$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: Ba8DFODsnUUtPX0ugwTgMAkAaB7d1oTpLW2hSCCWzlw= Subject key identifier: 22:D6:BD:67:AC:AA:B9:97:8F:F4:24:50:F7:2B:1E:41:77:DB:07:FD Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019776AE36D2E7E3DB0655512DB6B83A7B3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0DF4 Signing time: Mon 16 Jun 2025 03:00:18 +0000 Manifest this update: Mon 16 Jun 2025 03:00:18 +0000 Manifest next update: Tue 17 Jun 2025 03:00:18 +0000 Files and hashes: 1: 1ICDnEfX5XD_UK1JwX-WloBKmSg.roa (hash: CPg0BBYt0nzcpTqdRLj2ZwaHiFPO8aXCh3Gnavim9Ac=) 2: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 3: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 4: 8bhH-obTN3_XZdA3ZY4qEnKs6C0.roa (hash: 9hCqmB2340c+JsCnzCqxOHtXSX9acHBMNsYdRmzUUeg=) 5: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 6: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 7: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 8: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 9: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 10: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 11: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 12: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 13: X5-V0n6yN80zazhfKC-inEW3Q-g.roa (hash: ltmVmMUB0Wliy/gqDGqir6t9HKhl/Si7s3Wu5L76zuU=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: EWcZlivgfA7CFdvrYx9t1fypTyZKTUkzX88xnra/o4g=) 15: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 16: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 17: j3n-07vfKdngr7KWusBdYHtWkLA.roa (hash: I8Nyhvl9JRJ5QuyqTJAc18Z1FU3Ux5OLZnkQZ2v4dfQ=) 18: tfIx9ZETkxJKA8srjzC-PZ_rkuQ.roa (hash: 00UIyNz3q56oJ8XG2YOwH7avd0q0R31I6WrHQTaqyGI=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:ae:36:d2:e7:e3:db:06:55:51:2d:b6:b8:3a:7b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jun 16 03:00:18 2025 GMT Not After : Jun 17 03:00:18 2025 GMT Subject: CN=22d6bd67acaab9978ff42450f72b1e4177db07fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b4:f9:85:b8:ee:f0:c5:6e:01:43:fe:a2:fc: 46:1b:09:65:79:df:ef:1a:74:2b:45:28:c1:f1:87: d8:0b:80:93:80:64:70:ed:44:c6:c1:ae:70:c8:87: 0c:ea:ac:60:d7:c7:2f:34:57:4f:21:51:29:3d:1a: f4:e1:a4:b5:cc:aa:e2:0e:ec:27:7a:a6:c2:1c:6b: 08:f8:1a:d9:b8:42:96:f1:47:55:8d:c8:92:6c:7e: e3:b4:f1:1b:d6:88:22:c2:83:f4:53:37:b8:b0:bf: 8a:86:d5:a8:5b:ca:e3:43:31:dc:02:0f:ef:55:df: a5:69:2c:3a:d8:72:87:07:66:e9:36:84:f6:70:2d: d6:63:8c:50:32:67:d5:84:c4:ea:27:b1:e3:c2:06: 17:78:4e:3a:a9:b1:9a:94:0b:eb:9f:d3:8e:6a:ab: 82:9b:88:14:3d:98:3a:55:c9:d7:f9:ad:fc:89:21: 66:70:e3:23:fd:88:f0:48:ae:45:b9:93:9f:4d:b8: 4d:9e:39:0d:f6:d3:67:a0:0b:a7:9f:9d:dd:49:8e: 25:9e:3c:49:13:99:6e:c0:3f:72:b5:2f:d4:4e:fe: ed:53:a4:db:f8:1f:33:5e:05:22:60:5d:81:7b:ff: 80:81:29:8c:2b:79:7d:3d:a1:cc:b1:4b:fb:e9:d2: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D6:BD:67:AC:AA:B9:97:8F:F4:24:50:F7:2B:1E:41:77:DB:07:FD X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7b:8e:24:70:b8:5e:83:d2:96:06:8c:7a:a4:25:aa:d2:5d: 61:db:9a:49:49:a6:2c:ee:f9:26:56:6c:e5:70:39:13:73:d0: 59:fe:8e:6c:f0:eb:a4:16:94:c1:7a:fc:75:aa:3a:d1:79:1e: 2e:3a:d7:c5:39:1f:14:4a:94:a9:95:10:49:6f:c6:86:05:09: bc:3a:76:3c:24:75:68:bc:74:53:40:97:4f:a8:11:52:bd:44: c2:67:20:30:13:e9:7a:b7:f7:2d:a7:93:6a:b0:8a:d5:a5:b5: c8:73:f8:b0:f0:3b:ff:d3:19:22:46:b3:fa:ca:83:24:20:9e: 77:b2:60:16:a2:d0:d3:d5:ea:2c:0e:c4:4e:bd:54:22:98:19: 4e:b6:83:bd:22:1c:42:eb:45:ae:df:10:4e:7c:19:37:ec:0c: 89:b3:29:d3:94:fe:1e:99:e4:c3:cb:5f:23:71:07:ab:08:41: cd:9f:a3:03:87:da:28:19:ae:c4:c9:69:92:7c:35:54:23:b1: 79:1d:0a:e4:01:a7:78:ab:3b:4b:de:b2:28:64:d4:26:6b:0f: 9c:56:10:5d:27:c2:0c:26:53:07:b4:a6:97:3f:13:d2:f6:a0: 06:2f:29:53:ec:8b:48:ed:49:2a:f1:13:39:18:08:fc:35:8f: e0:ce:8c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd2rjbS5+PbBlVRLba4Ons8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUwNjE2MDMwMDE4WhcNMjUwNjE3MDMwMDE4WjAzMTEwLwYDVQQD EygyMmQ2YmQ2N2FjYWFiOTk3OGZmNDI0NTBmNzJiMWU0MTc3ZGIwN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbT5hbju8MVuAUP+ovxGGwlled/v GnQrRSjB8YfYC4CTgGRw7UTGwa5wyIcM6qxg18cvNFdPIVEpPRr04aS1zKriDuwn eqbCHGsI+BrZuEKW8UdVjciSbH7jtPEb1ogiwoP0Uze4sL+KhtWoW8rjQzHcAg/v Vd+laSw62HKHB2bpNoT2cC3WY4xQMmfVhMTqJ7HjwgYXeE46qbGalAvrn9OOaquC m4gUPZg6VcnX+a38iSFmcOMj/YjwSK5FuZOfTbhNnjkN9tNnoAunn53dSY4lnjxJ E5luwD9ytS/UTv7tU6Tb+B8zXgUiYF2Be/+AgSmMK3l9PaHMsUv76dI4rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLWvWesqrmXj/QkUPcrHkF32wf9MB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnuOJHC4 XoPSlgaMeqQlqtJdYduaSUmmLO75JlZs5XA5E3PQWf6ObPDrpBaUwXr8dao60Xke LjrXxTkfFEqUqZUQSW/GhgUJvDp2PCR1aLx0U0CXT6gRUr1EwmcgMBPperf3LaeT arCK1aW1yHP4sPA7/9MZIkaz+sqDJCCed7JgFqLQ09XqLA7ETr1UIpgZTraDvSIc QutFrt8QTnwZN+wMibMp05T+Hpnkw8tfI3EHqwhBzZ+jA4faKBmuxMlpknw1VCOx eR0K5AGneKs7S96yKGTUJmsPnFYQXSfCDCZTB7Smlz8T0vagBi8pU+yLSO1JKvET ORgI/DWP4M6MQw== -----END CERTIFICATE-----Generated at Mon Jun 16 07:48:49 2025 by rpki-client