$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: t5DDV1tAabLXTxzS1AWRw7Lub/32Oz1JeGBkWAGxi1A= Subject key identifier: 9B:0E:D7:E3:CE:95:74:65:8E:E6:DC:BF:DE:BC:B4:24:4B:B7:3A:A6 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 0197767750A1F481259376965A55313A596C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1168 Signing time: Mon 16 Jun 2025 02:00:20 +0000 Manifest this update: Mon 16 Jun 2025 02:00:20 +0000 Manifest next update: Tue 17 Jun 2025 02:00:20 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=) 4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: Pd11PNs/GRwytU3pXlvsKyo3JpDIb7j4A/ijh5jHZEM=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=) 10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:77:50:a1:f4:81:25:93:76:96:5a:55:31:3a:59:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jun 16 02:00:20 2025 GMT Not After : Jun 17 02:00:20 2025 GMT Subject: CN=9b0ed7e3ce9574658ee6dcbfdebcb4244bb73aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:0c:b3:62:7e:e3:0c:21:bf:33:03:8b:47: bd:da:8d:51:8a:a4:ea:5e:13:0e:68:b0:f2:cf:5c: 43:14:02:87:57:1c:9e:ba:cd:62:06:b6:fe:6a:9b: 69:c2:be:f2:d3:54:f3:26:a5:75:67:18:d1:61:ce: f8:1b:c1:79:64:f5:b2:f9:cf:8a:72:f5:0f:77:a0: 8c:01:ac:ea:c4:85:a7:5f:ed:07:a1:df:ea:86:e6: e6:02:0a:ec:e3:e2:d5:2e:79:47:06:96:1f:5d:89: 3f:53:47:8a:1e:f4:3e:2c:a0:9e:67:1b:8c:93:74: c3:c1:1f:44:5e:90:06:48:cc:ae:b2:42:76:a0:2d: 87:54:a7:62:eb:55:76:e1:32:20:25:b4:22:4a:4a: a2:fb:68:aa:49:85:02:98:7e:11:45:0d:4e:f9:5a: 19:89:67:45:1d:34:79:71:ac:9d:21:85:e3:ee:b1: be:28:a3:6e:b6:7e:6a:f7:a4:a6:d6:5d:d4:ad:17: ea:3d:7c:2d:c3:b1:df:99:47:b5:e8:ef:80:9a:e6: 70:e9:fd:36:25:06:ae:6e:f9:5e:27:73:38:8b:d4: d8:fe:c9:a8:c8:99:a2:48:c2:1b:0d:03:72:7c:ac: 60:0e:f1:19:07:03:ac:03:cf:e7:a3:e7:75:85:59: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0E:D7:E3:CE:95:74:65:8E:E6:DC:BF:DE:BC:B4:24:4B:B7:3A:A6 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a0:94:b0:d5:bf:bd:0a:91:5f:2f:a7:e0:d5:51:32:55:86: 14:16:a5:5f:85:fb:e0:d0:7b:7e:94:e7:c3:3d:27:3f:a7:5c: 97:06:3f:28:1d:25:15:b9:aa:97:d2:fb:cd:3f:d6:e2:ea:6e: 78:21:50:0f:a0:d2:a8:33:15:14:0a:92:a4:18:c3:b1:d8:fd: 21:8e:47:36:36:43:3c:e2:b1:fa:e8:af:90:04:c1:ea:37:d8: f7:95:1e:f7:b3:39:c2:7e:eb:a4:13:71:aa:6a:e9:be:6b:3e: 3c:46:6e:fc:84:98:3e:a0:5e:61:b6:fe:ad:f7:19:6e:af:f7: 2f:38:8e:05:06:93:6c:ba:1b:0e:63:3a:f0:56:0f:ff:83:85: 74:df:59:e6:ac:4a:f4:3d:a0:b3:5a:de:7f:53:79:0d:93:2a: e8:13:47:e7:c3:39:4a:d0:e7:26:b5:9a:5f:dc:3a:b7:8d:63: 72:04:a3:ef:27:e9:33:62:65:be:55:e5:6e:87:60:7e:99:f9: a4:e2:03:28:9b:0d:c1:bf:33:a9:f7:c9:32:37:a8:fc:c4:0c: 07:99:28:9e:ac:ca:1e:db:56:9f:e1:ad:2d:f2:6a:56:1d:ad: eb:5c:79:90:3a:02:28:4f:97:0d:dc:3f:4b:e5:d6:c7:9f:01: 4b:21:e8:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd2d1Ch9IElk3aWWlUxOllsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwNjE2MDIwMDIwWhcNMjUwNjE3MDIwMDIwWjAzMTEwLwYDVQQD Eyg5YjBlZDdlM2NlOTU3NDY1OGVlNmRjYmZkZWJjYjQyNDRiYjczYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyYMs2J+4wwhvzMDi0e92o1RiqTq XhMOaLDyz1xDFAKHVxyeus1iBrb+aptpwr7y01TzJqV1ZxjRYc74G8F5ZPWy+c+K cvUPd6CMAazqxIWnX+0Hod/qhubmAgrs4+LVLnlHBpYfXYk/U0eKHvQ+LKCeZxuM k3TDwR9EXpAGSMyuskJ2oC2HVKdi61V24TIgJbQiSkqi+2iqSYUCmH4RRQ1O+VoZ iWdFHTR5caydIYXj7rG+KKNutn5q96Sm1l3UrRfqPXwtw7HfmUe16O+AmuZw6f02 JQaubvleJ3M4i9TY/smoyJmiSMIbDQNyfKxgDvEZBwOsA8/no+d1hVkBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsO1+POlXRljubcv968tCRLtzqmMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKCUsNW/ vQqRXy+n4NVRMlWGFBalX4X74NB7fpTnwz0nP6dclwY/KB0lFbmql9L7zT/W4upu eCFQD6DSqDMVFAqSpBjDsdj9IY5HNjZDPOKx+uivkATB6jfY95Ue97M5wn7rpBNx qmrpvms+PEZu/ISYPqBeYbb+rfcZbq/3LziOBQaTbLobDmM68FYP/4OFdN9Z5qxK 9D2gs1ref1N5DZMq6BNH58M5StDnJrWaX9w6t41jcgSj7yfpM2JlvlXlbodgfpn5 pOIDKJsNwb8zqffJMjeo/MQMB5konqzKHttWn+GtLfJqVh2t61x5kDoCKE+XDdw/ S+XWx58BSyHoAg== -----END CERTIFICATE-----Generated at Mon Jun 16 08:21:10 2025 by rpki-client