$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: o/ak+FwXnD/nuA9ghYaNGYbZuHa49ynj73SmeQL+GCk= Subject key identifier: 5F:11:19:E1:B2:76:47:9F:92:FD:68:67:89:6C:2A:F6:8A:39:23:F4 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019838A887A3CC1B08B787732959EB50C16E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 162F Signing time: Wed 23 Jul 2025 19:00:25 +0000 Manifest this update: Wed 23 Jul 2025 19:00:25 +0000 Manifest next update: Thu 24 Jul 2025 19:00:25 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 8: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 9: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 10: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 11: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (hash: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: sE7Etih+PJev9V9eZ/38dJI2OLjePexzaFQHCwbvyp8=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 19:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:a8:87:a3:cc:1b:08:b7:87:73:29:59:eb:50:c1:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jul 23 19:00:25 2025 GMT Not After : Jul 24 19:00:25 2025 GMT Subject: CN=5f1119e1b276479f92fd6867896c2af68a3923f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:f0:96:d5:37:27:1d:c6:dd:88:b2:9c:46: 5d:b4:ce:93:37:ad:e4:be:6c:53:ad:db:7b:8e:5b: 93:1b:56:70:ce:53:ae:27:2d:51:0f:db:18:45:7f: 17:0c:6e:35:39:9e:d4:b5:1b:54:14:3f:c7:9e:d7: 13:7c:35:65:9b:c7:10:d4:68:2f:38:d9:fa:52:5a: 72:4c:88:c5:65:45:07:71:93:04:2c:d9:06:f8:31: 2a:bf:c1:c6:37:3b:10:5d:af:01:1b:ea:db:32:ea: 69:03:11:b0:b4:02:19:fa:ff:9d:1f:9c:3f:cf:02: b5:e3:3b:9d:68:2c:f0:03:15:65:62:a1:5f:2e:73: ce:7e:0d:69:e9:14:fd:70:14:1f:6c:c0:c4:f1:ff: 27:56:fa:a1:e4:e8:c2:46:7c:67:16:e6:83:c7:4c: 26:3f:f5:22:56:f4:b9:5f:31:09:8c:32:9d:33:9c: de:d5:0a:89:3b:50:ee:ff:c5:a2:47:d2:e8:be:c3: 72:5c:96:a2:b7:d3:1f:4d:b5:c0:d3:34:62:da:e1: a9:e8:e5:46:d9:ba:7c:2b:4b:16:db:d2:11:da:7d: 6d:e2:eb:b0:20:43:29:dd:d6:83:e1:16:64:70:1b: b6:26:d9:57:85:9e:a9:95:31:0d:8d:ad:57:9d:fa: 2d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:11:19:E1:B2:76:47:9F:92:FD:68:67:89:6C:2A:F6:8A:39:23:F4 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:86:eb:ff:9d:f9:e5:55:5b:22:ae:a3:d8:21:78:d7:3a:6d: ea:a5:5c:40:6d:5e:94:a7:4d:f5:e7:01:82:01:9c:1c:d3:21: 6e:40:86:12:38:7e:23:73:93:75:1a:b9:17:76:a4:33:d4:ff: 7c:7f:51:56:21:fe:3e:36:b9:5c:71:7e:d5:d4:f9:0e:0b:1a: 26:56:d0:c6:1c:10:92:89:94:9a:44:2d:66:e6:8a:d7:80:9a: ad:41:ab:0b:61:f0:63:c6:aa:d1:f4:ab:e9:c8:4e:f7:3d:68: 41:1a:35:4c:9e:8d:25:10:08:cb:76:e6:ab:8d:90:d9:96:06: 94:45:0f:1f:52:2f:2c:7e:07:ca:92:6e:9d:9f:5a:f3:0d:f6: 57:78:b0:9c:01:38:b7:05:ed:4e:52:1c:98:44:cf:2a:48:78: 29:ad:da:b0:52:59:fe:34:87:10:3d:b7:66:d4:96:26:ce:37: 59:c8:aa:d5:cd:4c:50:ed:1b:34:25:14:f4:2f:29:1c:50:22: 7f:6c:a4:cb:f1:b0:6f:50:03:f5:fb:c2:c2:e6:35:04:a2:78: 52:90:d0:9c:a0:c2:09:b9:9f:3d:af:97:94:74:cc:37:13:33: bb:5f:c8:b0:a8:d6:e1:dd:68:5a:49:fd:f2:9f:90:b3:be:3d: 7f:a5:91:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4qIejzBsIt4dzKVnrUMFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUwNzIzMTkwMDI1WhcNMjUwNzI0MTkwMDI1WjAzMTEwLwYDVQQD Eyg1ZjExMTllMWIyNzY0NzlmOTJmZDY4Njc4OTZjMmFmNjhhMzkyM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnPwltU3Jx3G3YiynEZdtM6TN63k vmxTrdt7jluTG1ZwzlOuJy1RD9sYRX8XDG41OZ7UtRtUFD/HntcTfDVlm8cQ1Ggv ONn6UlpyTIjFZUUHcZMELNkG+DEqv8HGNzsQXa8BG+rbMuppAxGwtAIZ+v+dH5w/ zwK14zudaCzwAxVlYqFfLnPOfg1p6RT9cBQfbMDE8f8nVvqh5OjCRnxnFuaDx0wm P/UiVvS5XzEJjDKdM5ze1QqJO1Du/8WiR9LovsNyXJait9MfTbXA0zRi2uGp6OVG 2bp8K0sW29IR2n1t4uuwIEMp3daD4RZkcBu2JtlXhZ6plTENja1XnfotQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8RGeGydkefkv1oZ4lsKvaKOSP0MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4br/535 5VVbIq6j2CF41zpt6qVcQG1elKdN9ecBggGcHNMhbkCGEjh+I3OTdRq5F3akM9T/ fH9RViH+Pja5XHF+1dT5DgsaJlbQxhwQkomUmkQtZuaK14CarUGrC2HwY8aq0fSr 6chO9z1oQRo1TJ6NJRAIy3bmq42Q2ZYGlEUPH1IvLH4HypJunZ9a8w32V3iwnAE4 twXtTlIcmETPKkh4Ka3asFJZ/jSHED23ZtSWJs43Wciq1c1MUO0bNCUU9C8pHFAi f2yky/Gwb1AD9fvCwuY1BKJ4UpDQnKDCCbmfPa+XlHTMNxMzu1/IsKjW4d1oWkn9 8p+Qs749f6WRZg== -----END CERTIFICATE-----Generated at Thu Jul 24 02:38:38 2025 by rpki-client