$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: btmzpo2nuRJGjQhKnDAFj3MqAVcnfBVp8wBZD56NPTc= Subject key identifier: BE:3C:54:C7:9E:FC:88:94:C0:67:CF:7D:9F:4A:AB:2C:5A:2A:17:CC Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019893DAACDD272F09EBAC4BC5269EEE7982 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1508 Signing time: Sun 10 Aug 2025 12:00:38 +0000 Manifest this update: Sun 10 Aug 2025 12:00:38 +0000 Manifest next update: Mon 11 Aug 2025 12:00:38 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 6: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: PNUIr+kejeRuHehz3OD50acc1rSFbUnO4/PHvLAcuOA=) 7: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 8: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 9: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 10: laPe02BW1dF6qI7VPAvoJwJhF4s.roa (hash: v/D94ZtejY8jUNkheDIBk4h8vVHwuUMimac0Kl0P0Sk=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:93:da:ac:dd:27:2f:09:eb:ac:4b:c5:26:9e:ee:79:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Aug 10 12:00:38 2025 GMT Not After : Aug 11 12:00:38 2025 GMT Subject: CN=be3c54c79efc8894c067cf7d9f4aab2c5a2a17cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:21:65:61:e0:f3:f4:e7:90:66:34:45:99: a0:8a:b8:a0:15:59:4b:60:5a:86:d7:56:f6:67:af: af:59:1b:b7:56:9a:06:19:17:f2:29:fe:2e:86:5a: 48:90:28:4e:a7:ce:0d:a5:c0:db:70:68:88:97:bf: 84:24:e7:d3:81:7c:52:81:3c:e4:6e:ba:e4:62:22: f6:79:43:5c:e2:23:fd:5f:37:33:24:b6:fb:c3:b3: 6c:2c:74:72:06:7e:ad:4d:5c:49:f5:dd:71:f7:3b: 85:43:02:f7:65:50:f5:6f:ba:c0:17:24:08:82:82: 18:e8:70:3f:84:b1:6f:4d:48:4a:9d:63:19:bc:ba: 95:64:a0:1e:33:83:92:3e:d7:fe:56:e1:1b:1e:ef: 7c:31:b3:56:73:2c:54:21:5a:41:27:8e:90:d3:3f: 1f:a7:78:0c:fa:df:07:0b:26:2e:53:b3:8e:39:1c: e1:05:ed:f9:3b:46:5d:7c:d2:73:fa:ac:69:c4:97: 89:30:ab:c8:75:7a:5f:a4:07:86:b5:06:80:c3:93: a4:50:a7:9d:1a:58:51:60:4a:ae:8d:13:b5:0f:9f: 6b:e7:ee:b2:f9:bd:7a:20:65:01:53:6f:e3:67:54: da:65:ee:b9:e2:c9:31:75:86:16:9a:5e:8f:c5:50: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3C:54:C7:9E:FC:88:94:C0:67:CF:7D:9F:4A:AB:2C:5A:2A:17:CC X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d2:3d:6c:1a:b4:b7:6d:7e:7b:62:de:f3:de:b3:ba:4e:f5: d0:52:1f:85:c3:59:5d:47:76:61:ab:8a:fb:74:4c:1a:7b:f1: 83:17:0f:82:ed:1e:30:db:c4:9b:39:8e:0d:83:92:de:f4:f5: 79:78:6f:34:66:bf:a8:0f:95:e2:5d:b2:9a:b3:13:1f:5f:ef: 64:4b:ac:38:0b:24:ae:30:5d:77:df:59:e2:3f:ac:26:3f:bb: 34:e7:77:33:0c:ee:b4:3a:c4:42:0e:3e:1b:ed:b9:00:bf:8a: e1:54:07:de:17:ad:99:ac:e3:54:51:62:83:d0:50:d8:b5:2a: 1a:b3:16:58:17:33:fd:6a:16:2e:12:8a:1e:66:a3:f1:18:6a: a4:32:93:a7:db:35:1e:c6:c2:c8:dc:c8:02:39:91:3f:5a:f0: 7d:32:22:4b:0d:8b:36:10:4c:eb:1b:39:00:86:06:67:30:7a: 6b:fe:1a:b2:79:a7:6a:95:99:4b:d9:fd:3d:a2:07:3d:da:75: d5:58:41:77:82:98:f9:7b:50:a1:49:c5:af:29:38:18:7f:62: 68:35:e8:f1:9a:76:5c:66:00:2a:99:0d:d7:2a:91:5f:74:c3: 88:07:96:36:42:09:b5:2e:fa:d9:b3:2c:3a:fa:bd:97:55:6e: ec:22:b6:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiT2qzdJy8J66xLxSae7nmCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwODEwMTIwMDM4WhcNMjUwODExMTIwMDM4WjAzMTEwLwYDVQQD EyhiZTNjNTRjNzllZmM4ODk0YzA2N2NmN2Q5ZjRhYWIyYzVhMmExN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZYhZWHg8/TnkGY0RZmgirigFVlL YFqG11b2Z6+vWRu3VpoGGRfyKf4uhlpIkChOp84NpcDbcGiIl7+EJOfTgXxSgTzk brrkYiL2eUNc4iP9XzczJLb7w7NsLHRyBn6tTVxJ9d1x9zuFQwL3ZVD1b7rAFyQI goIY6HA/hLFvTUhKnWMZvLqVZKAeM4OSPtf+VuEbHu98MbNWcyxUIVpBJ46Q0z8f p3gM+t8HCyYuU7OOORzhBe35O0ZdfNJz+qxpxJeJMKvIdXpfpAeGtQaAw5OkUKed GlhRYEqujRO1D59r5+6y+b16IGUBU2/jZ1TaZe654skxdYYWml6PxVDqLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL48VMee/IiUwGfPfZ9KqyxaKhfMMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNI9bBq0 t21+e2Le896zuk710FIfhcNZXUd2YauK+3RMGnvxgxcPgu0eMNvEmzmODYOS3vT1 eXhvNGa/qA+V4l2ymrMTH1/vZEusOAskrjBdd99Z4j+sJj+7NOd3MwzutDrEQg4+ G+25AL+K4VQH3hetmazjVFFig9BQ2LUqGrMWWBcz/WoWLhKKHmaj8RhqpDKTp9s1 HsbCyNzIAjmRP1rwfTIiSw2LNhBM6xs5AIYGZzB6a/4asnmnapWZS9n9PaIHPdp1 1VhBd4KY+XtQoUnFryk4GH9iaDXo8Zp2XGYAKpkN1yqRX3TDiAeWNkIJtS762bMs Ovq9l1Vu7CK2ew== -----END CERTIFICATE-----Generated at Sun Aug 10 18:13:37 2025 by rpki-client