$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json) Hash identifier: bSd9U9LpdnY1xab5I8Y7Mzwe196i5+DzHyBj9Gl527g= Subject key identifier: 8B:91:B7:D0:01:81:21:38:9E:A7:5B:C6:2C:27:43:10:CB:7E:06:09 Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b Certificate serial: 019946997C062336D54ABB3EE9A4DDED0E11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft Manifest number: 168A Signing time: Sun 14 Sep 2025 05:01:27 +0000 Manifest this update: Sun 14 Sep 2025 05:01:27 +0000 Manifest next update: Mon 15 Sep 2025 05:01:27 +0000 Files and hashes: 1: DkHIx2qomTMRxi5txwcyeQJUMC4.roa (hash: aUooC/gZIs2knffE4CSZxz4fOwgHg5KB9hMX38VnhFA=) 2: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=) 3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: 0srLFWECx3+OM+Wsk/BYa6L87QS1HiFfFJPYG4+RzXM=) 4: YPWPyR2PrV8C7bZPatIE86usWRg.roa (hash: oPtwylk/25k8zLps+NlaEoKI3y6QpsbDE1m1nmcztaE=) 5: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (hash: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=) 6: gVKSPISn7WOtLgcYX82T_CB0k8w.roa (hash: Ym9+8pOqwFm62YT9wllYnMmkH1dr3oLLznDhqgDjeLA=) 7: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (hash: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=) 8: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (hash: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=) 9: sbcX3dD-IzvBjjiuOceGuIya184.roa (hash: OgKPXFMnHlbOLdXfkb/OHlLV/72L9AOodiZ4Hgh7ss4=) 10: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (hash: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Sep 2025 05:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:46:99:7c:06:23:36:d5:4a:bb:3e:e9:a4:dd:ed:0e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b Validity Not Before: Sep 14 05:01:27 2025 GMT Not After : Sep 15 05:01:27 2025 GMT Subject: CN=8b91b7d0018121389ea75bc62c274310cb7e0609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:5b:7e:a2:be:e0:aa:ed:47:9f:dc:f3:77: 75:06:d4:81:72:4a:42:cb:50:d3:5c:05:0e:26:dc: cb:06:19:f3:6f:e8:91:c0:f3:8d:49:22:bd:ad:b6: f0:22:af:50:c0:c7:92:40:c9:92:06:c5:78:48:ed: 1c:53:8d:7c:c8:8d:a5:b4:7c:53:bc:06:a0:63:d5: ae:c0:c1:5d:27:1c:99:3a:40:a2:99:d8:67:7b:08: d6:c1:b1:00:dd:c8:8d:27:87:e9:8e:62:2d:f8:33: 0a:22:ee:c4:96:0a:f2:13:f4:f0:54:50:ff:c8:3a: a6:a0:a1:31:ca:b8:82:ab:1a:87:28:9a:51:f0:75: c8:9f:bb:9b:fe:21:08:21:7c:fa:b2:04:92:7e:35: f0:49:f6:ea:ec:86:4d:c0:8e:a4:f5:1b:eb:d9:31: 91:3b:58:18:c8:22:9f:e4:9b:51:1b:1c:b0:03:65: 49:d9:fd:06:32:af:3b:6d:9d:47:3c:fc:1f:32:54: ab:69:83:7e:54:12:ae:6b:16:78:a6:a2:ef:9d:b6: 8a:b0:c2:c7:38:c3:aa:c6:25:17:e1:be:20:7b:4f: 12:f4:02:2b:ad:87:03:47:84:2a:cf:49:6e:39:42: 8a:df:ed:b6:e6:e8:8a:fe:a9:1b:d6:e3:59:7c:c9: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:91:B7:D0:01:81:21:38:9E:A7:5B:C6:2C:27:43:10:CB:7E:06:09 X509v3 Authority Key Identifier: keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a4:ee:bb:19:e3:90:90:5a:64:91:f1:94:eb:cb:a3:ed:32: 75:0d:66:4b:67:02:e2:37:d9:7d:b7:be:69:c4:b7:a4:98:5d: 2e:c2:b0:d5:74:39:0b:a8:17:b9:09:bb:1e:2b:1f:0e:c1:b7: 72:1f:71:dd:d0:90:c1:24:1e:ca:14:d8:d6:fa:d9:c2:f5:fb: 89:9d:af:c8:0d:43:02:67:ef:5a:21:20:a2:79:1d:1d:e1:e6: 82:fd:fc:24:47:fe:7c:cf:b2:d4:98:49:de:1d:98:79:c0:2d: bd:5c:45:25:5c:b5:fc:7d:43:52:a0:bb:35:86:13:02:90:97: 62:86:f3:13:42:6b:ab:f1:75:c1:3c:d3:8d:2e:43:b5:03:fe: 2f:a2:c8:5a:3d:84:e9:87:72:40:bd:a8:61:47:f6:1f:0c:90: 0c:2b:b3:b7:04:dd:25:41:cd:9d:3c:1a:4b:f0:b8:ae:bb:08: 0a:1b:d6:c8:8e:b9:e8:13:69:f1:b1:7a:96:16:fc:23:e6:90: b8:cc:52:b9:4d:48:8b:05:c1:16:7f:d5:c5:51:b2:c3:3c:ca: 54:fe:3a:e0:47:50:99:24:79:a1:01:5a:bd:9f:83:96:1c:27: 92:2a:0c:a4:d3:5c:c8:85:de:3d:9b:2c:ee:42:9b:e8:5d:39: fe:84:ba:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlGmXwGIzbVSrs+6aTd7Q4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDczMzZmYTkxNTcyMWNlM2JmZWUyMTdmNGU5OTE2NGRi OTUzMmIwHhcNMjUwOTE0MDUwMTI3WhcNMjUwOTE1MDUwMTI3WjAzMTEwLwYDVQQD Eyg4YjkxYjdkMDAxODEyMTM4OWVhNzViYzYyYzI3NDMxMGNiN2UwNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucJbfqK+4KrtR5/c83d1BtSBckpC y1DTXAUOJtzLBhnzb+iRwPONSSK9rbbwIq9QwMeSQMmSBsV4SO0cU418yI2ltHxT vAagY9WuwMFdJxyZOkCimdhnewjWwbEA3ciNJ4fpjmIt+DMKIu7ElgryE/TwVFD/ yDqmoKExyriCqxqHKJpR8HXIn7ub/iEIIXz6sgSSfjXwSfbq7IZNwI6k9Rvr2TGR O1gYyCKf5JtRGxywA2VJ2f0GMq87bZ1HPPwfMlSraYN+VBKuaxZ4pqLvnbaKsMLH OMOqxiUX4b4ge08S9AIrrYcDR4Qqz0luOUKK3+225uiK/qkb1uNZfMlFjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuRt9ABgSE4nqdbxiwnQxDLfgYJMB8GA1UdIwQY MBaAFF3XM2+pFXIc47/uIX9OmRZNuVMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEt OGM0YmM0NTkyN2EzLzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNzQ0YmQtZjZkOS00Zjc0LThjMDEtOGM0YmM0NTkyN2Ez LzEvWGRjemI2a1ZjaHpqdi00aGYwNlpGazI1VXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKTuuxnj kJBaZJHxlOvLo+0ydQ1mS2cC4jfZfbe+acS3pJhdLsKw1XQ5C6gXuQm7HisfDsG3 ch9x3dCQwSQeyhTY1vrZwvX7iZ2vyA1DAmfvWiEgonkdHeHmgv38JEf+fM+y1JhJ 3h2YecAtvVxFJVy1/H1DUqC7NYYTApCXYobzE0Jrq/F1wTzTjS5DtQP+L6LIWj2E 6YdyQL2oYUf2HwyQDCuztwTdJUHNnTwaS/C4rrsIChvWyI656BNp8bF6lhb8I+aQ uMxSuU1IiwXBFn/VxVGywzzKVP464EdQmSR5oQFavZ+DlhwnkioMpNNcyIXePZss 7kKb6F05/oS6Ig== -----END CERTIFICATE-----Generated at Sun Sep 14 12:01:58 2025 by rpki-client