$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: 2ACZNwYorSnGbSKdBHqXwN/uaazVJsjuqKyjqapNvLI= Subject key identifier: 98:F1:73:4D:3D:D4:AF:21:BA:D8:02:B2:F5:92:B5:2D:7F:EB:9F:83 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019A4E4FCACC4BCBCB08774AA5D218B5484D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1727 Signing time: Tue 04 Nov 2025 10:00:43 +0000 Manifest this update: Tue 04 Nov 2025 10:00:43 +0000 Manifest next update: Wed 05 Nov 2025 10:00:43 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (hash: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=) 4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: mMhjDwfJpPUBp3X8A7VgI6P5VfdbexT5ehLYGRM9/U0=) 10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:ca:cc:4b:cb:cb:08:77:4a:a5:d2:18:b5:48:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Nov 4 10:00:43 2025 GMT Not After : Nov 5 10:00:43 2025 GMT Subject: CN=98f1734d3dd4af21bad802b2f592b52d7feb9f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:54:a4:90:06:df:53:06:86:fb:42:60:43: f0:50:68:df:b1:1c:ca:b0:5c:cd:54:6e:a9:36:cc: 94:0f:3c:28:24:42:b0:44:6f:16:90:4a:81:9a:14: 1a:8a:a5:74:63:09:88:12:7d:cd:9a:5e:43:0c:ba: 07:11:d4:8f:97:b6:ab:59:1d:5f:de:09:45:4b:aa: 25:55:ef:e2:55:fe:67:64:ee:60:c5:93:d5:b7:f0: 1b:21:dc:56:5c:0c:fb:64:01:3c:da:ea:4a:d7:0d: 77:63:5f:83:04:08:20:84:be:ae:9c:c9:f3:42:62: 43:c0:86:1a:4f:c2:09:3c:58:98:03:f4:f0:54:78: cf:64:a1:fd:0b:32:cc:50:6c:69:0b:2a:5c:f2:05: b0:af:52:05:9b:31:c5:e7:87:44:06:12:1d:43:62: 28:88:14:90:e7:61:28:f9:f6:0b:c1:87:28:50:55: 97:6b:45:39:76:80:b5:c3:65:d8:1b:6e:11:89:0e: 8b:80:2f:31:e1:6d:36:8e:41:56:3e:6e:4a:21:5f: c5:dc:6c:b6:04:33:d7:80:1c:49:72:5b:7b:b3:aa: ce:d2:ea:ef:39:b1:6e:a4:68:c6:f4:6f:d7:5c:9e: e6:f3:98:d2:93:bd:ed:3b:23:7f:da:db:e1:36:a9: ac:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F1:73:4D:3D:D4:AF:21:BA:D8:02:B2:F5:92:B5:2D:7F:EB:9F:83 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e7:5d:9a:e7:82:70:ef:34:7f:10:a5:f4:e6:af:f2:56:a9: 81:a7:37:57:84:3c:af:4f:f6:a6:9f:85:d4:94:8c:c7:a4:b6: 86:c0:9a:4a:e7:f7:cb:b2:3d:03:48:37:f8:fb:f1:fe:94:e6: 2b:60:55:f0:1c:3c:f0:7c:e7:7c:16:0e:10:96:39:91:57:0c: 0b:ba:3f:32:f8:ea:f6:5e:fe:3c:04:c7:ca:9f:f1:e6:08:06: 68:8b:ca:77:11:e6:4d:c3:bd:57:3e:ff:22:9b:e7:cb:2c:d5: 7a:8f:f7:dc:d9:e0:e1:ea:70:98:0e:38:4a:75:69:a6:39:46: 73:f9:cf:88:68:63:e5:26:e8:70:f7:75:bc:ff:47:57:75:b4: 06:f4:05:21:07:60:af:9a:77:a0:66:be:6a:fb:2b:38:50:a2: f2:2b:e6:b9:40:f2:50:92:14:6f:3c:28:45:eb:ab:0a:c1:07: 56:b6:87:eb:c4:22:12:39:f9:74:d7:2c:8d:c8:14:71:39:2b: f9:82:b6:54:c2:df:51:88:e7:ec:74:20:67:c0:24:72:23:42: 75:7a:75:4c:32:5b:ac:da:73:4f:d5:48:c3:dd:5d:35:59:2f: 2a:bf:b2:8e:34:03:c1:47:3f:24:43:53:c5:c5:b6:17:3e:c8: 78:62:e6:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT8rMS8vLCHdKpdIYtUhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUxMTA0MTAwMDQzWhcNMjUxMTA1MTAwMDQzWjAzMTEwLwYDVQQD Eyg5OGYxNzM0ZDNkZDRhZjIxYmFkODAyYjJmNTkyYjUyZDdmZWI5ZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLNUpJAG31MGhvtCYEPwUGjfsRzK sFzNVG6pNsyUDzwoJEKwRG8WkEqBmhQaiqV0YwmIEn3Nml5DDLoHEdSPl7arWR1f 3glFS6olVe/iVf5nZO5gxZPVt/AbIdxWXAz7ZAE82upK1w13Y1+DBAgghL6unMnz QmJDwIYaT8IJPFiYA/TwVHjPZKH9CzLMUGxpCypc8gWwr1IFmzHF54dEBhIdQ2Io iBSQ52Eo+fYLwYcoUFWXa0U5doC1w2XYG24RiQ6LgC8x4W02jkFWPm5KIV/F3Gy2 BDPXgBxJclt7s6rO0urvObFupGjG9G/XXJ7m85jSk73tOyN/2tvhNqmsHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjxc0091K8hutgCsvWStS1/65+DMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuddmueC cO80fxCl9Oav8lapgac3V4Q8r0/2pp+F1JSMx6S2hsCaSuf3y7I9A0g3+Pvx/pTm K2BV8Bw88HznfBYOEJY5kVcMC7o/Mvjq9l7+PATHyp/x5ggGaIvKdxHmTcO9Vz7/ IpvnyyzVeo/33Nng4epwmA44SnVppjlGc/nPiGhj5SbocPd1vP9HV3W0BvQFIQdg r5p3oGa+avsrOFCi8ivmuUDyUJIUbzwoReurCsEHVraH68QiEjn5dNcsjcgUcTkr +YK2VMLfUYjn7HQgZ8AkciNCdXp1TDJbrNpzT9VIw91dNVkvKr+yjjQDwUc/JENT xcW2Fz7IeGLmGQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:24:19 2025 by rpki-client