$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: QsKjr1xa/7gPFLVQsojB7JXkw1aFlrI3R6bRJ35PZpU= Subject key identifier: 17:4F:6D:AD:A4:5D:D8:F3:F3:1A:27:8E:0B:9F:89:47:AB:9F:A2:A7 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 0198451A6E608E6229C64FD118790A9933C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 0EBB Signing time: Sat 26 Jul 2025 05:00:16 +0000 Manifest this update: Sat 26 Jul 2025 05:00:16 +0000 Manifest next update: Sun 27 Jul 2025 05:00:16 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: PV4FwVB2EWCQiO3dyHD/cGfdX/fYK50eufFwWM4BgCM=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:1a:6e:60:8e:62:29:c6:4f:d1:18:79:0a:99:33:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jul 26 05:00:16 2025 GMT Not After : Jul 27 05:00:16 2025 GMT Subject: CN=174f6dada45dd8f3f31a278e0b9f8947ab9fa2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:85:ed:b9:44:05:80:90:31:ad:d6:1a:86: 5c:5f:4f:c0:6f:47:a6:90:31:d7:9f:c0:2b:52:e8: 56:2f:fe:00:9c:7d:c0:81:c2:77:99:ea:00:51:09: a6:4e:f7:99:d3:a1:19:da:96:63:74:0f:7c:74:a3: 5d:f4:13:c5:6c:c1:69:e4:cc:51:59:19:82:69:ed: 4e:fe:b1:ac:eb:f9:60:65:1c:81:5b:b5:32:5f:7b: 7d:c4:6c:31:87:50:22:ff:da:28:eb:78:b1:ec:d2: 73:d8:fb:8c:ce:76:b9:fd:ac:70:09:71:c9:75:6a: 78:61:b8:3e:10:47:cf:e5:38:ac:0e:02:5e:8f:40: a6:be:c8:dd:22:9f:f8:2c:9a:e3:df:2c:e5:e1:b8: 11:f5:72:6a:b1:dc:4c:ee:de:fa:4a:b9:85:cf:c2: 0c:92:f6:b0:f5:45:8f:36:35:fa:be:3d:88:0f:db: c7:f9:81:12:58:52:a4:59:3b:07:28:d4:6a:be:1b: 4d:b9:57:8b:4e:e4:51:f0:cd:39:35:46:76:db:17: c1:32:25:da:ef:bc:c5:55:5f:d9:a5:54:16:f8:11: c9:00:7e:23:f0:75:61:fb:5b:31:18:3a:d0:9a:b2: 96:bd:dc:39:c3:95:8c:8f:fa:23:0c:b7:1b:65:fe: 9d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4F:6D:AD:A4:5D:D8:F3:F3:1A:27:8E:0B:9F:89:47:AB:9F:A2:A7 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3c:61:1f:92:78:d5:53:82:26:a7:fc:c0:f5:a3:b4:a8:a4: f8:c5:52:b8:5c:df:e2:7d:a9:76:f2:a5:17:84:0b:31:f6:ea: e9:c3:1c:1d:14:b0:ee:aa:e4:80:6d:3b:ef:40:b2:c0:bc:8c: 21:17:53:88:31:df:ab:7e:6d:93:27:60:59:2e:d5:2d:e1:b6: db:ec:1f:65:ff:87:74:f9:65:d2:0c:08:40:84:3f:40:ca:83: 1b:0a:0b:69:4a:c5:2d:28:4a:a0:a7:31:88:19:d6:4a:91:b3: 97:8b:1d:61:dc:2b:a5:2d:8f:12:b9:c0:f4:c9:9a:a3:60:4d: f4:05:08:a5:bb:f8:0e:48:29:c7:e5:be:f8:63:d9:1e:f3:9e: c7:d5:c9:56:81:81:5f:38:02:2f:8b:11:41:bc:0b:e5:47:60: f7:94:ef:31:11:fc:df:ac:19:e1:38:e6:43:1c:48:b0:2a:80: 86:e2:cb:a4:49:55:10:11:5b:2c:c8:a1:bc:5b:00:5a:12:02: f6:59:88:f7:06:56:69:d4:ef:a2:07:a3:93:7c:5e:0a:03:59: f8:4a:e3:56:15:cb:27:fd:90:49:92:21:5a:78:dc:d5:26:3f: 71:58:3a:cd:b6:c4:50:cd:6f:8f:1d:b0:ab:5b:8b:0d:2e:91: e1:80:9d:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhFGm5gjmIpxk/RGHkKmTPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUwNzI2MDUwMDE2WhcNMjUwNzI3MDUwMDE2WjAzMTEwLwYDVQQD EygxNzRmNmRhZGE0NWRkOGYzZjMxYTI3OGUwYjlmODk0N2FiOWZhMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYaF7blEBYCQMa3WGoZcX0/Ab0em kDHXn8ArUuhWL/4AnH3AgcJ3meoAUQmmTveZ06EZ2pZjdA98dKNd9BPFbMFp5MxR WRmCae1O/rGs6/lgZRyBW7UyX3t9xGwxh1Ai/9oo63ix7NJz2PuMzna5/axwCXHJ dWp4Ybg+EEfP5TisDgJej0CmvsjdIp/4LJrj3yzl4bgR9XJqsdxM7t76SrmFz8IM kvaw9UWPNjX6vj2ID9vH+YESWFKkWTsHKNRqvhtNuVeLTuRR8M05NUZ22xfBMiXa 77zFVV/ZpVQW+BHJAH4j8HVh+1sxGDrQmrKWvdw5w5WMj/ojDLcbZf6dEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdPba2kXdjz8xonjgufiUern6KnMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDxhH5J4 1VOCJqf8wPWjtKik+MVSuFzf4n2pdvKlF4QLMfbq6cMcHRSw7qrkgG0770CywLyM IRdTiDHfq35tkydgWS7VLeG22+wfZf+HdPll0gwIQIQ/QMqDGwoLaUrFLShKoKcx iBnWSpGzl4sdYdwrpS2PErnA9Mmao2BN9AUIpbv4Dkgpx+W++GPZHvOex9XJVoGB XzgCL4sRQbwL5Udg95TvMRH836wZ4TjmQxxIsCqAhuLLpElVEBFbLMihvFsAWhIC 9lmI9wZWadTvogejk3xeCgNZ+ErjVhXLJ/2QSZIhWnjc1SY/cVg6zbbEUM1vjx2w q1uLDS6R4YCdcQ== -----END CERTIFICATE-----Generated at Sat Jul 26 11:29:45 2025 by rpki-client