$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: qorIbcdj7tNmmPUO0H8H+pdb3huO1LyKcFb1Q5TrNic= Subject key identifier: 58:7C:41:2A:F5:98:4F:AC:07:83:14:F1:79:E5:A2:A0:E6:45:87:EB Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019A1BAC0875ACDE39CF4052EC7AAC664BD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 170A Signing time: Sat 25 Oct 2025 14:00:50 +0000 Manifest this update: Sat 25 Oct 2025 14:00:50 +0000 Manifest next update: Sun 26 Oct 2025 14:00:50 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: 8vBgPIPGmSaFUWOlpF2CMGdNQQc.roa (hash: /PWcEdJnMn2bKRLWHgFiLBb1+zXw/blECB/hDNGzIwY=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: STNiADLLjnvQKYf/cwZvH7nbDBh9zs4FNRiYHfy4TV0=) 5: LWD4-OU95_FRda-NCOb6W7qqhlk.roa (hash: /68MHjyM7YGgptvnqCHIzlmysaHHp9CA6NYAUfenFig=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1b:ac:08:75:ac:de:39:cf:40:52:ec:7a:ac:66:4b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Oct 25 14:00:50 2025 GMT Not After : Oct 26 14:00:50 2025 GMT Subject: CN=587c412af5984fac078314f179e5a2a0e64587eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:20:33:9e:08:7b:af:7a:9a:e2:66:ae:5c: 75:a1:cb:e4:24:b0:42:5f:e8:74:a2:a6:9a:3f:07: 9f:92:63:0b:d8:e3:a0:c2:50:57:50:54:12:9d:16: 4f:fb:bd:49:3e:cc:e7:f2:ce:59:e1:12:f8:3d:20: 02:db:f9:e8:96:5a:d9:f6:34:33:db:9a:90:41:ca: 19:02:64:4b:d1:b7:d1:22:84:9c:f9:b9:6e:13:db: 37:72:1a:d5:5d:4b:63:15:0d:d7:61:3c:9e:dc:04: f9:da:4b:75:f2:42:d5:60:6a:f7:9b:82:fd:a0:7b: 7e:08:b8:86:ef:2b:47:f0:e3:d4:87:b6:2e:72:ba: 88:26:63:e4:4f:ec:80:45:ca:4f:07:31:6c:e3:fa: eb:4c:ba:b0:97:b6:46:bc:b2:9b:56:e3:10:b2:7d: c3:58:d3:85:8f:12:f7:2c:32:b4:30:42:d6:9d:c0: fb:60:9e:3d:34:f1:08:cf:c0:44:14:3f:a1:95:7e: 41:78:90:3f:b5:eb:70:89:09:ee:fe:05:4b:23:a8: 11:66:80:c4:2f:6e:dc:c3:bf:88:75:aa:08:c7:6e: 0d:e8:6e:c3:8f:0f:33:89:7f:9d:2a:31:59:a5:93: c9:5b:a6:ce:b5:38:bc:fc:a2:7b:47:d3:8e:4a:ad: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7C:41:2A:F5:98:4F:AC:07:83:14:F1:79:E5:A2:A0:E6:45:87:EB X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:87:61:42:e3:22:10:cb:5a:b8:81:db:79:85:2c:36:4d:ff: fd:d5:35:84:c6:60:56:b0:5f:9c:14:d6:c4:fa:46:0b:6d:5e: c0:c3:02:d0:80:b9:68:d2:89:61:be:34:20:81:86:c2:bd:e4: 14:4b:2c:d3:70:2e:27:e5:be:e8:4c:14:9f:aa:ed:f5:01:fc: f1:59:d5:3e:4e:5e:4f:fd:96:b5:e4:88:d8:53:f3:15:af:5d: 49:22:6a:f3:41:31:34:f2:47:12:5a:84:d1:19:43:35:b3:74: 8f:b3:af:34:73:0f:09:79:9e:ed:2a:5c:9b:39:09:3f:3a:6b: e4:b4:94:55:7a:d7:c5:d6:b8:33:93:76:69:4d:4d:cb:78:2e: 26:23:8f:71:0a:4b:03:13:1a:69:1a:58:e9:1b:39:30:06:c4: b2:92:8d:96:cf:31:c6:70:56:67:29:37:7a:d9:e7:8a:1c:4e: f3:c2:47:dd:bd:40:e8:e5:28:bc:5c:52:79:22:26:f1:e5:9f: b3:d6:e1:59:4c:96:a3:3a:4e:c6:5d:a9:e0:31:5d:af:76:a3: 0a:79:42:58:7a:4c:af:6e:70:6f:ad:60:0c:f1:b7:d5:35:11: 49:cb:11:5c:35:13:a8:89:2f:ba:65:cf:23:e0:6a:73:0b:54: 43:69:78:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZobrAh1rN45z0BS7HqsZkvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUxMDI1MTQwMDUwWhcNMjUxMDI2MTQwMDUwWjAzMTEwLwYDVQQD Eyg1ODdjNDEyYWY1OTg0ZmFjMDc4MzE0ZjE3OWU1YTJhMGU2NDU4N2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswMgM54Ie696muJmrlx1ocvkJLBC X+h0oqaaPwefkmML2OOgwlBXUFQSnRZP+71JPszn8s5Z4RL4PSAC2/nollrZ9jQz 25qQQcoZAmRL0bfRIoSc+bluE9s3chrVXUtjFQ3XYTye3AT52kt18kLVYGr3m4L9 oHt+CLiG7ytH8OPUh7YucrqIJmPkT+yARcpPBzFs4/rrTLqwl7ZGvLKbVuMQsn3D WNOFjxL3LDK0MELWncD7YJ49NPEIz8BEFD+hlX5BeJA/tetwiQnu/gVLI6gRZoDE L27cw7+IdaoIx24N6G7Djw8ziX+dKjFZpZPJW6bOtTi8/KJ7R9OOSq2bXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh8QSr1mE+sB4MU8XnloqDmRYfrMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfodhQuMi EMtauIHbeYUsNk3//dU1hMZgVrBfnBTWxPpGC21ewMMC0IC5aNKJYb40IIGGwr3k FEss03AuJ+W+6EwUn6rt9QH88VnVPk5eT/2WteSI2FPzFa9dSSJq80ExNPJHElqE 0RlDNbN0j7OvNHMPCXme7SpcmzkJPzpr5LSUVXrXxda4M5N2aU1Ny3guJiOPcQpL AxMaaRpY6Rs5MAbEspKNls8xxnBWZyk3etnnihxO88JH3b1A6OUovFxSeSIm8eWf s9bhWUyWozpOxl2p4DFdr3ajCnlCWHpMr25wb61gDPG31TURScsRXDUTqIkvumXP I+BqcwtUQ2l4Fg== -----END CERTIFICATE-----Generated at Sun Oct 26 00:03:33 2025 by rpki-client