$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: zZQFPvYw13peury9Uxmes/KMuAgVTyOrHxQNf5jklA0= Subject key identifier: 46:4F:FB:33:D2:62:F1:6E:83:B1:5C:E1:53:6D:AB:3D:AF:2B:83:B0 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01982E24E374F4D37FD343A5239B0011F888 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1602 Signing time: Mon 21 Jul 2025 18:00:26 +0000 Manifest this update: Mon 21 Jul 2025 18:00:26 +0000 Manifest next update: Tue 22 Jul 2025 18:00:26 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=) 3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 10: AKM5h6Ix-3LMoRtdGUA19KyVLio.roa (hash: P77lNcJ0zrzNLtgfjbd4pt0XLBw/55/N1ocxrR5mz8k=) 11: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 12: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 13: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 14: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 15: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=) 16: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 17: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 18: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (hash: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=) 19: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=) 20: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 21: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 22: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 23: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 24: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=) 25: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 26: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 27: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 28: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=) 29: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 30: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 31: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=) 32: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 33: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: SF5cGRHVwMJwA18Y4E2fd/uwpnw8ctdqxvh/fCZPMI8=) 35: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 14:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:2e:24:e3:74:f4:d3:7f:d3:43:a5:23:9b:00:11:f8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jul 21 18:00:26 2025 GMT Not After : Jul 22 18:00:26 2025 GMT Subject: CN=464ffb33d262f16e83b15ce1536dab3daf2b83b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:94:3d:13:12:c0:aa:d1:c9:6f:a4:ab:25: 01:e9:e1:66:80:d7:2d:d1:45:88:cc:ed:43:0f:87: 7c:85:d2:4f:46:01:51:26:04:8b:98:85:91:df:2b: 7b:a0:4b:a6:89:15:a0:4c:3b:7f:32:75:f8:2c:06: 44:06:f1:16:fd:54:a2:c7:53:6d:89:5a:40:7e:eb: 89:17:6e:29:e3:25:d2:a9:49:b8:36:ba:a8:9a:9c: 4d:6b:06:f4:6c:80:dd:de:68:1d:eb:ad:5e:dd:d1: 6c:88:5e:9f:14:b2:74:32:d2:3a:a2:7d:54:e7:86: 54:ca:cb:15:c4:11:4d:71:6d:32:af:14:7b:3f:cd: b9:eb:89:7f:94:8d:dd:dd:00:89:38:8c:12:5b:6a: 77:69:c4:46:8f:41:bf:6d:08:67:77:ce:30:12:ee: 8f:96:61:ce:ae:17:dc:ea:c7:9d:51:24:fa:7c:f4: e2:10:46:f6:a0:77:c7:f9:a7:6e:6b:0d:c8:50:45: 5e:bc:d7:2f:dd:a0:73:9f:be:f2:9a:10:2d:6b:33: 04:e5:1a:5f:88:a6:20:04:3f:3b:1f:59:1e:37:c1: d6:a7:30:73:37:cc:e3:a5:3c:05:e8:7a:c0:98:7b: 3c:fd:af:28:9f:1a:8f:97:cf:96:61:42:99:5e:d1: b7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4F:FB:33:D2:62:F1:6E:83:B1:5C:E1:53:6D:AB:3D:AF:2B:83:B0 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c4:4c:b4:2c:0b:55:e7:a3:fc:b3:9d:96:ba:86:fe:86:53: 62:e4:32:ae:9e:58:45:2d:52:c6:2e:63:d2:ea:42:93:ac:d6: 77:92:4a:5e:ec:f6:fb:05:e2:f1:7f:34:e3:e8:fb:73:c3:d5: b0:0e:81:b3:e5:a5:c1:e5:4f:96:20:57:c6:b1:49:33:a0:e0: 1a:14:bb:0a:96:cd:e0:50:44:22:56:5f:86:51:aa:ba:1e:b0: 12:0d:50:ad:e4:d3:6c:31:3d:5b:8a:30:62:ee:57:c0:48:13: 96:0f:90:95:1b:dc:33:c1:7b:1c:bc:1e:70:fc:71:c9:5d:3c: 65:11:c7:76:bf:24:4f:20:db:48:94:61:21:14:47:8a:37:f2: 20:7c:c3:be:57:ab:1e:a1:1c:6f:c1:a7:e0:9a:c1:27:06:a2: e1:58:c9:42:14:45:bf:3f:39:37:03:9d:be:3f:d5:8d:50:8b: 14:11:c0:66:24:03:5e:ad:1c:9f:72:c7:5f:42:9c:ce:f7:1b: 7b:8f:cb:13:df:c9:d0:e2:b0:d7:61:01:cf:15:69:1b:63:dd: 42:7f:ca:e2:60:d0:ff:59:eb:c0:a2:1e:13:3b:73:b7:84:ef: 26:b2:ac:78:71:c6:6e:29:0e:c0:e1:8f:4b:2c:80:d7:6b:4b: b8:2b:58:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZguJON09NN/00OlI5sAEfiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUwNzIxMTgwMDI2WhcNMjUwNzIyMTgwMDI2WjAzMTEwLwYDVQQD Eyg0NjRmZmIzM2QyNjJmMTZlODNiMTVjZTE1MzZkYWIzZGFmMmI4M2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOqUPRMSwKrRyW+kqyUB6eFmgNct 0UWIzO1DD4d8hdJPRgFRJgSLmIWR3yt7oEumiRWgTDt/MnX4LAZEBvEW/VSix1Nt iVpAfuuJF24p4yXSqUm4NrqompxNawb0bIDd3mgd661e3dFsiF6fFLJ0MtI6on1U 54ZUyssVxBFNcW0yrxR7P82564l/lI3d3QCJOIwSW2p3acRGj0G/bQhnd84wEu6P lmHOrhfc6sedUST6fPTiEEb2oHfH+aduaw3IUEVevNcv3aBzn77ymhAtazME5Rpf iKYgBD87H1keN8HWpzBzN8zjpTwF6HrAmHs8/a8onxqPl8+WYUKZXtG3kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZP+zPSYvFug7Fc4VNtqz2vK4OwMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssRMtCwL Veej/LOdlrqG/oZTYuQyrp5YRS1Sxi5j0upCk6zWd5JKXuz2+wXi8X804+j7c8PV sA6Bs+WlweVPliBXxrFJM6DgGhS7CpbN4FBEIlZfhlGquh6wEg1QreTTbDE9W4ow Yu5XwEgTlg+QlRvcM8F7HLwecPxxyV08ZRHHdr8kTyDbSJRhIRRHijfyIHzDvler HqEcb8Gn4JrBJwai4VjJQhRFvz85NwOdvj/VjVCLFBHAZiQDXq0cn3LHX0Kczvcb e4/LE9/J0OKw12EBzxVpG2PdQn/K4mDQ/1nrwKIeEztzt4TvJrKseHHGbikOwOGP SyyA12tLuCtYdw== -----END CERTIFICATE-----Generated at Mon Jul 21 23:19:11 2025 by rpki-client