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:b7:fa:8f:00:83:a9:f3:d4:a6:c3:a7:ff: 87:86:29:c9:86:df:5b:3b:d5:d2:0e:2e:99:2f:91: 79:28:29:35:eb:1e:c5:8a:c7:47:d4:98:ae:a4:06: 56:8e:0e:86:31:f2:d5:24:6b:ca:24:c4:87:89:cb: 77:cf:01:14:d9:65:39:60:a3:3f:15:59:c3:e5:3b: 9c:4d:4d:db:ae:e3:90:e4:cf:ad:78:73:78:05:1b: 11:11:bd:b7:e1:b4:00:42:ec:34:33:92:25:e7:c6: 70:1e:93:cd:6c:cc:ac:8b:8b:e8:0a:17:a9:f6:fe: da:42:62:3c:bc:2d:3b:dd:a3:b3:4e:e0:25:69:cb: ae:1f:8a:f1:37:2c:74:56:fa:c6:41:41:cb:4e:f6: cf:61:cb:2b:49:1d:97:d2:59:30:cb:b5:5f:81:75: 93:72:d0:a2:fd:cb:57:8c:0a:78:4b:b6:8f:91:4d: e2:25:78:c9:a1:f6:61:8f:97:d6:a7:87:f1:2e:37: a6:d3:b2:99:8f:3c:2e:c0:24:b2:a2:7d:c9:19:53: b3:e1:1e:76:f9:3e:eb:44:f7:b6:b6:f4:ec:7e:96: 1b:46:e0:be:3c:f8:ec:a6:2b:5d:48:6c:c5:77:51: 85:03:89:13:04:48:40:aa:75:b4:ad:b9:c6:34:b2: ff:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BB:6D:21:AE:C2:61:CC:16:60:D5:63:B1:15:0A:28:25:EF:B1:9F X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:94:cc:81:10:49:6f:02:21:15:cc:43:f4:57:53:a5:e8:11: c0:97:21:f5:bd:68:a3:a4:06:01:c8:b7:26:7b:71:fe:2c:e8: a0:1e:e3:bb:1f:be:a7:26:e9:78:4e:ed:77:1c:fb:fb:93:0f: 0b:6d:ce:79:aa:39:b6:b9:7d:5e:a0:63:86:8b:5e:d2:47:1d: bb:df:95:7f:e1:37:ef:b7:73:a3:d7:9b:93:aa:b8:1a:39:ae: 1e:ee:5d:ad:87:81:8a:ec:5f:7f:2c:c9:4f:fc:76:2b:8a:db: 81:0f:ed:f8:3c:1b:ec:8b:34:81:7f:51:59:f4:24:4f:73:1a: b6:fc:24:7f:62:ab:b3:49:39:6c:54:43:73:b0:ce:46:b6:ca: c2:19:32:f6:86:e0:e5:d3:df:2e:bb:ab:09:61:64:e4:b4:00: 57:ce:51:f3:0c:41:16:7a:e8:33:2f:6c:8b:df:67:19:30:c3: b3:7a:3e:d5:3d:9b:36:33:34:58:f2:9e:cc:5f:2b:26:0f:82: f8:0d:b3:06:00:5e:cb:0b:11:d1:51:8b:00:14:bf:f8:ab:fb: 5b:ea:b7:ae:c5:cb:fd:32:5a:30:e5:eb:61:2e:bf:cd:4d:b5: 69:71:82:13:7f:9c:22:87:65:f0:8c:a4:64:86:64:59:63:7a: 84:ff:6a:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFd63vY92BveVFHHAe6ugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUwODIzMDQwMDM2WhcNMjUwODI0MDQwMDM2WjAzMTEwLwYDVQQD Eyg5NGJiNmQyMWFlYzI2MWNjMTY2MGQ1NjNiMTE1MGEyODI1ZWZiMTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJa3+o8Ag6nz1KbDp/+HhinJht9b O9XSDi6ZL5F5KCk16x7FisdH1JiupAZWjg6GMfLVJGvKJMSHict3zwEU2WU5YKM/ FVnD5TucTU3bruOQ5M+teHN4BRsREb234bQAQuw0M5Il58ZwHpPNbMysi4voChep 9v7aQmI8vC073aOzTuAlacuuH4rxNyx0VvrGQUHLTvbPYcsrSR2X0lkwy7VfgXWT ctCi/ctXjAp4S7aPkU3iJXjJofZhj5fWp4fxLjem07KZjzwuwCSyon3JGVOz4R52 +T7rRPe2tvTsfpYbRuC+PPjspitdSGzFd1GFA4kTBEhAqnW0rbnGNLL/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJS7bSGuwmHMFmDVY7EVCigl77GfMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJTMgRBJ bwIhFcxD9FdTpegRwJch9b1oo6QGAci3Jntx/izooB7jux++pybpeE7tdxz7+5MP C23Oeao5trl9XqBjhote0kcdu9+Vf+E377dzo9ebk6q4GjmuHu5drYeBiuxffyzJ T/x2K4rbgQ/t+Dwb7Is0gX9RWfQkT3Matvwkf2Krs0k5bFRDc7DORrbKwhky9obg 5dPfLrurCWFk5LQAV85R8wxBFnroMy9si99nGTDDs3o+1T2bNjM0WPKezF8rJg+C +A2zBgBeywsR0VGLABS/+Kv7W+q3rsXL/TJaMOXrYS6/zU21aXGCE3+cIodl8Iyk ZIZkWWN6hP9qrg== -----END CERTIFICATE-----Generated at Sat Aug 23 11:33:47 2025 by rpki-client