$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: oMaW0iAHShC5pL1G32yyeIWbQ8e6Z2yeIQne1qNkrRE= Subject key identifier: 56:2B:65:F3:BE:F8:A0:2D:3C:45:A5:42:9F:55:5F:44:B1:F6:A4:83 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 0198357117A220187E72F820C5DA651E93B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0E57 Signing time: Wed 23 Jul 2025 04:01:00 +0000 Manifest this update: Wed 23 Jul 2025 04:01:00 +0000 Manifest next update: Thu 24 Jul 2025 04:01:00 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: X5-V0n6yN80zazhfKC-inEW3Q-g.roa (hash: ltmVmMUB0Wliy/gqDGqir6t9HKhl/Si7s3Wu5L76zuU=) 15: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: 0zGd2ezfAqQ5ocT8ImedkTkYLh6UjYajEEykdRh9uns=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:71:17:a2:20:18:7e:72:f8:20:c5:da:65:1e:93:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jul 23 04:01:00 2025 GMT Not After : Jul 24 04:01:00 2025 GMT Subject: CN=562b65f3bef8a02d3c45a5429f555f44b1f6a483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:66:b0:b2:b2:81:47:a1:06:ab:b7:5f:49: c7:af:84:c7:79:21:f0:60:d1:35:3d:c3:ee:d0:ae: 3d:97:fa:d6:ef:6c:3c:2f:17:8c:e9:06:cc:82:2b: 49:ba:b2:7e:85:cc:25:33:e8:4e:d9:d4:a5:90:03: 5a:46:67:a6:6a:14:49:f9:c8:79:5f:30:c4:4b:2e: 12:8a:3a:f8:fa:be:f0:5a:94:30:6e:53:48:c5:89: e2:f7:a5:a8:af:3b:b2:2b:d0:1b:05:f9:9b:38:3c: d4:70:ab:83:c6:df:6f:ef:b0:c8:dd:97:8d:80:14: 2d:ce:35:2a:c6:7a:f9:02:ad:56:f9:a0:44:d0:9f: c9:e8:c7:bd:50:51:86:bd:4c:da:2d:6a:17:28:f6: ce:02:d3:4d:1e:76:dc:3b:6f:3f:6a:0d:ca:e8:6d: 05:63:7d:60:24:e8:81:6b:9f:b3:6e:f2:4c:dc:32: 6f:d5:d6:8e:91:41:13:55:0f:76:8a:ed:84:7e:e6: 99:03:42:33:46:e6:14:26:4e:09:81:86:49:58:42: 10:52:21:99:86:9c:e2:b3:22:f2:93:98:ec:59:91: 00:b4:85:c0:e9:49:23:05:63:54:8b:90:27:ed:32: 74:49:08:ee:54:80:13:36:b9:65:c9:e2:1f:9c:1f: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2B:65:F3:BE:F8:A0:2D:3C:45:A5:42:9F:55:5F:44:B1:F6:A4:83 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8c:2c:03:11:51:aa:d3:ac:1d:1a:6f:29:60:91:6b:ad:dc: 58:33:45:ad:1f:dd:1e:30:0f:72:8b:97:17:d8:69:c9:51:c4: 80:d0:d6:e3:ba:e8:fb:d1:fa:ad:af:82:6b:96:df:85:70:33: ac:53:e3:a4:c8:35:0b:eb:f2:c3:43:ad:f5:f2:37:56:c6:a0: 49:9c:50:c8:6c:87:6f:14:69:5d:f6:d4:9e:86:fb:c1:d9:c9: 10:4c:72:1d:d1:5a:f2:b1:ec:d5:61:d7:97:d8:10:6a:40:73: f5:41:1d:ae:d3:f2:e8:f6:d5:d5:8f:e1:08:a4:5f:5d:96:59: 7d:e5:a7:38:2f:49:8b:b3:bc:f2:83:49:f8:64:8c:6b:4b:dc: 88:e6:c3:d8:22:92:5e:14:b4:32:f5:a3:27:4b:ab:22:77:82: e5:7b:3f:9a:e2:bd:89:8b:17:6d:91:3a:72:76:79:2a:6b:26: 75:6c:51:41:ea:ae:ec:c5:fc:0b:a1:ea:d7:98:5e:03:4a:29: b0:ee:49:a5:ca:c6:ed:e3:9f:29:dd:77:6f:c9:68:42:33:5f: c0:3c:92:b2:c9:42:5d:91:86:f0:2e:bb:3a:49:72:5e:6d:45: c0:a0:1d:e8:89:4c:7b:07:f7:b3:9d:ff:90:c3:cc:df:a1:e3: c4:de:91:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cReiIBh+cvggxdplHpO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUwNzIzMDQwMTAwWhcNMjUwNzI0MDQwMTAwWjAzMTEwLwYDVQQD Eyg1NjJiNjVmM2JlZjhhMDJkM2M0NWE1NDI5ZjU1NWY0NGIxZjZhNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl1msLKygUehBqu3X0nHr4THeSHw YNE1PcPu0K49l/rW72w8LxeM6QbMgitJurJ+hcwlM+hO2dSlkANaRmemahRJ+ch5 XzDESy4Sijr4+r7wWpQwblNIxYni96WorzuyK9AbBfmbODzUcKuDxt9v77DI3ZeN gBQtzjUqxnr5Aq1W+aBE0J/J6Me9UFGGvUzaLWoXKPbOAtNNHnbcO28/ag3K6G0F Y31gJOiBa5+zbvJM3DJv1daOkUETVQ92iu2EfuaZA0IzRuYUJk4JgYZJWEIQUiGZ hpzisyLyk5jsWZEAtIXA6UkjBWNUi5An7TJ0SQjuVIATNrllyeIfnB+eOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYrZfO++KAtPEWlQp9VX0Sx9qSDMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4wsAxFR qtOsHRpvKWCRa63cWDNFrR/dHjAPcouXF9hpyVHEgNDW47ro+9H6ra+Ca5bfhXAz rFPjpMg1C+vyw0Ot9fI3VsagSZxQyGyHbxRpXfbUnob7wdnJEExyHdFa8rHs1WHX l9gQakBz9UEdrtPy6PbV1Y/hCKRfXZZZfeWnOC9Ji7O88oNJ+GSMa0vciObD2CKS XhS0MvWjJ0urIneC5Xs/muK9iYsXbZE6cnZ5KmsmdWxRQequ7MX8C6Hq15heA0op sO5JpcrG7eOfKd13b8loQjNfwDySsslCXZGG8C67OklyXm1FwKAd6IlMewf3s53/ kMPM36HjxN6RzA== -----END CERTIFICATE-----Generated at Wed Jul 23 12:01:12 2025 by rpki-client