$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: HWEsKQfEEtM3J7mTGfZnauHF4sZ1ZI1tsPMZANoF1Ps= Subject key identifier: E0:99:D7:8D:41:2B:14:98:9C:F0:FB:A2:34:DA:BD:C9:D4:E2:B4:99 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019888B26F812A5EBFEE888258C875E5A0E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 11F6 Signing time: Fri 08 Aug 2025 08:00:51 +0000 Manifest this update: Fri 08 Aug 2025 08:00:51 +0000 Manifest next update: Sat 09 Aug 2025 08:00:51 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=) 4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: iRUdpjFSnASsn4dXKt9Vv4EgmZ1dBJwKhNNjC+n52iM=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=) 10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 02:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:88:b2:6f:81:2a:5e:bf:ee:88:82:58:c8:75:e5:a0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Aug 8 08:00:51 2025 GMT Not After : Aug 9 08:00:51 2025 GMT Subject: CN=e099d78d412b14989cf0fba234dabdc9d4e2b499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:75:cf:e6:68:c0:57:41:9a:b2:44:8c:f9: 0e:f0:96:e2:42:18:f3:16:c2:14:98:92:c4:a4:a4: 67:b5:8c:2a:22:54:7f:fd:e5:3f:6b:f2:5d:e0:6d: f0:97:3d:c7:15:7d:9b:5b:b3:5f:a4:bb:83:b4:3e: a4:20:c0:5b:b7:d7:de:dd:f6:bc:83:12:5f:b4:b0: 70:f7:11:e6:c2:9d:b6:fa:87:40:9a:a3:66:61:e0: 45:79:77:98:be:31:67:2c:73:51:d6:b3:8c:c6:d2: 4d:a0:c2:f0:e5:1d:fd:5a:e9:bf:32:ac:b2:2a:4b: cf:d9:06:0e:7e:29:89:f5:19:d8:ec:f9:20:54:76: 57:e6:48:e2:2b:dc:a7:4e:0c:d5:58:48:23:c9:b4: 46:4a:f4:af:a5:7a:4a:09:6b:02:37:cd:5b:b7:7b: 23:72:63:5b:6a:e6:b3:90:fa:6d:8e:8d:b2:60:dc: 8b:92:2b:3a:bd:35:06:fd:37:d3:d4:81:8a:8a:40: 8c:8e:68:b5:99:05:45:f4:6c:67:42:b4:21:15:19: 1c:fd:3d:3d:53:e6:8d:8e:db:76:88:20:0b:d3:8f: 8c:c7:13:d4:95:5a:83:bc:46:3d:a1:3e:12:a2:e4: fd:f7:49:b2:ad:8a:d0:69:ff:2a:1b:3a:0a:20:be: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:99:D7:8D:41:2B:14:98:9C:F0:FB:A2:34:DA:BD:C9:D4:E2:B4:99 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f7:28:12:8f:0c:4e:bb:6d:e6:a7:23:c4:8c:cc:fa:c8:60: 75:87:90:97:86:ae:38:67:a4:d6:12:c8:5d:96:50:2d:ff:c4: 93:53:b4:25:b3:66:b5:c5:52:5b:b1:d2:d2:77:b5:27:53:a1: 90:9c:cc:3b:5a:08:2b:42:49:5d:8d:91:28:70:a4:63:9c:5c: bb:40:d3:1c:d5:06:2d:ed:b0:58:c0:13:0e:16:0e:a3:10:3d: 7d:88:38:86:92:c7:e3:2d:25:43:8e:66:c8:b2:64:99:28:e5: 48:65:21:91:8a:ea:9f:42:98:e1:25:9e:cd:b8:3e:83:e9:c6: 17:7f:5a:6c:42:9c:8a:07:92:05:f0:69:33:d5:61:34:81:f0: a1:1f:e2:63:32:7b:57:0f:47:9d:e5:0e:3b:6f:60:97:a3:ec: cc:d4:6b:71:88:d7:2b:84:3c:0d:65:50:af:a7:29:86:35:71: ca:46:23:41:eb:c9:ab:56:27:20:c9:02:6b:59:6d:69:8e:44: c3:88:66:b2:bd:05:d1:fc:35:05:d9:fe:c7:59:37:cf:d0:b4: 08:c6:f2:6e:7b:7b:61:05:f5:64:45:a4:cf:de:58:d8:bc:dd: df:61:4e:81:70:cd:6d:40:a1:4a:c7:8d:c1:f0:a1:06:7a:38: ff:ed:a1:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiIsm+BKl6/7oiCWMh15aDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwODA4MDgwMDUxWhcNMjUwODA5MDgwMDUxWjAzMTEwLwYDVQQD EyhlMDk5ZDc4ZDQxMmIxNDk4OWNmMGZiYTIzNGRhYmRjOWQ0ZTJiNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+d1z+ZowFdBmrJEjPkO8JbiQhjz FsIUmJLEpKRntYwqIlR//eU/a/Jd4G3wlz3HFX2bW7NfpLuDtD6kIMBbt9fe3fa8 gxJftLBw9xHmwp22+odAmqNmYeBFeXeYvjFnLHNR1rOMxtJNoMLw5R39Wum/Mqyy KkvP2QYOfimJ9RnY7PkgVHZX5kjiK9ynTgzVWEgjybRGSvSvpXpKCWsCN81bt3sj cmNbauazkPptjo2yYNyLkis6vTUG/TfT1IGKikCMjmi1mQVF9GxnQrQhFRkc/T09 U+aNjtt2iCAL04+MxxPUlVqDvEY9oT4SouT990myrYrQaf8qGzoKIL664QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCZ141BKxSYnPD7ojTavcnU4rSZMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPcoEo8M Trtt5qcjxIzM+shgdYeQl4auOGek1hLIXZZQLf/Ek1O0JbNmtcVSW7HS0ne1J1Oh kJzMO1oIK0JJXY2RKHCkY5xcu0DTHNUGLe2wWMATDhYOoxA9fYg4hpLH4y0lQ45m yLJkmSjlSGUhkYrqn0KY4SWezbg+g+nGF39abEKcigeSBfBpM9VhNIHwoR/iYzJ7 Vw9HneUOO29gl6PszNRrcYjXK4Q8DWVQr6cphjVxykYjQevJq1YnIMkCa1ltaY5E w4hmsr0F0fw1Bdn+x1k3z9C0CMbybnt7YQX1ZEWkz95Y2Lzd32FOgXDNbUChSseN wfChBno4/+2hOw== -----END CERTIFICATE-----Generated at Fri Aug 8 10:22:07 2025 by rpki-client