$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: 2sP7iPk/uMYFztOuor975nK+Q0JjUHGiC4COD4K/uV0= Subject key identifier: 58:9A:D4:6C:AF:EE:53:F2:FD:47:68:E6:1A:5C:E5:63:AA:26:42:2B Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 01991E41D2A862AF0F6D15832A2815843881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0ED0 Signing time: Sat 06 Sep 2025 09:00:54 +0000 Manifest this update: Sat 06 Sep 2025 09:00:54 +0000 Manifest next update: Sun 07 Sep 2025 09:00:54 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=) 11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=) 12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=) 13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: sIHp5mJdL8qO4SoG4ybJLLk5pPjZUeDLzZrwWpcObkk=) 15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=) 16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=) 18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=) 19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:41:d2:a8:62:af:0f:6d:15:83:2a:28:15:84:38:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Sep 6 09:00:54 2025 GMT Not After : Sep 7 09:00:54 2025 GMT Subject: CN=589ad46cafee53f2fd4768e61a5ce563aa26422b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:e2:c6:94:0e:64:0f:30:36:d7:97:79:c6: fb:45:97:1a:17:67:38:b5:b1:f8:12:af:16:66:88: 49:97:1a:cd:bb:3d:dd:90:0d:ce:a2:81:fc:6c:4e: ea:87:f9:0e:94:f2:45:7c:0c:01:20:20:b7:6f:a5: c0:60:6a:e4:39:86:f2:6d:fe:24:2f:fc:06:f1:64: b3:75:5d:60:d6:dc:b5:43:86:ae:7a:01:44:23:86: 1d:bc:8e:3b:4a:35:42:9e:ae:6d:c4:cd:cb:54:d3: e3:eb:a1:5f:bc:e5:a3:4e:da:9a:04:12:9f:58:79: 58:c6:a4:eb:fb:81:54:d6:02:34:2e:85:6f:46:a6: 9d:b5:ab:bd:67:59:f1:49:5c:05:46:41:4a:0b:a1: 23:22:0e:25:fc:71:39:bd:d1:e9:dd:98:56:c6:a0: ad:3a:59:dd:73:bd:47:c3:ee:c1:ac:c6:33:03:68: 44:e2:be:36:84:97:40:35:5f:e0:b5:1e:22:57:91: 2e:5c:63:e2:53:c8:84:a3:0c:a7:67:79:92:df:c9: aa:74:86:be:37:94:7f:59:a7:b9:23:8a:5b:f2:26: 99:0d:15:38:43:d7:07:0f:97:8b:7b:2b:f3:cb:4a: f6:ac:a8:07:a1:97:1b:42:39:dd:f1:ff:f0:ce:d3: e6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9A:D4:6C:AF:EE:53:F2:FD:47:68:E6:1A:5C:E5:63:AA:26:42:2B X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d9:97:37:11:8c:5e:7f:ab:dd:51:51:b9:29:fa:50:b7:13: 8e:4a:c6:b9:19:1f:0e:50:5d:3d:63:8e:0c:83:69:06:d5:b3: 74:30:bd:4d:f1:20:e0:36:b9:e2:42:65:e4:56:5f:22:6f:b4: 42:c0:4b:cb:91:08:bd:77:b0:a0:2a:9a:e8:f5:4f:87:a3:58: 88:f5:cf:1c:fd:b8:d3:48:cd:63:be:8b:7d:35:04:95:a7:e5: 68:27:1e:af:8c:38:9c:5c:18:10:95:c7:29:90:68:fb:10:1b: 25:bd:d4:01:dc:f4:b3:af:bf:fd:8b:31:83:3e:00:29:ce:cd: b3:25:69:bb:b3:43:64:db:f2:ff:a5:8f:35:6b:67:07:d0:aa: 27:7e:f9:5a:7b:59:65:c6:91:63:0f:bf:dc:c2:59:49:af:5d: 9c:2b:39:b0:ac:10:41:ed:bd:32:b4:0c:7b:6a:61:08:4a:f2: 21:a2:63:29:9f:04:59:3e:a2:8c:26:bc:1f:79:24:3d:04:68: 01:ef:b6:e4:9c:e8:67:fb:a3:fa:54:41:2e:18:d1:60:59:1d: ec:21:6a:95:1e:c5:24:7d:fb:e9:e2:c8:c2:60:30:0a:c9:16: 37:88:82:ab:a2:6e:1b:5d:c2:57:d1:2c:c8:ba:58:da:0c:a3: b7:b4:bf:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeQdKoYq8PbRWDKigVhDiBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUwOTA2MDkwMDU0WhcNMjUwOTA3MDkwMDU0WjAzMTEwLwYDVQQD Eyg1ODlhZDQ2Y2FmZWU1M2YyZmQ0NzY4ZTYxYTVjZTU2M2FhMjY0MjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxTixpQOZA8wNteXecb7RZcaF2c4 tbH4Eq8WZohJlxrNuz3dkA3OooH8bE7qh/kOlPJFfAwBICC3b6XAYGrkOYbybf4k L/wG8WSzdV1g1ty1Q4auegFEI4YdvI47SjVCnq5txM3LVNPj66FfvOWjTtqaBBKf WHlYxqTr+4FU1gI0LoVvRqadtau9Z1nxSVwFRkFKC6EjIg4l/HE5vdHp3ZhWxqCt Olndc71Hw+7BrMYzA2hE4r42hJdANV/gtR4iV5EuXGPiU8iEowynZ3mS38mqdIa+ N5R/Wae5I4pb8iaZDRU4Q9cHD5eLeyvzy0r2rKgHoZcbQjnd8f/wztPm+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFia1Gyv7lPy/Udo5hpc5WOqJkIrMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNmXNxGM Xn+r3VFRuSn6ULcTjkrGuRkfDlBdPWOODINpBtWzdDC9TfEg4Da54kJl5FZfIm+0 QsBLy5EIvXewoCqa6PVPh6NYiPXPHP2400jNY76LfTUElaflaCcer4w4nFwYEJXH KZBo+xAbJb3UAdz0s6+//Ysxgz4AKc7NsyVpu7NDZNvy/6WPNWtnB9CqJ375WntZ ZcaRYw+/3MJZSa9dnCs5sKwQQe29MrQMe2phCEryIaJjKZ8EWT6ijCa8H3kkPQRo Ae+25JzoZ/uj+lRBLhjRYFkd7CFqlR7FJH376eLIwmAwCskWN4iCq6JuG13CV9Es yLpY2gyjt7S/IQ== -----END CERTIFICATE-----Generated at Sat Sep 6 16:31:13 2025 by rpki-client