$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: LZ6OVMORv7Z5eE1vBbtPrAPtid7BTkV88wWJugLLAek= Subject key identifier: ED:5F:30:55:06:BA:E2:BA:34:4B:01:97:C2:F2:F7:C5:32:F6:0E:FA Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 0197789D25F4E19CDE0490C0087BC2276E1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0C27 Signing time: Mon 16 Jun 2025 12:00:53 +0000 Manifest this update: Mon 16 Jun 2025 12:00:53 +0000 Manifest next update: Tue 17 Jun 2025 12:00:53 +0000 Files and hashes: 1: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 2: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 3: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 4: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 5: NTeC-NbINKuWXIN2JRj2jE73cMQ.roa (hash: usN4QfuBj821Bx/aBMyN171iAsEpZjNXNiVf16Jr2OA=) 6: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 7: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 8: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 9: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 10: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 11: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 12: mp_P58smkepPURIQ0OWZxTjk7YU.roa (hash: dgthwSpZuKmO50yEykTctg4zGl2a/soBiZBn4MrCwdc=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: D5SBOykAvJiNT1ol/xI0yWq3qQZFapFl7ZR3+e6LqYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:78:9d:25:f4:e1:9c:de:04:90:c0:08:7b:c2:27:6e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jun 16 12:00:53 2025 GMT Not After : Jun 17 12:00:53 2025 GMT Subject: CN=ed5f305506bae2ba344b0197c2f2f7c532f60efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8f:f8:35:eb:ea:43:46:81:c3:fe:a5:64:91: 47:f9:8e:6d:d9:60:50:19:32:99:82:83:e9:55:89: bf:40:cc:d3:74:68:2d:49:83:b1:6d:6a:b3:62:8f: 9b:86:96:ee:95:78:51:de:10:dd:f6:2f:d0:e1:05: 3e:4e:c4:47:be:b4:93:ee:58:e1:5f:73:e0:c3:f2: 42:a5:16:8a:26:38:75:eb:5f:99:8d:89:08:f7:99: 41:b7:7d:80:bd:f6:f2:54:e0:d3:11:d9:3f:78:21: 74:ff:4c:b3:6c:b2:33:7b:1d:0c:14:7c:be:23:4c: f6:39:88:8d:6b:83:8b:d2:8a:91:57:a8:b8:e1:f6: 7e:6f:99:36:bd:fe:80:34:a3:6f:41:d7:50:c2:84: 31:f4:51:dd:96:18:8e:74:01:ba:b9:0b:16:ad:d5: c6:f4:32:9e:1c:b6:34:7a:41:cd:3a:01:b5:f9:c7: fc:22:79:5a:e8:07:df:a2:09:8e:22:83:07:d0:23: 6f:9f:fd:f6:8a:1f:9e:3d:54:ec:6d:65:46:d2:43: fd:27:9c:86:08:43:cc:59:81:13:7e:4a:ba:f4:1f: 4e:fb:3a:f1:a9:4a:85:3e:55:43:9b:b0:7e:6b:41: 99:c5:27:f0:ab:88:1b:57:13:0c:84:2e:c5:e0:a4: 31:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5F:30:55:06:BA:E2:BA:34:4B:01:97:C2:F2:F7:C5:32:F6:0E:FA X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5b:d1:49:20:52:f4:8c:92:be:e5:04:44:18:69:77:e0:bd: 0b:d6:75:a2:bb:72:94:2e:25:d4:09:d8:ad:02:e4:07:01:24: 41:81:fb:e4:84:b1:ac:bb:e5:c5:d0:eb:98:52:a8:27:4d:7a: 2f:08:cb:5d:63:6f:cc:6b:c0:ff:f7:20:65:9e:ba:45:c3:80: f6:42:b0:79:93:8a:10:2c:d0:1e:3c:3d:82:a7:f7:4b:5d:cd: 98:91:3c:5c:96:e3:78:7e:18:4a:5e:40:96:ab:d9:03:9d:6b: 0e:d9:af:4b:fd:50:64:52:32:b0:c0:47:d9:13:73:79:4c:64: c6:18:14:97:66:a1:7d:f0:46:8a:67:96:8f:cd:4e:49:18:c0: 92:a5:22:85:8c:ec:ba:06:59:05:1e:ac:9f:59:fd:a5:de:5c: 9d:42:24:e3:d1:fa:b4:2e:ee:8a:0a:2a:5c:12:22:59:7b:1e: cf:be:26:a0:92:ce:f1:8d:0f:d1:d7:b5:7f:cb:49:1d:c7:3f: eb:03:b4:36:8b:33:56:3e:15:86:f5:ac:0f:35:06:69:d1:7c: 5a:ab:d5:e8:4c:31:cd:f9:f1:fb:00:98:cc:f8:86:1e:4c:69: 42:c6:0b:96:1e:b3:12:b4:e3:a6:57:e7:d8:0e:73:d5:ca:52: 7d:03:69:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd4nSX04ZzeBJDACHvCJ24aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUwNjE2MTIwMDUzWhcNMjUwNjE3MTIwMDUzWjAzMTEwLwYDVQQD EyhlZDVmMzA1NTA2YmFlMmJhMzQ0YjAxOTdjMmYyZjdjNTMyZjYwZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6o/4NevqQ0aBw/6lZJFH+Y5t2WBQ GTKZgoPpVYm/QMzTdGgtSYOxbWqzYo+bhpbulXhR3hDd9i/Q4QU+TsRHvrST7ljh X3Pgw/JCpRaKJjh161+ZjYkI95lBt32AvfbyVODTEdk/eCF0/0yzbLIzex0MFHy+ I0z2OYiNa4OL0oqRV6i44fZ+b5k2vf6ANKNvQddQwoQx9FHdlhiOdAG6uQsWrdXG 9DKeHLY0ekHNOgG1+cf8Inla6AffogmOIoMH0CNvn/32ih+ePVTsbWVG0kP9J5yG CEPMWYETfkq69B9O+zrxqUqFPlVDm7B+a0GZxSfwq4gbVxMMhC7F4KQxPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1fMFUGuuK6NEsBl8Ly98Uy9g76MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVvRSSBS 9IySvuUERBhpd+C9C9Z1ortylC4l1AnYrQLkBwEkQYH75ISxrLvlxdDrmFKoJ016 LwjLXWNvzGvA//cgZZ66RcOA9kKweZOKECzQHjw9gqf3S13NmJE8XJbjeH4YSl5A lqvZA51rDtmvS/1QZFIysMBH2RNzeUxkxhgUl2ahffBGimeWj81OSRjAkqUihYzs ugZZBR6sn1n9pd5cnUIk49H6tC7uigoqXBIiWXsez74moJLO8Y0P0de1f8tJHcc/ 6wO0NoszVj4VhvWsDzUGadF8WqvV6Ewxzfnx+wCYzPiGHkxpQsYLlh6zErTjplfn 2A5z1cpSfQNpnw== -----END CERTIFICATE-----Generated at Mon Jun 16 21:16:37 2025 by rpki-client