$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: bx/iG8N2LIO3Dd2xH3DSZxd3gCU3PH89ocAyC8jkzGo= Subject key identifier: CD:A4:85:67:1D:5C:66:29:70:67:34:CC:A2:95:2E:48:B0:D1:D8:0A Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019829DA73E5E669E9D1E58EA228E19E38DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 1120 Signing time: Sun 20 Jul 2025 22:00:38 +0000 Manifest this update: Sun 20 Jul 2025 22:00:38 +0000 Manifest next update: Mon 21 Jul 2025 22:00:38 +0000 Files and hashes: 1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=) 2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=) 3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=) 4: CDi8vSg_fdYRotnSbMRPDSasq6c.roa (hash: 7OEMcqwogdkJNcoA2dzyUv5/KIyWaJVisinKvEvTiik=) 5: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=) 6: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (hash: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=) 7: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=) 8: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=) 9: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=) 10: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=) 11: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=) 12: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=) 13: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=) 14: fyZQsu5bzOst03Al5FJRpvSLsoo.roa (hash: MRRTMhVAXN/buVo3idrb+5O9n9y8Lo0sdRtwg3OeKfA=) 15: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=) 16: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=) 17: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=) 18: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=) 19: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=) 20: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=) 21: t8HA_uc7gb7j7V6zDu16rLSfmbY.roa (hash: 65eTp9NXdbJh5u5INSJT1dWSnT06TM3hY9aEgJ3l7Ew=) 22: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=) 23: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: QMRdaoiFr8jMVzkniCp1KKUyxcSivCRgxyk6GlNGIbM=) 24: zvVbccPOezRcenUxgZYT6IshvbM.roa (hash: 012XCVnoNirJiTB9TmAZ50WFMIRiHKAXPZ8XS3U9P3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:29:da:73:e5:e6:69:e9:d1:e5:8e:a2:28:e1:9e:38:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jul 20 22:00:38 2025 GMT Not After : Jul 21 22:00:38 2025 GMT Subject: CN=cda485671d5c6629706734cca2952e48b0d1d80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:d4:0f:20:53:3d:f6:3c:29:25:1b:58:09: 49:8e:de:53:ff:8f:a0:d5:b6:11:82:d8:5b:e8:03: 0a:a4:fa:7a:4e:d4:23:d8:2e:de:77:d3:bf:22:d6: 1b:4e:51:df:fc:6f:6c:c9:16:72:46:1d:c9:c3:6e: 11:c3:d4:13:e6:cf:b5:cd:fd:e9:ee:db:ac:11:a4: dc:8e:ef:69:83:d7:7c:3f:70:2d:d5:54:4d:c7:f9: a5:67:68:b5:2c:86:07:00:25:47:93:79:6d:1f:a6: 86:74:af:c8:1d:6c:40:af:ac:a7:3e:47:58:29:52: d2:a9:aa:bd:0a:93:35:1e:7c:6f:e9:b4:95:23:44: 07:92:b3:f4:32:72:7f:96:4c:57:4b:c2:cb:f3:2c: 78:9c:03:51:2c:d5:5b:ab:73:aa:a8:ca:64:0f:19: 7d:49:a7:cf:be:69:63:d7:8b:97:60:32:83:9a:06: 59:6b:4f:39:fb:69:1b:3f:2c:01:37:dc:88:ad:05: 3a:d3:7a:be:f7:a8:be:15:7d:05:c6:df:36:c8:1b: 45:fd:7d:74:e7:ce:93:97:5f:50:55:14:c1:ec:3c: d0:2d:f0:e7:67:9e:78:1d:2a:8d:7f:12:b4:4f:b2: 12:f2:d7:cc:ae:3c:63:04:24:74:e1:39:de:18:6b: 66:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A4:85:67:1D:5C:66:29:70:67:34:CC:A2:95:2E:48:B0:D1:D8:0A X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:49:ec:3c:99:c4:ab:f9:3d:67:a6:05:af:5b:97:46:fb:22: e2:38:fc:2d:0e:21:21:8a:39:72:5c:f6:f3:63:aa:43:4c:fa: 46:89:ff:dc:c7:c0:65:ac:e2:a1:79:86:ad:94:bb:32:ab:96: 07:96:5a:c1:dd:ae:87:8f:fc:87:e6:13:46:42:55:95:ab:08: bb:19:0e:6c:ef:6b:17:60:c4:c1:f8:98:a0:c6:71:90:ce:c9: cb:59:d6:92:fa:14:5b:33:c1:3a:2c:15:49:06:f9:af:f4:bd: f4:18:2d:b1:06:da:68:e0:98:48:a5:c2:80:7e:3c:60:c3:d4: 8d:cc:af:3d:54:f5:aa:98:b7:a6:06:03:f3:4d:b7:04:49:f3: 25:06:47:49:3d:7a:0e:22:64:6a:a3:9e:0f:81:6f:5f:e0:9a: 5f:8d:18:2c:f5:11:f0:99:66:a3:a1:a3:13:bb:12:f1:a4:48: 9d:3e:af:ae:88:5d:f0:76:a6:fd:c2:32:0b:64:fe:55:a1:0e: 33:6b:5d:37:ec:13:81:0a:e9:e0:81:ce:f7:8f:fd:6b:27:b1: 1d:c4:65:0b:5d:9f:dc:65:78:f6:c5:c3:5b:a1:e0:fb:ca:b0: bc:97:f8:82:46:6d:a9:4c:cd:17:16:20:64:56:b1:d0:f5:3d: 51:bd:ce:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgp2nPl5mnp0eWOoijhnjjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUwNzIwMjIwMDM4WhcNMjUwNzIxMjIwMDM4WjAzMTEwLwYDVQQD EyhjZGE0ODU2NzFkNWM2NjI5NzA2NzM0Y2NhMjk1MmU0OGIwZDFkODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIvUDyBTPfY8KSUbWAlJjt5T/4+g 1bYRgthb6AMKpPp6TtQj2C7ed9O/ItYbTlHf/G9syRZyRh3Jw24Rw9QT5s+1zf3p 7tusEaTcju9pg9d8P3At1VRNx/mlZ2i1LIYHACVHk3ltH6aGdK/IHWxAr6ynPkdY KVLSqaq9CpM1Hnxv6bSVI0QHkrP0MnJ/lkxXS8LL8yx4nANRLNVbq3OqqMpkDxl9 SafPvmlj14uXYDKDmgZZa085+2kbPywBN9yIrQU603q+96i+FX0Fxt82yBtF/X10 586Tl19QVRTB7DzQLfDnZ554HSqNfxK0T7IS8tfMrjxjBCR04TneGGtmDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2khWcdXGYpcGc0zKKVLkiw0dgKMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEnsPJnE q/k9Z6YFr1uXRvsi4jj8LQ4hIYo5clz282OqQ0z6Ron/3MfAZazioXmGrZS7MquW B5Zawd2uh4/8h+YTRkJVlasIuxkObO9rF2DEwfiYoMZxkM7Jy1nWkvoUWzPBOiwV SQb5r/S99BgtsQbaaOCYSKXCgH48YMPUjcyvPVT1qpi3pgYD8023BEnzJQZHST16 DiJkaqOeD4FvX+CaX40YLPUR8Jlmo6GjE7sS8aRInT6vrohd8Ham/cIyC2T+VaEO M2tdN+wTgQrp4IHO94/9ayexHcRlC12f3GV49sXDW6Hg+8qwvJf4gkZtqUzNFxYg ZFax0PU9Ub3OCw== -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:01 2025 by rpki-client