$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: bzfwP8ctXLL/2jvIlOSHfwUQ/lALMNGyUrLvR/hKeGE= Subject key identifier: F3:40:75:3A:04:1C:49:69:51:98:30:1B:33:23:50:37:8A:A0:82:46 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 01984777BCA07F1F1687E2BC01B2293DCBB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 160F Signing time: Sat 26 Jul 2025 16:01:26 +0000 Manifest this update: Sat 26 Jul 2025 16:01:26 +0000 Manifest next update: Sun 27 Jul 2025 16:01:26 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: MD3lv+kLJgADgjJWjhgAUZZhTV4CLmgFHFa8jgFhXqU=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:47:77:bc:a0:7f:1f:16:87:e2:bc:01:b2:29:3d:cb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jul 26 16:01:26 2025 GMT Not After : Jul 27 16:01:26 2025 GMT Subject: CN=f340753a041c49695198301b332350378aa08246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e7:df:6f:8a:d1:69:de:db:57:40:fc:03:d7: 62:5f:14:f0:27:7f:4e:e8:6b:d4:d5:8a:47:b4:8e: 34:27:70:3f:3a:12:a8:c0:fb:73:09:f9:ce:98:cd: 18:c6:b1:9d:9d:9c:7a:9a:4a:b6:82:7b:64:80:09: 95:ff:32:85:03:06:a8:fd:97:14:28:cc:7c:e6:99: c0:39:0b:39:a8:64:a0:cd:e3:71:a5:b6:48:f5:0e: d6:b3:a7:0c:ff:7b:6b:be:42:4e:c3:c4:e5:5d:49: 13:d8:84:79:aa:0a:40:af:6e:f7:be:63:3d:b6:36: 2e:fe:a7:db:70:45:7e:2d:d7:57:4d:b2:fb:8a:c2: 3a:a1:24:68:3c:25:02:13:be:a4:16:34:e8:25:a8: 99:8a:49:81:54:fd:f3:c0:c0:7e:4b:96:c4:0f:3a: 97:4f:5e:b2:8d:a8:b3:81:a8:1c:f2:22:a2:d6:17: 58:a1:50:4c:c9:e9:83:2b:09:07:d7:16:b5:04:12: 79:eb:08:f7:2a:fd:04:fd:60:40:89:c5:65:2a:56: 6e:1e:e0:1e:71:7a:5d:b3:90:f2:b0:73:48:6e:97: e5:94:3b:1a:fc:7e:09:0f:f6:03:a2:a5:84:92:72: 2d:f4:ea:5f:46:20:6a:0b:45:80:52:55:8e:00:7e: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:40:75:3A:04:1C:49:69:51:98:30:1B:33:23:50:37:8A:A0:82:46 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fa:42:fd:82:f2:e8:c4:d1:e6:a4:29:ae:77:3d:e6:cb:cb: 6a:c9:bf:df:1f:82:44:4d:ea:94:25:74:fc:cf:df:7b:d2:3e: e9:e0:ba:52:14:b6:52:12:52:5e:d1:6d:f9:23:ba:47:61:8d: 84:88:ca:d4:74:49:f5:4f:1a:09:2b:f2:9c:fc:1e:71:db:c8: de:d1:74:cd:36:f4:37:de:96:3c:dd:e1:86:33:81:c9:37:08: 0d:8a:b7:04:17:d3:31:4b:25:55:05:d1:7d:9a:a1:ae:f3:81: 2b:b6:f3:6d:5f:48:a6:c7:a0:7b:33:dd:88:ab:90:da:7a:27: aa:a5:db:8c:b0:68:a3:09:c9:8d:58:34:c1:6e:86:8a:46:dd: 6e:cd:de:12:17:aa:98:64:fb:8a:75:07:c8:7c:b1:da:c1:ad: fb:51:95:21:6d:6d:c2:1a:1c:6d:f9:37:4a:d7:c6:31:41:32: db:cc:fe:83:1f:1b:73:74:02:0a:c1:4b:54:c8:61:95:1d:8f: f5:a0:a3:1f:18:8f:75:ab:ce:cd:5e:d5:72:3c:c1:5a:d8:49: f3:ba:6f:f7:4b:c6:8f:9c:b0:b3:70:78:18:20:6b:ef:4d:6d: b8:7d:2c:4a:6d:bb:c2:25:54:5a:2e:94:ce:99:da:a4:ba:8b: 9b:ec:cb:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhHd7ygfx8Wh+K8AbIpPcu2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUwNzI2MTYwMTI2WhcNMjUwNzI3MTYwMTI2WjAzMTEwLwYDVQQD EyhmMzQwNzUzYTA0MWM0OTY5NTE5ODMwMWIzMzIzNTAzNzhhYTA4MjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Offb4rRad7bV0D8A9diXxTwJ39O 6GvU1YpHtI40J3A/OhKowPtzCfnOmM0YxrGdnZx6mkq2gntkgAmV/zKFAwao/ZcU KMx85pnAOQs5qGSgzeNxpbZI9Q7Ws6cM/3trvkJOw8TlXUkT2IR5qgpAr273vmM9 tjYu/qfbcEV+LddXTbL7isI6oSRoPCUCE76kFjToJaiZikmBVP3zwMB+S5bEDzqX T16yjaizgagc8iKi1hdYoVBMyemDKwkH1xa1BBJ56wj3Kv0E/WBAicVlKlZuHuAe cXpds5DysHNIbpfllDsa/H4JD/YDoqWEknIt9OpfRiBqC0WAUlWOAH6hfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNAdToEHElpUZgwGzMjUDeKoIJGMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvpC/YLy 6MTR5qQprnc95svLasm/3x+CRE3qlCV0/M/fe9I+6eC6UhS2UhJSXtFt+SO6R2GN hIjK1HRJ9U8aCSvynPwecdvI3tF0zTb0N96WPN3hhjOByTcIDYq3BBfTMUslVQXR fZqhrvOBK7bzbV9IpsegezPdiKuQ2nonqqXbjLBoownJjVg0wW6Gikbdbs3eEheq mGT7inUHyHyx2sGt+1GVIW1twhocbfk3StfGMUEy28z+gx8bc3QCCsFLVMhhlR2P 9aCjHxiPdavOzV7VcjzBWthJ87pv90vGj5yws3B4GCBr701tuH0sSm27wiVUWi6U zpnapLqLm+zL9A== -----END CERTIFICATE-----Generated at Sat Jul 26 19:47:56 2025 by rpki-client