$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: c2O1iMEW8+9cA2mlSZpQh+9rgZcxyF/RFbHQUfJL+Yg= Subject key identifier: 39:65:FC:5F:91:6C:FF:DF:53:E5:CF:2A:28:F0:70:67:F7:64:BC:43 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019A5150867225536AB00CF5FFB5EF71A93C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 1730 Signing time: Wed 05 Nov 2025 00:00:22 +0000 Manifest this update: Wed 05 Nov 2025 00:00:22 +0000 Manifest next update: Thu 06 Nov 2025 00:00:22 +0000 Files and hashes: 1: 2TxyjhsmXIUBo8Zo1YorHOQd5m4.roa (hash: G16L4uDJVkxkt6HibPGk4SuOrzYueNtQRs61VLc/3UQ=) 2: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 3: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 4: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 5: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 6: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 7: X6_TjtQwmeuK02HsdtBqExL53Ns.roa (hash: iFX22eM+S+PXpdOb7LkHEMy7skJnpdQtVRXSFjP8GCY=) 8: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: jZnX4K+MGtSgKMcUH7AxsvLVs1OdnlZQ8LqQ1Tvxa5g=) 9: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 10: ZmCMretj_IKNhbhPW7MGGPPg6QY.roa (hash: 4kecTGFd/jV1xEOhbuwNVp/CnF9j4BLYU+5l4DsS6Q4=) 11: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 12: bef2KuKcJAMamvz0TVXs-qJ_V7A.roa (hash: XsMssR0GRIHZKbVFvC5zdkQCQ8TXXybVYnAS1M8uGbw=) 13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 14: hryCAnXILF_v7a6M_L6UbzP1x0E.roa (hash: KffgzjGeNv+fdBscER8L1iiMJC1SCTAbWKtpEJoIDmc=) 15: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 16: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 17: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:50:86:72:25:53:6a:b0:0c:f5:ff:b5:ef:71:a9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Nov 5 00:00:22 2025 GMT Not After : Nov 6 00:00:22 2025 GMT Subject: CN=3965fc5f916cffdf53e5cf2a28f07067f764bc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3b:29:1a:21:4b:c4:c7:89:fc:0f:d8:d6:03: 35:e3:4f:11:3c:cd:ae:dc:70:34:24:0e:9e:12:db: 6a:39:b7:3b:fc:fd:b2:77:38:ff:4d:f0:25:01:c1: f1:7c:66:69:62:93:b4:a6:a3:54:d2:52:39:49:1c: db:52:5d:fc:d5:7d:af:9c:98:fd:56:76:2f:34:47: 64:05:1c:0e:06:ad:04:1f:4d:3b:5f:d2:42:1b:34: fb:22:4b:74:fc:67:3a:e0:1e:0c:4e:30:2c:8c:62: ef:d0:17:0f:da:40:f9:22:a9:b5:75:da:72:d3:e0: ea:20:da:8e:c2:47:bc:d4:4c:5f:76:07:82:7a:90: df:03:52:f5:ed:52:0e:ca:ce:0b:38:51:59:39:e2: 2b:9e:7c:ea:d9:b1:63:7a:f3:6a:1c:d4:f4:08:ab: b2:ce:5c:00:36:0a:63:b3:3c:42:f6:51:94:2e:66: bf:d9:f3:bd:41:a4:c0:1e:b7:89:86:2a:54:21:74: e7:c9:59:ce:06:99:f0:4c:6c:57:ce:6a:97:da:d4: b0:42:3e:d9:dd:d8:94:f4:68:6e:22:32:14:00:8c: 12:19:20:72:19:7e:43:f2:cf:4b:fd:bb:20:93:eb: 3e:b7:5f:f4:dc:9c:79:9f:fc:86:0b:fb:3d:80:f0: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:65:FC:5F:91:6C:FF:DF:53:E5:CF:2A:28:F0:70:67:F7:64:BC:43 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:82:5e:c0:00:49:e2:b8:eb:6a:aa:90:c7:ea:2f:08:f3:83: 52:05:d9:4d:23:bb:fd:13:33:52:95:2d:72:de:66:90:c6:81: 8e:86:12:39:8f:33:04:28:40:e3:e1:6a:76:6a:8a:37:9c:9a: c3:34:43:fc:27:35:ec:63:b4:12:bb:d6:d7:7f:77:94:c6:ee: 71:60:c5:4a:e9:fa:e1:53:a2:d4:11:53:27:c2:9b:7e:e2:0f: 99:83:6d:bb:30:45:49:8d:de:3f:47:dd:dd:01:d9:36:58:46: 20:03:ad:d1:5d:a2:6d:a7:94:fa:d4:49:b1:b7:61:f1:e0:21: 63:0a:1e:4b:3c:cb:1f:d5:cc:c8:4f:d5:11:4a:5f:64:f4:9d: bd:79:4c:99:db:73:ef:77:e1:ee:10:f6:f7:dd:c0:15:da:7f: 66:ab:7b:bc:a7:5f:a3:f3:49:7a:d9:bb:68:f0:9f:bf:59:30: a3:fc:f0:36:71:f5:fb:6f:57:5c:09:1b:fa:47:42:83:a6:57: 34:37:cc:8a:ae:61:ec:d8:ac:ef:9d:ff:a5:e8:5b:43:98:f3: 92:be:ce:37:88:57:3e:80:8e:b2:76:fc:70:0d:94:78:58:1c: 5e:f1:ea:9a:03:37:6b:08:e8:10:93:39:51:6b:e7:90:db:66: f4:7d:93:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRUIZyJVNqsAz1/7Xvcak8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMTA1MDAwMDIyWhcNMjUxMTA2MDAwMDIyWjAzMTEwLwYDVQQD EygzOTY1ZmM1ZjkxNmNmZmRmNTNlNWNmMmEyOGYwNzA2N2Y3NjRiYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zspGiFLxMeJ/A/Y1gM1408RPM2u 3HA0JA6eEttqObc7/P2ydzj/TfAlAcHxfGZpYpO0pqNU0lI5SRzbUl381X2vnJj9 VnYvNEdkBRwOBq0EH007X9JCGzT7Ikt0/Gc64B4MTjAsjGLv0BcP2kD5Iqm1ddpy 0+DqINqOwke81ExfdgeCepDfA1L17VIOys4LOFFZOeIrnnzq2bFjevNqHNT0CKuy zlwANgpjszxC9lGULma/2fO9QaTAHreJhipUIXTnyVnOBpnwTGxXzmqX2tSwQj7Z 3diU9GhuIjIUAIwSGSByGX5D8s9L/bsgk+s+t1/03Jx5n/yGC/s9gPAc3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDll/F+RbP/fU+XPKijwcGf3ZLxDMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoJewABJ 4rjraqqQx+ovCPODUgXZTSO7/RMzUpUtct5mkMaBjoYSOY8zBChA4+FqdmqKN5ya wzRD/Cc17GO0ErvW1393lMbucWDFSun64VOi1BFTJ8KbfuIPmYNtuzBFSY3eP0fd 3QHZNlhGIAOt0V2ibaeU+tRJsbdh8eAhYwoeSzzLH9XMyE/VEUpfZPSdvXlMmdtz 73fh7hD2993AFdp/Zqt7vKdfo/NJetm7aPCfv1kwo/zwNnH1+29XXAkb+kdCg6ZX NDfMiq5h7Nis753/pehbQ5jzkr7ON4hXPoCOsnb8cA2UeFgcXvHqmgM3awjoEJM5 UWvnkNtm9H2TKg== -----END CERTIFICATE-----Generated at Wed Nov 5 08:30:54 2025 by rpki-client