$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: 81B5WmtS+pGOX9KR4VD6vhOYJqbq8SSUUIiwxrXqg1g= Subject key identifier: 97:37:04:CF:32:E9:EF:8E:64:05:9F:A1:14:D8:CB:5F:89:A6:E3:5A Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019777B98B1DBFA8B92B6AFBF2512B4223EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1474 Signing time: Mon 16 Jun 2025 07:52:17 +0000 Manifest this update: Mon 16 Jun 2025 07:52:17 +0000 Manifest next update: Tue 17 Jun 2025 07:52:17 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 4: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 5: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: gwtUvTti87C8gMkUJXidpq8mt7zriXkM8HPJGiXLma4=) 6: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 7: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 8: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 9: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 10: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 11: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 07:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:77:b9:8b:1d:bf:a8:b9:2b:6a:fb:f2:51:2b:42:23:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jun 16 07:52:17 2025 GMT Not After : Jun 17 07:52:17 2025 GMT Subject: CN=973704cf32e9ef8e64059fa114d8cb5f89a6e35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:02:ac:db:3d:cb:b9:a2:be:a3:e5:56:69: 6b:8f:73:ae:3e:6e:75:6d:c3:3d:63:be:a1:28:38: ea:40:a0:bc:43:f0:2c:30:7d:f7:80:5e:49:87:88: 86:10:35:72:b3:3c:c4:00:5c:e1:8c:21:4f:57:88: 81:cd:7b:c8:e8:92:57:02:bf:48:a6:c3:c4:f3:b4: ed:67:61:cf:fa:70:5b:55:db:e9:f3:fe:83:f0:9a: 41:c3:9c:21:57:23:09:2c:75:0b:a8:fd:95:97:63: dc:fe:1f:51:0e:f9:58:d0:19:b4:f4:46:f9:8e:02: 0a:10:fc:22:b7:25:17:7b:ab:f7:fb:2b:4e:8e:13: 40:58:96:d5:8a:78:40:f7:31:f4:0d:91:87:c5:cb: d1:a6:9b:a8:21:90:d2:ed:27:62:72:78:bc:ac:ed: ec:25:da:a2:df:2b:76:cd:7e:81:18:96:7b:56:10: 79:8c:9a:7a:0a:27:f4:3d:8f:50:7b:c2:ff:31:0c: 38:14:51:e2:d9:0f:43:e8:0c:be:4c:58:9d:2c:cf: f4:d7:88:bb:e9:52:6c:de:bd:3a:0d:e4:e0:7f:79: e3:b1:54:3a:56:c1:7b:15:c8:ee:f2:40:bb:2b:db: d8:6c:77:ff:57:bc:e1:07:3f:de:6c:76:7d:18:21: 1a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:37:04:CF:32:E9:EF:8E:64:05:9F:A1:14:D8:CB:5F:89:A6:E3:5A X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8d:35:2e:75:6e:04:9b:33:7e:4f:4c:a2:00:8a:c0:2a:1d: 6d:f2:9c:ce:f7:73:9e:2c:8c:49:b0:8f:1f:5b:9e:03:19:a6: b8:46:69:ff:d5:3b:52:1a:01:63:1e:3f:17:a7:af:66:c4:5d: 4f:9f:fd:0a:3b:d4:ef:36:48:20:0a:b1:8f:fc:69:17:b4:42: cb:41:0e:2e:a0:46:ca:85:22:bd:39:11:74:bc:7e:7d:72:c1: 0b:1e:8d:78:8d:af:97:a8:2b:35:7d:6f:f3:a0:3a:8e:79:a1: 7b:8d:05:13:21:9f:d2:4b:d9:40:8a:56:b5:d4:ae:64:03:40: da:7d:da:70:6c:ab:e7:3f:31:da:90:96:d3:67:5b:f9:71:54: 19:ea:88:74:ef:52:a4:d3:c4:17:4b:3d:32:7b:7a:09:45:fd: 11:ab:74:69:6b:a9:d1:19:4f:6b:36:33:50:d5:bb:ff:73:1d: b0:b4:ac:a5:a0:8f:07:2d:87:86:cc:c0:a9:2c:cc:b4:d8:ad: 31:d5:82:ed:08:53:d4:44:a3:cf:24:a6:d7:2b:fd:8a:1e:2d: 32:9c:be:c1:1a:af:09:e4:9d:c4:86:17:91:57:42:7e:1c:52: b0:4e:8d:e5:01:a4:cd:c2:7d:b5:0f:20:47:89:c2:2c:1a:74: d1:21:99:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd3uYsdv6i5K2r78lErQiPsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwNjE2MDc1MjE3WhcNMjUwNjE3MDc1MjE3WjAzMTEwLwYDVQQD Eyg5NzM3MDRjZjMyZTllZjhlNjQwNTlmYTExNGQ4Y2I1Zjg5YTZlMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNcCrNs9y7mivqPlVmlrj3OuPm51 bcM9Y76hKDjqQKC8Q/AsMH33gF5Jh4iGEDVyszzEAFzhjCFPV4iBzXvI6JJXAr9I psPE87TtZ2HP+nBbVdvp8/6D8JpBw5whVyMJLHULqP2Vl2Pc/h9RDvlY0Bm09Eb5 jgIKEPwityUXe6v3+ytOjhNAWJbVinhA9zH0DZGHxcvRppuoIZDS7Sdicni8rO3s Jdqi3yt2zX6BGJZ7VhB5jJp6Cif0PY9Qe8L/MQw4FFHi2Q9D6Ay+TFidLM/014i7 6VJs3r06DeTgf3njsVQ6VsF7Fcju8kC7K9vYbHf/V7zhBz/ebHZ9GCEaZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc3BM8y6e+OZAWfoRTYy1+JpuNaMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo01LnVu BJszfk9MogCKwCodbfKczvdzniyMSbCPH1ueAxmmuEZp/9U7UhoBYx4/F6evZsRd T5/9CjvU7zZIIAqxj/xpF7RCy0EOLqBGyoUivTkRdLx+fXLBCx6NeI2vl6grNX1v 86A6jnmhe40FEyGf0kvZQIpWtdSuZANA2n3acGyr5z8x2pCW02db+XFUGeqIdO9S pNPEF0s9Mnt6CUX9Eat0aWup0RlPazYzUNW7/3MdsLSspaCPBy2HhszAqSzMtNit MdWC7QhT1ESjzySm1yv9ih4tMpy+wRqvCeSdxIYXkVdCfhxSsE6N5QGkzcJ9tQ8g R4nCLBp00SGZPA== -----END CERTIFICATE-----Generated at Mon Jun 16 16:12:41 2025 by rpki-client