$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: 4Q5RQmGoTDPeS+KIrVGU4XYiq/GXhEu+zr66X+YGLiI= Subject key identifier: 82:B4:BC:EF:F9:CC:79:79:06:4E:4A:6B:4C:DC:8A:56:0C:41:03:13 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019882E74A08A013E1D31C497F1A59B239F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 0EDB Signing time: Thu 07 Aug 2025 05:00:52 +0000 Manifest this update: Thu 07 Aug 2025 05:00:52 +0000 Manifest next update: Fri 08 Aug 2025 05:00:52 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: QCqMWzEpiYkJHeX/MdFAWIdAe8KdQ8UCdGiGJOJw5+A=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:82:e7:4a:08:a0:13:e1:d3:1c:49:7f:1a:59:b2:39:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Aug 7 05:00:52 2025 GMT Not After : Aug 8 05:00:52 2025 GMT Subject: CN=82b4bceff9cc7979064e4a6b4cdc8a560c410313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:90:ec:3b:b6:7c:81:27:d6:e6:a8:e4:ca: ff:22:06:c4:f2:6e:fd:75:55:3b:51:d6:0e:27:7a: 33:5f:bc:5d:9b:d0:25:20:74:60:5e:c5:ad:ec:f9: ef:75:70:9b:a2:4d:9a:78:c1:0d:5a:9c:68:58:a4: c5:0a:26:f3:5a:2a:55:7e:b4:9b:fa:48:11:c1:f2: 00:39:b5:54:66:ed:19:af:ff:02:6e:0b:d8:ec:bc: 29:a5:b0:21:4b:21:6f:4f:22:f3:59:f7:34:a7:c4: b4:01:64:ea:f3:1f:8f:ba:1a:4b:85:65:68:6a:32: 85:ac:37:58:29:2c:e2:af:a5:72:c0:f8:cc:23:ed: b9:d5:02:4f:94:4f:05:c9:ee:37:a6:0f:e1:d1:a2: a1:93:66:32:08:a8:e9:23:dc:11:f1:94:26:80:a2: a9:48:3c:27:15:2a:ee:f7:fb:86:5d:3a:7c:d4:7f: 8f:b9:6a:d6:c7:34:cb:da:0a:1b:3d:20:46:5f:20: fc:67:65:e9:6b:ce:97:71:29:86:9a:48:04:e9:21: 88:d9:5b:05:1c:89:e0:71:c5:09:03:21:b5:c0:d5: 4f:0d:d8:af:e1:e3:e6:0f:82:c7:b9:2f:53:1c:da: 06:8e:ef:24:cb:a8:50:5c:4a:52:15:38:c1:e7:d3: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:BC:EF:F9:CC:79:79:06:4E:4A:6B:4C:DC:8A:56:0C:41:03:13 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0a:1a:69:03:fc:f6:03:6b:57:82:dd:16:49:c3:52:7e:24: 65:f1:2b:01:e2:91:60:99:49:99:18:a2:cf:9f:6d:8a:4a:0f: 30:f9:75:d9:0f:89:cc:e4:30:1b:4c:3a:92:7b:d9:5e:58:ce: f5:e7:6b:bc:bb:5e:f6:82:61:3c:e4:1c:a2:ce:70:e4:ab:f6: 21:bd:9c:d8:15:27:3f:6f:7c:88:54:20:22:e5:69:7e:83:8a: 18:ad:ae:65:da:2c:35:b8:79:1f:0d:92:8b:87:12:72:c2:47: 12:9b:44:1d:64:d7:aa:69:67:2e:45:29:bb:d9:d2:ca:0a:83: 58:f6:50:cc:a2:db:ca:7a:e6:9f:34:cc:9c:90:49:50:fe:5d: 98:3b:76:45:e9:1d:4f:51:4d:75:9d:f1:c0:5d:20:54:fc:ed: 54:e3:0b:a1:c7:44:a7:9e:18:70:ea:dd:28:36:71:ef:fe:c3: 49:2d:a8:b9:62:9e:f2:3e:91:86:fb:5f:55:74:38:89:21:00: 44:58:9c:ec:04:8e:e9:81:7a:41:23:22:e8:97:84:5f:f7:d8: 6b:1b:a0:93:c1:48:b3:30:65:63:65:e1:1f:cd:44:11:c3:53: 02:db:31:6c:9f:10:55:22:7a:7d:69:8d:97:4b:90:15:00:c2: f1:47:59:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiC50oIoBPh0xxJfxpZsjn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUwODA3MDUwMDUyWhcNMjUwODA4MDUwMDUyWjAzMTEwLwYDVQQD Eyg4MmI0YmNlZmY5Y2M3OTc5MDY0ZTRhNmI0Y2RjOGE1NjBjNDEwMzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw56Q7Du2fIEn1uao5Mr/IgbE8m79 dVU7UdYOJ3ozX7xdm9AlIHRgXsWt7PnvdXCbok2aeMENWpxoWKTFCibzWipVfrSb +kgRwfIAObVUZu0Zr/8CbgvY7LwppbAhSyFvTyLzWfc0p8S0AWTq8x+PuhpLhWVo ajKFrDdYKSzir6VywPjMI+251QJPlE8Fye43pg/h0aKhk2YyCKjpI9wR8ZQmgKKp SDwnFSru9/uGXTp81H+PuWrWxzTL2gobPSBGXyD8Z2Xpa86XcSmGmkgE6SGI2VsF HIngccUJAyG1wNVPDdiv4ePmD4LHuS9THNoGju8ky6hQXEpSFTjB59NPqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK0vO/5zHl5Bk5Ka0zcilYMQQMTMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAoaaQP8 9gNrV4LdFknDUn4kZfErAeKRYJlJmRiiz59tikoPMPl12Q+JzOQwG0w6knvZXljO 9edrvLte9oJhPOQcos5w5Kv2Ib2c2BUnP298iFQgIuVpfoOKGK2uZdosNbh5Hw2S i4cScsJHEptEHWTXqmlnLkUpu9nSygqDWPZQzKLbynrmnzTMnJBJUP5dmDt2Rekd T1FNdZ3xwF0gVPztVOMLocdEp54YcOrdKDZx7/7DSS2ouWKe8j6RhvtfVXQ4iSEA RFic7ASO6YF6QSMi6JeEX/fYaxugk8FIszBlY2XhH81EEcNTAtsxbJ8QVSJ6fWmN l0uQFQDC8UdZyA== -----END CERTIFICATE-----Generated at Thu Aug 7 14:46:58 2025 by rpki-client