$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: eO80QrKh2GQrPwaQ44v8wSJQQHvxvyKQD/m0Raqzn7Q= Subject key identifier: F2:0B:65:6D:4C:06:A2:DD:78:A5:D2:DA:7A:3C:2D:3B:28:87:ED:10 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019A5074F53B9583F33066A08216DFD0D0BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 0FCA Signing time: Tue 04 Nov 2025 20:00:33 +0000 Manifest this update: Tue 04 Nov 2025 20:00:33 +0000 Manifest next update: Wed 05 Nov 2025 20:00:33 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: NC5OonUp8pTfCiY/7yaO0oxFsAzaeZJqOQ4i7q4rr04=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:74:f5:3b:95:83:f3:30:66:a0:82:16:df:d0:d0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Nov 4 20:00:33 2025 GMT Not After : Nov 5 20:00:33 2025 GMT Subject: CN=f20b656d4c06a2dd78a5d2da7a3c2d3b2887ed10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:83:07:fe:74:7c:cd:39:99:22:0c:f0:6a: ad:df:63:8d:a1:f7:da:20:22:0e:e5:c6:04:c5:69: 50:bf:9c:76:81:27:14:69:9b:49:da:0e:c7:d6:89: 61:de:ba:df:1f:1b:a1:23:71:89:b9:ef:dd:85:54: 6c:ec:6d:f4:9c:67:e7:5f:dc:99:36:2b:34:b8:1d: c0:9d:b4:ef:1a:8e:3e:85:9c:6c:9f:6c:3c:18:39: f3:29:8e:fd:e0:13:94:62:c7:bf:82:12:3f:a7:bc: 50:65:29:6a:b5:e6:2e:fa:35:a3:a8:bf:3c:11:3b: 7d:41:f8:a7:2e:89:0a:01:5d:dd:02:1b:28:4e:cf: 84:df:ca:44:77:75:a2:75:7f:bf:54:0b:48:85:d2: 83:10:90:b8:85:58:74:b9:1f:71:71:4f:c5:f7:6b: ef:87:e2:9c:e4:e1:1f:c0:5f:24:24:48:0b:10:df: 4c:c1:be:cb:bc:6d:fd:e9:03:d3:fa:ec:8d:be:d0: 44:af:2e:be:81:34:37:c5:dc:64:10:64:bc:99:d9: 81:eb:b2:22:90:5a:8e:d1:4c:8f:2a:1e:b9:1d:7d: 77:3d:98:da:7c:cd:eb:73:18:ce:03:98:eb:b5:b3: f4:6a:5e:4a:b0:87:39:2b:07:1b:eb:d0:de:ae:80: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0B:65:6D:4C:06:A2:DD:78:A5:D2:DA:7A:3C:2D:3B:28:87:ED:10 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b3:fe:d5:b7:3a:09:9c:16:ab:03:c6:ae:b8:77:2b:c7:61: e4:ad:88:b1:70:39:3a:4d:bb:a5:cc:bc:ac:15:8a:6d:0c:68: 1d:37:7e:5c:52:62:80:51:47:a9:2f:6a:08:b8:4e:c3:c1:26: 61:76:6e:55:7b:76:27:18:d4:38:c8:c8:33:65:f8:e6:c8:a4: 6d:4e:6d:9f:71:d3:30:3f:66:a9:03:e2:91:aa:fa:9f:91:0d: 59:9e:8b:71:d3:9c:6d:f1:7b:22:37:42:a7:a9:f6:89:72:09: b2:3e:0c:55:e5:3f:b2:d9:d5:03:41:7f:d3:5a:b7:b8:21:16: 20:62:f2:44:2e:49:da:ad:71:fc:c1:bb:5b:13:2f:bf:09:90: aa:a9:23:7b:85:2f:24:e0:a2:29:6b:ba:3c:5c:bb:5e:7c:fa: 34:1c:eb:63:cc:55:e9:cf:7e:7d:c3:97:48:f1:fd:39:a0:e2: 4a:84:0b:d3:f6:ed:2d:8a:ca:c7:8d:49:0d:5e:53:12:fd:2b: e1:27:83:0b:e7:33:6a:cc:5f:dd:8d:ba:82:91:97:4e:14:3a: 0a:2f:1d:51:c8:c8:db:29:60:12:e4:0f:52:a0:c4:4c:7c:62: f7:5a:9c:bf:44:9c:c9:5d:05:c4:e0:67:4f:df:04:23:63:6a: 99:80:5a:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQdPU7lYPzMGagghbf0NC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUxMTA0MjAwMDMzWhcNMjUxMTA1MjAwMDMzWjAzMTEwLwYDVQQD EyhmMjBiNjU2ZDRjMDZhMmRkNzhhNWQyZGE3YTNjMmQzYjI4ODdlZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMyDB/50fM05mSIM8Gqt32ONoffa ICIO5cYExWlQv5x2gScUaZtJ2g7H1olh3rrfHxuhI3GJue/dhVRs7G30nGfnX9yZ Nis0uB3AnbTvGo4+hZxsn2w8GDnzKY794BOUYse/ghI/p7xQZSlqteYu+jWjqL88 ETt9QfinLokKAV3dAhsoTs+E38pEd3WidX+/VAtIhdKDEJC4hVh0uR9xcU/F92vv h+Kc5OEfwF8kJEgLEN9Mwb7LvG396QPT+uyNvtBEry6+gTQ3xdxkEGS8mdmB67Ii kFqO0UyPKh65HX13PZjafM3rcxjOA5jrtbP0al5KsIc5Kwcb69DeroBcAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPILZW1MBqLdeKXS2no8LTsoh+0QMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObP+1bc6 CZwWqwPGrrh3K8dh5K2IsXA5Ok27pcy8rBWKbQxoHTd+XFJigFFHqS9qCLhOw8Em YXZuVXt2JxjUOMjIM2X45sikbU5tn3HTMD9mqQPikar6n5ENWZ6LcdOcbfF7IjdC p6n2iXIJsj4MVeU/stnVA0F/01q3uCEWIGLyRC5J2q1x/MG7WxMvvwmQqqkje4Uv JOCiKWu6PFy7Xnz6NBzrY8xV6c9+fcOXSPH9OaDiSoQL0/btLYrKx41JDV5TEv0r 4SeDC+czasxf3Y26gpGXThQ6Ci8dUcjI2ylgEuQPUqDETHxi91qcv0ScyV0FxOBn T98EI2NqmYBa+w== -----END CERTIFICATE-----Generated at Wed Nov 5 00:54:04 2025 by rpki-client