$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: 8h5QVoF7/XpDjW1Z8TP0EywSEo3mxDxyVWzkMYjqKM8= Subject key identifier: 6F:6A:70:2F:9D:51:0D:B6:CA:48:E3:35:8A:CE:48:97:EC:94:9C:E9 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 01974FA13A965C205EF8DE02E82F15444995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 159A Signing time: Sun 08 Jun 2025 13:00:55 +0000 Manifest this update: Sun 08 Jun 2025 13:00:55 +0000 Manifest next update: Mon 09 Jun 2025 13:00:55 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (hash: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=) 4: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 5: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 6: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 7: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 8: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 9: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: LDZGz9ycVHfoSQU/2dY6YrAXkIR3ZiGaa6F/NdAzb/I=) 10: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4f:a1:3a:96:5c:20:5e:f8:de:02:e8:2f:15:44:49:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jun 8 13:00:55 2025 GMT Not After : Jun 9 13:00:55 2025 GMT Subject: CN=6f6a702f9d510db6ca48e3358ace4897ec949ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:06:bd:20:bd:eb:2f:5e:81:86:c9:4e:01:76: 07:1b:f2:a5:36:46:0d:8d:d3:25:1a:a8:04:36:2c: b0:33:b9:13:01:b6:33:81:be:18:56:a6:ec:3a:3d: bc:12:95:87:61:6b:02:96:04:f8:86:3e:70:3a:d2: 14:c4:94:ca:c6:04:5a:03:da:14:24:f8:9a:89:76: 56:ef:70:64:b6:bc:e2:13:01:1a:91:2e:39:67:ff: 12:4b:7d:e8:d1:c5:9f:d2:68:c3:79:42:fa:84:33: 82:e6:1b:29:ce:34:51:7e:39:56:35:70:a4:cc:b3: 74:ba:0d:54:af:ae:e2:05:62:c4:ec:e1:ea:ce:09: b3:3d:ca:b9:0f:e3:bb:39:18:e7:f9:cc:29:e9:9e: 6f:de:a0:9a:b7:f7:7a:01:84:12:26:1d:84:03:79: 3d:9f:99:ce:19:af:bb:32:a2:83:b5:bb:b2:a0:e6: 6f:4b:51:cc:32:f2:ff:5d:d1:c0:b4:f5:45:27:f4: 1a:1e:2a:e6:ad:57:4e:85:b7:5f:1f:d3:81:e3:a6: 15:55:ce:e4:45:dd:9f:04:2d:9d:e9:de:63:1b:3b: 78:a2:f7:62:aa:01:8f:48:8f:f4:22:44:24:72:8a: 60:7d:25:dd:29:9d:6e:c9:fc:64:f9:0d:ee:c0:8e: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6A:70:2F:9D:51:0D:B6:CA:48:E3:35:8A:CE:48:97:EC:94:9C:E9 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1b:01:d5:68:4c:24:66:51:f2:66:7c:5a:81:46:95:8d:bf: b6:3c:11:e0:aa:cc:38:4d:43:95:af:c6:31:aa:72:2a:c4:11: c6:1b:38:1f:d5:6f:3a:11:b9:4e:7b:56:5f:3d:e9:c4:eb:7d: 8a:9c:22:47:f9:03:7c:0a:4d:4d:81:83:c9:2c:ae:ea:f2:13: a7:30:16:4a:ae:f6:e9:93:37:1b:cf:03:f0:4a:08:f3:33:8e: de:71:79:c6:a3:1d:c6:8f:9b:06:38:90:27:4f:8e:72:98:98: b0:31:e1:f8:fa:a6:ac:bd:a6:86:40:4a:68:55:86:8b:0c:6c: 0b:e4:93:25:ab:eb:dd:c0:43:5a:4d:8e:34:1d:6b:96:4b:20: 32:83:b3:16:c3:c6:7e:a9:9c:be:74:52:05:af:ef:ba:0d:d8: e2:9f:c8:18:f0:97:6d:77:cc:d9:57:5d:3f:93:d1:ea:98:46: e0:e1:83:30:dc:af:27:8e:42:70:8e:ca:f4:45:56:98:38:50: d3:24:33:e1:17:2d:d2:0c:87:7b:41:3e:e9:c0:2c:c5:69:d1: 00:c6:66:ba:09:11:b0:95:e1:75:b1:a1:18:b2:57:57:36:e6: 16:b2:b7:ca:f8:92:d5:fb:bb:ef:e5:64:ac:7b:bf:33:4c:7c: 3b:ab:ca:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdPoTqWXCBe+N4C6C8VREmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUwNjA4MTMwMDU1WhcNMjUwNjA5MTMwMDU1WjAzMTEwLwYDVQQD Eyg2ZjZhNzAyZjlkNTEwZGI2Y2E0OGUzMzU4YWNlNDg5N2VjOTQ5Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wa9IL3rL16BhslOAXYHG/KlNkYN jdMlGqgENiywM7kTAbYzgb4YVqbsOj28EpWHYWsClgT4hj5wOtIUxJTKxgRaA9oU JPiaiXZW73BktrziEwEakS45Z/8SS33o0cWf0mjDeUL6hDOC5hspzjRRfjlWNXCk zLN0ug1Ur67iBWLE7OHqzgmzPcq5D+O7ORjn+cwp6Z5v3qCat/d6AYQSJh2EA3k9 n5nOGa+7MqKDtbuyoOZvS1HMMvL/XdHAtPVFJ/QaHirmrVdOhbdfH9OB46YVVc7k Rd2fBC2d6d5jGzt4ovdiqgGPSI/0IkQkcopgfSXdKZ1uyfxk+Q3uwI7AewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9qcC+dUQ22ykjjNYrOSJfslJzpMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxsB1WhM JGZR8mZ8WoFGlY2/tjwR4KrMOE1Dla/GMapyKsQRxhs4H9VvOhG5TntWXz3pxOt9 ipwiR/kDfApNTYGDySyu6vITpzAWSq726ZM3G88D8EoI8zOO3nF5xqMdxo+bBjiQ J0+OcpiYsDHh+PqmrL2mhkBKaFWGiwxsC+STJavr3cBDWk2ONB1rlksgMoOzFsPG fqmcvnRSBa/vug3Y4p/IGPCXbXfM2VddP5PR6phG4OGDMNyvJ45CcI7K9EVWmDhQ 0yQz4Rct0gyHe0E+6cAsxWnRAMZmugkRsJXhdbGhGLJXVzbmFrK3yviS1fu77+Vk rHu/M0x8O6vKxQ== -----END CERTIFICATE-----Generated at Sun Jun 8 23:29:52 2025 by rpki-client