$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: w0g70ROFmCuBrxF4qSgBbEMVdITVKCPhzIBcFAl5CgM= Subject key identifier: C7:26:5A:F6:D7:9D:D1:B9:88:72:FA:BC:2E:35:03:A0:71:82:87:E3 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019873E21970EED4C770E1805766F80271D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1627 Signing time: Mon 04 Aug 2025 07:00:54 +0000 Manifest this update: Mon 04 Aug 2025 07:00:54 +0000 Manifest next update: Tue 05 Aug 2025 07:00:54 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=) 3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 10: AKM5h6Ix-3LMoRtdGUA19KyVLio.roa (hash: P77lNcJ0zrzNLtgfjbd4pt0XLBw/55/N1ocxrR5mz8k=) 11: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 12: EaNOtJnyoBH2AKMmzVCmNF1nSWU.roa (hash: qd2kYNwXTo0ghzb+q0JH2cF3Und1N0r58z0udba+JGA=) 13: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 14: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 15: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 16: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=) 17: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 18: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 19: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (hash: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=) 20: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=) 21: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 22: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 23: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 24: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 25: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=) 26: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 27: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 28: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 29: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=) 30: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 31: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 32: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=) 33: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 34: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 35: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: m7HC1hbnIQNd6AVZE+MTRHAjAX5AA5emlLF6/oPbMgY=) 36: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:19:70:ee:d4:c7:70:e1:80:57:66:f8:02:71:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Aug 4 07:00:54 2025 GMT Not After : Aug 5 07:00:54 2025 GMT Subject: CN=c7265af6d79dd1b98872fabc2e3503a0718287e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3e:e6:12:30:6b:ac:d8:40:70:46:ee:86:a0: 62:74:27:3e:1c:5e:2d:7b:fc:f8:16:56:1e:bb:ec: be:32:76:21:de:ce:d6:7d:f1:ff:7a:b5:d0:96:26: 32:33:6c:37:b8:8d:96:26:a8:40:50:8e:6d:94:e9: 28:36:3e:e5:bc:69:b3:4e:f5:5b:75:63:e7:9c:fd: 5c:34:14:89:a6:97:84:51:8e:e4:44:fa:da:37:13: 28:5f:f0:59:ca:e9:8b:bd:87:c1:c4:72:74:ab:3b: 4b:be:cc:c8:b2:2a:81:08:5b:2a:52:a1:e7:60:76: c1:96:02:e1:41:0f:62:91:97:4f:2b:bf:4a:74:d1: 81:c0:d7:68:01:ee:71:b3:cb:26:b6:70:84:00:fc: e1:3e:45:ad:32:6c:70:fe:f0:d2:b3:10:30:8d:f3: ab:72:40:50:9e:45:ad:59:e5:fb:8d:3c:28:73:29: a7:41:75:69:92:20:12:8f:12:3e:a9:49:f8:78:a7: f7:ec:ec:43:41:1d:44:c2:54:af:f9:51:ae:8e:0f: e5:f9:f4:49:3f:e4:ec:b2:40:bd:b6:0d:97:bc:ac: 15:fb:35:10:b5:e1:ee:7c:67:ff:44:67:84:0f:64: 58:28:b8:41:3e:2a:b5:87:d1:5b:5f:78:68:ea:7c: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:26:5A:F6:D7:9D:D1:B9:88:72:FA:BC:2E:35:03:A0:71:82:87:E3 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8b:59:b4:e8:5f:8d:f5:39:14:ce:c8:b2:7e:27:c0:9a:e2: a9:c8:24:3e:61:85:1b:f5:5e:27:9d:a8:89:02:c7:4c:f7:9a: 75:05:bf:ec:b0:a4:16:69:72:35:51:ad:67:99:6b:ac:80:c7: aa:fe:b8:ac:99:27:23:62:24:11:af:32:0b:ba:f0:fe:e3:a2: a9:07:93:71:f3:61:ca:b9:56:3b:2a:5a:08:1b:dc:69:d1:f9: 2b:ed:25:08:f9:80:ce:68:2d:d4:c7:16:f1:1e:f9:de:99:6d: de:ca:a1:f4:86:fe:1b:9c:4f:f1:b1:b4:9a:42:4e:3d:53:98: 99:26:07:b2:39:ae:2c:ae:4e:3e:11:65:89:04:e5:42:1f:fb: b7:99:33:0b:e6:98:1d:09:1f:36:6e:e1:5a:8c:ff:bd:eb:74: f7:20:50:86:1a:89:1d:b7:93:b9:df:ad:d6:91:e2:cb:17:54: e4:05:5f:35:85:a3:cb:be:40:e5:9a:82:8d:f6:c7:a8:e6:f3: 3c:0f:a2:2e:d9:bc:29:bb:d1:6b:29:0d:58:2b:ed:c4:de:eb: 97:03:d6:84:a3:c1:5c:43:91:53:77:46:44:0f:65:e6:02:40: bb:bb:ba:f1:03:fb:f4:e5:6c:39:8b:76:58:6c:cf:ce:f6:92: ee:f0:b9:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4hlw7tTHcOGAV2b4AnHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUwODA0MDcwMDU0WhcNMjUwODA1MDcwMDU0WjAzMTEwLwYDVQQD EyhjNzI2NWFmNmQ3OWRkMWI5ODg3MmZhYmMyZTM1MDNhMDcxODI4N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T7mEjBrrNhAcEbuhqBidCc+HF4t e/z4FlYeu+y+MnYh3s7WffH/erXQliYyM2w3uI2WJqhAUI5tlOkoNj7lvGmzTvVb dWPnnP1cNBSJppeEUY7kRPraNxMoX/BZyumLvYfBxHJ0qztLvszIsiqBCFsqUqHn YHbBlgLhQQ9ikZdPK79KdNGBwNdoAe5xs8smtnCEAPzhPkWtMmxw/vDSsxAwjfOr ckBQnkWtWeX7jTwocymnQXVpkiASjxI+qUn4eKf37OxDQR1EwlSv+VGujg/l+fRJ P+TsskC9tg2XvKwV+zUQteHufGf/RGeED2RYKLhBPiq1h9FbX3ho6nwRMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcmWvbXndG5iHL6vC41A6BxgofjMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhotZtOhf jfU5FM7Isn4nwJriqcgkPmGFG/VeJ52oiQLHTPeadQW/7LCkFmlyNVGtZ5lrrIDH qv64rJknI2IkEa8yC7rw/uOiqQeTcfNhyrlWOypaCBvcadH5K+0lCPmAzmgt1McW 8R753plt3sqh9Ib+G5xP8bG0mkJOPVOYmSYHsjmuLK5OPhFliQTlQh/7t5kzC+aY HQkfNm7hWoz/vet09yBQhhqJHbeTud+t1pHiyxdU5AVfNYWjy75A5ZqCjfbHqObz PA+iLtm8KbvRaykNWCvtxN7rlwPWhKPBXEORU3dGRA9l5gJAu7u68QP79OVsOYt2 WGzPzvaS7vC5pQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:05:23 2025 by rpki-client