$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: UA01HuLRL1HKra4mDGFAX0t/y/dggKgM5yqYM4mkoc4= Subject key identifier: AF:C5:5A:4C:E4:25:F2:BC:27:0D:D7:93:4C:55:1E:09:21:5C:25:E6 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019954F957A827B2B0621587C0DDF941F63F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 156C Signing time: Wed 17 Sep 2025 00:00:50 +0000 Manifest this update: Wed 17 Sep 2025 00:00:50 +0000 Manifest next update: Thu 18 Sep 2025 00:00:50 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 6: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: VNhltLWvpgh6ZwzC5Jm9ZoT3Sgb9L/7B5CT0dQpT3KI=) 7: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 8: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 9: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 10: laPe02BW1dF6qI7VPAvoJwJhF4s.roa (hash: v/D94ZtejY8jUNkheDIBk4h8vVHwuUMimac0Kl0P0Sk=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:54:f9:57:a8:27:b2:b0:62:15:87:c0:dd:f9:41:f6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Sep 17 00:00:50 2025 GMT Not After : Sep 18 00:00:50 2025 GMT Subject: CN=afc55a4ce425f2bc270dd7934c551e09215c25e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6e:32:df:26:78:dd:1e:ea:0d:86:ca:0e:99: 5b:91:d2:c1:3d:cf:ec:73:78:38:1f:2a:de:59:e4: 40:c5:3e:ce:b6:b6:be:9a:09:80:bd:66:26:de:45: ae:15:8d:fa:ba:b1:b4:fb:45:5f:4a:d1:94:1b:d3: 2d:8c:2a:2e:19:d3:50:8d:b9:c3:5d:06:e0:b9:5e: 9b:16:40:53:22:d7:6a:51:49:f1:e9:4d:d6:92:de: 1c:02:86:e9:e9:97:4e:d0:e7:1c:2d:58:e9:c1:a3: 70:ca:9f:93:34:25:1c:bf:51:86:4b:ea:9a:cc:14: e2:d8:7d:4b:a5:54:72:78:e3:ce:b3:e9:52:77:ce: 4f:0c:ca:70:96:63:96:b2:9e:75:1f:6c:b7:f3:5d: 33:ad:e2:f8:e8:c4:ce:f0:44:44:cd:f5:be:0e:ce: 4e:d4:cd:33:78:e7:0a:99:b0:70:c7:b2:d0:67:99: 0e:cc:6e:e1:3e:7c:07:aa:5d:14:9a:3c:da:47:4c: 2a:28:3d:77:bc:f5:6c:51:b9:9f:cd:50:58:4d:83: 84:66:2d:bf:1c:dd:a4:a7:cf:15:fd:e8:a3:a3:29: 1f:2d:98:af:ab:be:1b:fa:28:ab:d2:1c:ef:d2:e8: 11:db:91:74:23:f9:9a:e6:2c:ce:16:e2:3f:20:2b: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C5:5A:4C:E4:25:F2:BC:27:0D:D7:93:4C:55:1E:09:21:5C:25:E6 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b6:14:b4:c9:ff:ad:37:a4:06:c9:7c:93:1a:dc:1b:4e:9a: b2:2c:11:e5:bc:7b:9e:af:7c:bc:aa:f6:da:ad:8f:72:70:4c: b3:43:7e:01:d7:08:db:61:6e:b5:ab:a2:3f:62:d2:05:56:58: 32:be:79:0d:c2:97:d4:91:13:21:9a:b9:a9:85:05:83:aa:ab: be:fe:54:54:e8:fc:b8:d3:78:f5:ec:db:b2:5f:31:25:ac:94: ab:ad:47:e8:97:0a:aa:2d:8a:27:07:74:7e:f7:02:a6:e1:8c: 72:d0:d0:55:d2:a1:08:e3:ee:0a:c5:c7:8b:6c:4f:0e:75:92: 7e:fc:a3:9f:c7:a5:12:bd:41:6f:8c:d8:d3:eb:13:8c:d5:57: 29:42:18:3e:20:ad:d0:cc:3e:66:9e:45:9e:82:0f:95:4c:d5: ed:98:93:50:db:cb:2b:19:71:0b:37:75:30:d8:8a:47:e4:88: 87:5f:bc:e8:74:a4:cb:1e:4f:44:3f:94:5b:7f:78:d1:8c:66: a9:f2:8d:e1:c4:cf:32:a2:f3:bc:39:48:38:84:76:38:bf:6f: 59:cb:d2:f8:d8:b5:4b:85:0f:85:1e:85:e7:4e:4d:b9:09:4a: 2e:b8:bc:6b:23:2d:37:42:e4:20:4a:a0:d1:ec:ef:f7:ff:ed: d8:e2:2d:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlU+VeoJ7KwYhWHwN35QfY/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwOTE3MDAwMDUwWhcNMjUwOTE4MDAwMDUwWjAzMTEwLwYDVQQD EyhhZmM1NWE0Y2U0MjVmMmJjMjcwZGQ3OTM0YzU1MWUwOTIxNWMyNWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA424y3yZ43R7qDYbKDplbkdLBPc/s c3g4HyreWeRAxT7Otra+mgmAvWYm3kWuFY36urG0+0VfStGUG9MtjCouGdNQjbnD XQbguV6bFkBTItdqUUnx6U3Wkt4cAobp6ZdO0OccLVjpwaNwyp+TNCUcv1GGS+qa zBTi2H1LpVRyeOPOs+lSd85PDMpwlmOWsp51H2y3810zreL46MTO8EREzfW+Ds5O 1M0zeOcKmbBwx7LQZ5kOzG7hPnwHql0UmjzaR0wqKD13vPVsUbmfzVBYTYOEZi2/ HN2kp88V/eijoykfLZivq74b+iir0hzv0ugR25F0I/ma5izOFuI/ICvSUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/FWkzkJfK8Jw3Xk0xVHgkhXCXmMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7YUtMn/ rTekBsl8kxrcG06asiwR5bx7nq98vKr22q2PcnBMs0N+AdcI22FutauiP2LSBVZY Mr55DcKX1JETIZq5qYUFg6qrvv5UVOj8uNN49ezbsl8xJayUq61H6JcKqi2KJwd0 fvcCpuGMctDQVdKhCOPuCsXHi2xPDnWSfvyjn8elEr1Bb4zY0+sTjNVXKUIYPiCt 0Mw+Zp5FnoIPlUzV7ZiTUNvLKxlxCzd1MNiKR+SIh1+86HSkyx5PRD+UW3940Yxm qfKN4cTPMqLzvDlIOIR2OL9vWcvS+Ni1S4UPhR6F505NuQlKLri8ayMtN0LkIEqg 0ezv9//t2OIt0Q== -----END CERTIFICATE-----Generated at Wed Sep 17 07:07:36 2025 by rpki-client