$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: gDH8audn77nQ7uwMLbahyrMVkyCbK5sj4u9ZOEmkdmA= Subject key identifier: 63:37:6A:68:66:AC:43:B8:D1:52:4E:65:8D:62:7B:11:A9:79:51:28 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01984362CE38E6FE6654F5243E4E14C4483D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0C90 Signing time: Fri 25 Jul 2025 21:00:05 +0000 Manifest this update: Fri 25 Jul 2025 21:00:05 +0000 Manifest next update: Sat 26 Jul 2025 21:00:05 +0000 Files and hashes: 1: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 2: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 3: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 4: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 5: LU6AnkkcDu6L956hWO4DA9SI5iA.roa (hash: hHyzkbAFVoYRwusr1op18JjqkPccx876xuO53q1c3Wk=) 6: NTeC-NbINKuWXIN2JRj2jE73cMQ.roa (hash: usN4QfuBj821Bx/aBMyN171iAsEpZjNXNiVf16Jr2OA=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: vHYOAJd+vjJaxQx0f7p0RO+m8Gv3KMKCmOC5HuLc+RI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:43:62:ce:38:e6:fe:66:54:f5:24:3e:4e:14:c4:48:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jul 25 21:00:05 2025 GMT Not After : Jul 26 21:00:05 2025 GMT Subject: CN=63376a6866ac43b8d1524e658d627b11a9795128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:76:91:a0:53:00:e4:0b:2d:8d:c0:5d:eb: e7:e5:b0:51:d5:9f:5e:ef:6b:93:bf:d1:92:f7:7f: 6c:50:3d:20:4f:f7:8f:b6:bb:cd:21:8a:4f:8f:79: 1a:71:24:d2:36:47:3f:9c:30:69:8d:c2:b9:89:08: e4:5e:00:36:28:9c:2d:00:0a:28:1f:eb:e0:4a:0c: 93:e8:03:b7:92:a6:99:6f:eb:25:b8:27:2a:c5:13: ea:bb:94:30:51:75:74:14:27:d2:41:02:70:7d:e7: 47:fe:1a:96:62:20:1c:a7:2f:20:0e:e3:35:b4:26: a7:0e:91:94:4f:98:be:03:6d:66:e4:a0:c5:15:d9: 72:22:8e:b9:2d:34:ce:af:0b:0d:ef:23:c8:c4:e5: 5d:f8:82:d9:28:f3:8a:fa:31:b9:08:86:f9:05:3e: 70:df:c9:d8:3e:9a:c9:5a:5c:7d:b0:e5:2c:ca:ba: 0f:47:51:b2:7a:6f:45:44:bc:62:71:5d:6b:58:86: 10:63:62:ca:bc:1b:67:d6:38:36:20:de:fc:ce:a3: 8b:06:b7:bf:5e:0c:c6:2f:6a:9e:b5:a5:9b:01:66: e6:59:bb:17:f0:6c:c7:d8:e8:56:a9:22:f9:62:04: 11:82:63:f5:55:bb:2a:0d:18:f0:9b:c2:e4:62:64: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:37:6A:68:66:AC:43:B8:D1:52:4E:65:8D:62:7B:11:A9:79:51:28 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2d:c2:6d:f8:3b:19:c0:af:4f:1b:62:c0:21:30:f9:f9:4a: 7c:cf:c5:dd:d1:61:fb:7b:15:3e:8a:b5:66:b1:cd:ed:6f:f6: 63:0e:aa:73:45:9c:99:75:e4:9d:15:f2:bc:33:8e:c5:23:c2: 2a:ab:fa:18:f3:f4:09:bd:0f:49:0e:e6:d4:dd:e9:90:01:8a: 60:75:6e:2f:36:5f:c2:cf:6f:03:4f:ef:6e:14:cb:d9:fe:ed: 41:d0:1b:d4:73:a6:45:ac:df:41:0e:38:38:5e:a5:93:4b:1a: 1d:ab:3d:a6:05:22:c0:91:9e:20:53:08:3f:68:ac:53:bc:94: 85:e4:21:51:42:71:24:3e:05:b4:7a:2b:9b:e9:b2:86:08:2a: 47:43:d0:5b:e9:04:8d:2b:be:b6:5e:ea:d0:26:01:24:91:83: e8:ab:7c:c6:c9:09:77:e3:9f:5c:c9:0a:a8:2a:65:9b:93:9e: 0d:da:32:21:70:af:99:6a:3b:71:7d:b0:91:29:06:81:19:3a: ef:31:8e:31:23:a3:c0:71:a1:2b:c1:54:52:e2:f7:2e:a7:eb: 3d:41:50:59:2e:80:4a:3d:db:5d:8a:1e:bf:e5:e2:4a:48:8d: bf:df:33:49:42:54:9c:32:dc:54:3a:5e:3b:84:fe:45:94:cf: 6a:7a:3c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhDYs445v5mVPUkPk4UxEg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUwNzI1MjEwMDA1WhcNMjUwNzI2MjEwMDA1WjAzMTEwLwYDVQQD Eyg2MzM3NmE2ODY2YWM0M2I4ZDE1MjRlNjU4ZDYyN2IxMWE5Nzk1MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGJ2kaBTAOQLLY3AXevn5bBR1Z9e 72uTv9GS939sUD0gT/ePtrvNIYpPj3kacSTSNkc/nDBpjcK5iQjkXgA2KJwtAAoo H+vgSgyT6AO3kqaZb+sluCcqxRPqu5QwUXV0FCfSQQJwfedH/hqWYiAcpy8gDuM1 tCanDpGUT5i+A21m5KDFFdlyIo65LTTOrwsN7yPIxOVd+ILZKPOK+jG5CIb5BT5w 38nYPprJWlx9sOUsyroPR1Gyem9FRLxicV1rWIYQY2LKvBtn1jg2IN78zqOLBre/ XgzGL2qetaWbAWbmWbsX8GzH2OhWqSL5YgQRgmP1VbsqDRjwm8LkYmTkpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM3amhmrEO40VJOZY1iexGpeVEoMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiS3Cbfg7 GcCvTxtiwCEw+flKfM/F3dFh+3sVPoq1ZrHN7W/2Yw6qc0WcmXXknRXyvDOOxSPC Kqv6GPP0Cb0PSQ7m1N3pkAGKYHVuLzZfws9vA0/vbhTL2f7tQdAb1HOmRazfQQ44 OF6lk0saHas9pgUiwJGeIFMIP2isU7yUheQhUUJxJD4FtHorm+myhggqR0PQW+kE jSu+tl7q0CYBJJGD6Kt8xskJd+OfXMkKqCplm5OeDdoyIXCvmWo7cX2wkSkGgRk6 7zGOMSOjwHGhK8FUUuL3LqfrPUFQWS6ASj3bXYoev+XiSkiNv98zSUJUnDLcVDpe O4T+RZTPano8Qw== -----END CERTIFICATE-----Generated at Sat Jul 26 06:40:42 2025 by rpki-client