$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: p+wqkTNLnoQG+BwkmfHf/DOHJnyqV8jMgeyHmY0fpBE= Subject key identifier: E5:B3:0B:12:EB:8B:35:AE:54:ED:47:1B:DC:03:8D:72:54:A0:B6:F8 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019A54885C620F31E2A4CC30A9E3A21CAD06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 15F1 Signing time: Wed 05 Nov 2025 15:00:13 +0000 Manifest this update: Wed 05 Nov 2025 15:00:13 +0000 Manifest next update: Thu 06 Nov 2025 15:00:13 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: VKWObPFDBc-jGCeYU56YA-6t1Cw.roa (hash: KPhyop9Bdu13gG3nAoBktF8fNM6NO652iDQfc8w2K04=) 6: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 7: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: bi0afzjmPC+iQgoXm8Z8OTh3VqJmxRYoQAQ/qmisnok=) 8: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 9: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 10: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 15:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:88:5c:62:0f:31:e2:a4:cc:30:a9:e3:a2:1c:ad:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Nov 5 15:00:13 2025 GMT Not After : Nov 6 15:00:13 2025 GMT Subject: CN=e5b30b12eb8b35ae54ed471bdc038d7254a0b6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:66:b7:b9:4a:f8:7e:83:d3:53:c8:f8:09: cc:73:bd:f3:60:cb:f4:68:43:f0:e1:0a:bb:05:37: 3f:d6:47:41:25:3c:5e:51:33:0a:f6:e4:09:7a:b4: aa:8c:fd:db:e8:ed:8d:21:f2:98:5a:f0:81:56:43: 43:fe:91:f4:74:af:9a:d1:fc:be:00:d3:15:a5:ae: 75:1a:b4:01:4e:14:33:25:e1:3a:07:28:29:a9:64: ee:a3:38:35:61:ef:89:2d:b2:fb:fe:6a:14:02:ca: f2:b5:41:89:31:61:f3:66:2b:20:c2:81:57:2d:36: 30:67:cf:b2:0c:99:17:03:05:43:0a:74:9d:ae:8e: b4:a0:25:41:26:63:cb:84:bc:60:ca:31:66:78:8b: 8f:31:5f:d0:4a:aa:8d:74:1e:6b:5f:c8:d2:fe:6a: d2:7f:a0:33:00:40:81:02:41:50:2a:69:e5:37:31: 7c:29:f8:59:76:d0:0e:41:27:93:f9:32:49:fa:c0: 7f:57:f9:44:cc:52:16:0a:ef:53:0c:27:94:ac:ba: 39:4b:63:48:c9:bc:fb:02:82:ce:e3:9b:3a:12:77: b2:99:aa:df:08:a8:da:e1:7e:ed:3e:1d:05:31:ae: 97:11:65:c8:52:5b:8e:2f:8a:0a:4c:ef:cf:f2:71: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B3:0B:12:EB:8B:35:AE:54:ED:47:1B:DC:03:8D:72:54:A0:B6:F8 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:59:45:d5:09:51:13:f0:f4:7c:65:a9:81:13:bf:ee:da:72: 87:43:21:b0:f8:30:a6:e5:59:5f:99:3b:37:8a:b5:c8:39:e0: 3c:d9:94:7e:6a:b2:ca:00:5f:e2:6a:42:81:1b:8b:87:a5:18: 53:d7:f3:7c:ef:e9:64:e4:01:fa:f7:03:44:38:12:c2:36:ed: 4e:a9:02:7b:1f:33:67:72:63:b4:4d:1d:52:fb:cd:56:86:6c: ee:bd:80:35:db:b7:a6:ad:52:11:84:b7:cd:47:e1:c1:e2:4c: 03:3c:c8:ce:f9:d4:fd:3d:14:bb:76:ac:07:84:36:b5:c1:ba: 23:de:14:5c:b7:13:d8:7a:c2:ca:67:11:89:6f:f5:04:c4:51: 99:8c:14:ae:d4:0c:16:47:ce:62:6d:97:ff:da:b2:e0:a5:08: 25:1a:d2:d5:c2:bb:f9:2a:76:86:7b:fc:ee:38:d9:27:09:28: 2a:fe:79:03:d5:66:04:57:01:9b:31:fe:79:d6:f3:c9:c3:3d: d0:ea:b9:df:46:d1:3d:61:34:4f:66:94:91:35:1e:d4:40:c7: 9d:79:02:fc:06:01:e3:a1:49:94:98:c5:6d:57:2b:c0:c6:c2: a8:06:0a:71:af:d6:56:18:2d:e1:27:8d:67:6e:2b:64:78:4f: cd:70:12:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpUiFxiDzHipMwwqeOiHK0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUxMTA1MTUwMDEzWhcNMjUxMTA2MTUwMDEzWjAzMTEwLwYDVQQD EyhlNWIzMGIxMmViOGIzNWFlNTRlZDQ3MWJkYzAzOGQ3MjU0YTBiNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZVmt7lK+H6D01PI+AnMc73zYMv0 aEPw4Qq7BTc/1kdBJTxeUTMK9uQJerSqjP3b6O2NIfKYWvCBVkND/pH0dK+a0fy+ ANMVpa51GrQBThQzJeE6BygpqWTuozg1Ye+JLbL7/moUAsrytUGJMWHzZisgwoFX LTYwZ8+yDJkXAwVDCnSdro60oCVBJmPLhLxgyjFmeIuPMV/QSqqNdB5rX8jS/mrS f6AzAECBAkFQKmnlNzF8KfhZdtAOQSeT+TJJ+sB/V/lEzFIWCu9TDCeUrLo5S2NI ybz7AoLO45s6EneymarfCKja4X7tPh0FMa6XEWXIUluOL4oKTO/P8nGqowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWzCxLrizWuVO1HG9wDjXJUoLb4MB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxVlF1QlR E/D0fGWpgRO/7tpyh0MhsPgwpuVZX5k7N4q1yDngPNmUfmqyygBf4mpCgRuLh6UY U9fzfO/pZOQB+vcDRDgSwjbtTqkCex8zZ3JjtE0dUvvNVoZs7r2ANdu3pq1SEYS3 zUfhweJMAzzIzvnU/T0Uu3asB4Q2tcG6I94UXLcT2HrCymcRiW/1BMRRmYwUrtQM FkfOYm2X/9qy4KUIJRrS1cK7+Sp2hnv87jjZJwkoKv55A9VmBFcBmzH+edbzycM9 0Oq530bRPWE0T2aUkTUe1EDHnXkC/AYB46FJlJjFbVcrwMbCqAYKca/WVhgt4SeN Z24rZHhPzXASig== -----END CERTIFICATE-----Generated at Wed Nov 5 23:35:41 2025 by rpki-client