$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: euICgJtlJEAuDkeM/ZfHXAjK14IrpY4FXqc3mpu0rOA= Subject key identifier: DF:D8:73:99:F9:CE:43:10:8C:AA:20:48:45:AC:F3:64:BE:25:39:8C Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 01988F22470E3F7B721D47782CCC203DE783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 1646 Signing time: Sat 09 Aug 2025 14:00:44 +0000 Manifest this update: Sat 09 Aug 2025 14:00:44 +0000 Manifest next update: Sun 10 Aug 2025 14:00:44 +0000 Files and hashes: 1: 8wmzxLkSyC63kJ8KsfaDTFp3590.roa (hash: yPTonCp/pr9ZtUUWsN3hsTJ0gebdbrNTrrkzT5j7S00=) 2: CeX7E3fZXVsdPANui7LEojY4jyY.roa (hash: knL0+PqLOBqomAg/sncBbQWcoQB5Mmxq54ysIaZdoTY=) 3: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=) 4: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=) 5: LxDX7O3eQGaJYExU85kcexK4__Q.roa (hash: rErxx7Om3Ta/mvJcqv+K5/2MJQzhGaZ1sKgBE7WSm3c=) 6: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=) 7: NznSTmaNmRlH_azHj2PejtUv32Y.roa (hash: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=) 8: PYt8kOHzO0s7QVgsvS4-fTKkKs0.roa (hash: d4L9drFSeWTKHOjHC/+6DEDn+TwjBuQXfP9K4MifJqg=) 9: WREdXGieNWbgVLEJadO48JSSOug.roa (hash: aFFeFtw18cIiv+MmQIoh+4L/P45eBgOQwHmY2ydaShI=) 10: YE_8Q539qrOyfC5oyhUVoyOy4ag.roa (hash: oHkMs+tZBddaOUP4lVpil5PdfdqqYPzLTk5OrRN655Y=) 11: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=) 12: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=) 13: ba73IPffmKSKK9DFDoXNC4Y9YNk.roa (hash: t/gHUljPs1ACa8ElAB5fM90FPR1WPQYxp8iIB9819BI=) 14: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=) 15: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=) 16: uFUEGSfPHjgulVJP0gmjr5Io5BE.roa (hash: N+zSHr/8E6EDAHMdhe9NDa8SXOzYh6T68xumfpCPwis=) 17: wj33JoQLWARvqka0yZK45_1318I.roa (hash: TfGyszRr6br7JzJj6n9Z5YtEXoLaFYdaPq8IN1vIPao=) 18: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: ok+xFh49HQCc6UIWm9xsFwYnUfkniA+1AfiREKy68c4=) 19: yeYx1SBF1lmtW7XffaPeQOovU8U.roa (hash: VSeEM5Jys6RX5q2PBBL/enoN0CIuzY2lNAlGhBepeM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8f:22:47:0e:3f:7b:72:1d:47:78:2c:cc:20:3d:e7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Aug 9 14:00:44 2025 GMT Not After : Aug 10 14:00:44 2025 GMT Subject: CN=dfd87399f9ce43108caa204845acf364be25398c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:5a:e3:2f:a2:b0:ab:45:7e:2a:c3:b0:59: 56:23:ab:d6:7c:91:64:02:cb:4c:f9:c4:00:6e:57: 87:cf:b3:8c:19:54:30:5a:58:25:14:c1:f5:24:56: 83:9b:39:bb:4e:e6:79:be:9c:ce:96:db:fa:36:8b: 6d:81:76:60:a0:b3:2f:40:26:d0:3a:6d:81:50:0e: 31:38:46:12:88:64:12:c3:9e:08:5e:28:34:90:dd: ed:2b:c7:57:33:61:ba:e1:d4:c3:3a:e9:4e:cd:36: bc:42:c6:b4:be:f6:b3:75:df:8a:d0:66:d2:86:4d: c5:51:48:c2:34:85:c6:ad:d3:42:b5:e8:da:a1:53: 12:ef:22:dc:c8:5b:d4:cd:f0:e0:60:24:cf:ba:22: c9:30:fe:4e:fc:c3:01:a5:cb:58:ce:ce:6a:ed:40: 8d:0c:cc:b0:db:9c:82:69:b7:27:f7:ee:66:4b:9d: a9:d7:6c:0b:e5:ad:25:1a:d3:49:bb:ec:34:10:60: 07:62:ad:e5:38:3e:9d:56:bd:21:5f:e7:e6:0a:93: df:2f:fc:4d:d5:77:85:95:90:a9:8d:39:82:fc:64: eb:7c:92:17:a0:ad:a6:72:c4:02:2b:37:8f:7c:55: f1:8a:78:14:3c:2d:46:c0:bd:96:83:47:49:e7:81: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:73:99:F9:CE:43:10:8C:AA:20:48:45:AC:F3:64:BE:25:39:8C X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:19:a8:a8:3a:1b:97:87:ba:0b:7a:bb:d5:2f:aa:04:e5:a5: e5:b9:ad:34:1e:26:7d:3b:46:77:be:01:be:7e:28:a7:93:fa: 76:de:0a:51:34:5a:d6:b0:ab:41:ff:c0:93:8e:05:69:0a:04: 54:32:6a:9f:fe:a1:82:90:39:b4:99:7c:27:db:04:ce:10:76: 05:0c:26:07:3d:d0:45:ff:5f:ff:03:f7:af:e7:df:1e:07:71: 7d:68:56:0d:c2:e6:19:95:66:dd:9e:ed:b7:8a:0c:a3:b1:47: 7f:1b:aa:8e:17:22:1f:9e:ed:53:82:d8:09:a8:59:13:ca:52: 5b:90:85:09:4b:37:7e:9e:b4:f2:25:5a:cc:d5:2a:35:c0:42: 50:ab:4c:df:4e:d1:d4:c6:e1:ea:d2:24:b1:35:85:cc:b5:30: 51:c6:27:b1:97:4f:4a:51:5d:1a:a6:a7:95:52:6d:02:3c:05: 43:91:1a:a8:e3:56:d6:c0:cf:7a:d7:05:ee:40:67:a8:d4:97: 13:01:8c:05:d7:c6:6d:73:9f:08:22:24:e7:9d:b3:5c:f1:ed: b9:31:72:1a:59:dd:98:9e:85:82:46:16:18:85:50:52:57:f3: 16:c3:58:d7:fd:bb:8d:f3:f2:10:f1:3a:d7:e6:1f:e0:ac:72: 24:ba:f1:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiPIkcOP3tyHUd4LMwgPeeDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUwODA5MTQwMDQ0WhcNMjUwODEwMTQwMDQ0WjAzMTEwLwYDVQQD EyhkZmQ4NzM5OWY5Y2U0MzEwOGNhYTIwNDg0NWFjZjM2NGJlMjUzOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgZa4y+isKtFfirDsFlWI6vWfJFk AstM+cQAbleHz7OMGVQwWlglFMH1JFaDmzm7TuZ5vpzOltv6NottgXZgoLMvQCbQ Om2BUA4xOEYSiGQSw54IXig0kN3tK8dXM2G64dTDOulOzTa8Qsa0vvazdd+K0GbS hk3FUUjCNIXGrdNCtejaoVMS7yLcyFvUzfDgYCTPuiLJMP5O/MMBpctYzs5q7UCN DMyw25yCabcn9+5mS52p12wL5a0lGtNJu+w0EGAHYq3lOD6dVr0hX+fmCpPfL/xN 1XeFlZCpjTmC/GTrfJIXoK2mcsQCKzePfFXxingUPC1GwL2Wg0dJ54FzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/Yc5n5zkMQjKogSEWs82S+JTmMMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxmoqDob l4e6C3q71S+qBOWl5bmtNB4mfTtGd74Bvn4op5P6dt4KUTRa1rCrQf/Ak44FaQoE VDJqn/6hgpA5tJl8J9sEzhB2BQwmBz3QRf9f/wP3r+ffHgdxfWhWDcLmGZVm3Z7t t4oMo7FHfxuqjhciH57tU4LYCahZE8pSW5CFCUs3fp608iVazNUqNcBCUKtM307R 1Mbh6tIksTWFzLUwUcYnsZdPSlFdGqanlVJtAjwFQ5EaqONW1sDPetcF7kBnqNSX EwGMBdfGbXOfCCIk552zXPHtuTFyGlndmJ6FgkYWGIVQUlfzFsNY1/27jfPyEPE6 1+Yf4KxyJLrxeQ== -----END CERTIFICATE-----Generated at Sat Aug 9 23:21:52 2025 by rpki-client