$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: GEFrxeHQNoAHoUkrPNfCRJ1DpvILzpZAvuKGvAjQ9rk= Subject key identifier: 22:96:61:0F:83:3B:64:BE:F2:B3:A0:4C:10:C4:16:EF:2E:54:67:71 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019A4F98E7256734D3A18B87C3FA12CC28B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0DA2 Signing time: Tue 04 Nov 2025 16:00:11 +0000 Manifest this update: Tue 04 Nov 2025 16:00:11 +0000 Manifest next update: Wed 05 Nov 2025 16:00:11 +0000 Files and hashes: 1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=) 2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: RzdUZbrP2zTORzov0yYBBiZ9/7xu9HncqACdiutMCok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:98:e7:25:67:34:d3:a1:8b:87:c3:fa:12:cc:28:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Nov 4 16:00:11 2025 GMT Not After : Nov 5 16:00:11 2025 GMT Subject: CN=2296610f833b64bef2b3a04c10c416ef2e546771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:5f:4e:be:fd:9b:e4:f9:8e:7a:c2:21:44: b7:92:48:cb:1c:ab:dc:8b:f0:a9:65:57:7f:7c:09: 29:e9:7a:72:c0:61:20:4e:24:77:86:4c:5a:7d:de: 88:d7:35:06:bf:bb:32:65:06:65:f3:eb:cf:3d:d0: f6:aa:df:ad:f5:1c:2e:d2:27:0c:f1:91:9f:94:94: 58:9f:a8:17:2d:5e:4d:f8:3c:11:63:62:20:fb:04: c6:7a:2a:4a:74:fa:7b:80:7c:c9:78:96:17:de:1a: f8:a5:02:c8:98:f5:89:8c:15:3e:00:e6:69:09:6f: db:c9:cd:46:31:b6:82:6b:05:c2:d0:61:42:2e:d0: 57:29:88:76:e4:f0:5a:0c:fe:ff:d7:31:37:d2:f5: b6:fc:48:4d:7f:e3:4a:96:ce:4c:43:80:af:54:91: f9:06:dc:44:43:33:1e:7b:c7:24:ea:45:10:a1:ac: 84:64:af:f5:ba:0a:70:fd:e1:4b:95:80:06:51:10: 64:91:19:f3:11:c6:56:43:32:73:0d:80:94:fc:e9: 3b:c9:cf:e3:15:2c:19:83:48:54:81:fc:f7:f7:61: d2:27:f9:74:73:ad:6d:36:51:eb:aa:4a:22:c4:c7: c1:8c:be:4c:07:76:25:ef:4e:ea:de:b2:df:2f:eb: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:96:61:0F:83:3B:64:BE:F2:B3:A0:4C:10:C4:16:EF:2E:54:67:71 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5d:3e:b9:a8:7d:b6:49:6a:93:64:b0:cf:8e:be:44:44:71: dd:93:d8:4c:bc:5c:c8:e5:c2:16:7b:68:b8:a7:71:ac:1b:0d: af:97:e2:3a:96:be:04:d8:ec:1b:a4:de:dd:61:9b:34:1d:ff: ea:e7:c6:87:a8:9e:9b:83:bd:f7:fd:4a:b0:84:66:63:9a:1c: c1:a8:0a:a4:52:5d:94:e6:29:d2:07:1e:cd:bd:3e:c6:37:19: d1:59:58:d7:3e:4a:b0:c4:d5:ff:8a:3a:96:de:bb:21:a3:e6: 0a:0b:18:61:79:12:cf:05:58:17:67:d1:41:c2:a7:51:f0:d5: 0b:6c:f3:51:48:bf:06:15:a0:fc:91:56:70:06:e8:13:a4:27: f4:2e:d8:c0:47:ba:48:ef:48:49:c4:2e:7a:f9:8f:9c:fa:7b: 0b:a9:37:f0:9c:e7:e5:31:5b:46:84:67:ca:64:ed:e1:7d:b5: d2:d9:ab:c0:fc:7a:38:1f:62:93:ff:25:b8:7e:c3:3f:d4:2a: f5:8a:bf:ed:18:7b:b0:f6:eb:e4:78:c9:90:64:cc:d8:01:c8: a9:1b:77:e8:50:ce:31:1b:fa:65:bd:77:a4:13:fd:ff:21:c7: cd:37:96:f7:b4:29:fe:37:ee:e9:07:3b:64:7f:f9:d3:5b:1d: d9:c4:6c:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmOclZzTToYuHw/oSzCizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUxMTA0MTYwMDExWhcNMjUxMTA1MTYwMDExWjAzMTEwLwYDVQQD EygyMjk2NjEwZjgzM2I2NGJlZjJiM2EwNGMxMGM0MTZlZjJlNTQ2NzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMtfTr79m+T5jnrCIUS3kkjLHKvc i/CpZVd/fAkp6XpywGEgTiR3hkxafd6I1zUGv7syZQZl8+vPPdD2qt+t9Rwu0icM 8ZGflJRYn6gXLV5N+DwRY2Ig+wTGeipKdPp7gHzJeJYX3hr4pQLImPWJjBU+AOZp CW/byc1GMbaCawXC0GFCLtBXKYh25PBaDP7/1zE30vW2/EhNf+NKls5MQ4CvVJH5 BtxEQzMee8ck6kUQoayEZK/1ugpw/eFLlYAGURBkkRnzEcZWQzJzDYCU/Ok7yc/j FSwZg0hUgfz392HSJ/l0c61tNlHrqkoixMfBjL5MB3Yl707q3rLfL+tPYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKWYQ+DO2S+8rOgTBDEFu8uVGdxMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABV0+uah9 tklqk2Swz46+RERx3ZPYTLxcyOXCFntouKdxrBsNr5fiOpa+BNjsG6Te3WGbNB3/ 6ufGh6iem4O99/1KsIRmY5ocwagKpFJdlOYp0gcezb0+xjcZ0VlY1z5KsMTV/4o6 lt67IaPmCgsYYXkSzwVYF2fRQcKnUfDVC2zzUUi/BhWg/JFWcAboE6Qn9C7YwEe6 SO9IScQuevmPnPp7C6k38Jzn5TFbRoRnymTt4X210tmrwPx6OB9ik/8luH7DP9Qq 9Yq/7Rh7sPbr5HjJkGTM2AHIqRt36FDOMRv6Zb13pBP9/yHHzTeW97Qp/jfu6Qc7 ZH/501sd2cRs1Q== -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:51 2025 by rpki-client