$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: TkcHuIsWiqeAOCnPOhOWvMVtpN1EmMWSnHJZxVxJmaY= Subject key identifier: E0:03:FC:A0:CD:7B:6C:FC:43:C7:0E:72:F7:99:86:36:9D:B8:B2:A0 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019A4FD030CC18597B0D6EB336B013EBF6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 1725 Signing time: Tue 04 Nov 2025 17:00:35 +0000 Manifest this update: Tue 04 Nov 2025 17:00:35 +0000 Manifest next update: Wed 05 Nov 2025 17:00:35 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: 8vBgPIPGmSaFUWOlpF2CMGdNQQc.roa (hash: /PWcEdJnMn2bKRLWHgFiLBb1+zXw/blECB/hDNGzIwY=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: YQLXDgRlLh3BZCkoAsfM89ycIj6ER4h+AkBCVbyGyrE=) 5: LWD4-OU95_FRda-NCOb6W7qqhlk.roa (hash: /68MHjyM7YGgptvnqCHIzlmysaHHp9CA6NYAUfenFig=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:d0:30:cc:18:59:7b:0d:6e:b3:36:b0:13:eb:f6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Nov 4 17:00:35 2025 GMT Not After : Nov 5 17:00:35 2025 GMT Subject: CN=e003fca0cd7b6cfc43c70e72f79986369db8b2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:fc:ba:39:71:6c:77:1a:ac:9f:1d:59:7e: 86:66:70:07:3a:24:14:7a:26:f0:47:70:1f:27:21: c4:e6:c9:f2:20:c7:fa:ea:5d:7e:ef:66:69:37:30: 90:c3:1d:0a:f1:bb:ab:72:cb:17:2b:82:4c:b7:b1: 91:77:97:c7:57:7e:dc:b7:56:80:be:84:22:61:f8: 1e:51:21:75:28:ce:0c:45:bf:c1:f5:97:bf:03:dc: a4:80:03:b0:14:7e:b8:9f:42:be:61:e6:2b:03:e4: c1:e9:f4:68:00:79:53:8c:43:65:92:53:b8:e3:fc: 28:8e:5a:a8:a9:2a:7e:10:e6:ff:2c:ed:94:39:a6: 0d:b6:94:2e:dc:56:dc:3f:36:95:c9:0b:ae:07:50: 00:b3:3f:48:20:07:e9:1a:b3:60:53:1c:26:49:e9: 6c:e5:68:d2:77:5d:10:de:a3:e6:71:c4:eb:fa:3c: 95:78:4f:5f:99:fd:8f:b4:d5:6b:c4:23:94:31:f8: 88:a7:8e:65:f0:1e:97:18:32:47:ec:02:fc:4b:3a: 17:ab:13:27:29:cf:70:b1:4c:fc:56:a2:18:76:55: dd:d9:55:13:34:7c:e5:97:8c:0a:30:38:7d:13:b9: d2:27:8c:df:ac:57:f1:6c:91:b3:1a:17:b3:37:de: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:03:FC:A0:CD:7B:6C:FC:43:C7:0E:72:F7:99:86:36:9D:B8:B2:A0 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:92:55:54:74:00:22:7c:37:f4:00:3a:e2:30:5f:a6:84:35: 71:ed:2c:39:81:a1:8f:ac:0d:17:27:fd:02:e1:15:47:05:b3: d3:ee:82:ee:1d:c2:05:b6:a1:11:fa:67:ae:18:7d:ea:e9:2c: cb:30:c9:55:19:39:96:d2:60:71:38:ec:c5:76:b9:4a:02:c1: 90:39:9f:c2:0f:6e:84:08:c7:e7:2f:9c:10:49:e0:a8:23:5f: 0c:40:e5:da:32:60:65:85:81:2b:e2:e2:9c:c1:6e:5b:38:91: 7b:9c:9f:70:60:b3:1b:2c:01:32:56:d3:e2:fa:92:7c:d8:e4: 27:6a:ed:2a:94:97:b0:3d:bc:2f:06:da:5a:70:d8:df:d9:25: ca:d0:11:b2:5b:d6:60:02:3f:cb:58:f9:40:06:f8:f7:14:29: 2f:54:d5:af:64:06:cb:6f:74:ae:a2:9c:4f:04:83:5f:ea:e3: b6:d7:b3:a0:52:d2:16:0a:95:26:de:b1:ec:33:f7:f4:ce:d8: 20:d4:80:92:c9:56:b6:3e:bb:14:61:9a:0a:13:14:d0:cd:4c: b3:fb:22:af:af:70:26:08:9b:ae:19:c4:78:44:b0:c4:d2:ed: 49:74:0f:65:17:ee:6e:38:1f:78:eb:ed:38:68:d5:f6:dd:e0: 0a:c7:3a:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpP0DDMGFl7DW6zNrAT6/asMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUxMTA0MTcwMDM1WhcNMjUxMTA1MTcwMDM1WjAzMTEwLwYDVQQD EyhlMDAzZmNhMGNkN2I2Y2ZjNDNjNzBlNzJmNzk5ODYzNjlkYjhiMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQH8ujlxbHcarJ8dWX6GZnAHOiQU eibwR3AfJyHE5snyIMf66l1+72ZpNzCQwx0K8burcssXK4JMt7GRd5fHV37ct1aA voQiYfgeUSF1KM4MRb/B9Ze/A9ykgAOwFH64n0K+YeYrA+TB6fRoAHlTjENlklO4 4/wojlqoqSp+EOb/LO2UOaYNtpQu3FbcPzaVyQuuB1AAsz9IIAfpGrNgUxwmSels 5WjSd10Q3qPmccTr+jyVeE9fmf2PtNVrxCOUMfiIp45l8B6XGDJH7AL8SzoXqxMn Kc9wsUz8VqIYdlXd2VUTNHzll4wKMDh9E7nSJ4zfrFfxbJGzGhezN94iAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAD/KDNe2z8Q8cOcveZhjaduLKgMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZJVVHQA Inw39AA64jBfpoQ1ce0sOYGhj6wNFyf9AuEVRwWz0+6C7h3CBbahEfpnrhh96uks yzDJVRk5ltJgcTjsxXa5SgLBkDmfwg9uhAjH5y+cEEngqCNfDEDl2jJgZYWBK+Li nMFuWziRe5yfcGCzGywBMlbT4vqSfNjkJ2rtKpSXsD28LwbaWnDY39klytARslvW YAI/y1j5QAb49xQpL1TVr2QGy290rqKcTwSDX+rjttezoFLSFgqVJt6x7DP39M7Y INSAkslWtj67FGGaChMU0M1Ms/sir69wJgibrhnEeESwxNLtSXQPZRfubjgfeOvt OGjV9t3gCsc6oA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:30:46 2025 by rpki-client