$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: 3mVdJaqL5beGny8wVKB7tjBI066S/9bmgmrnBJ2SEDo= Subject key identifier: 30:65:13:B3:87:12:56:7F:4B:85:4D:3A:EB:CB:09:34:23:32:34:EC Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019A4C611BBCACBE05250A21CD68DDC226B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1726 Signing time: Tue 04 Nov 2025 01:00:23 +0000 Manifest this update: Tue 04 Nov 2025 01:00:23 +0000 Manifest next update: Wed 05 Nov 2025 01:00:23 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (hash: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=) 4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: +2zsq8zaYb4nzCQw/GNIE4lSGtsI6kPODf2kwAoh83A=) 10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:61:1b:bc:ac:be:05:25:0a:21:cd:68:dd:c2:26:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Nov 4 01:00:23 2025 GMT Not After : Nov 5 01:00:23 2025 GMT Subject: CN=306513b38712567f4b854d3aebcb0934233234ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:5b:29:31:80:4e:d5:ab:09:ad:62:3c:80: 8f:2e:c2:a1:f0:93:d8:3a:11:dd:85:e4:2d:56:f4: e3:3a:67:fb:27:d4:79:e8:7e:ba:50:d8:42:06:42: 14:d9:c5:e6:ee:37:3c:37:e4:fb:d5:b9:6f:f5:19: a1:6f:aa:7b:63:69:e5:0e:c4:c2:b0:26:92:18:0f: 2f:3c:46:ca:6c:46:bf:43:12:dc:68:a2:b4:be:55: 0c:12:6f:73:1b:1e:91:5f:dd:f9:56:4d:88:cc:98: fe:88:dc:ea:82:4d:e9:70:3b:fe:6c:49:7c:01:b3: 40:1b:19:72:5b:1d:e0:44:f5:d5:ca:ce:d7:12:1f: 48:76:63:c5:6d:ef:cf:5a:bd:43:a7:af:dc:49:3b: b4:9a:28:0d:1e:51:91:1a:1c:cb:84:e3:54:e6:21: 8d:7c:91:d9:07:4d:3f:da:d4:39:16:83:79:42:1f: 13:79:d3:de:9a:e2:99:c9:8f:19:30:17:00:e4:9d: 39:2a:92:21:61:29:82:4e:c1:07:09:71:18:0c:4a: ed:7f:f4:e7:19:35:f1:c7:95:de:3f:e2:2f:b1:ec: f6:3a:38:3f:65:30:ba:6e:d0:22:3c:aa:20:d2:ba: bc:43:f4:f7:2a:13:a7:9f:91:d6:90:75:72:cc:7f: cd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:65:13:B3:87:12:56:7F:4B:85:4D:3A:EB:CB:09:34:23:32:34:EC X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e3:13:53:db:5f:88:97:b3:00:98:a9:15:88:60:fb:e5:4e: 49:b4:4d:76:ef:90:f0:c3:24:d4:7e:12:fa:0e:43:52:b4:df: 4d:bf:fa:a5:9b:e0:d9:32:aa:ce:91:25:cc:f0:63:c6:6c:24: 15:98:7a:e9:8c:95:1e:b7:fa:ce:88:2e:4f:ef:02:95:c7:91: b1:9a:65:08:ed:2c:f5:46:fd:d1:0f:fc:30:a1:0c:32:02:4f: 27:9b:3d:43:48:84:cc:7a:0b:b4:57:7d:e2:ff:91:6c:ed:43: bb:db:22:7b:d1:17:73:b9:ee:4f:45:26:22:aa:9c:46:9e:1b: 35:37:6a:8c:5b:25:cf:9e:3a:85:6b:b4:ac:b1:60:c6:e2:79: d0:36:b6:a1:45:d2:b6:58:27:fa:75:81:2c:6a:68:76:6f:de: ec:b8:29:4a:17:91:4f:8a:fc:5f:df:a3:b4:84:d9:17:60:fd: 1e:8a:bc:8b:63:59:4e:e4:38:8c:7c:92:3c:32:02:ed:8f:69: fb:bc:f2:4e:4d:a8:5a:e9:61:82:13:ce:1c:0c:82:07:80:7d: 70:27:33:29:5c:c0:bd:26:01:93:9b:6c:f1:55:7a:57:06:58: 57:2a:3d:f8:16:af:64:46:be:4d:f9:e3:85:54:94:f5:33:91: 11:e7:18:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMYRu8rL4FJQohzWjdwia3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUxMTA0MDEwMDIzWhcNMjUxMTA1MDEwMDIzWjAzMTEwLwYDVQQD EygzMDY1MTNiMzg3MTI1NjdmNGI4NTRkM2FlYmNiMDkzNDIzMzIzNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaFbKTGATtWrCa1iPICPLsKh8JPY OhHdheQtVvTjOmf7J9R56H66UNhCBkIU2cXm7jc8N+T71blv9Rmhb6p7Y2nlDsTC sCaSGA8vPEbKbEa/QxLcaKK0vlUMEm9zGx6RX935Vk2IzJj+iNzqgk3pcDv+bEl8 AbNAGxlyWx3gRPXVys7XEh9IdmPFbe/PWr1Dp6/cSTu0migNHlGRGhzLhONU5iGN fJHZB00/2tQ5FoN5Qh8TedPemuKZyY8ZMBcA5J05KpIhYSmCTsEHCXEYDErtf/Tn GTXxx5XeP+Ivsez2Ojg/ZTC6btAiPKog0rq8Q/T3KhOnn5HWkHVyzH/NaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBlE7OHElZ/S4VNOuvLCTQjMjTsMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOMTU9tf iJezAJipFYhg++VOSbRNdu+Q8MMk1H4S+g5DUrTfTb/6pZvg2TKqzpElzPBjxmwk FZh66YyVHrf6zoguT+8ClceRsZplCO0s9Ub90Q/8MKEMMgJPJ5s9Q0iEzHoLtFd9 4v+RbO1Du9sie9EXc7nuT0UmIqqcRp4bNTdqjFslz546hWu0rLFgxuJ50Da2oUXS tlgn+nWBLGpodm/e7LgpSheRT4r8X9+jtITZF2D9Hoq8i2NZTuQ4jHySPDIC7Y9p +7zyTk2oWulhghPOHAyCB4B9cCczKVzAvSYBk5ts8VV6VwZYVyo9+BavZEa+Tfnj hVSU9TOREecYEg== -----END CERTIFICATE-----Generated at Tue Nov 4 11:19:52 2025 by rpki-client