$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: 5nRKgIlaj+U159EY2LCRafzpQoSBmk8P+8/Su1YIV3I= Subject key identifier: BC:EC:14:6F:CF:EF:44:C7:6D:DE:BF:8B:E5:24:CE:CE:C3:D0:BB:A9 Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 0197CCF1B077D96BB2EC34A26B61B0BEBDC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 15D8 Signing time: Wed 02 Jul 2025 21:01:20 +0000 Manifest this update: Wed 02 Jul 2025 21:01:20 +0000 Manifest next update: Thu 03 Jul 2025 21:01:20 +0000 Files and hashes: 1: 5oGMURS5rgp_1dlgKvuvCDO5G0w.roa (hash: wMYp5LaGPuSag8fX06xhHkbgdVirB9cJhM+3GGw2/jg=) 2: BQvusTzEEHLSJHJlumFKa1oNwrQ.roa (hash: lEe5F40vmhWKpQEVA2DofBBwwqWZxHOLJtp+bmSetd0=) 3: CYC52qHhJ6RUPTEobJ8VoMfHNRI.roa (hash: ZZP9aFpLns5QQxSZHDNfLoao3AVc9G009OXX8vXR5gc=) 4: CeX7E3fZXVsdPANui7LEojY4jyY.roa (hash: knL0+PqLOBqomAg/sncBbQWcoQB5Mmxq54ysIaZdoTY=) 5: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=) 6: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=) 7: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=) 8: NznSTmaNmRlH_azHj2PejtUv32Y.roa (hash: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=) 9: OfFCEKE7y2G6xu45x0onbMCbDaw.roa (hash: e/8sENTA8NJv+5P6ivLRFth819D0j4syG1Q5lKqx3Rw=) 10: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=) 11: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=) 12: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=) 13: qKFWe9Dc9VXd-E9itFNBr6DQEUs.roa (hash: y5dptfGZPYO1h43chWxX74P05NldZYlQNc516YN4G9M=) 14: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=) 15: wj33JoQLWARvqka0yZK45_1318I.roa (hash: TfGyszRr6br7JzJj6n9Z5YtEXoLaFYdaPq8IN1vIPao=) 16: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: aWLGY2QmHaXjDX9cLcwTJS6D1XFQPoiRrq924SKBoxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 19:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:cc:f1:b0:77:d9:6b:b2:ec:34:a2:6b:61:b0:be:bd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jul 2 21:01:20 2025 GMT Not After : Jul 3 21:01:20 2025 GMT Subject: CN=bcec146fcfef44c76ddebf8be524cecec3d0bba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:a0:2e:3f:70:c4:72:d6:9a:d4:40:99:d9: 77:1e:75:bb:e7:4e:c6:2f:c9:6a:ce:14:35:5e:8b: 4d:ca:c0:6f:06:a9:7a:eb:69:98:7f:99:a9:8a:69: 5f:23:d9:07:0f:57:e7:8e:3a:3b:11:46:97:5a:55: 1a:c8:9e:79:3b:13:51:1d:b0:da:81:c8:2c:df:b8: 9b:3a:b1:a2:60:e4:82:11:fd:1c:a8:8a:a1:85:6f: f7:6b:c7:19:82:35:4f:8e:70:2c:50:82:57:00:ad: 1f:4d:b4:fa:f0:af:e2:4c:3a:de:bd:cf:4c:29:8a: e3:48:47:01:b9:95:be:fe:e0:5c:c7:04:36:de:32: c8:3b:e0:27:54:06:20:4d:05:94:2e:86:89:00:3e: 95:7c:43:65:44:36:bb:25:1f:0c:95:68:01:6d:22: aa:ea:45:5a:50:25:65:ee:89:0b:cb:3e:1b:72:a0: cf:43:2b:3f:7b:9e:68:ae:85:9d:9e:bd:df:a7:9b: 2d:83:c7:23:14:5d:0c:70:9b:3e:55:04:52:af:ac: 4d:a7:f1:93:7c:2c:4d:b4:f9:9e:63:28:c1:9a:93: 7c:47:7b:c3:9a:14:df:01:0c:8f:f1:e7:1c:9c:a4: 1d:1b:fc:07:b0:56:b5:ab:b6:4f:f9:31:8d:26:9d: 18:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EC:14:6F:CF:EF:44:C7:6D:DE:BF:8B:E5:24:CE:CE:C3:D0:BB:A9 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f6:66:b6:ba:bd:30:f1:c5:9f:e1:b3:24:08:39:bb:e2:db: 4f:29:96:01:e3:3d:3f:57:14:cc:3e:11:5a:e8:f1:52:78:56: 84:be:2f:1d:17:30:31:cb:73:39:40:a9:d9:57:03:6c:e0:5a: 5a:38:d1:8a:52:e9:e2:44:e2:44:df:84:d3:52:07:02:62:b8: 1d:a7:4a:8c:79:9a:b0:f7:c4:93:d0:4d:1f:44:82:68:ee:01: 6c:6b:c7:bf:eb:b8:0f:c1:96:1f:3d:6a:ba:e4:89:9e:68:03: 60:a3:dc:f2:a6:d9:5f:8b:4d:4e:64:b4:59:0e:4b:22:20:98: 0f:b6:b7:26:ea:bd:02:0d:d3:73:0f:da:80:2b:12:c2:c0:f9: 40:3f:4d:c9:1d:dc:ac:cb:50:ed:62:30:9b:96:99:9d:f3:f5: 38:ed:69:73:16:1f:3f:31:02:81:b6:21:56:4a:09:04:6d:3e: 00:8d:98:aa:bb:8c:eb:ce:ca:bb:48:72:75:de:b1:09:52:2e: 56:89:de:97:f2:0a:92:aa:7f:e7:f8:62:f1:98:03:05:66:43: 40:59:8c:91:b1:85:c0:79:f8:f6:2a:d3:b5:17:93:64:f6:a0: 36:16:b2:1d:48:1f:cd:14:8a:a5:ed:c2:c7:1c:a5:1d:fd:00: 3b:c9:92:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfM8bB32Wuy7DSia2Gwvr3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUwNzAyMjEwMTIwWhcNMjUwNzAzMjEwMTIwWjAzMTEwLwYDVQQD EyhiY2VjMTQ2ZmNmZWY0NGM3NmRkZWJmOGJlNTI0Y2VjZWMzZDBiYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01+gLj9wxHLWmtRAmdl3HnW7507G L8lqzhQ1XotNysBvBql662mYf5mpimlfI9kHD1fnjjo7EUaXWlUayJ55OxNRHbDa gcgs37ibOrGiYOSCEf0cqIqhhW/3a8cZgjVPjnAsUIJXAK0fTbT68K/iTDrevc9M KYrjSEcBuZW+/uBcxwQ23jLIO+AnVAYgTQWULoaJAD6VfENlRDa7JR8MlWgBbSKq 6kVaUCVl7okLyz4bcqDPQys/e55oroWdnr3fp5stg8cjFF0McJs+VQRSr6xNp/GT fCxNtPmeYyjBmpN8R3vDmhTfAQyP8eccnKQdG/wHsFa1q7ZP+TGNJp0YGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzsFG/P70THbd6/i+Ukzs7D0LupMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/Zmtrq9 MPHFn+GzJAg5u+LbTymWAeM9P1cUzD4RWujxUnhWhL4vHRcwMctzOUCp2VcDbOBa WjjRilLp4kTiRN+E01IHAmK4HadKjHmasPfEk9BNH0SCaO4BbGvHv+u4D8GWHz1q uuSJnmgDYKPc8qbZX4tNTmS0WQ5LIiCYD7a3Juq9Ag3Tcw/agCsSwsD5QD9NyR3c rMtQ7WIwm5aZnfP1OO1pcxYfPzECgbYhVkoJBG0+AI2YqruM687Ku0hydd6xCVIu Vonel/IKkqp/5/hi8ZgDBWZDQFmMkbGFwHn49irTtReTZPagNhayHUgfzRSKpe3C xxylHf0AO8mSFQ== -----END CERTIFICATE-----Generated at Wed Jul 2 22:38:55 2025 by rpki-client