$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: gVGCRs2yj4XPTiYVowTiiNgJLtwd4BpQ+P7o8QFpaOs= Subject key identifier: 8D:91:67:F5:2C:E8:2C:AD:CF:CB:2A:E4:CE:BC:98:D4:5D:9E:4C:6F Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 0198413D9EB1E61854641284135EA2138A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 11D1 Signing time: Fri 25 Jul 2025 11:00:14 +0000 Manifest this update: Fri 25 Jul 2025 11:00:14 +0000 Manifest next update: Sat 26 Jul 2025 11:00:14 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=) 4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: ekVerPbpQyUcMN/MvF+3/pY41O11uCQ2IzhJHq9GPM8=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=) 10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:41:3d:9e:b1:e6:18:54:64:12:84:13:5e:a2:13:8a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jul 25 11:00:14 2025 GMT Not After : Jul 26 11:00:14 2025 GMT Subject: CN=8d9167f52ce82cadcfcb2ae4cebc98d45d9e4c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:d5:71:bd:69:35:99:78:74:4c:1f:5d:c5: b4:f7:7b:d7:b1:f4:57:0f:e8:61:72:91:da:3a:55: 55:48:6a:78:82:10:2e:7a:ba:cd:44:12:d5:07:70: 1f:89:b7:62:8b:f0:4f:b1:91:ec:cb:48:66:a8:b8: ad:75:71:99:6e:ed:86:03:31:c1:f5:00:29:8d:c4: c7:a6:5a:59:e2:63:07:4f:8b:64:a1:e2:f5:58:e0: 85:ff:5c:f6:32:56:1d:c2:1b:02:e1:5c:ec:f2:ff: a8:86:20:84:ba:6f:65:c7:c6:23:a4:06:90:4a:1a: 4c:a8:87:21:9e:2a:b1:b6:07:f6:9d:5e:cd:e5:28: d6:3d:73:7d:b4:6f:cf:88:33:1f:51:e0:e4:68:d5: e8:62:96:0b:fc:c4:42:39:4d:81:76:19:fe:63:a8: 5f:ca:4c:e2:3e:4f:e8:83:13:38:59:db:a3:34:7d: 4d:95:92:57:15:8e:ca:ac:51:31:c8:99:01:1c:c2: be:85:13:7b:ff:6d:b9:ec:20:4f:c1:85:17:15:48: c3:a6:b5:71:d9:01:64:5f:eb:86:4b:9a:1f:37:b0: bb:42:52:d5:bf:bb:d3:40:12:43:53:cc:ff:26:7b: d8:f6:a4:3f:77:37:9d:70:fa:f7:87:de:19:7b:e1: af:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:67:F5:2C:E8:2C:AD:CF:CB:2A:E4:CE:BC:98:D4:5D:9E:4C:6F X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:42:de:a8:6f:df:94:4e:ec:73:43:7c:73:cc:62:f4:b4:68: dc:40:6c:d7:64:cc:15:c7:fc:dc:24:28:56:dc:93:ad:22:70: 03:e5:db:b1:bb:2d:bb:e8:63:fc:3a:59:e3:f0:65:1e:f0:21: a5:56:46:b6:9e:e0:6b:5d:30:29:a8:3c:8b:e4:55:6e:85:cb: 32:1a:8a:fe:77:59:97:f0:cc:7a:17:0c:a2:38:bb:d8:bb:06: c5:21:df:4b:e9:5b:25:a7:a1:99:ef:01:fa:cf:a4:67:b0:bd: ff:b5:d2:84:c0:cb:f7:16:bb:33:cb:47:40:e7:f1:8e:25:72: 61:94:3b:9c:89:a3:0d:43:06:ed:16:f1:ff:73:61:a2:de:ea: 90:5d:c2:c1:b6:2e:9e:6b:3d:e4:97:9f:32:ad:d0:f8:5c:63: 4a:66:3c:3a:31:16:71:ce:cf:95:81:2e:37:4e:61:6b:e2:2e: 38:c8:a5:10:64:97:cf:5a:b1:a3:a4:21:6f:b3:ce:ac:f8:65: 20:ca:f0:b6:84:63:7d:09:77:ae:3a:b4:45:d2:54:8d:1c:a5: a8:5d:42:8f:f6:04:6d:5e:63:ba:de:10:c0:89:38:21:72:97: cf:be:c3:9e:72:74:fa:1a:84:d7:44:a9:0a:f8:b2:ce:45:aa: ae:51:bd:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhBPZ6x5hhUZBKEE16iE4qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwNzI1MTEwMDE0WhcNMjUwNzI2MTEwMDE0WjAzMTEwLwYDVQQD Eyg4ZDkxNjdmNTJjZTgyY2FkY2ZjYjJhZTRjZWJjOThkNDVkOWU0YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26fVcb1pNZl4dEwfXcW093vXsfRX D+hhcpHaOlVVSGp4ghAuerrNRBLVB3Afibdii/BPsZHsy0hmqLitdXGZbu2GAzHB 9QApjcTHplpZ4mMHT4tkoeL1WOCF/1z2MlYdwhsC4Vzs8v+ohiCEum9lx8YjpAaQ ShpMqIchniqxtgf2nV7N5SjWPXN9tG/PiDMfUeDkaNXoYpYL/MRCOU2Bdhn+Y6hf ykziPk/ogxM4WdujNH1NlZJXFY7KrFExyJkBHMK+hRN7/2257CBPwYUXFUjDprVx 2QFkX+uGS5ofN7C7QlLVv7vTQBJDU8z/JnvY9qQ/dzedcPr3h94Ze+GvIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2RZ/Us6Cytz8sq5M68mNRdnkxvMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACELeqG/f lE7sc0N8c8xi9LRo3EBs12TMFcf83CQoVtyTrSJwA+Xbsbstu+hj/DpZ4/BlHvAh pVZGtp7ga10wKag8i+RVboXLMhqK/ndZl/DMehcMoji72LsGxSHfS+lbJaehme8B +s+kZ7C9/7XShMDL9xa7M8tHQOfxjiVyYZQ7nImjDUMG7Rbx/3Nhot7qkF3CwbYu nms95JefMq3Q+FxjSmY8OjEWcc7PlYEuN05ha+IuOMilEGSXz1qxo6Qhb7POrPhl IMrwtoRjfQl3rjq0RdJUjRylqF1Cj/YEbV5jut4QwIk4IXKXz77DnnJ0+hqE10Sp CviyzkWqrlG9/Q== -----END CERTIFICATE-----Generated at Fri Jul 25 17:25:13 2025 by rpki-client