$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: rsqLe+3oqQ4OS2MaxH9CB+2YK7LIXxA9EzXIDOtzzT0= Subject key identifier: 11:D2:88:6D:55:88:45:CC:4B:3D:FA:A4:D5:33:D8:DC:C8:2A:9D:84 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019A4E4FB34D060FADEA099B92B2DB8D320E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 12E3 Signing time: Tue 04 Nov 2025 10:00:37 +0000 Manifest this update: Tue 04 Nov 2025 10:00:37 +0000 Manifest next update: Wed 05 Nov 2025 10:00:37 +0000 Files and hashes: 1: 4RKx0TPWpjyqFnYw_5DcC4r--8c.roa (hash: EeJxEgHcgX2POFtcheGSjZ/nSQoAG58B2CWKgWaFLHU=) 2: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 3: B7-nq7_cc4f7Zt868VHWF4evtl4.roa (hash: 8XyukQXz+vjZuY6nqgv3ycX242CL7BTZXHzKPn1lLzs=) 4: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: iSfGUx9zeiiCRhU2bUCkeGcbvzo2igSdNYe7eu5h/ss=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: f4_XIVmsIZE5Q2N24spgeU0yDjk.roa (hash: 9PnPL8Uj92c8N0K6S0DkkLyk9Siv5wZEJPC/dCt0/ys=) 10: tWNAblpSIHBRwstDjrx69LZTG3c.roa (hash: TOR0ePLyq2A8fQRU7qwOgqkqVyE2uNZxjRQtXz0qxQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:b3:4d:06:0f:ad:ea:09:9b:92:b2:db:8d:32:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Nov 4 10:00:37 2025 GMT Not After : Nov 5 10:00:37 2025 GMT Subject: CN=11d2886d558845cc4b3dfaa4d533d8dcc82a9d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:8d:87:1f:d8:38:94:08:19:0f:e1:a0:8d: 3d:3f:23:7c:f2:95:1a:ce:bc:d1:11:64:4f:b2:d4: 09:c0:83:05:88:12:fe:7e:54:25:4f:93:3f:a9:72: a1:29:b7:b4:18:65:12:3f:79:45:0d:37:8c:a3:bc: 1b:d5:e3:a9:b2:a8:53:6f:d2:fa:ea:a9:b1:71:c8: 2c:6b:c3:a4:15:ad:0e:cb:df:51:b2:e0:e2:9c:0e: 81:0e:a3:19:04:25:8b:8d:af:c5:2b:4c:83:18:a6: c8:7e:37:70:85:99:e3:5d:72:93:91:a3:ea:f2:8d: 2b:1a:cf:95:05:0d:38:86:e0:c5:cb:e5:0d:5a:e5: 99:2e:80:66:3e:28:f0:c0:d1:b1:a5:c0:d3:f0:e5: 2d:73:1b:6f:27:2d:2c:ea:d5:c3:0d:c3:bc:ab:fd: 60:3b:19:cf:81:d5:b2:2f:e9:2b:b3:af:82:42:8d: 50:12:8a:ae:b9:a1:10:46:f3:b4:09:2b:37:26:42: f4:d7:7a:63:9f:e6:c8:81:34:bd:10:2a:cd:74:e1: 48:6b:ba:85:e7:04:97:cf:5e:ca:0b:eb:46:d0:be: 2a:05:ea:43:f0:85:6d:91:57:ee:f4:22:1f:4d:2d: 3a:e2:50:3b:e7:fc:58:bd:95:a4:3e:a8:d2:3a:02: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D2:88:6D:55:88:45:CC:4B:3D:FA:A4:D5:33:D8:DC:C8:2A:9D:84 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:01:bb:df:f1:15:54:e6:10:8c:ff:18:60:22:ec:21:23:66: fc:da:da:4a:9d:e5:f3:dd:21:8b:f3:c4:ad:45:75:41:75:bc: c2:40:57:6a:6e:83:4a:03:63:7c:65:92:16:cc:40:01:b9:6d: ff:9d:04:0b:7f:e2:34:7c:43:99:26:08:75:e7:34:ef:9e:2e: 48:2e:6d:d8:c5:56:13:d4:dc:00:b7:11:b1:ea:bb:0f:35:f9: a2:3b:83:01:e4:70:e2:08:d5:a9:61:ae:6e:b0:73:2e:5b:65: 08:27:d5:d8:62:ad:cb:f2:c9:dd:f3:44:79:6e:53:7f:eb:3e: e8:cc:c7:2e:a9:8a:46:15:73:e8:30:6a:bd:c7:a0:03:3f:00: e2:63:12:74:bb:6f:fc:72:36:de:7d:0f:c4:33:90:ab:8c:f1: 0a:65:68:5e:84:d8:1e:93:d2:3c:ca:e6:88:87:a2:f7:84:f4: 7f:d5:30:d8:4f:88:56:be:ba:3e:fd:46:bf:6e:33:ff:d2:4f: 1c:45:2f:ff:df:4f:50:96:71:4d:59:59:1f:df:92:d3:41:c8: 2c:1e:e7:45:21:84:c6:21:1d:8c:32:b2:27:fb:89:51:78:f3: 63:4f:20:df:e6:6d:2e:01:2d:49:8f:0a:96:91:16:66:e0:f4: 10:86:3b:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT7NNBg+t6gmbkrLbjTIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUxMTA0MTAwMDM3WhcNMjUxMTA1MTAwMDM3WjAzMTEwLwYDVQQD EygxMWQyODg2ZDU1ODg0NWNjNGIzZGZhYTRkNTMzZDhkY2M4MmE5ZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAeNhx/YOJQIGQ/hoI09PyN88pUa zrzREWRPstQJwIMFiBL+flQlT5M/qXKhKbe0GGUSP3lFDTeMo7wb1eOpsqhTb9L6 6qmxccgsa8OkFa0Oy99RsuDinA6BDqMZBCWLja/FK0yDGKbIfjdwhZnjXXKTkaPq 8o0rGs+VBQ04huDFy+UNWuWZLoBmPijwwNGxpcDT8OUtcxtvJy0s6tXDDcO8q/1g OxnPgdWyL+krs6+CQo1QEoquuaEQRvO0CSs3JkL013pjn+bIgTS9ECrNdOFIa7qF 5wSXz17KC+tG0L4qBepD8IVtkVfu9CIfTS064lA75/xYvZWkPqjSOgLq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHSiG1ViEXMSz36pNUz2NzIKp2EMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwG73/EV VOYQjP8YYCLsISNm/NraSp3l890hi/PErUV1QXW8wkBXam6DSgNjfGWSFsxAAblt /50EC3/iNHxDmSYIdec0754uSC5t2MVWE9TcALcRseq7DzX5ojuDAeRw4gjVqWGu brBzLltlCCfV2GKty/LJ3fNEeW5Tf+s+6MzHLqmKRhVz6DBqvcegAz8A4mMSdLtv /HI23n0PxDOQq4zxCmVoXoTYHpPSPMrmiIei94T0f9Uw2E+IVr66Pv1Gv24z/9JP HEUv/99PUJZxTVlZH9+S00HILB7nRSGExiEdjDKyJ/uJUXjzY08g3+ZtLgEtSY8K lpEWZuD0EIY7IA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:50:17 2025 by rpki-client