$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: u6/ZdDVz+82R/hNZzSChvGYS9AsbupzITs4Sx/kVuJc= Subject key identifier: 76:F2:AF:E1:35:CB:D7:20:D2:75:35:FD:9B:F4:60:64:79:DA:3D:90 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 01984889763E9A8B6CB4D53B0E60B6F5E605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 14E1 Signing time: Sat 26 Jul 2025 21:00:24 +0000 Manifest this update: Sat 26 Jul 2025 21:00:24 +0000 Manifest next update: Sun 27 Jul 2025 21:00:24 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 6: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: ogbs9g7UxOhId1v3QcsJk1Z4ZOyVhoFxGOdpdM7tPhY=) 7: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 8: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 9: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 10: laPe02BW1dF6qI7VPAvoJwJhF4s.roa (hash: v/D94ZtejY8jUNkheDIBk4h8vVHwuUMimac0Kl0P0Sk=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 15:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:48:89:76:3e:9a:8b:6c:b4:d5:3b:0e:60:b6:f5:e6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jul 26 21:00:24 2025 GMT Not After : Jul 27 21:00:24 2025 GMT Subject: CN=76f2afe135cbd720d27535fd9bf4606479da3d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:9f:f5:9d:9f:ca:17:c8:5e:7b:f9:ca:bc: c5:d5:16:91:14:dc:75:a1:a8:71:d2:74:1a:ff:fe: eb:5e:c1:6e:73:74:59:05:31:7a:22:0f:38:c9:8a: 89:9a:2a:a1:d9:df:0a:19:fb:a8:84:1b:3f:1a:46: a0:f2:40:9f:54:9d:4f:d9:ea:89:dc:11:bd:36:7a: f1:70:c4:a3:81:10:3b:e7:5f:92:bb:7d:5d:57:24: 14:30:ef:73:22:55:3c:19:e9:0c:ef:36:ee:e4:ab: 42:02:62:62:46:60:a5:c3:02:a6:76:dc:64:32:83: d8:14:00:68:c6:81:6f:09:08:c7:95:60:04:26:81: 70:99:21:08:d6:04:da:cc:61:88:5d:45:6c:4a:4c: a3:1e:5e:cf:32:d0:66:e0:7a:e4:ba:0a:59:8b:ab: 21:ca:19:a1:78:a0:02:d4:21:6b:e0:91:8c:a3:10: b6:eb:31:aa:74:99:24:7f:58:48:e2:bc:4e:cc:77: 69:01:63:58:60:de:90:d2:c1:55:b9:b6:eb:aa:8d: 95:a7:6f:0e:00:4e:08:2a:94:36:ac:50:f7:4c:cd: 4c:56:8e:56:d2:e2:b7:2f:06:a5:41:3a:85:ba:3b: 74:a0:c0:aa:f4:5b:23:1a:21:3e:ba:52:16:68:d8: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F2:AF:E1:35:CB:D7:20:D2:75:35:FD:9B:F4:60:64:79:DA:3D:90 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:02:a5:b5:7d:47:42:46:30:d2:23:c8:78:b5:b7:25:a5:49: fb:04:fd:23:f7:c1:12:7e:7e:16:f4:3c:ac:a8:f2:4d:15:ed: 91:e5:a3:26:52:cd:cf:33:39:25:c4:46:d1:a7:d4:f0:74:a9: 2c:a4:84:4e:bb:2d:13:fa:10:8e:53:60:08:e1:39:d3:fc:32: 37:93:39:6d:d1:6f:41:e0:e9:86:40:da:55:fe:12:c7:36:2f: a1:f3:fa:62:06:75:a3:3b:8e:fb:ea:53:8e:6c:95:00:26:63: ff:13:c2:ec:9b:44:fa:8a:b4:3e:7b:21:d3:54:c5:32:c9:8e: 2c:1f:3d:3f:db:c4:8e:13:69:f1:dc:25:b8:b5:5e:7c:22:08: 59:7f:61:a3:a8:99:39:b0:c3:74:ba:1b:4f:d0:a3:f7:5f:98: 06:a1:6c:fb:ba:d7:62:8d:bb:25:cd:87:23:f3:0a:67:2c:04: 0c:a2:50:9d:23:a0:ca:f6:64:06:e1:73:80:cf:fa:56:96:90: 3f:d0:37:47:c1:f3:01:46:c4:5d:b0:ca:fa:67:bd:21:71:6e: 85:e9:11:08:c7:84:2c:e1:38:c4:99:ef:7e:75:df:6e:e5:46: 22:0d:01:ea:87:75:fd:d9:47:c0:6a:b7:77:77:12:c4:af:92: 9d:79:38:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhIiXY+motstNU7DmC29eYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwNzI2MjEwMDI0WhcNMjUwNzI3MjEwMDI0WjAzMTEwLwYDVQQD Eyg3NmYyYWZlMTM1Y2JkNzIwZDI3NTM1ZmQ5YmY0NjA2NDc5ZGEzZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxGf9Z2fyhfIXnv5yrzF1RaRFNx1 oahx0nQa//7rXsFuc3RZBTF6Ig84yYqJmiqh2d8KGfuohBs/Gkag8kCfVJ1P2eqJ 3BG9NnrxcMSjgRA751+Su31dVyQUMO9zIlU8GekM7zbu5KtCAmJiRmClwwKmdtxk MoPYFABoxoFvCQjHlWAEJoFwmSEI1gTazGGIXUVsSkyjHl7PMtBm4HrkugpZi6sh yhmheKAC1CFr4JGMoxC26zGqdJkkf1hI4rxOzHdpAWNYYN6Q0sFVubbrqo2Vp28O AE4IKpQ2rFD3TM1MVo5W0uK3LwalQTqFujt0oMCq9FsjGiE+ulIWaNi0RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbyr+E1y9cg0nU1/Zv0YGR52j2QMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQKltX1H QkYw0iPIeLW3JaVJ+wT9I/fBEn5+FvQ8rKjyTRXtkeWjJlLNzzM5JcRG0afU8HSp LKSETrstE/oQjlNgCOE50/wyN5M5bdFvQeDphkDaVf4SxzYvofP6YgZ1ozuO++pT jmyVACZj/xPC7JtE+oq0Pnsh01TFMsmOLB89P9vEjhNp8dwluLVefCIIWX9ho6iZ ObDDdLobT9Cj91+YBqFs+7rXYo27Jc2HI/MKZywEDKJQnSOgyvZkBuFzgM/6VpaQ P9A3R8HzAUbEXbDK+me9IXFuhekRCMeELOE4xJnvfnXfbuVGIg0B6od1/dlHwGq3 d3cSxK+SnXk4MQ== -----END CERTIFICATE-----Generated at Sun Jul 27 01:33:13 2025 by rpki-client