$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: 071TI3kY+f7Rd3p3cbMbIZjpQ0BvWUyGQbfbl9blWyg= Subject key identifier: 37:21:24:7E:AD:E9:D9:34:8F:8C:6A:38:0B:3C:5C:3D:73:6D:7C:C0 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 01987418FC9C499BDDFACB3FF93B8AFC1A20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 1147 Signing time: Mon 04 Aug 2025 08:00:51 +0000 Manifest this update: Mon 04 Aug 2025 08:00:51 +0000 Manifest next update: Tue 05 Aug 2025 08:00:51 +0000 Files and hashes: 1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=) 2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=) 3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=) 4: CDi8vSg_fdYRotnSbMRPDSasq6c.roa (hash: 7OEMcqwogdkJNcoA2dzyUv5/KIyWaJVisinKvEvTiik=) 5: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=) 6: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (hash: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=) 7: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=) 8: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=) 9: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=) 10: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=) 11: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=) 12: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=) 13: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=) 14: fyZQsu5bzOst03Al5FJRpvSLsoo.roa (hash: MRRTMhVAXN/buVo3idrb+5O9n9y8Lo0sdRtwg3OeKfA=) 15: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=) 16: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=) 17: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=) 18: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=) 19: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=) 20: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=) 21: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=) 22: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: FXAzh20Myu+ozxpsuhPVWbK5WrseP16kDH6z29xuWWU=) 23: zvVbccPOezRcenUxgZYT6IshvbM.roa (hash: 012XCVnoNirJiTB9TmAZ50WFMIRiHKAXPZ8XS3U9P3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:18:fc:9c:49:9b:dd:fa:cb:3f:f9:3b:8a:fc:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Aug 4 08:00:51 2025 GMT Not After : Aug 5 08:00:51 2025 GMT Subject: CN=3721247eade9d9348f8c6a380b3c5c3d736d7cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:09:75:3d:aa:24:52:5b:77:e6:f2:e2:93: 9d:30:b3:1d:f4:7d:9c:19:9b:47:ba:64:78:34:62: 3a:d6:f4:8b:79:1f:aa:93:63:23:01:32:17:7a:79: 71:62:b3:de:b2:40:e1:c9:00:2b:ee:79:dd:de:c2: e0:13:15:f1:e6:07:6f:bb:02:b6:76:59:ca:38:97: 7e:2c:b6:0a:b9:57:63:30:44:0e:99:73:8c:b5:a8: 20:4c:23:26:60:7d:57:da:d7:c7:c8:f6:bc:7b:bf: 02:33:ed:3d:8a:ec:82:67:4e:9a:c8:af:51:42:1a: 36:e7:f0:8d:d9:e9:79:7e:8c:12:6f:a2:19:b7:92: c8:06:73:50:ae:5c:37:d9:a2:0d:83:bc:1b:dd:8b: fd:18:f1:4f:d7:41:95:e2:ea:9f:28:ce:38:af:d3: eb:5e:6f:12:7c:d4:cd:64:71:17:fe:56:c2:2c:72: e1:b7:9c:63:8a:c5:d8:ea:21:c1:4e:78:8b:a4:4b: 52:e0:18:13:5a:fa:36:9a:d4:8e:d6:43:d7:8f:28: 09:83:51:0f:c5:d2:ab:7b:ff:db:69:91:07:b3:58: 44:70:15:bb:9d:a1:d2:b6:7b:d1:f2:f0:cf:fe:6b: fb:d9:7f:d5:7a:6d:b5:ee:ea:41:ee:62:63:86:3e: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:21:24:7E:AD:E9:D9:34:8F:8C:6A:38:0B:3C:5C:3D:73:6D:7C:C0 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:83:b9:1a:e1:cc:8c:8b:8c:5a:80:6a:5b:17:81:27:9d:cc: 9d:e6:ab:3a:03:0f:31:12:00:96:b2:94:b4:6d:5e:04:1e:f8: 1c:d9:b0:5c:25:47:ae:ca:38:31:39:7b:1f:43:26:e3:b2:3e: d8:fa:fe:fa:df:ac:d0:bf:85:4d:7e:88:b5:77:c1:9b:1b:9b: 02:4e:8d:1b:e4:21:16:a5:04:76:1d:27:fb:c6:52:2f:64:83: 5f:05:2e:66:22:d3:10:b1:5e:eb:b7:cf:d1:a8:51:48:51:c8: 78:ed:c7:6c:b4:82:6a:d0:fc:61:89:82:1b:f1:df:1b:4a:c1: 59:3e:4b:37:a1:a7:c1:e8:b1:8a:c1:54:f1:64:10:c2:67:35: 56:e4:cc:94:1f:3e:f4:34:8e:88:ba:3a:c4:03:07:92:bb:42: 7f:95:c0:39:f4:35:29:10:c0:9d:86:1c:1b:44:4e:42:9e:2d: f6:f5:db:ab:4d:31:6a:55:2f:fb:34:e7:05:34:6c:74:94:c1: 9c:af:72:9d:a2:30:e8:c7:9d:09:ab:b6:11:c3:5f:13:dc:5b: c0:15:c3:2d:82:49:36:f0:ab:5c:79:13:5d:7f:5f:bc:4f:27: 12:ac:9e:bf:aa:bd:e0:17:63:98:e8:23:dd:40:ea:8a:be:84: e9:26:d7:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0GPycSZvd+ss/+TuK/BogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUwODA0MDgwMDUxWhcNMjUwODA1MDgwMDUxWjAzMTEwLwYDVQQD EygzNzIxMjQ3ZWFkZTlkOTM0OGY4YzZhMzgwYjNjNWMzZDczNmQ3Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8wJdT2qJFJbd+by4pOdMLMd9H2c GZtHumR4NGI61vSLeR+qk2MjATIXenlxYrPeskDhyQAr7nnd3sLgExXx5gdvuwK2 dlnKOJd+LLYKuVdjMEQOmXOMtaggTCMmYH1X2tfHyPa8e78CM+09iuyCZ06ayK9R Qho25/CN2el5fowSb6IZt5LIBnNQrlw32aINg7wb3Yv9GPFP10GV4uqfKM44r9Pr Xm8SfNTNZHEX/lbCLHLht5xjisXY6iHBTniLpEtS4BgTWvo2mtSO1kPXjygJg1EP xdKre//baZEHs1hEcBW7naHStnvR8vDP/mv72X/Vem217upB7mJjhj760QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDchJH6t6dk0j4xqOAs8XD1zbXzAMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4O5GuHM jIuMWoBqWxeBJ53MnearOgMPMRIAlrKUtG1eBB74HNmwXCVHrso4MTl7H0Mm47I+ 2Pr++t+s0L+FTX6ItXfBmxubAk6NG+QhFqUEdh0n+8ZSL2SDXwUuZiLTELFe67fP 0ahRSFHIeO3HbLSCatD8YYmCG/HfG0rBWT5LN6GnweixisFU8WQQwmc1VuTMlB8+ 9DSOiLo6xAMHkrtCf5XAOfQ1KRDAnYYcG0ROQp4t9vXbq00xalUv+zTnBTRsdJTB nK9ynaIw6MedCau2EcNfE9xbwBXDLYJJNvCrXHkTXX9fvE8nEqyev6q94BdjmOgj 3UDqir6E6SbXKQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:17 2025 by rpki-client