$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: GYIQG8+sTwIRssg3SdUfuCHpjyaW4CtOviZU9iSoXR0= Subject key identifier: 21:85:05:F4:1A:A0:4F:99:CC:CF:FF:6E:21:5A:9C:4E:F2:1B:8A:1D Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 0197B857AF26773297FA7CC7E5A9D6363143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0C48 Signing time: Sat 28 Jun 2025 21:00:43 +0000 Manifest this update: Sat 28 Jun 2025 21:00:43 +0000 Manifest next update: Sun 29 Jun 2025 21:00:43 +0000 Files and hashes: 1: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 2: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 3: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 4: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 5: LU6AnkkcDu6L956hWO4DA9SI5iA.roa (hash: hHyzkbAFVoYRwusr1op18JjqkPccx876xuO53q1c3Wk=) 6: NTeC-NbINKuWXIN2JRj2jE73cMQ.roa (hash: usN4QfuBj821Bx/aBMyN171iAsEpZjNXNiVf16Jr2OA=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: BQdhtMSjivNIXcSoxkqq7Ihcswh/36IqgxzRO2YbFvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:57:af:26:77:32:97:fa:7c:c7:e5:a9:d6:36:31:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jun 28 21:00:43 2025 GMT Not After : Jun 29 21:00:43 2025 GMT Subject: CN=218505f41aa04f99cccfff6e215a9c4ef21b8a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:9f:8a:33:d8:57:64:99:ab:4d:ed:ca:a8: cc:dc:b2:e6:77:fe:d9:51:82:ee:8a:08:80:2f:c8: f3:1f:53:59:2e:07:ad:1a:a3:40:dc:ae:00:1b:a8: b8:52:a4:7b:de:19:8e:2b:81:e0:e8:c9:be:29:81: 55:7e:22:3a:f2:f7:13:11:0c:7d:49:b4:34:e8:00: 58:d1:c6:d9:30:9f:83:91:9c:55:a9:b1:7f:cf:ce: 9d:40:0b:1f:18:94:54:66:44:d4:d6:a7:42:44:60: 70:18:df:a4:aa:96:dc:d7:20:a3:30:0d:2a:7b:60: bd:35:13:34:3b:74:7f:c0:bd:24:52:c8:88:f5:eb: 17:d6:74:17:b5:2e:df:4d:f4:51:56:48:18:8d:1a: 5d:54:c0:99:cd:db:71:3a:98:b2:07:2b:29:3c:93: 88:49:dc:af:41:26:55:9b:97:b7:20:d9:4b:36:d4: 0b:30:fb:89:98:f7:b1:1e:6f:20:20:b2:62:06:27: f4:01:d8:9f:aa:f5:ad:94:fd:c5:69:21:b2:77:28: ad:b0:bd:fe:f2:64:68:27:4b:1a:40:ad:a1:03:1a: f1:af:ca:6a:3f:95:fd:3e:8c:01:79:18:3a:26:fd: 85:19:82:c9:ab:4e:e6:68:8b:95:8f:11:0c:9c:5b: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:85:05:F4:1A:A0:4F:99:CC:CF:FF:6E:21:5A:9C:4E:F2:1B:8A:1D X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:db:66:30:93:83:f0:eb:03:d6:b7:f1:b9:65:0f:df:4a:7b: 0b:ad:65:4e:cd:8a:60:75:3e:bf:9b:f8:02:17:c6:6c:68:bc: d4:0d:bb:03:a8:7a:0d:b2:0b:30:f9:92:4e:20:66:84:fc:a7: b2:9a:be:e2:4b:2b:fd:4a:2b:3f:32:9a:6d:8f:66:95:bf:04: 3d:3c:b5:25:e1:85:26:85:70:4d:81:aa:70:04:b5:f1:a2:be: 58:8e:18:ea:af:c9:7d:f3:d9:dd:78:37:48:a1:71:cb:6a:3b: 14:de:3e:52:49:06:db:f9:d8:ce:8a:bf:fc:19:13:d4:b0:38: aa:79:66:8f:6d:d4:aa:0a:47:9b:0c:90:d8:42:dc:b5:e0:61: 05:0d:f5:b3:91:b4:01:e9:c1:47:fe:4d:96:cc:8d:d8:9e:d4: 9a:63:d7:1e:d6:1e:49:5d:56:00:b6:ef:a4:d3:c5:37:8c:bd: 56:3f:fb:09:85:3c:c1:ce:16:d8:f7:33:5a:c0:a6:9e:c3:3c: a9:b6:67:c6:ae:36:cb:1a:99:35:f4:98:c6:1e:de:43:ce:ec: 1c:23:b4:fa:45:07:30:bf:08:71:2c:48:b4:99:a4:df:71:89: da:a0:68:38:b6:90:63:92:b4:3c:f8:2c:4d:97:3e:97:ad:06: 72:fb:2d:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4V68mdzKX+nzH5anWNjFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUwNjI4MjEwMDQzWhcNMjUwNjI5MjEwMDQzWjAzMTEwLwYDVQQD EygyMTg1MDVmNDFhYTA0Zjk5Y2NjZmZmNmUyMTVhOWM0ZWYyMWI4YTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMafijPYV2SZq03tyqjM3LLmd/7Z UYLuigiAL8jzH1NZLgetGqNA3K4AG6i4UqR73hmOK4Hg6Mm+KYFVfiI68vcTEQx9 SbQ06ABY0cbZMJ+DkZxVqbF/z86dQAsfGJRUZkTU1qdCRGBwGN+kqpbc1yCjMA0q e2C9NRM0O3R/wL0kUsiI9esX1nQXtS7fTfRRVkgYjRpdVMCZzdtxOpiyByspPJOI SdyvQSZVm5e3INlLNtQLMPuJmPexHm8gILJiBif0AdifqvWtlP3FaSGydyitsL3+ 8mRoJ0saQK2hAxrxr8pqP5X9PowBeRg6Jv2FGYLJq07maIuVjxEMnFtcswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGFBfQaoE+ZzM//biFanE7yG4odMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdtmMJOD 8OsD1rfxuWUP30p7C61lTs2KYHU+v5v4AhfGbGi81A27A6h6DbILMPmSTiBmhPyn spq+4ksr/UorPzKabY9mlb8EPTy1JeGFJoVwTYGqcAS18aK+WI4Y6q/JffPZ3Xg3 SKFxy2o7FN4+UkkG2/nYzoq//BkT1LA4qnlmj23UqgpHmwyQ2ELcteBhBQ31s5G0 AenBR/5NlsyN2J7UmmPXHtYeSV1WALbvpNPFN4y9Vj/7CYU8wc4W2PczWsCmnsM8 qbZnxq42yxqZNfSYxh7eQ87sHCO0+kUHML8IcSxItJmk33GJ2qBoOLaQY5K0PPgs TZc+l60GcvstNg== -----END CERTIFICATE-----Generated at Sat Jun 28 22:34:59 2025 by rpki-client