$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json) Hash identifier: bn6nIx2rL+JZ5hvnrFoKLVe6xsPmvsrEjrNAqnF7bLM= Subject key identifier: D2:31:0A:23:92:6E:EB:4B:2D:94:32:89:E1:D7:3F:E3:D6:5B:12:AD Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Certificate serial: 0198277E25BDDE0807D013A0784BEBB24105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft Manifest number: 0D6B Signing time: Sun 20 Jul 2025 11:00:35 +0000 Manifest this update: Sun 20 Jul 2025 11:00:35 +0000 Manifest next update: Mon 21 Jul 2025 11:00:35 +0000 Files and hashes: 1: 4zijRX3qFSJj7GUPzn2tNtVGEqU.roa (hash: G11+LD/eIulIMC02GT0rOyORwsGurEkPCQfgsNssMY4=) 2: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=) 3: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=) 4: EliH32nM72jk5o8srlCb9Qn8SIg.roa (hash: Rtb7C9DazwCLvPY2asNPyAzR9ypSlDn7TK9tDgFH01c=) 5: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=) 6: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: xSpsddklc9eWmPr5Sc/1Stx8Jv/PuodKZgp5yBLBsao=) 7: c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa (hash: qo5ZvreioWLB6l4kqymHWyEjF1uBdQswYAIK4BkA1Q8=) 8: fLde9ARS8o6m8NrcEVjMqIsK6BQ.roa (hash: 4bBuAEX3JD+PcKBz0gREdyNpo/iSozcE6xvWaWi6DYU=) 9: vdaPP_qhNUmgnJ0NAXqPDvpkGdM.roa (hash: ZfZB97Ru+6Pn49YAOEFkll7sCtlDBIjxlPW9srTOp54=) 10: ya1Qvlz0z2yIW3rWpmZNZE0Mahw.roa (hash: pUh8tSNEyZT8qdNgsK70xOXvpKS7aoBqKqdEgq1Za3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:7e:25:bd:de:08:07:d0:13:a0:78:4b:eb:b2:41:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Validity Not Before: Jul 20 11:00:35 2025 GMT Not After : Jul 21 11:00:35 2025 GMT Subject: CN=d2310a23926eeb4b2d943289e1d73fe3d65b12ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:e6:86:3b:bc:55:d5:0c:ef:3c:b6:c3:4a: c4:78:cb:03:10:3c:c2:5b:22:ba:6f:bc:75:d3:a9: 6c:30:dc:05:c5:1b:0c:e6:e3:e0:df:d0:c4:c0:3e: 44:27:e7:19:23:c4:24:88:12:fc:3b:39:13:3d:7f: cf:86:ca:f1:2c:89:fb:ae:25:7a:6e:35:a7:9a:6e: b0:b5:09:b6:63:48:02:59:c8:7e:2c:e6:4c:7a:8b: 0b:52:95:7b:60:c5:78:22:1b:18:95:1a:4a:a7:b0: 64:c8:21:32:37:cc:7b:f1:37:1e:93:88:4e:a1:40: be:01:e3:d4:d0:9b:d5:15:41:a8:1d:99:fa:02:12: 43:36:fd:9f:8c:9b:b1:c4:46:ab:f3:1a:b7:33:b9: 9d:58:ba:df:06:9d:ed:4b:3f:67:e5:3c:70:5c:37: 49:3a:de:58:ba:32:c0:c7:40:fe:96:0d:22:a8:09: 5d:80:b6:8a:d2:92:49:cf:8f:35:7d:59:e1:71:ed: 03:65:07:2c:0d:de:6f:1e:11:39:ce:0e:4b:9e:80: 07:55:a7:e4:5d:36:8e:1c:3d:fd:cc:53:c1:91:db: c9:f3:4c:f8:b9:f7:48:96:4b:60:23:09:c2:5d:6e: ff:7a:d9:34:86:e5:db:1b:b6:0f:e9:25:b6:8e:88: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:31:0A:23:92:6E:EB:4B:2D:94:32:89:E1:D7:3F:E3:D6:5B:12:AD X509v3 Authority Key Identifier: keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:63:41:24:18:97:32:ae:ed:04:7e:c5:a7:f7:f7:10:9d:26: e8:be:fc:9c:2b:65:53:d4:fa:ca:3e:57:0c:04:61:16:ee:eb: 3c:de:ab:9a:a4:c3:3c:2a:28:b7:23:45:e7:e0:05:78:df:a3: fe:de:50:67:eb:bd:2f:e7:cb:5a:a4:af:cc:10:42:78:13:a9: 23:42:55:30:ed:95:1e:7e:ed:c1:37:83:48:a2:61:e5:73:7a: 0d:5c:85:85:5a:28:e7:bd:14:3e:15:50:d7:6e:a5:83:08:75: 45:7f:b6:25:b4:c8:3f:7f:5f:37:d2:f5:e7:bd:bb:4b:7c:3a: b4:cd:39:b1:ab:a6:3d:b5:ca:96:82:08:a6:d0:50:74:d7:fd: 3a:70:ca:2a:b6:92:08:b8:b3:92:20:96:97:e7:2d:f6:3d:c8: f1:0b:66:4b:cc:f9:0d:29:6f:58:bc:1e:d5:71:0d:75:c8:b8: 57:15:8c:bc:8d:b2:5a:81:c4:77:40:17:6e:c0:e7:06:c2:b5: e8:af:36:96:66:7a:5d:6e:3f:ae:d7:f5:04:77:f3:a3:96:26: 65:4d:fc:78:41:17:0a:98:c8:b9:16:b2:c2:9b:5e:4d:12:6c: 05:f5:e5:20:57:b6:68:d1:84:c5:a9:e2:ae:bc:c3:a0:2b:02: c2:db:cb:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnfiW93ggH0BOgeEvrskEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1 NWMzNjEwHhcNMjUwNzIwMTEwMDM1WhcNMjUwNzIxMTEwMDM1WjAzMTEwLwYDVQQD EyhkMjMxMGEyMzkyNmVlYjRiMmQ5NDMyODllMWQ3M2ZlM2Q2NWIxMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxjmhju8VdUM7zy2w0rEeMsDEDzC WyK6b7x106lsMNwFxRsM5uPg39DEwD5EJ+cZI8QkiBL8OzkTPX/PhsrxLIn7riV6 bjWnmm6wtQm2Y0gCWch+LOZMeosLUpV7YMV4IhsYlRpKp7BkyCEyN8x78Tcek4hO oUC+AePU0JvVFUGoHZn6AhJDNv2fjJuxxEar8xq3M7mdWLrfBp3tSz9n5TxwXDdJ Ot5YujLAx0D+lg0iqAldgLaK0pJJz481fVnhce0DZQcsDd5vHhE5zg5LnoAHVafk XTaOHD39zFPBkdvJ80z4ufdIlktgIwnCXW7/etk0huXbG7YP6SW2jojhzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIxCiOSbutLLZQyieHXP+PWWxKtMB8GA1UdIwQY MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut M2FhN2RhYTlkM2VjLzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWNBJBiX Mq7tBH7Fp/f3EJ0m6L78nCtlU9T6yj5XDARhFu7rPN6rmqTDPCootyNF5+AFeN+j /t5QZ+u9L+fLWqSvzBBCeBOpI0JVMO2VHn7twTeDSKJh5XN6DVyFhVoo570UPhVQ 126lgwh1RX+2JbTIP39fN9L15727S3w6tM05saumPbXKloIIptBQdNf9OnDKKraS CLizkiCWl+ct9j3I8QtmS8z5DSlvWLwe1XENdci4VxWMvI2yWoHEd0AXbsDnBsK1 6K82lmZ6XW4/rtf1BHfzo5YmZU38eEEXCpjIuRaywpteTRJsBfXlIFe2aNGExani rrzDoCsCwtvLjg== -----END CERTIFICATE-----Generated at Sun Jul 20 16:24:46 2025 by rpki-client