$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json) Hash identifier: 5FnWpzBRtACuA/AyFXYO7fPTELIkRiY6cYjJm4bktKQ= Subject key identifier: 5B:A7:0B:0B:22:2C:1B:18:03:00:F8:7F:5D:24:EB:6D:61:C8:0C:39 Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 019A5119CB03C55409B2DDFBBF5EDE93A386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft Manifest number: 1714 Signing time: Tue 04 Nov 2025 23:00:36 +0000 Manifest this update: Tue 04 Nov 2025 23:00:36 +0000 Manifest next update: Wed 05 Nov 2025 23:00:36 +0000 Files and hashes: 1: DkHIx2qomTMRxi5txwcyeQJUMC4.roa (hash: aUooC/gZIs2knffE4CSZxz4fOwgHg5KB9hMX38VnhFA=) 2: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=) 3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: X41echAuIcr6CrFXXj7/+C44stzMOEs4pE9W3BW8SLk=) 4: YPWPyR2PrV8C7bZPatIE86usWRg.roa (hash: oPtwylk/25k8zLps+NlaEoKI3y6QpsbDE1m1nmcztaE=) 5: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (hash: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=) 6: gVKSPISn7WOtLgcYX82T_CB0k8w.roa (hash: Ym9+8pOqwFm62YT9wllYnMmkH1dr3oLLznDhqgDjeLA=) 7: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (hash: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=) 8: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (hash: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=) 9: sbcX3dD-IzvBjjiuOceGuIya184.roa (hash: OgKPXFMnHlbOLdXfkb/OHlLV/72L9AOodiZ4Hgh7ss4=) 10: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (hash: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:19:cb:03:c5:54:09:b2:dd:fb:bf:5e:de:93:a3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Nov 4 23:00:36 2025 GMT Not After : Nov 5 23:00:36 2025 GMT Subject: CN=5ba70b0b222c1b180300f87f5d24eb6d61c80c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:79:d6:13:b2:a3:80:17:80:ad:73:dc:e4: ff:72:46:03:10:b0:1e:b4:56:9b:c7:71:34:89:67: 17:d4:6f:92:c5:88:9f:dc:10:fb:69:bb:3b:95:88: ac:57:59:1d:9c:fa:db:02:22:fc:3e:bd:02:1c:27: 12:bc:6c:12:6e:c0:ab:53:5f:92:61:11:76:28:87: 11:1a:f3:a8:08:cd:60:4d:17:02:8a:49:e9:c5:5b: 5a:d7:08:25:f9:bd:d5:b1:c8:81:2c:76:f9:09:a0: 9c:78:3c:62:c6:fc:93:64:6d:85:dc:5a:74:a3:a0: fc:e8:ef:aa:64:f4:c4:7d:0a:3c:21:d6:39:34:b7: c0:5c:c0:f2:7d:6f:24:79:53:b3:56:e5:d1:3f:14: 56:e6:80:f0:37:01:ff:b0:cc:66:7c:80:38:8c:55: 05:59:60:33:ca:84:ab:8e:a1:af:a9:2c:3c:cd:6d: c0:d8:ba:1c:62:7d:2a:57:d6:a0:21:b3:7e:fc:f2: a5:6d:67:56:d7:1d:50:3c:aa:f8:1c:f4:59:7f:26: b8:b6:38:78:b6:9b:bf:f0:b3:ca:e2:a1:52:09:42: 2b:a6:72:f4:44:0c:c1:59:72:2a:9d:5f:73:a0:3d: 26:58:36:96:13:08:04:6e:a9:45:bb:f6:54:19:2c: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A7:0B:0B:22:2C:1B:18:03:00:F8:7F:5D:24:EB:6D:61:C8:0C:39 X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:42:c4:45:0f:d9:a1:c9:84:f8:2e:29:1f:6d:11:3b:1f:93: 46:dd:10:b3:73:0a:84:54:e0:8b:48:ba:04:cb:d3:85:f4:71: 30:23:7a:8f:07:92:3c:c5:b0:92:80:1a:0b:18:cf:f9:d1:e9: 87:f1:4e:d2:88:aa:3f:1b:22:01:d5:90:6d:40:33:24:a5:71: bf:ee:e4:80:4f:4d:9c:83:65:38:56:c5:61:2f:bc:2b:e2:06: 49:fa:31:21:05:73:f6:01:1d:48:10:50:a7:29:c4:5c:b7:01: 6f:d9:61:d0:ee:d3:44:48:87:49:c0:0d:e7:b7:2a:f5:6e:ed: 93:00:12:37:d6:6b:23:01:83:38:17:3e:35:fe:62:ee:17:95: 68:ad:73:ea:c5:5e:c0:ac:48:2f:eb:b7:0f:25:7b:74:cd:1a: 23:2d:24:10:fe:93:cb:01:6e:4f:35:05:c5:bf:da:8c:33:fc: ab:54:a9:cb:39:26:6a:74:7b:9d:d5:32:00:3a:74:f6:26:5b: bb:3d:29:c0:eb:f8:5d:d3:c4:cd:0b:be:96:cf:e5:3e:50:6c: a4:e5:d5:bd:2e:c8:2a:ee:02:81:14:9d:de:84:ff:b5:73:6b: 5c:93:83:fb:53:29:49:c8:3c:d5:b9:cd:19:88:f9:21:e5:33: 3f:6d:07:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRGcsDxVQJst37v17ek6OGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjUxMTA0MjMwMDM2WhcNMjUxMTA1MjMwMDM2WjAzMTEwLwYDVQQD Eyg1YmE3MGIwYjIyMmMxYjE4MDMwMGY4N2Y1ZDI0ZWI2ZDYxYzgwYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bx51hOyo4AXgK1z3OT/ckYDELAe tFabx3E0iWcX1G+SxYif3BD7abs7lYisV1kdnPrbAiL8Pr0CHCcSvGwSbsCrU1+S YRF2KIcRGvOoCM1gTRcCiknpxVta1wgl+b3VsciBLHb5CaCceDxixvyTZG2F3Fp0 o6D86O+qZPTEfQo8IdY5NLfAXMDyfW8keVOzVuXRPxRW5oDwNwH/sMxmfIA4jFUF WWAzyoSrjqGvqSw8zW3A2LocYn0qV9agIbN+/PKlbWdW1x1QPKr4HPRZfya4tjh4 tpu/8LPK4qFSCUIrpnL0RAzBWXIqnV9zoD0mWDaWEwgEbqlFu/ZUGSwekQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFunCwsiLBsYAwD4f10k621hyAw5MB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASELERQ/Z ocmE+C4pH20ROx+TRt0Qs3MKhFTgi0i6BMvThfRxMCN6jweSPMWwkoAaCxjP+dHp h/FO0oiqPxsiAdWQbUAzJKVxv+7kgE9NnINlOFbFYS+8K+IGSfoxIQVz9gEdSBBQ pynEXLcBb9lh0O7TREiHScAN57cq9W7tkwASN9ZrIwGDOBc+Nf5i7heVaK1z6sVe wKxIL+u3DyV7dM0aIy0kEP6TywFuTzUFxb/ajDP8q1SpyzkmanR7ndUyADp09iZb uz0pwOv4XdPEzQu+ls/lPlBspOXVvS7IKu4CgRSd3oT/tXNrXJOD+1MpScg81bnN GYj5IeUzP20Huw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:19 2025 by rpki-client