$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: oMBGF1pQHcW7t9BO2RoGEFy6D4UhtJc7O+dm3dI3544= Subject key identifier: 78:AE:52:26:37:69:66:8C:F0:5C:D9:19:3D:53:FD:E3:82:32:8C:A0 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019A0BCAE196EB89EEA9BB7320995B930217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0F4B Signing time: Wed 22 Oct 2025 12:00:36 +0000 Manifest this update: Wed 22 Oct 2025 12:00:36 +0000 Manifest next update: Thu 23 Oct 2025 12:00:36 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: j5eL1tzOfueCFbr9DWdEk9Lg/JzfzIAu3N1rnAIR8bI=) 15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:ca:e1:96:eb:89:ee:a9:bb:73:20:99:5b:93:02:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Oct 22 12:00:36 2025 GMT Not After : Oct 23 12:00:36 2025 GMT Subject: CN=78ae52263769668cf05cd9193d53fde382328ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:65:51:2c:51:21:89:64:7d:ce:88:91:b2: 92:45:f9:35:dd:57:8c:9b:fe:ca:d4:05:ab:c9:0c: b7:92:72:b3:e8:8d:48:05:fa:5f:c1:5d:b3:c5:54: aa:12:4a:6a:01:fd:b5:fb:0f:6d:c5:23:38:c3:b0: ec:32:1f:d4:67:5f:15:18:95:76:b1:82:56:96:62: 98:97:b5:ee:e9:f4:a4:c2:6c:1a:99:c0:8a:cf:7d: 09:a1:01:63:91:a8:26:86:fc:fb:86:b4:94:f6:95: 60:99:68:76:7a:f6:81:53:c2:ee:16:55:bf:be:53: 1d:ba:31:82:84:b2:92:3f:c6:81:12:65:61:d1:a8: 5a:89:dd:6b:84:eb:31:e4:30:2c:0e:06:6e:de:20: b8:4d:27:db:e4:63:5c:38:e7:9c:32:be:f8:4b:34: 74:7c:48:33:61:12:c5:97:92:fe:a8:f7:09:1a:21: 3f:7c:82:83:2b:21:69:99:d6:01:12:86:7a:3f:e6: 91:bf:b5:6f:6f:00:f7:1d:2e:cf:4e:fb:5b:42:c1: db:9d:68:6e:80:01:e9:c7:6f:ed:bc:3e:58:a9:85: 22:9c:71:1a:ba:75:59:3e:85:6d:bc:fd:3f:f8:8f: 35:7d:4b:1a:d0:8a:62:30:ae:68:ce:7e:04:dc:50: 63:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AE:52:26:37:69:66:8C:F0:5C:D9:19:3D:53:FD:E3:82:32:8C:A0 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:97:b2:50:7e:66:81:e0:91:56:75:fd:fa:fe:c1:86:de:04: b3:6f:16:6c:17:ae:0b:71:ea:d6:54:20:85:c4:0c:41:d2:14: be:cf:af:ad:92:39:df:c6:0a:72:75:5d:5a:dd:4a:d2:99:84: 36:6a:c2:ea:96:76:f5:97:49:98:c0:bc:44:15:5d:92:1f:61: 5e:0e:aa:20:19:d2:c9:ad:d7:5a:01:ef:3a:8e:54:b2:24:e3: e2:72:75:2c:ff:ad:2e:4a:2e:d8:04:24:6d:4f:56:26:1f:cf: e0:e3:90:a1:d7:fa:e5:91:9c:4e:58:8e:f9:bb:57:31:65:1d: 2d:f3:0c:42:a9:76:21:40:cf:a0:de:56:c4:10:28:64:08:91: 2f:e6:fc:37:59:6a:39:e7:d4:5c:49:59:33:fa:b5:53:6d:40: 6c:8e:ec:7f:d0:7f:5b:59:ba:2d:b5:f6:4b:88:86:82:61:07: 8b:79:40:24:36:56:40:6c:1c:32:35:2c:b3:48:4a:09:65:04: fd:d5:1b:72:dd:65:5b:2c:47:81:cf:35:05:58:69:24:25:3e: a5:44:69:2a:39:ec:8c:ed:3d:a4:d3:fa:39:51:48:89:82:f7: 8f:64:d5:63:ea:7c:65:55:51:9e:c6:af:85:e8:d9:38:e1:c8: 1d:af:6a:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoLyuGW64nuqbtzIJlbkwIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUxMDIyMTIwMDM2WhcNMjUxMDIzMTIwMDM2WjAzMTEwLwYDVQQD Eyg3OGFlNTIyNjM3Njk2NjhjZjA1Y2Q5MTkzZDUzZmRlMzgyMzI4Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBxlUSxRIYlkfc6IkbKSRfk13VeM m/7K1AWryQy3knKz6I1IBfpfwV2zxVSqEkpqAf21+w9txSM4w7DsMh/UZ18VGJV2 sYJWlmKYl7Xu6fSkwmwamcCKz30JoQFjkagmhvz7hrSU9pVgmWh2evaBU8LuFlW/ vlMdujGChLKSP8aBEmVh0ahaid1rhOsx5DAsDgZu3iC4TSfb5GNcOOecMr74SzR0 fEgzYRLFl5L+qPcJGiE/fIKDKyFpmdYBEoZ6P+aRv7VvbwD3HS7PTvtbQsHbnWhu gAHpx2/tvD5YqYUinHEaunVZPoVtvP0/+I81fUsa0IpiMK5ozn4E3FBjbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiuUiY3aWaM8FzZGT1T/eOCMoygMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJeyUH5m geCRVnX9+v7Bht4Es28WbBeuC3Hq1lQghcQMQdIUvs+vrZI538YKcnVdWt1K0pmE NmrC6pZ29ZdJmMC8RBVdkh9hXg6qIBnSya3XWgHvOo5UsiTj4nJ1LP+tLkou2AQk bU9WJh/P4OOQodf65ZGcTliO+btXMWUdLfMMQql2IUDPoN5WxBAoZAiRL+b8N1lq OefUXElZM/q1U21AbI7sf9B/W1m6LbX2S4iGgmEHi3lAJDZWQGwcMjUss0hKCWUE /dUbct1lWyxHgc81BVhpJCU+pURpKjnsjO09pNP6OVFIiYL3j2TVY+p8ZVVRnsav hejZOOHIHa9q7Q== -----END CERTIFICATE-----Generated at Wed Oct 22 17:46:38 2025 by rpki-client