$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: XTmgrydGpimoqcIXWSVdgdt6EJ9jMaiT1ADorXSCEEc= Subject key identifier: 4D:73:CC:97:FA:D7:AE:DE:08:D9:8D:8D:A8:5F:B7:D1:F5:E8:70:31 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 01994F64FC75AFB322DC6438BF424621816F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 16A3 Signing time: Mon 15 Sep 2025 22:00:42 +0000 Manifest this update: Mon 15 Sep 2025 22:00:42 +0000 Manifest next update: Tue 16 Sep 2025 22:00:42 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (hash: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=) 4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: 5a2C7V3KKhrWzLAOpkggFqGqNnqi8VtfyRaUbMu3nGw=) 10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:4f:64:fc:75:af:b3:22:dc:64:38:bf:42:46:21:81:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Sep 15 22:00:42 2025 GMT Not After : Sep 16 22:00:42 2025 GMT Subject: CN=4d73cc97fad7aede08d98d8da85fb7d1f5e87031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:9a:37:8f:61:38:f3:63:11:70:72:15:49: 18:fb:60:7a:cb:98:80:4a:6c:70:c7:82:bf:a5:02: 75:3b:3c:a6:68:2d:a9:2d:c6:87:d2:98:8e:a0:f3: 0f:cd:d1:9c:04:6a:6d:45:fa:df:fb:ca:fc:75:5a: 1c:be:df:54:83:80:d0:36:5f:c6:bc:72:99:3c:86: 78:93:7a:24:d9:ae:6a:08:0f:44:f3:cf:90:20:a6: 2d:99:c5:ae:d0:00:8e:a7:d2:08:ef:ae:af:d9:62: e4:83:07:ad:1b:a9:5c:bb:2a:88:a8:69:94:9e:7f: 28:bb:5f:02:0b:16:42:d8:76:35:96:0d:de:99:b7: ef:48:ba:6b:24:7c:b9:6e:c4:cc:1a:74:b7:53:42: fd:f1:3a:fc:94:f0:fb:cb:a1:b0:d0:91:5a:48:98: 2a:31:78:69:ef:a4:f0:41:4b:d8:74:03:f0:29:1c: f3:9c:ab:da:98:0c:79:87:09:38:21:fe:6c:d2:8a: 5b:2b:64:ac:ef:62:56:14:c5:88:af:16:ce:7f:88: 7d:6f:0e:b2:63:f8:89:ca:f5:4b:de:a9:2d:22:02: e8:58:86:58:7b:f0:b0:d8:17:72:85:3b:c0:83:78: cc:4e:63:dd:53:af:9d:82:e4:16:a5:96:bd:c5:07: 55:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:73:CC:97:FA:D7:AE:DE:08:D9:8D:8D:A8:5F:B7:D1:F5:E8:70:31 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b7:d1:2d:76:e3:7a:98:d8:51:c0:ad:6a:40:8c:cd:5d:d9: 93:bd:0e:de:18:98:9a:ef:13:7e:23:e7:32:d0:d5:53:c2:a2: 75:b9:cc:58:5e:6f:51:47:21:bd:2a:79:53:8c:97:70:fb:ec: 4f:58:ac:85:f9:fe:e5:7b:40:54:b9:84:8d:35:9f:46:bd:3a: a9:62:17:39:7d:0c:0a:17:c1:53:04:e6:f4:36:6d:69:60:c9: db:6d:91:fc:bb:c0:23:4d:ea:72:7b:c9:50:00:e4:16:94:0d: 7b:f8:b0:5d:1f:06:17:2a:ff:57:16:fc:fe:b4:6d:9a:42:80: 4e:8b:5f:ef:2e:2a:5d:00:85:ad:00:6c:0f:d3:10:6f:04:7c: bd:0b:1a:24:9d:f7:ad:3a:9b:6a:f9:50:2a:21:b5:2b:db:04: 81:d7:c5:c9:8e:eb:dd:04:d3:e9:a5:45:a3:a9:25:c2:53:41: e7:d5:b7:a3:2d:ec:9a:34:81:f6:37:14:00:c9:01:aa:34:33: 85:9b:ac:01:bd:f1:bd:65:c0:94:45:e6:2a:bf:5b:ef:a8:b2: 45:cd:f8:64:81:60:9d:88:76:6c:0a:63:a6:59:4a:37:68:c9: ee:74:26:d2:57:9f:b9:f0:31:51:ae:fd:05:20:5c:f2:94:ce: 65:68:77:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlPZPx1r7Mi3GQ4v0JGIYFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUwOTE1MjIwMDQyWhcNMjUwOTE2MjIwMDQyWjAzMTEwLwYDVQQD Eyg0ZDczY2M5N2ZhZDdhZWRlMDhkOThkOGRhODVmYjdkMWY1ZTg3MDMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz6aN49hOPNjEXByFUkY+2B6y5iA Smxwx4K/pQJ1OzymaC2pLcaH0piOoPMPzdGcBGptRfrf+8r8dVocvt9Ug4DQNl/G vHKZPIZ4k3ok2a5qCA9E88+QIKYtmcWu0ACOp9II766v2WLkgwetG6lcuyqIqGmU nn8ou18CCxZC2HY1lg3embfvSLprJHy5bsTMGnS3U0L98Tr8lPD7y6Gw0JFaSJgq MXhp76TwQUvYdAPwKRzznKvamAx5hwk4If5s0opbK2Ss72JWFMWIrxbOf4h9bw6y Y/iJyvVL3qktIgLoWIZYe/Cw2BdyhTvAg3jMTmPdU6+dguQWpZa9xQdVnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1zzJf6167eCNmNjahft9H16HAxMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7fRLXbj epjYUcCtakCMzV3Zk70O3hiYmu8TfiPnMtDVU8KidbnMWF5vUUchvSp5U4yXcPvs T1ishfn+5XtAVLmEjTWfRr06qWIXOX0MChfBUwTm9DZtaWDJ222R/LvAI03qcnvJ UADkFpQNe/iwXR8GFyr/Vxb8/rRtmkKATotf7y4qXQCFrQBsD9MQbwR8vQsaJJ33 rTqbavlQKiG1K9sEgdfFyY7r3QTT6aVFo6klwlNB59W3oy3smjSB9jcUAMkBqjQz hZusAb3xvWXAlEXmKr9b76iyRc34ZIFgnYh2bApjpllKN2jJ7nQm0lefufAxUa79 BSBc8pTOZWh3Hw== -----END CERTIFICATE-----Generated at Tue Sep 16 04:20:19 2025 by rpki-client