$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: D36qjA9lR/9M4pFnVmNnbn37zpHLiYE8r0CLwfB4Ok8= Subject key identifier: 90:CA:B0:8B:31:DC:65:EC:8D:C9:09:B1:B2:C7:6F:0D:01:DC:C0:9A Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019A4E86C574CC4B50908CEB2CC5A7A6B3E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1744 Signing time: Tue 04 Nov 2025 11:00:46 +0000 Manifest this update: Tue 04 Nov 2025 11:00:46 +0000 Manifest next update: Wed 05 Nov 2025 11:00:46 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: MFsAIGGhjwkS7QqCImE8k8j0fHE.roa (hash: agrbR9N2CmVo23L0pspB3pCZ8XyUH28RrwKnFVhuak4=) 8: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 9: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 10: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 11: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: sjHFZ0wNWCMp1ypx+WH6dePriJ/vSdvAolvU+sz5nG8=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:c5:74:cc:4b:50:90:8c:eb:2c:c5:a7:a6:b3:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Nov 4 11:00:46 2025 GMT Not After : Nov 5 11:00:46 2025 GMT Subject: CN=90cab08b31dc65ec8dc909b1b2c76f0d01dcc09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:1c:53:dc:e9:d4:01:63:4a:71:46:c9:92: 3e:7b:fd:c8:c0:4d:44:ef:99:41:f6:7f:f8:af:ba: a9:f1:02:fa:d3:76:8a:64:b7:bf:d6:17:bf:fb:32: ae:f1:3b:d5:d3:00:25:fd:e0:f5:cb:ff:1b:4e:85: e6:56:c7:5d:eb:3b:79:74:f7:09:7a:13:f4:3e:fc: 14:21:fa:33:72:a5:04:82:e1:4b:e3:dd:9f:a1:63: 8d:cf:68:16:1d:97:26:7b:17:fc:50:9e:a5:9c:ca: 8a:35:0b:62:78:47:f4:95:71:7c:7a:1d:27:bf:77: 90:df:51:52:25:07:0d:1a:67:96:43:97:66:a4:3a: 15:2b:fd:c2:5d:2c:ff:28:03:0c:64:ee:02:01:5f: a6:bb:bf:b7:e7:f0:33:3e:ba:bf:ae:68:77:03:6f: 0e:73:ef:98:cc:68:ea:7b:59:57:82:f1:22:15:1b: cb:53:2d:b3:fe:c4:1a:11:e6:89:7b:c5:42:aa:83: 62:58:87:26:28:0e:5a:36:cb:83:86:24:17:8f:06: 12:ff:d0:8b:c4:a5:3a:73:d0:49:77:65:f2:9b:51: c1:5b:e8:dd:5b:28:8c:af:40:97:62:33:c1:8b:3d: 83:aa:f8:ef:f8:b8:32:8a:2c:a1:b9:d7:a3:74:08: 9a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CA:B0:8B:31:DC:65:EC:8D:C9:09:B1:B2:C7:6F:0D:01:DC:C0:9A X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fd:43:f5:d8:69:05:b2:64:e5:8f:56:d5:7d:06:88:2f:fb: 21:56:8d:61:2e:bd:f3:a1:95:43:77:a9:b4:9c:ac:df:de:da: cc:6b:82:61:21:73:20:7c:30:02:d7:75:90:5e:c4:72:b6:44: 86:53:7d:07:3b:3c:32:1c:b3:51:d7:39:64:5f:99:ec:ca:35: b9:fd:8b:d3:71:20:b8:87:6c:d1:5c:f3:13:5e:08:ba:a7:b0: 48:8c:e8:4e:3b:c7:8d:c4:24:44:3b:8d:61:68:d1:90:72:9d: e8:23:4b:8f:1b:52:78:91:fd:f1:3d:b9:bd:ee:1d:00:0c:07: c3:e7:c2:3d:6e:06:b9:a8:4d:18:2e:8c:84:29:b8:b8:24:3a: 88:47:c7:5f:57:fb:dc:53:71:46:8c:b9:80:b4:2b:74:a1:1b: 3a:13:f7:36:eb:29:47:00:ed:a7:23:a0:0b:d3:50:f6:c2:50: 86:58:94:cf:92:9e:77:bd:89:0d:c0:01:13:c8:a5:cb:34:9f: 93:a0:91:bf:7f:02:bc:66:c5:f8:8c:93:cb:ab:f3:f2:4b:d8: 48:ed:1a:f1:30:ff:3c:f5:dc:85:75:bf:0c:30:e2:4c:b5:8b: 33:ad:8f:25:11:c0:a9:fe:3a:b4:88:1e:04:bf:d5:c5:90:7a: 69:9f:e6:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhsV0zEtQkIzrLMWnprPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUxMTA0MTEwMDQ2WhcNMjUxMTA1MTEwMDQ2WjAzMTEwLwYDVQQD Eyg5MGNhYjA4YjMxZGM2NWVjOGRjOTA5YjFiMmM3NmYwZDAxZGNjMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMAcU9zp1AFjSnFGyZI+e/3IwE1E 75lB9n/4r7qp8QL603aKZLe/1he/+zKu8TvV0wAl/eD1y/8bToXmVsdd6zt5dPcJ ehP0PvwUIfozcqUEguFL492foWONz2gWHZcmexf8UJ6lnMqKNQtieEf0lXF8eh0n v3eQ31FSJQcNGmeWQ5dmpDoVK/3CXSz/KAMMZO4CAV+mu7+35/AzPrq/rmh3A28O c++YzGjqe1lXgvEiFRvLUy2z/sQaEeaJe8VCqoNiWIcmKA5aNsuDhiQXjwYS/9CL xKU6c9BJd2Xym1HBW+jdWyiMr0CXYjPBiz2Dqvjv+LgyiiyhudejdAiaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDKsIsx3GXsjckJsbLHbw0B3MCaMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/1D9dhp BbJk5Y9W1X0GiC/7IVaNYS6986GVQ3eptJys397azGuCYSFzIHwwAtd1kF7EcrZE hlN9Bzs8MhyzUdc5ZF+Z7Mo1uf2L03EguIds0VzzE14IuqewSIzoTjvHjcQkRDuN YWjRkHKd6CNLjxtSeJH98T25ve4dAAwHw+fCPW4GuahNGC6MhCm4uCQ6iEfHX1f7 3FNxRoy5gLQrdKEbOhP3NuspRwDtpyOgC9NQ9sJQhliUz5Ked72JDcABE8ilyzSf k6CRv38CvGbF+IyTy6vz8kvYSO0a8TD/PPXchXW/DDDiTLWLM62PJRHAqf46tIge BL/VxZB6aZ/mhQ== -----END CERTIFICATE-----Generated at Tue Nov 4 17:31:30 2025 by rpki-client