$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: AzkdA6Y72+uLh2kAtJs/lhgakMG1y9tSX+oIKSJ6eQw= Subject key identifier: 1C:FA:7A:76:6C:6E:FC:57:BB:CC:78:07:AB:66:3A:BD:AE:7B:65:97 Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 0198819E4484ABAC14BC28673A6AA66CC3C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 1635 Signing time: Wed 06 Aug 2025 23:01:29 +0000 Manifest this update: Wed 06 Aug 2025 23:01:29 +0000 Manifest next update: Thu 07 Aug 2025 23:01:29 +0000 Files and hashes: 1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=) 2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=) 3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=) 4: AVnx-FGQOCAK5RnaQADitDAO5hM.roa (hash: wCuFWWt6WOwIf0nZWJf9m4qBBL2Jw9B2DHBHaYoTQq0=) 5: FzcrFpqyH1D4pf1jVy8R-w3Yoz8.roa (hash: d2MgEpCCzfC5F2sJAzB1xCta9zKOCk/DnqSVe+ZZziw=) 6: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=) 7: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=) 8: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=) 9: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=) 10: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=) 11: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=) 12: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: 0IwuAXfh1p99PdEOwL3GyFrBA5S2BT+GOpVNB1B0mXQ=) 13: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=) 14: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=) 15: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=) 16: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:81:9e:44:84:ab:ac:14:bc:28:67:3a:6a:a6:6c:c3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: Aug 6 23:01:29 2025 GMT Not After : Aug 7 23:01:29 2025 GMT Subject: CN=1cfa7a766c6efc57bbcc7807ab663abdae7b6597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:3a:71:19:70:d6:0a:8b:31:6f:b4:33:c1: 94:73:73:82:bb:2b:27:37:8e:fc:51:db:6c:07:c5: 5d:fa:71:c4:93:5f:d9:cc:f3:1f:c7:cd:ad:e5:b7: d0:c4:6c:c7:48:3d:c0:37:c9:63:5c:23:32:4f:39: a4:ad:b7:94:1a:5c:ae:ed:99:62:3f:a2:79:3e:62: 2d:23:3e:7c:c8:d1:f9:65:7f:c5:cf:60:fd:06:44: 55:26:ec:19:9d:f6:5d:8c:7c:fa:85:bb:51:fd:6a: b1:2e:27:ee:00:0c:b4:bb:65:e6:6b:c1:0b:9e:e9: f0:bf:90:55:cf:31:ab:c8:44:3f:99:33:4b:0c:f1: 9a:68:5f:e5:00:bf:27:0d:95:4e:94:4f:2e:54:91: 09:05:c8:81:aa:0d:ae:42:fa:9f:37:b1:fe:36:47: 38:31:4f:6c:44:e6:74:b1:63:d5:00:67:e4:7d:43: 76:76:29:18:b7:96:5e:3d:2a:d1:26:21:a8:df:aa: 6c:08:0b:a8:54:77:87:9b:54:94:bc:28:dd:5d:66: 1e:89:d9:45:5a:ed:51:a3:46:e5:c4:59:9b:24:8d: d9:0f:48:5a:b9:2d:dd:93:d6:50:40:ac:d2:02:c1: 4a:75:bd:9f:40:44:f2:6c:7b:0b:90:0c:39:af:3f: 92:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FA:7A:76:6C:6E:FC:57:BB:CC:78:07:AB:66:3A:BD:AE:7B:65:97 X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:72:71:e5:d1:a6:7a:b4:29:6d:c4:93:e4:7b:3a:4f:4a:c1: 48:06:9a:b7:97:1b:9f:55:2b:8c:c8:88:13:3f:54:86:e6:84: b7:8a:f6:7a:89:10:74:4f:ba:3a:6a:6b:10:35:a0:17:e8:58: 63:8c:c9:4c:49:b4:ac:ab:59:ab:46:03:04:13:b4:af:a5:f5: 70:13:7e:54:99:0b:b0:b6:50:8d:85:03:ee:1c:86:67:26:2a: 95:a6:be:54:45:25:1b:08:ae:2e:1a:9a:4f:e7:07:a4:0f:a5: dc:6f:d6:dc:6a:d2:d2:5f:6c:b8:11:4b:e8:ce:cf:f5:86:46: 27:78:50:53:bc:b7:00:6c:ab:93:73:cb:68:46:de:b7:82:ae: 9f:3b:cc:97:a0:0f:b2:84:ac:a8:c3:3a:49:72:b6:f3:ce:cf: 53:aa:54:de:96:6f:65:66:2a:f2:ab:a1:99:28:d6:30:09:a9: 39:97:71:bc:c0:fd:ff:66:b7:2b:c5:db:ff:9f:6c:56:d4:ff: cb:00:3a:c2:34:87:61:a1:70:ec:00:72:fd:e8:8c:3e:98:0b: 72:d1:f9:bd:37:5a:57:72:f8:fb:49:78:50:af:74:a1:01:93: 53:a3:b3:52:df:65:5d:22:a1:81:2a:e2:c3:ba:0b:34:bf:4f: f9:46:85:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiBnkSEq6wUvChnOmqmbMPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjUwODA2MjMwMTI5WhcNMjUwODA3MjMwMTI5WjAzMTEwLwYDVQQD EygxY2ZhN2E3NjZjNmVmYzU3YmJjYzc4MDdhYjY2M2FiZGFlN2I2NTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCM6cRlw1gqLMW+0M8GUc3OCuysn N478UdtsB8Vd+nHEk1/ZzPMfx82t5bfQxGzHSD3AN8ljXCMyTzmkrbeUGlyu7Zli P6J5PmItIz58yNH5ZX/Fz2D9BkRVJuwZnfZdjHz6hbtR/WqxLifuAAy0u2Xma8EL nunwv5BVzzGryEQ/mTNLDPGaaF/lAL8nDZVOlE8uVJEJBciBqg2uQvqfN7H+Nkc4 MU9sROZ0sWPVAGfkfUN2dikYt5ZePSrRJiGo36psCAuoVHeHm1SUvCjdXWYeidlF Wu1Ro0blxFmbJI3ZD0hauS3dk9ZQQKzSAsFKdb2fQETybHsLkAw5rz+SuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz6enZsbvxXu8x4B6tmOr2ue2WXMB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHJx5dGm erQpbcST5Hs6T0rBSAaat5cbn1UrjMiIEz9UhuaEt4r2eokQdE+6OmprEDWgF+hY Y4zJTEm0rKtZq0YDBBO0r6X1cBN+VJkLsLZQjYUD7hyGZyYqlaa+VEUlGwiuLhqa T+cHpA+l3G/W3GrS0l9suBFL6M7P9YZGJ3hQU7y3AGyrk3PLaEbet4KunzvMl6AP soSsqMM6SXK2887PU6pU3pZvZWYq8quhmSjWMAmpOZdxvMD9/2a3K8Xb/59sVtT/ ywA6wjSHYaFw7ABy/eiMPpgLctH5vTdaV3L4+0l4UK90oQGTU6OzUt9lXSKhgSri w7oLNL9P+UaFJg== -----END CERTIFICATE-----Generated at Thu Aug 7 05:15:03 2025 by rpki-client