$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: ERnZsnZDSeDXMHbiEGv09o26RhzTpDoj2znrslwNDHI= Subject key identifier: 48:68:48:82:98:D1:F1:65:D9:02:9E:29:BC:B9:B3:E3:C1:16:63:A7 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 01989411F2D5BFC3D4F89BB2B4218DE5389F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 1647 Signing time: Sun 10 Aug 2025 13:01:00 +0000 Manifest this update: Sun 10 Aug 2025 13:01:00 +0000 Manifest next update: Mon 11 Aug 2025 13:01:00 +0000 Files and hashes: 1: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=) 2: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 3: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 4: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 5: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 6: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 7: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: /0PhrMlmhHs6FuNi8RzWuZukW8N9FrSJZiTyK8dwQug=) 8: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 9: ZmCMretj_IKNhbhPW7MGGPPg6QY.roa (hash: 4kecTGFd/jV1xEOhbuwNVp/CnF9j4BLYU+5l4DsS6Q4=) 10: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 11: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 12: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 13: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 14: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) 15: yBjQt0nxOzCTFYaYzTfVvAxNLN4.roa (hash: mRd9L3aVB8Ods5APaINStOPnEMONcl4icTGrN8Xa60U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:94:11:f2:d5:bf:c3:d4:f8:9b:b2:b4:21:8d:e5:38:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Aug 10 13:01:00 2025 GMT Not After : Aug 11 13:01:00 2025 GMT Subject: CN=4868488298d1f165d9029e29bcb9b3e3c11663a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:80:5f:88:58:44:fa:f2:7c:2a:6c:ed:99: 59:c5:b6:73:26:53:a7:f0:dd:d4:6d:0d:da:a4:ae: 93:4d:cf:3f:fb:a6:13:61:11:a4:84:96:93:3f:fc: 39:08:9e:3a:0e:15:ea:89:41:3f:91:12:e9:cb:e1: 34:bf:03:56:cc:84:da:4a:e9:b2:ef:44:33:30:76: c2:10:93:e2:7e:d8:ae:58:ad:9d:02:2a:f5:c6:c9: 4a:06:f3:c8:0f:f4:47:c6:29:2e:c8:45:33:4b:18: 1f:3b:3c:d5:e7:01:67:ff:1b:b9:9f:7f:4a:fa:5b: d2:0c:ec:04:5d:02:48:61:92:7c:83:98:e5:2a:5b: a1:50:b0:22:62:61:01:9e:75:7f:de:2e:46:fd:1d: 86:4c:4a:f8:d4:bb:b3:00:58:f1:f0:fe:27:71:b2: c7:8c:27:6b:6b:0b:c6:99:12:a4:28:23:a2:96:60: 99:15:2f:f4:5c:1b:6d:80:3a:75:00:94:f5:da:23: f3:d7:11:62:db:b9:17:4e:ea:75:d0:17:38:bb:d0: b7:49:51:51:30:b3:33:8c:b8:38:69:94:d7:81:71: dd:4b:1e:fc:12:e6:22:46:36:19:25:5c:88:9e:90: 11:fd:2d:f3:76:e3:b5:7b:5c:2c:02:35:58:9a:d2: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:68:48:82:98:D1:F1:65:D9:02:9E:29:BC:B9:B3:E3:C1:16:63:A7 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a6:04:ee:03:c0:e2:d0:fa:38:dc:c2:36:38:84:e8:34:52: 00:d1:d3:ae:c4:8a:96:3b:a2:b2:d0:1e:7e:33:c6:e3:64:50: 92:01:45:c7:9d:c7:f5:05:2f:c3:d5:84:ee:6a:dc:49:4f:84: 76:1d:e4:f6:f1:af:69:0a:b0:c4:02:5d:ad:ad:e5:49:9b:33: bd:b8:3d:f8:cd:35:c7:49:11:ff:b4:de:da:6d:81:8b:5b:a8: f3:90:73:51:d4:e8:e3:04:66:82:50:17:f4:fe:b7:36:26:96: ef:e8:0b:04:8e:4b:e3:a2:92:e0:ec:69:d8:17:cd:f0:27:0f: 15:9f:a4:10:99:26:01:f5:27:55:84:11:d9:af:9a:54:0a:e6: db:77:3c:11:3d:3a:f7:64:60:21:ad:33:54:8e:55:4d:f8:1d: ba:2b:95:86:03:33:28:b1:fc:c8:af:0d:24:0e:4d:8a:2c:e8: 44:04:73:39:3b:47:1f:de:02:4f:40:3f:2f:31:d9:81:db:db: 81:43:d7:b3:8c:fd:64:85:c8:c8:57:ec:16:c8:bd:14:5e:c7: 48:7d:3d:6e:b7:c7:95:33:f6:07:6f:bd:7f:54:42:06:ca:18: f2:13:90:8c:ed:e7:d1:cb:dd:89:d5:ee:20:cd:7a:45:37:15: 35:26:bc:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiUEfLVv8PU+JuytCGN5TifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUwODEwMTMwMTAwWhcNMjUwODExMTMwMTAwWjAzMTEwLwYDVQQD Eyg0ODY4NDg4Mjk4ZDFmMTY1ZDkwMjllMjliY2I5YjNlM2MxMTY2M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshyAX4hYRPryfCps7ZlZxbZzJlOn 8N3UbQ3apK6TTc8/+6YTYRGkhJaTP/w5CJ46DhXqiUE/kRLpy+E0vwNWzITaSumy 70QzMHbCEJPiftiuWK2dAir1xslKBvPID/RHxikuyEUzSxgfOzzV5wFn/xu5n39K +lvSDOwEXQJIYZJ8g5jlKluhULAiYmEBnnV/3i5G/R2GTEr41LuzAFjx8P4ncbLH jCdrawvGmRKkKCOilmCZFS/0XBttgDp1AJT12iPz1xFi27kXTup10Bc4u9C3SVFR MLMzjLg4aZTXgXHdSx78EuYiRjYZJVyInpAR/S3zduO1e1wsAjVYmtJiMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhoSIKY0fFl2QKeKby5s+PBFmOnMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqYE7gPA 4tD6ONzCNjiE6DRSANHTrsSKljuistAefjPG42RQkgFFx53H9QUvw9WE7mrcSU+E dh3k9vGvaQqwxAJdra3lSZszvbg9+M01x0kR/7Te2m2Bi1uo85BzUdTo4wRmglAX 9P63NiaW7+gLBI5L46KS4Oxp2BfN8CcPFZ+kEJkmAfUnVYQR2a+aVArm23c8ET06 92RgIa0zVI5VTfgduiuVhgMzKLH8yK8NJA5NiizoRARzOTtHH94CT0A/LzHZgdvb gUPXs4z9ZIXIyFfsFsi9FF7HSH09brfHlTP2B2+9f1RCBsoY8hOQjO3n0cvdidXu IM16RTcVNSa8+w== -----END CERTIFICATE-----Generated at Sun Aug 10 21:02:33 2025 by rpki-client