$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: qCRU3Ec6eWYytIYz+eGzd5QegnHzFonaR/9iW8FQweY= Subject key identifier: E3:CF:2A:22:2A:B7:E7:98:82:68:C3:90:AB:A4:15:04:DC:03:D9:75 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019A4D07939E51D57CEF7E40C241C67C639C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 171B Signing time: Tue 04 Nov 2025 04:02:13 +0000 Manifest this update: Tue 04 Nov 2025 04:02:13 +0000 Manifest next update: Wed 05 Nov 2025 04:02:13 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: 5iIW6p5dXTiLCO6yBRF5gqF9VokoiIesDLMaR7tJQaE=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 04:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:07:93:9e:51:d5:7c:ef:7e:40:c2:41:c6:7c:63:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Nov 4 04:02:13 2025 GMT Not After : Nov 5 04:02:13 2025 GMT Subject: CN=e3cf2a222ab7e7988268c390aba41504dc03d975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:5e:86:82:44:db:10:f3:89:01:c4:7a:1c: f2:43:b3:38:e9:9b:fe:14:a5:41:ab:aa:49:ac:86: ab:d0:8a:25:a4:7e:f3:c9:e3:98:c5:b6:86:54:2b: 54:f9:b6:e8:3d:91:ed:22:ec:57:1c:17:d8:48:28: d1:66:38:70:2c:2a:39:30:2d:d1:aa:8b:8a:a3:bd: fa:aa:7a:d7:17:d5:15:81:b1:05:07:d9:0a:61:8d: 81:0b:b0:d7:59:b1:9d:55:82:1c:d8:82:2b:95:0f: 22:ed:c9:11:c7:12:79:30:28:c6:cc:9d:c3:c1:ca: d2:bb:1a:b1:26:81:fc:85:db:0e:66:d3:4f:dc:ec: a0:1c:41:aa:90:12:22:a8:55:64:13:13:81:a9:6e: 07:b1:7f:c5:b5:ea:41:b2:49:db:bd:55:2e:4f:32: 6e:23:c3:e2:65:d5:3c:d9:49:d7:db:f8:f9:ca:16: 5f:3d:6b:00:0e:db:1a:4e:ef:dc:14:0d:92:e0:a2: dc:15:4a:c3:70:c4:da:3c:56:72:1e:81:c8:4d:64: b7:23:64:c1:c6:7c:11:a6:be:72:bc:d6:6f:89:a7: 93:c8:70:da:95:71:34:d4:ce:a9:03:cd:59:93:a7: a5:1a:5e:e5:e2:9d:f5:a5:a3:2d:b2:57:82:34:6f: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CF:2A:22:2A:B7:E7:98:82:68:C3:90:AB:A4:15:04:DC:03:D9:75 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e3:dd:59:ff:97:66:e3:03:a9:c9:a9:0c:3e:9b:54:de:12: 80:9c:05:51:02:2f:d6:b6:04:35:7b:0a:ff:f0:d2:66:ab:fc: f6:84:a9:f3:67:eb:bb:41:ad:6e:3d:54:f7:6c:bf:97:47:68: 96:8d:37:e9:77:fd:bf:45:0f:64:eb:d5:23:fd:17:87:3a:b9: c8:6c:38:9a:41:7e:d0:aa:d6:94:f4:91:cb:07:e5:58:fc:73: 13:94:58:75:1a:9c:b9:c5:b7:37:57:9a:57:0a:6b:5a:e5:29: a2:0c:a4:84:04:87:b0:6d:01:3f:e6:d6:f7:19:a8:99:0d:51: ec:32:a4:63:04:ba:0f:e3:6d:6c:8e:82:f1:5e:f8:e3:f1:53: 39:3a:ff:ec:7a:cd:9a:16:17:ff:93:9c:78:07:af:88:1a:29: 57:b0:7d:61:05:50:53:63:79:66:8b:6a:64:db:51:3e:2a:2d: 86:c3:1c:c6:45:e2:51:c5:5d:bb:8b:01:32:d9:60:ac:26:2a: 2b:df:ee:0f:07:84:95:b1:34:4d:40:33:f5:d2:3e:03:07:b8: 8e:98:39:86:1d:97:66:fb:b9:02:ec:b2:97:3e:32:13:d9:c3: 29:f4:98:28:10:c7:4b:1b:f5:85:c6:f3:81:24:27:77:1b:70: 7e:da:6b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNB5OeUdV8735AwkHGfGOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUxMTA0MDQwMjEzWhcNMjUxMTA1MDQwMjEzWjAzMTEwLwYDVQQD EyhlM2NmMmEyMjJhYjdlNzk4ODI2OGMzOTBhYmE0MTUwNGRjMDNkOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumxehoJE2xDziQHEehzyQ7M46Zv+ FKVBq6pJrIar0IolpH7zyeOYxbaGVCtU+bboPZHtIuxXHBfYSCjRZjhwLCo5MC3R qouKo736qnrXF9UVgbEFB9kKYY2BC7DXWbGdVYIc2IIrlQ8i7ckRxxJ5MCjGzJ3D wcrSuxqxJoH8hdsOZtNP3OygHEGqkBIiqFVkExOBqW4HsX/FtepBsknbvVUuTzJu I8PiZdU82UnX2/j5yhZfPWsADtsaTu/cFA2S4KLcFUrDcMTaPFZyHoHITWS3I2TB xnwRpr5yvNZviaeTyHDalXE01M6pA81Zk6elGl7l4p31paMtsleCNG8LkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPPKiIqt+eYgmjDkKukFQTcA9l1MB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuPdWf+X ZuMDqcmpDD6bVN4SgJwFUQIv1rYENXsK//DSZqv89oSp82fru0Gtbj1U92y/l0do lo036Xf9v0UPZOvVI/0Xhzq5yGw4mkF+0KrWlPSRywflWPxzE5RYdRqcucW3N1ea VwprWuUpogykhASHsG0BP+bW9xmomQ1R7DKkYwS6D+NtbI6C8V744/FTOTr/7HrN mhYX/5OceAeviBopV7B9YQVQU2N5ZotqZNtRPiothsMcxkXiUcVdu4sBMtlgrCYq K9/uDweElbE0TUAz9dI+Awe4jpg5hh2XZvu5Auyylz4yE9nDKfSYKBDHSxv1hcbz gSQndxtwftpr5Q== -----END CERTIFICATE-----Generated at Tue Nov 4 11:00:37 2025 by rpki-client