$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: Q+b2/Q8PtyxROSiCHeKvaRRwyviwrYciAJblmJ+4ajQ= Subject key identifier: B3:6E:3E:8D:B5:2E:46:6B:02:FA:26:A0:83:AB:DC:2F:86:FA:38:B7 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019A51873DF43F017D70C67DB1E44E12DA61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 172A Signing time: Wed 05 Nov 2025 01:00:08 +0000 Manifest this update: Wed 05 Nov 2025 01:00:08 +0000 Manifest next update: Thu 06 Nov 2025 01:00:08 +0000 Files and hashes: 1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=) 2: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=) 3: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=) 4: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=) 5: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=) 6: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (hash: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=) 7: XVtsR7QApMnuJxBGbKhRiugNLuM.roa (hash: mBXTHq+MNZP6clXD4om9o4T9lzXQfLi50+F1yKfLWMA=) 8: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: LFXqyjUTTMDz+wL9MSqjlUg9yn+gIBTEo4+3MTJ4CS0=) 9: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=) 10: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:87:3d:f4:3f:01:7d:70:c6:7d:b1:e4:4e:12:da:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Nov 5 01:00:08 2025 GMT Not After : Nov 6 01:00:08 2025 GMT Subject: CN=b36e3e8db52e466b02fa26a083abdc2f86fa38b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:d3:df:5e:cb:67:e8:3c:39:bc:bb:0e:7d: d3:18:6b:74:d4:6b:b6:b8:a3:a7:ca:b2:48:84:70: 16:ed:da:98:23:1c:bc:4f:15:ad:61:6c:83:a5:39: 3a:b9:33:96:d2:e0:ec:4e:ec:cb:dc:66:8c:06:09: 0a:a5:4b:26:d2:4f:ea:16:75:91:fa:01:21:c5:35: 73:7f:51:30:f2:c4:7e:70:a9:78:d0:e8:c6:64:cd: f2:5b:81:d1:90:54:0b:12:5d:70:03:45:f9:51:7c: 64:13:6d:c3:83:93:ab:ce:60:18:bc:de:2b:8e:81: a0:c9:fe:43:29:08:d3:7e:a9:8d:7e:a8:0c:4b:13: 1f:ff:ed:b7:51:be:5b:b7:be:5a:28:61:96:14:ec: 50:10:0b:d3:23:79:62:b4:28:be:9f:93:e8:25:ad: e6:9b:d1:78:fe:df:ac:30:3b:46:9f:df:fa:da:9f: 5a:8f:a6:94:75:b1:31:99:1e:84:fc:5e:61:b4:b8: 3e:eb:8e:5f:b4:77:7f:c5:b1:25:50:2d:45:88:26: 6b:02:29:19:3a:54:59:29:42:76:58:0c:16:ec:ef: 19:2e:24:17:fc:e8:81:e5:e2:9c:e1:48:05:35:78: 96:65:03:63:54:9b:40:02:81:40:6e:f0:d2:56:14: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6E:3E:8D:B5:2E:46:6B:02:FA:26:A0:83:AB:DC:2F:86:FA:38:B7 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ee:71:12:9d:8d:f9:c8:d6:13:18:97:20:47:99:ce:e1:1b: 86:74:44:0d:d8:22:bf:8e:5b:72:2d:3b:e9:1f:57:36:bf:6f: 6b:7d:68:86:eb:36:f4:06:0c:c3:8d:59:21:09:6a:ce:bd:33: 4d:1f:7f:cf:4d:89:0e:61:be:8c:46:e3:77:0c:d8:e9:5f:0f: 71:97:04:90:c5:f4:71:e0:35:ac:4c:6b:44:4e:6b:0e:1c:56: 36:2d:8b:88:24:f3:90:0d:b2:36:a3:f7:34:59:63:1a:f7:06: 76:7d:87:40:7d:af:45:ef:cb:a0:01:1d:31:bf:ca:34:d1:cd: 34:fd:21:5d:2d:46:38:cb:70:41:ae:b6:46:43:0f:de:40:7f: 60:ea:62:03:59:0a:3e:d2:b6:25:fe:e2:cc:65:46:fd:dd:6f: d2:98:8c:01:cd:f1:6b:e0:bb:3c:1d:bf:af:bf:42:e0:7b:4d: fe:ed:b5:06:57:4b:5b:e6:5d:e0:ec:d0:ab:fd:9a:b1:e7:c9: 3f:7a:cc:51:35:07:b4:09:dc:3f:93:03:d7:00:ae:ad:78:14: b0:b8:35:19:2d:5f:41:88:a7:26:53:b6:a4:af:2a:99:d2:bb: d3:34:9b:e0:17:fd:39:61:3b:ff:a2:21:a5:d6:2b:ec:bc:91: 99:dd:f9:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRhz30PwF9cMZ9seROEtphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUxMTA1MDEwMDA4WhcNMjUxMTA2MDEwMDA4WjAzMTEwLwYDVQQD EyhiMzZlM2U4ZGI1MmU0NjZiMDJmYTI2YTA4M2FiZGMyZjg2ZmEzOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdvT317LZ+g8Oby7Dn3TGGt01Gu2 uKOnyrJIhHAW7dqYIxy8TxWtYWyDpTk6uTOW0uDsTuzL3GaMBgkKpUsm0k/qFnWR +gEhxTVzf1Ew8sR+cKl40OjGZM3yW4HRkFQLEl1wA0X5UXxkE23Dg5OrzmAYvN4r joGgyf5DKQjTfqmNfqgMSxMf/+23Ub5bt75aKGGWFOxQEAvTI3litCi+n5PoJa3m m9F4/t+sMDtGn9/62p9aj6aUdbExmR6E/F5htLg+645ftHd/xbElUC1FiCZrAikZ OlRZKUJ2WAwW7O8ZLiQX/OiB5eKc4UgFNXiWZQNjVJtAAoFAbvDSVhQH5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNuPo21LkZrAvomoIOr3C+G+ji3MB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO5xEp2N +cjWExiXIEeZzuEbhnREDdgiv45bci076R9XNr9va31ohus29AYMw41ZIQlqzr0z TR9/z02JDmG+jEbjdwzY6V8PcZcEkMX0ceA1rExrRE5rDhxWNi2LiCTzkA2yNqP3 NFljGvcGdn2HQH2vRe/LoAEdMb/KNNHNNP0hXS1GOMtwQa62RkMP3kB/YOpiA1kK PtK2Jf7izGVG/d1v0piMAc3xa+C7PB2/r79C4HtN/u21BldLW+Zd4OzQq/2asefJ P3rMUTUHtAncP5MD1wCurXgUsLg1GS1fQYinJlO2pK8qmdK70zSb4Bf9OWE7/6Ih pdYr7LyRmd35tw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:25 2025 by rpki-client