$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: cwZj3S6Zmd6DRgbf5s68C2EL1/xW+2zllDGjNSlBTPM= Subject key identifier: DF:91:52:94:87:24:A7:1E:10:8E:02:64:AE:CA:1C:A7:3F:7D:D8:4E Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019835DE73D413A9C6E8BC6EF16473BBCD3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 1616 Signing time: Wed 23 Jul 2025 06:00:27 +0000 Manifest this update: Wed 23 Jul 2025 06:00:27 +0000 Manifest next update: Thu 24 Jul 2025 06:00:27 +0000 Files and hashes: 1: 5oGMURS5rgp_1dlgKvuvCDO5G0w.roa (hash: wMYp5LaGPuSag8fX06xhHkbgdVirB9cJhM+3GGw2/jg=) 2: 8wmzxLkSyC63kJ8KsfaDTFp3590.roa (hash: yPTonCp/pr9ZtUUWsN3hsTJ0gebdbrNTrrkzT5j7S00=) 3: CeX7E3fZXVsdPANui7LEojY4jyY.roa (hash: knL0+PqLOBqomAg/sncBbQWcoQB5Mmxq54ysIaZdoTY=) 4: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=) 5: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=) 6: LxDX7O3eQGaJYExU85kcexK4__Q.roa (hash: rErxx7Om3Ta/mvJcqv+K5/2MJQzhGaZ1sKgBE7WSm3c=) 7: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=) 8: NznSTmaNmRlH_azHj2PejtUv32Y.roa (hash: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=) 9: OfFCEKE7y2G6xu45x0onbMCbDaw.roa (hash: e/8sENTA8NJv+5P6ivLRFth819D0j4syG1Q5lKqx3Rw=) 10: WREdXGieNWbgVLEJadO48JSSOug.roa (hash: aFFeFtw18cIiv+MmQIoh+4L/P45eBgOQwHmY2ydaShI=) 11: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=) 12: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=) 13: ba73IPffmKSKK9DFDoXNC4Y9YNk.roa (hash: t/gHUljPs1ACa8ElAB5fM90FPR1WPQYxp8iIB9819BI=) 14: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=) 15: glY7K_VBa2HojfqG898R2eLhffg.roa (hash: 80gYtNv3OgPif9u1ut/W6RSmda4Ikow/yLOby8605E8=) 16: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=) 17: wj33JoQLWARvqka0yZK45_1318I.roa (hash: TfGyszRr6br7JzJj6n9Z5YtEXoLaFYdaPq8IN1vIPao=) 18: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: SbIC5OR8VsAQa8Ct349e5GUDm16LuuWYJCGmbffZTZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:de:73:d4:13:a9:c6:e8:bc:6e:f1:64:73:bb:cd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Jul 23 06:00:27 2025 GMT Not After : Jul 24 06:00:27 2025 GMT Subject: CN=df9152948724a71e108e0264aeca1ca73f7dd84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:9b:5f:9a:7c:25:00:42:e6:3a:f5:ee:32: 81:82:30:38:2b:93:30:1a:b5:71:5c:eb:3c:a1:e8: bf:00:6b:fe:d5:6c:53:9c:98:63:5e:17:d2:ff:78: 73:72:b4:46:f7:e5:f4:3b:3e:1a:88:04:a9:2f:53: c0:71:ca:38:70:35:4c:15:cf:70:ff:4e:90:cb:2f: 14:83:91:0c:6b:d2:af:22:94:3f:49:47:8b:bc:ba: 25:da:ef:ae:97:83:64:ce:72:38:41:e4:26:49:69: ed:69:0f:0f:22:13:fa:04:74:84:a5:e8:d1:5b:b3: 74:6b:ea:7d:3e:65:61:b4:af:67:dc:91:18:54:a2: f5:4e:38:cd:c0:5d:90:67:cf:ae:84:ae:35:65:12: 4d:af:d8:bb:68:e3:a1:92:20:d3:a6:25:fe:d6:94: c6:1b:26:c2:d0:05:ca:c0:f5:0e:e2:6d:33:52:a4: 15:ea:64:8b:86:b7:5f:e0:6f:5b:5d:7d:d8:40:26: e0:51:4d:ad:e5:20:f8:72:39:0a:34:c1:3c:90:aa: 20:bb:28:16:7b:d0:1b:76:27:e0:99:61:a4:18:8b: 01:e8:56:79:e9:45:ed:08:68:02:0a:c7:da:36:d6: df:ac:e4:75:17:cd:89:85:f2:bc:14:6c:0d:eb:2f: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:91:52:94:87:24:A7:1E:10:8E:02:64:AE:CA:1C:A7:3F:7D:D8:4E X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e3:34:41:05:dd:4f:7e:b2:c4:d2:39:58:7b:b0:10:64:24: d6:19:55:65:9a:d4:d7:a7:ca:70:d1:db:66:04:91:1c:f1:0a: 85:4d:9b:ad:1f:f6:f8:05:ab:1f:3f:c8:2a:32:78:db:21:5b: 68:bf:5c:32:1a:6d:65:4d:a9:b2:49:1d:d6:31:00:f3:fa:b7: a4:2f:bd:9f:af:78:54:94:fb:ff:32:7d:8c:59:81:aa:c3:bf: ed:3f:ae:80:b2:22:44:35:f7:52:9f:6c:b2:af:aa:28:c0:78: d3:bb:c6:85:88:1c:26:fe:3a:24:be:40:bb:b8:4c:df:24:00: 94:4e:b6:46:95:e1:90:8d:0d:77:a2:69:3e:67:9c:69:98:c4: 34:a6:bb:8c:4d:35:42:05:3c:e8:f2:c2:b7:59:70:bc:62:65: f9:6b:5d:4f:6c:d0:76:5e:fa:ce:77:f7:f2:33:64:4b:c7:a3: 45:31:44:18:2e:2b:ef:95:02:4e:1a:2e:27:4d:e9:67:4a:9e: 0d:6d:91:2b:8f:c6:01:49:5e:2e:6f:2a:10:dd:a1:99:5b:2f: 7e:c3:cf:b3:de:9e:0c:ea:f9:b4:78:7e:bb:d3:4e:f3:3c:97: 9e:7e:22:73:c8:2d:32:40:e6:36:59:5e:48:11:9b:73:ea:16: 8a:35:2b:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg13nPUE6nG6Lxu8WRzu808MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUwNzIzMDYwMDI3WhcNMjUwNzI0MDYwMDI3WjAzMTEwLwYDVQQD EyhkZjkxNTI5NDg3MjRhNzFlMTA4ZTAyNjRhZWNhMWNhNzNmN2RkODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW2bX5p8JQBC5jr17jKBgjA4K5Mw GrVxXOs8oei/AGv+1WxTnJhjXhfS/3hzcrRG9+X0Oz4aiASpL1PAcco4cDVMFc9w /06Qyy8Ug5EMa9KvIpQ/SUeLvLol2u+ul4NkznI4QeQmSWntaQ8PIhP6BHSEpejR W7N0a+p9PmVhtK9n3JEYVKL1TjjNwF2QZ8+uhK41ZRJNr9i7aOOhkiDTpiX+1pTG GybC0AXKwPUO4m0zUqQV6mSLhrdf4G9bXX3YQCbgUU2t5SD4cjkKNME8kKoguygW e9AbdifgmWGkGIsB6FZ56UXtCGgCCsfaNtbfrOR1F82JhfK8FGwN6y+7mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+RUpSHJKceEI4CZK7KHKc/fdhOMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieM0QQXd T36yxNI5WHuwEGQk1hlVZZrU16fKcNHbZgSRHPEKhU2brR/2+AWrHz/IKjJ42yFb aL9cMhptZU2pskkd1jEA8/q3pC+9n694VJT7/zJ9jFmBqsO/7T+ugLIiRDX3Up9s sq+qKMB407vGhYgcJv46JL5Au7hM3yQAlE62RpXhkI0Nd6JpPmecaZjENKa7jE01 QgU86PLCt1lwvGJl+WtdT2zQdl76znf38jNkS8ejRTFEGC4r75UCThouJ03pZ0qe DW2RK4/GAUleLm8qEN2hmVsvfsPPs96eDOr5tHh+u9NO8zyXnn4ic8gtMkDmNlle SBGbc+oWijUrYw== -----END CERTIFICATE-----Generated at Wed Jul 23 12:04:26 2025 by rpki-client