$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft File: xlodocsckgri-bdIJw_e2HN6kYQ.mft (raw, json) Hash identifier: C6QjmGOQngE0aZArAqifPKYv4CMgncqa4LvOqSH0134= Subject key identifier: B3:A4:4B:7F:86:92:23:97:11:32:A1:94:6C:DA:1A:A3:85:68:B2:86 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019A714A2AEDFDE241BC51F99C8C63E89CCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft Manifest number: 36 Signing time: Tue 11 Nov 2025 05:01:17 +0000 Manifest this update: Tue 11 Nov 2025 05:01:17 +0000 Manifest next update: Wed 12 Nov 2025 05:01:17 +0000 Files and hashes: 1: 8IbY418lGCc-3Moz0-nHHKuh4LA.roa (hash: WZ59TYG9fVS7gQMAnCKCSShz/vEQxOQYrZNnjsR3v8c=) 2: BhhaVZH_zLgw-7V5KrucZChwwhw.roa (hash: SXHDmlGIby8EBzXCdDnMzBEiNJv0FwbWBrNb1gd2xxM=) 3: CvTICXgG71zKpLjIaO2yda3HXSI.roa (hash: pNb5yeN6zlswabEWsFMqdJrq/apipaEKdygeRTrP38s=) 4: E3BF9qCuTjkDJHi7Un7qQPL-vLw.roa (hash: FG5kEU8xILi0ZymFCPhW2otQY+i3ggNhpgiTX1Ta3o4=) 5: Eyl6D1p4n0VHPUyhqtf9q1r7P-U.roa (hash: AJljk4RDZMGUwTiNJjyxL7FYd8yG0UHEsMYJD6D2QC4=) 6: ON9oJk-G7vGxcsUv8cq5LVs7MV0.roa (hash: ifavu6O7cNZknOzLI2bfFtyPKDxeUxAmdy+zZOwFV+U=) 7: ZeIEHartq1R0GkkGrxvb5PkAMj8.roa (hash: TfsCvICUSIpt9OVTvUrF6OVsZKt7DLmusohzrsRT1kU=) 8: eYCHRLuZHohv9_elQZkZEDwTIFE.roa (hash: Xu2j6PwYPuvRMnBVmkW9EJGXUdgFDzkW8W0KTcLIrpM=) 9: hX9odDsGFuFnnKSS_HPeYf8nifQ.roa (hash: tCvwmyh4f6LBYZDRogZaV5mJIRegnLHVdecpsvY0yfA=) 10: lqkoAhBHnz4PnaeZdfQuwjH84dI.roa (hash: 2HvqZsQNc03tvWHYsADUafvvFzDg/zqZnTmsgSmZAX8=) 11: nv5NXC0iSgOFubAs0kRpHi5dONQ.roa (hash: 8CHCvQtpT4uuc2prqbNwS7XX6gimw81CfcWs1XTVJdQ=) 12: t-enIXOteL4Tb6ASAqLBu_uGOqg.roa (hash: jCzlshzN/llUBvM2NR0fW5pjqVj+NHh+jZvBOT5NQjE=) 13: xlodocsckgri-bdIJw_e2HN6kYQ.crl (hash: 1IQE+iSjrvpn+WU43+0Ue67ZyrTUo6XHYV44hVysONI=) 14: y98rsRbz9YetT8VvkzkoAiVY58g.roa (hash: aJC5mD7J5OKym3wRhst01qD/8wp2OpjDxep2O82i5l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:4a:2a:ed:fd:e2:41:bc:51:f9:9c:8c:63:e8:9c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Nov 11 05:01:17 2025 GMT Not After : Nov 12 05:01:17 2025 GMT Subject: CN=b3a44b7f869223971132a1946cda1aa38568b286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:53:d2:8a:fb:e6:e0:f3:d2:90:18:8b:70: 6b:b5:d6:44:8b:65:a2:7a:e3:e5:d1:db:92:76:4b: c5:ce:f0:f9:24:82:bd:58:76:ef:c1:a7:22:d3:9d: 4c:9a:5f:e7:ad:44:1e:75:8d:6a:78:af:07:24:69: f0:23:32:13:af:95:02:de:72:56:b7:d8:45:01:8d: 19:20:7b:71:2e:2e:61:f5:3a:6c:a4:bf:5a:4b:0b: 5a:15:4a:6c:99:e6:ad:ff:4a:21:c1:80:d8:ec:84: 80:4f:47:fd:90:25:7a:c9:da:79:f1:b4:a2:77:8d: 66:83:c1:fa:83:f6:59:b7:c2:ac:f9:7c:45:46:3f: 1b:85:70:3d:72:c4:c3:33:9d:a7:63:de:e2:c9:e0: 3d:e1:fa:1c:9a:e8:0e:80:94:b0:60:50:c1:1c:4f: 44:38:ee:8d:9a:93:83:77:fb:a2:19:a8:7a:52:8b: 4e:ec:29:63:5c:4d:36:5e:13:ff:3c:a4:58:04:48: 9a:f1:25:9b:98:5f:09:cf:3c:93:02:01:a2:cd:71: f6:49:52:de:ba:12:4e:00:5c:1e:b5:ff:57:46:fe: bc:5c:3c:61:b7:61:d8:84:80:58:96:2c:2a:de:8c: 11:24:97:44:3a:6d:96:a1:46:4d:a8:f1:5a:41:a4: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A4:4B:7F:86:92:23:97:11:32:A1:94:6C:DA:1A:A3:85:68:B2:86 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8d:44:40:3e:48:98:54:86:e0:a8:b9:5f:a1:f7:68:39:d1: 66:c7:e4:9b:7d:e8:4c:c9:2a:d4:ae:00:c7:91:41:7b:99:46: b5:0c:e8:65:04:74:b4:b7:5f:59:92:07:11:9b:9a:54:0b:f5: ce:5d:a5:bb:47:4d:5e:b0:c9:7a:ee:85:2d:12:94:cf:24:db: bf:74:f2:16:43:2a:b3:82:b4:66:3e:43:3b:e5:b4:62:d1:5d: 30:17:9e:ae:09:4e:a9:a9:a8:bc:d2:57:27:37:b5:57:27:42: 9e:bd:7b:ed:15:f3:51:7e:53:52:02:2b:cf:55:e2:8c:41:07: 28:51:03:f1:c1:db:8f:39:3f:af:29:0a:3b:83:a8:1e:bf:fe: 33:bb:c0:99:ab:4c:17:55:c1:05:f8:87:b9:b7:9b:c1:32:2a: 96:84:c5:6a:39:fe:67:41:5a:b9:9f:cf:41:e6:cb:ef:e5:d5: b5:2c:67:b9:df:b0:9e:a8:a7:96:e5:c6:4f:da:ad:98:48:28: 34:92:10:73:63:0f:58:33:6b:ce:1c:9d:35:4a:a4:c6:46:63: 84:ed:aa:97:71:46:b4:51:7a:78:bd:5d:44:d6:fc:39:74:49: 5f:23:49:32:d3:09:60:0d:ac:74:f8:b0:64:f0:e4:7e:ca:9a: ca:97:c6:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpxSirt/eJBvFH5nIxj6JzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMTExMDUwMTE3WhcNMjUxMTEyMDUwMTE3WjAzMTEwLwYDVQQD EyhiM2E0NGI3Zjg2OTIyMzk3MTEzMmExOTQ2Y2RhMWFhMzg1NjhiMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI9T0or75uDz0pAYi3BrtdZEi2Wi euPl0duSdkvFzvD5JIK9WHbvwaci051Mml/nrUQedY1qeK8HJGnwIzITr5UC3nJW t9hFAY0ZIHtxLi5h9TpspL9aSwtaFUpsmeat/0ohwYDY7ISAT0f9kCV6ydp58bSi d41mg8H6g/ZZt8Ks+XxFRj8bhXA9csTDM52nY97iyeA94focmugOgJSwYFDBHE9E OO6NmpODd/uiGah6UotO7CljXE02XhP/PKRYBEia8SWbmF8JzzyTAgGizXH2SVLe uhJOAFwetf9XRv68XDxht2HYhIBYliwq3owRJJdEOm2WoUZNqPFaQaT+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOkS3+GkiOXETKhlGzaGqOFaLKGMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI1EQD5I mFSG4Ki5X6H3aDnRZsfkm33oTMkq1K4Ax5FBe5lGtQzoZQR0tLdfWZIHEZuaVAv1 zl2lu0dNXrDJeu6FLRKUzyTbv3TyFkMqs4K0Zj5DO+W0YtFdMBeerglOqamovNJX Jze1VydCnr177RXzUX5TUgIrz1XijEEHKFED8cHbjzk/rykKO4OoHr/+M7vAmatM F1XBBfiHubebwTIqloTFajn+Z0FauZ/PQebL7+XVtSxnud+wnqinluXGT9qtmEgo NJIQc2MPWDNrzhydNUqkxkZjhO2ql3FGtFF6eL1dRNb8OXRJXyNJMtMJYA2sdPiw ZPDkfsqaypfGFw== -----END CERTIFICATE-----Generated at Tue Nov 11 12:37:29 2025 by rpki-client