$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: u6MZbYSIZfImXL+7Cyq5RvbWbo1t3GSq3t7zmK6HHjc= Subject key identifier: 25:73:34:20:A9:2D:32:8D:27:C0:1B:72:8E:56:C6:7F:3E:A0:19:19 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019A5299EAEC7F428A1D8CA529A8ED6B36BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 15F0 Signing time: Wed 05 Nov 2025 06:00:10 +0000 Manifest this update: Wed 05 Nov 2025 06:00:10 +0000 Manifest next update: Thu 06 Nov 2025 06:00:10 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: VKWObPFDBc-jGCeYU56YA-6t1Cw.roa (hash: KPhyop9Bdu13gG3nAoBktF8fNM6NO652iDQfc8w2K04=) 6: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 7: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: LYGRYs4uaODTdFmcnJRDqKySgaaScvmMGRmuDZ6X+yk=) 8: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 9: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 10: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:99:ea:ec:7f:42:8a:1d:8c:a5:29:a8:ed:6b:36:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Nov 5 06:00:10 2025 GMT Not After : Nov 6 06:00:10 2025 GMT Subject: CN=25733420a92d328d27c01b728e56c67f3ea01919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:7b:60:12:9c:21:9a:3e:32:f3:70:02:81: a9:8d:1b:20:26:56:74:c2:6e:a4:e4:0e:c5:b7:b1: be:6e:80:f6:18:e0:02:e4:98:35:65:b9:86:37:b4: ea:0e:f8:57:8f:56:81:c5:2c:8b:51:74:44:b2:76: 18:3a:37:56:2d:4d:fb:28:2e:44:04:62:7d:bd:9d: b6:93:2f:8e:67:b5:e2:27:55:7d:91:8c:98:40:9c: 42:02:51:5c:fa:8a:a1:dc:74:59:37:a4:ac:16:04: 13:64:b1:c8:94:b1:e7:36:0d:6f:fa:47:0d:18:8a: b5:3e:ad:87:aa:e7:5f:78:9c:b9:ac:d9:c8:c8:c4: e8:dd:bb:8a:91:6f:fe:eb:6b:ea:d9:e3:8d:85:60: 13:4c:2f:ee:5d:96:41:c8:4f:ca:59:13:9f:de:47: 96:03:e2:cf:6d:8a:c3:82:e8:34:23:ee:fa:a3:02: a9:37:76:f1:47:9a:2a:f4:8f:12:0f:d2:c5:94:a1: 49:ee:85:92:e5:1a:a4:dc:b3:a9:d7:17:b0:86:df: 5e:42:65:f3:98:da:39:b7:36:85:0a:f6:6f:38:7f: c4:1a:27:01:3f:4c:09:c8:28:90:7b:1b:c3:03:b2: b0:0e:a4:24:67:2c:6f:4f:60:98:4b:df:8f:47:5b: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:73:34:20:A9:2D:32:8D:27:C0:1B:72:8E:56:C6:7F:3E:A0:19:19 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b3:13:2e:38:ed:1d:d7:59:b7:06:ea:93:5c:3a:3d:ef:7e: 46:80:35:fc:d7:42:4d:25:19:72:8b:a5:be:c1:be:5b:1f:10: 2d:7b:35:66:8f:1e:53:8f:9e:89:0a:e5:5c:53:91:d3:3d:f8: b7:9b:bb:ee:83:ff:81:4e:55:74:f1:70:a7:cf:f0:a7:33:e7: dc:f5:76:e7:a3:d8:11:84:76:35:74:d2:f9:a6:13:69:22:12: 45:84:59:d3:b7:7f:99:a2:53:c9:f0:02:5f:39:01:4b:cc:65: 55:01:2a:36:de:4e:93:5a:22:58:49:66:48:86:15:f7:b9:79: 0d:bf:f5:81:da:dd:d3:f2:b7:1c:e0:25:99:44:4b:78:91:51: ae:04:23:86:48:4c:22:8a:7d:a3:84:0d:4c:9d:3a:ae:8a:11: 01:d3:e5:8f:2b:fa:ae:c8:90:2e:dd:bd:d8:7e:ae:5e:f5:5e: 18:d3:b5:25:36:4e:72:69:b1:99:a5:4a:8f:d1:5a:7b:2c:a5: a5:c2:c7:fd:c5:6b:0f:7d:6e:df:44:d1:0b:2d:61:a0:3f:d8: 66:2e:a7:78:d7:16:cf:2a:31:1a:82:db:f1:98:0f:75:81:c7: d7:c9:1b:48:72:43:aa:43:90:4e:44:4b:ff:20:fe:87:4b:e7: 78:be:19:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpSmersf0KKHYylKajtaza/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUxMTA1MDYwMDEwWhcNMjUxMTA2MDYwMDEwWjAzMTEwLwYDVQQD EygyNTczMzQyMGE5MmQzMjhkMjdjMDFiNzI4ZTU2YzY3ZjNlYTAxOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hZ7YBKcIZo+MvNwAoGpjRsgJlZ0 wm6k5A7Ft7G+boD2GOAC5Jg1ZbmGN7TqDvhXj1aBxSyLUXREsnYYOjdWLU37KC5E BGJ9vZ22ky+OZ7XiJ1V9kYyYQJxCAlFc+oqh3HRZN6SsFgQTZLHIlLHnNg1v+kcN GIq1Pq2HqudfeJy5rNnIyMTo3buKkW/+62vq2eONhWATTC/uXZZByE/KWROf3keW A+LPbYrDgug0I+76owKpN3bxR5oq9I8SD9LFlKFJ7oWS5Rqk3LOp1xewht9eQmXz mNo5tzaFCvZvOH/EGicBP0wJyCiQexvDA7KwDqQkZyxvT2CYS9+PR1sqmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVzNCCpLTKNJ8Abco5Wxn8+oBkZMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrMTLjjt HddZtwbqk1w6Pe9+RoA1/NdCTSUZcoulvsG+Wx8QLXs1Zo8eU4+eiQrlXFOR0z34 t5u77oP/gU5VdPFwp8/wpzPn3PV256PYEYR2NXTS+aYTaSISRYRZ07d/maJTyfAC XzkBS8xlVQEqNt5Ok1oiWElmSIYV97l5Db/1gdrd0/K3HOAlmURLeJFRrgQjhkhM Iop9o4QNTJ06rooRAdPljyv6rsiQLt292H6uXvVeGNO1JTZOcmmxmaVKj9Faeyyl pcLH/cVrD31u30TRCy1hoD/YZi6neNcWzyoxGoLb8ZgPdYHH18kbSHJDqkOQTkRL /yD+h0vneL4Zyg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:35:57 2025 by rpki-client