$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: XQgoQai4TXhtTAgU+KJ2IKZX9ArfPlbn+oYDV64PE9M= Subject key identifier: F2:B2:AF:3E:1E:EE:BA:8D:5C:51:B1:76:A2:35:C7:A9:7E:2F:7A:C1 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 01984C2F49C26488930CD4D0AFBE97CE7087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 161A Signing time: Sun 27 Jul 2025 14:00:23 +0000 Manifest this update: Sun 27 Jul 2025 14:00:23 +0000 Manifest next update: Mon 28 Jul 2025 14:00:23 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: 8vBgPIPGmSaFUWOlpF2CMGdNQQc.roa (hash: /PWcEdJnMn2bKRLWHgFiLBb1+zXw/blECB/hDNGzIwY=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: NHZT7DoHNKhfjdkBRsnZ6WYoKDyq3CJgCBgiTe9zXMQ=) 5: LWD4-OU95_FRda-NCOb6W7qqhlk.roa (hash: /68MHjyM7YGgptvnqCHIzlmysaHHp9CA6NYAUfenFig=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 09:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4c:2f:49:c2:64:88:93:0c:d4:d0:af:be:97:ce:70:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Jul 27 14:00:23 2025 GMT Not After : Jul 28 14:00:23 2025 GMT Subject: CN=f2b2af3e1eeeba8d5c51b176a235c7a97e2f7ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3c:c8:d1:85:95:70:48:86:83:0d:1e:ef:f3: a2:31:5f:aa:35:33:4a:1b:ab:b3:27:fa:72:a1:47: ef:17:ed:38:71:2a:02:98:ef:e6:86:06:36:88:85: 34:98:1b:77:dd:6b:53:31:24:5e:8c:40:39:49:5a: 6d:f5:02:38:5d:fd:bd:a1:a8:05:94:4a:2a:1c:73: 46:21:ca:3d:d7:cc:91:bc:14:39:2a:30:de:ef:e0: 7b:10:a3:e2:15:99:21:82:0e:e0:c8:6b:a3:ce:1e: 46:01:5a:3d:ef:bb:e8:0b:d0:87:36:b0:24:08:b9: b2:da:14:1f:df:10:2b:1e:42:52:2a:88:df:73:6b: 1d:dc:7d:49:7c:89:a7:89:86:ce:2e:cd:72:14:e6: 30:2f:83:29:e3:69:61:f6:ae:1e:d2:05:ac:c1:73: eb:a2:c6:bc:36:c0:43:8f:a6:02:ab:c3:c2:f7:77: a3:22:24:e9:8b:11:70:9e:b0:0e:8a:2d:57:84:73: ad:c8:4e:cc:c1:c9:7a:56:50:4b:b0:1c:d3:f6:95: cf:24:10:cb:a5:9b:64:86:12:bd:f8:df:de:bc:16: 33:23:1b:25:8b:91:84:5d:a1:38:66:2f:a2:49:e2: cb:73:e8:39:a9:a8:16:46:61:4d:46:b6:68:47:67: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:AF:3E:1E:EE:BA:8D:5C:51:B1:76:A2:35:C7:A9:7E:2F:7A:C1 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f3:8b:53:d2:a2:30:ec:d1:6f:f8:a9:8c:05:2f:57:89:95: 23:e1:13:d3:21:4d:ed:3b:0c:15:96:b1:98:15:a6:1d:2b:a7: 67:53:ad:26:8d:6a:63:e2:82:21:c3:00:8b:1c:b8:32:c0:f0: b2:79:81:da:e1:c6:d2:ad:42:c6:cc:b2:7d:e3:84:63:f0:f9: 83:5e:89:7b:b3:0d:6e:d1:48:35:99:af:53:65:27:19:69:3e: ce:25:1b:0b:4d:92:59:df:d8:77:3a:74:4f:de:fc:f7:38:8f: 48:21:6b:63:86:71:3a:1f:b9:c1:3b:ee:95:f4:50:9f:05:aa: 95:66:ab:c4:e4:e4:d3:6e:59:fd:ff:e8:8e:cd:1f:5a:6c:5c: 80:ad:fb:8b:0a:a0:44:26:18:76:8a:57:a4:e9:a0:19:eb:75: c5:69:eb:29:e5:dd:7b:a9:2c:19:b4:38:5e:6a:56:d0:f0:c7: 30:50:03:9d:94:30:47:3a:4e:af:2f:75:62:aa:b7:42:54:2e: 42:3f:3d:2d:c2:9b:b6:e3:0f:2d:ce:8a:1a:df:94:de:6f:b0: 03:75:2b:2b:f4:f5:9f:0d:a4:ba:98:8a:00:cc:e7:0b:62:fd: b9:1d:55:4b:0b:f9:87:69:a0:d1:2e:d2:5a:73:1c:ee:99:2f: ee:af:f7:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhML0nCZIiTDNTQr76XznCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUwNzI3MTQwMDIzWhcNMjUwNzI4MTQwMDIzWjAzMTEwLwYDVQQD EyhmMmIyYWYzZTFlZWViYThkNWM1MWIxNzZhMjM1YzdhOTdlMmY3YWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTzI0YWVcEiGgw0e7/OiMV+qNTNK G6uzJ/pyoUfvF+04cSoCmO/mhgY2iIU0mBt33WtTMSRejEA5SVpt9QI4Xf29oagF lEoqHHNGIco918yRvBQ5KjDe7+B7EKPiFZkhgg7gyGujzh5GAVo977voC9CHNrAk CLmy2hQf3xArHkJSKojfc2sd3H1JfImniYbOLs1yFOYwL4Mp42lh9q4e0gWswXPr osa8NsBDj6YCq8PC93ejIiTpixFwnrAOii1XhHOtyE7Mwcl6VlBLsBzT9pXPJBDL pZtkhhK9+N/evBYzIxsli5GEXaE4Zi+iSeLLc+g5qagWRmFNRrZoR2dVzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKyrz4e7rqNXFGxdqI1x6l+L3rBMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/OLU9Ki MOzRb/ipjAUvV4mVI+ET0yFN7TsMFZaxmBWmHSunZ1OtJo1qY+KCIcMAixy4MsDw snmB2uHG0q1CxsyyfeOEY/D5g16Je7MNbtFINZmvU2UnGWk+ziUbC02SWd/Ydzp0 T9789ziPSCFrY4ZxOh+5wTvulfRQnwWqlWarxOTk025Z/f/ojs0fWmxcgK37iwqg RCYYdopXpOmgGet1xWnrKeXde6ksGbQ4XmpW0PDHMFADnZQwRzpOry91Yqq3QlQu Qj89LcKbtuMPLc6KGt+U3m+wA3UrK/T1nw2kupiKAMznC2L9uR1VSwv5h2mg0S7S WnMc7pkv7q/3Lg== -----END CERTIFICATE-----Generated at Sun Jul 27 18:02:12 2025 by rpki-client