$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft File: XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json) Hash identifier: cuFQh4I1Qzb7mXWhG9IbExkVMiTUfjw4Rbt+kKYgkhI= Subject key identifier: 0A:C1:80:30:10:EE:12:6D:5D:3E:63:3A:47:64:A0:F2:8C:16:1A:1D Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Certificate serial: 01976D06DF245223B0619218930DE5FEC4F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft Manifest number: 12EC Signing time: Sat 14 Jun 2025 06:00:55 +0000 Manifest this update: Sat 14 Jun 2025 06:00:55 +0000 Manifest next update: Sun 15 Jun 2025 06:00:55 +0000 Files and hashes: 1: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (hash: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=) 2: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (hash: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=) 3: 4Lb0e1ykjVbPF3TRFBfCy5NXBs8.roa (hash: GK2lw+w9RAZ8U/n2HtSWHhfI/WFan24rTpmfoSr2/5s=) 4: 5yf7kmOkJIf47QytclAVGnDQkG0.roa (hash: jkRS+kneeyL0eT4kf9kZTFCrEEfsEGOnxXwzCopHh4E=) 5: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (hash: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=) 6: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (hash: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=) 7: CJWoMIuHhVD-Efxrbw0jAFhbe-w.roa (hash: Kgwm9eLnChXzut1Wvo58jSxKdzv5IWvQsGfIpc5SNrY=) 8: GaPhNmCLCg6FDzOqGOsmTwzEr2s.roa (hash: s8h3O6KnSTgtqyfNfNsxD91VQjj/kAw0losU0p/2szw=) 9: MoVlaEpeYcgapii9RQN01AK-1sk.roa (hash: YW281iIo2TPc/obI4ya1TvT4BPdmGo+hoO/NvnmnPcs=) 10: Q4reaRyzxdlr2J3p-E7N3TijG90.roa (hash: /yxNBaJLXZrSF/MyIlaBqDEhy23fudEAJpVMYlkUVGA=) 11: QIBl_PzzOyhWQ0YwS67cfZQv6q8.roa (hash: P7SWaJtSk5gky4A+tb7xk+SJWuasiFqqv67n5HbuuCY=) 12: SnJnvCbTNrEMF1kRlYnaQpP1-CM.roa (hash: M/883UPP+y+ETclB7OhwNjCUVOl1P7x38ODsI02JpL0=) 13: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (hash: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=) 14: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: WaHoQeDp6RVxqQo35gdk9t6Juio2JnK9UXgIYAcVx7A=) 15: YPXYjBAH_6CTa2PRzt8FUXSv0uc.roa (hash: 6zYw4RGhgL5oXoJxuJXImN5CehSpcJqIUUxqFJsp5EQ=) 16: b_7FAg2gJSVaw2lNZeMvTuKt_LE.roa (hash: eCyaUhu+U/7r/ol9yEOLafoy3sM9NF7EUYO2UwxliFk=) 17: fX9UYKZO6xd52hU0CG_6QfKAnlI.roa (hash: PeN61zex2Sw5DInmZiyUVF6K0j8DWMly0+OvVLBpOMI=) 18: hSWUv1huf0ZgdEoupOzoYiR-xRY.roa (hash: fUUm9WVh4RT1Bif3s0lLxfArOXO1kV1fWL5woYLGALo=) 19: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (hash: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=) 20: vQBa0DHzLolz37NUtVTr3McGXdM.roa (hash: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=) 21: zLLnY-dQIRtqYuPaqhFMWu0P24Q.roa (hash: NAwFEB8VGQ8kHJYhy4abt4dV8wltJt8R0PlTbgI+GD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:06:df:24:52:23:b0:61:92:18:93:0d:e5:fe:c4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Validity Not Before: Jun 14 06:00:55 2025 GMT Not After : Jun 15 06:00:55 2025 GMT Subject: CN=0ac1803010ee126d5d3e633a4764a0f28c161a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:8c:99:38:85:6b:c8:e0:2f:bd:17:db:1c: b8:b6:3d:fd:e9:37:94:d0:c3:ba:70:e4:3d:bf:ee: 4e:3f:98:12:14:e1:76:85:70:bb:da:7a:e6:fb:d8: 99:38:21:36:a0:b4:ab:48:59:d4:ff:90:11:c3:87: 83:ae:85:22:7b:be:5e:cd:34:2a:5a:44:94:e0:5f: f6:53:0f:5d:9a:ad:f0:e1:aa:1d:d8:ba:b7:0a:8c: d4:66:29:7f:54:02:39:c8:5c:36:b5:8a:54:2b:db: 6e:ed:81:82:0d:c5:be:19:e7:b5:1d:30:f5:8f:01: 58:af:8f:3b:3d:1f:4a:5b:a0:31:8b:05:fe:b6:55: 88:fc:85:fb:67:cd:c8:33:d0:5e:00:03:8c:12:2a: 1c:3b:40:c4:d3:5b:d8:81:ee:37:12:f4:a9:b3:74: 64:4c:ce:0e:09:de:39:51:a0:23:6c:2a:73:c4:b2: 31:09:23:73:86:a3:01:65:22:93:da:bd:93:ec:5d: 64:f8:d3:29:dd:bf:be:a1:d6:91:92:ec:29:4a:a9: 5b:90:cb:77:04:12:6d:49:6f:fd:aa:d3:15:1d:04: 22:0d:1b:aa:ab:21:69:32:82:c0:20:7e:b8:d3:65: 4e:c0:88:2b:7b:3e:e5:bf:36:13:6c:af:ee:90:c1: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C1:80:30:10:EE:12:6D:5D:3E:63:3A:47:64:A0:F2:8C:16:1A:1D X509v3 Authority Key Identifier: keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:de:da:0b:93:51:22:c3:c5:af:17:a0:71:71:0a:a5:de:32: b6:28:ad:4d:6b:77:5d:e5:21:ee:99:33:80:00:c7:cb:f1:60: a5:f7:53:1b:ab:f1:ae:cd:bd:a0:a6:75:dd:12:15:70:ef:52: 99:69:54:ef:07:e3:68:2b:5d:14:e3:fc:f0:74:83:9c:1a:cd: 84:c7:3a:e7:e6:9a:1f:d4:59:f9:7f:ff:16:a3:60:6d:0a:35: 0e:c0:74:9a:29:a1:26:60:6b:b0:c2:dd:22:2f:80:fa:cb:35: b7:1f:89:f2:c4:fa:75:25:f4:e4:10:2f:ad:31:45:40:1c:82: b7:32:25:26:5b:31:60:fd:63:2c:cd:e7:4f:2f:63:6f:fd:dd: 26:a8:00:ea:00:67:25:8b:3e:f8:77:b2:55:25:57:af:c9:8c: 51:2a:02:c2:a9:7f:9b:2d:3a:33:f7:65:f9:57:92:dc:73:67: 85:6f:3c:77:46:5b:4c:aa:2f:f3:30:1e:1d:50:3b:b2:88:dc: ab:6f:ce:b6:2c:d9:a2:5c:95:a6:8d:65:cf:b6:4a:a2:73:5a: 3c:8d:84:a3:c2:e1:80:3c:a7:aa:19:89:bc:0f:0a:b5:a6:34: 56:5b:21:cf:8e:4f:c2:f8:ef:e4:38:95:8e:3f:87:1a:cc:e9: 25:91:c9:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtBt8kUiOwYZIYkw3l/sT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy ZGVhYWIwHhcNMjUwNjE0MDYwMDU1WhcNMjUwNjE1MDYwMDU1WjAzMTEwLwYDVQQD EygwYWMxODAzMDEwZWUxMjZkNWQzZTYzM2E0NzY0YTBmMjhjMTYxYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwaMmTiFa8jgL70X2xy4tj396TeU 0MO6cOQ9v+5OP5gSFOF2hXC72nrm+9iZOCE2oLSrSFnU/5ARw4eDroUie75ezTQq WkSU4F/2Uw9dmq3w4aod2Lq3CozUZil/VAI5yFw2tYpUK9tu7YGCDcW+Gee1HTD1 jwFYr487PR9KW6AxiwX+tlWI/IX7Z83IM9BeAAOMEiocO0DE01vYge43EvSps3Rk TM4OCd45UaAjbCpzxLIxCSNzhqMBZSKT2r2T7F1k+NMp3b++odaRkuwpSqlbkMt3 BBJtSW/9qtMVHQQiDRuqqyFpMoLAIH6402VOwIgrez7lvzYTbK/ukMH6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArBgDAQ7hJtXT5jOkdkoPKMFhodMB8GA1UdIwQY MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt ZjExYTM5ZjI2YzNiLzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkN7aC5NR IsPFrxegcXEKpd4ytiitTWt3XeUh7pkzgADHy/FgpfdTG6vxrs29oKZ13RIVcO9S mWlU7wfjaCtdFOP88HSDnBrNhMc65+aaH9RZ+X//FqNgbQo1DsB0mimhJmBrsMLd Ii+A+ss1tx+J8sT6dSX05BAvrTFFQByCtzIlJlsxYP1jLM3nTy9jb/3dJqgA6gBn JYs++HeyVSVXr8mMUSoCwql/my06M/dl+VeS3HNnhW88d0ZbTKov8zAeHVA7sojc q2/OtizZolyVpo1lz7ZKonNaPI2Eo8LhgDynqhmJvA8KtaY0Vlshz45Pwvjv5DiV jj+HGszpJZHJdg== -----END CERTIFICATE-----Generated at Sat Jun 14 11:18:06 2025 by rpki-client