$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: Nmr5av8fV+mtgN/udImhrvfjO7f+TEpvJEmomIkPJx4= Subject key identifier: 86:E8:30:35:A3:92:97:EE:9B:96:92:3B:DD:73:B0:EC:1E:23:3F:80 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 01988C584FAC3B41A511C9A62E0F8B88D065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 163E Signing time: Sat 09 Aug 2025 01:00:54 +0000 Manifest this update: Sat 09 Aug 2025 01:00:54 +0000 Manifest next update: Sun 10 Aug 2025 01:00:54 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (hash: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=) 4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: vxnJiujwxSbo6YklR95qS0EFsvZ3Makg85QZBUWKf0g=) 10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8c:58:4f:ac:3b:41:a5:11:c9:a6:2e:0f:8b:88:d0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Aug 9 01:00:54 2025 GMT Not After : Aug 10 01:00:54 2025 GMT Subject: CN=86e83035a39297ee9b96923bdd73b0ec1e233f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:5d:6a:2c:a0:4f:4b:ff:41:11:41:b5:e0: 87:87:cd:ca:d6:4d:b1:0b:a3:28:59:ec:0f:3c:b6: 82:18:d3:a4:0c:8d:2f:68:73:15:33:1c:58:11:ce: 90:36:3e:a9:53:10:d2:84:74:72:35:43:48:ba:a2: 61:de:5b:ee:ac:f2:f3:92:92:c6:5d:40:88:38:b0: 4f:a4:ef:be:5b:1c:67:7a:0a:80:86:de:4d:dd:0d: 72:d2:be:fb:7a:6b:fe:05:e1:05:3a:2a:ed:49:79: 34:de:aa:d2:df:71:55:6b:bb:02:db:1e:35:51:ab: 86:9a:9b:27:1d:fc:35:5f:9f:7d:97:bb:03:31:3a: fd:24:70:d4:9e:1b:aa:17:3b:1d:91:df:97:d6:19: f7:f3:b7:d0:58:b8:3f:f3:d1:30:5c:9c:52:0e:2c: 6a:b3:9c:e8:78:a4:99:3e:91:95:86:84:c1:65:9a: 7e:82:aa:78:12:e9:46:09:5e:47:57:f7:c5:cd:78: 88:1f:e8:aa:d6:68:1e:e4:0b:e6:49:d4:61:d5:66: dd:1e:15:a2:de:87:6a:4e:34:7e:32:2c:62:e7:fc: 9c:b3:29:07:e9:81:00:ed:c0:06:ab:70:b0:e8:d8: 36:9b:90:28:c0:70:d1:20:f9:ff:8f:e5:1f:8e:0a: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E8:30:35:A3:92:97:EE:9B:96:92:3B:DD:73:B0:EC:1E:23:3F:80 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:29:f0:b1:ce:66:02:59:98:3c:63:74:70:7d:57:cd:36:0b: 7d:d1:81:ed:e1:53:0a:fd:f4:00:1e:56:88:a0:b7:12:cb:af: 2e:03:a7:7e:80:f4:f6:43:66:2e:07:f9:f8:e2:7d:ef:41:45: 6c:94:ea:ee:50:d5:4e:31:fc:34:8a:8a:86:3d:61:3d:63:ed: fd:be:19:03:f5:55:c8:95:f5:8e:2b:35:14:2d:cf:ba:11:25: 46:4d:23:dc:ec:f5:0d:20:a6:17:8a:c3:7a:1c:a6:43:a6:3d: bf:13:f3:31:d4:ad:2f:7a:35:6a:e3:aa:92:2d:fb:45:3e:75: 43:f1:52:fd:12:a8:e5:8d:61:b6:06:31:8e:14:5f:28:37:03: 31:7a:e5:03:f9:d0:36:05:9d:fe:e9:a1:80:03:7e:2b:a9:fe: be:cf:ce:cd:06:2d:ec:d5:33:65:ec:7e:67:3c:97:8f:2b:dc: 0b:fd:ae:5c:54:b4:0e:73:f0:8a:fd:94:0b:80:64:1c:0a:4c: e6:05:7c:cc:38:52:e7:be:9c:58:4b:ab:9e:c1:fa:0e:4e:62: 7f:bf:5e:d9:70:bc:df:a3:1f:9a:64:16:d5:0c:5e:c4:20:e6: 87:0d:d2:1f:6a:cb:de:16:83:ce:4d:57:06:20:15:0c:56:1a: 28:58:d5:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiMWE+sO0GlEcmmLg+LiNBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUwODA5MDEwMDU0WhcNMjUwODEwMDEwMDU0WjAzMTEwLwYDVQQD Eyg4NmU4MzAzNWEzOTI5N2VlOWI5NjkyM2JkZDczYjBlYzFlMjMzZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHVdaiygT0v/QRFBteCHh83K1k2x C6MoWewPPLaCGNOkDI0vaHMVMxxYEc6QNj6pUxDShHRyNUNIuqJh3lvurPLzkpLG XUCIOLBPpO++WxxnegqAht5N3Q1y0r77emv+BeEFOirtSXk03qrS33FVa7sC2x41 UauGmpsnHfw1X599l7sDMTr9JHDUnhuqFzsdkd+X1hn387fQWLg/89EwXJxSDixq s5zoeKSZPpGVhoTBZZp+gqp4EulGCV5HV/fFzXiIH+iq1mge5AvmSdRh1WbdHhWi 3odqTjR+Mixi5/ycsykH6YEA7cAGq3Cw6Ng2m5AowHDRIPn/j+UfjgpzMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIboMDWjkpfum5aSO91zsOweIz+AMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSnwsc5m AlmYPGN0cH1XzTYLfdGB7eFTCv30AB5WiKC3EsuvLgOnfoD09kNmLgf5+OJ970FF bJTq7lDVTjH8NIqKhj1hPWPt/b4ZA/VVyJX1jis1FC3PuhElRk0j3Oz1DSCmF4rD ehymQ6Y9vxPzMdStL3o1auOqki37RT51Q/FS/RKo5Y1htgYxjhRfKDcDMXrlA/nQ NgWd/umhgAN+K6n+vs/OzQYt7NUzZex+ZzyXjyvcC/2uXFS0DnPwiv2UC4BkHApM 5gV8zDhS576cWEurnsH6Dk5if79e2XC836MfmmQW1QxexCDmhw3SH2rL3haDzk1X BiAVDFYaKFjVSQ== -----END CERTIFICATE-----Generated at Sat Aug 9 05:37:59 2025 by rpki-client