$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: WuJbnDLzB63akRz+kSgEGXJR2Jno6+v5laCpvyhn+p8= Subject key identifier: 7B:85:CD:59:22:B5:54:16:39:8E:E9:81:3B:E0:45:C0:A3:4B:86:44 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019A0C01BA38848052CCF0B41F0D1253D224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 121B Signing time: Wed 22 Oct 2025 13:00:30 +0000 Manifest this update: Wed 22 Oct 2025 13:00:30 +0000 Manifest next update: Thu 23 Oct 2025 13:00:30 +0000 Files and hashes: 1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=) 2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=) 3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=) 4: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=) 5: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (hash: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=) 6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=) 7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=) 8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=) 9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=) 10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=) 11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=) 12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=) 13: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=) 14: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=) 15: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=) 16: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=) 17: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=) 18: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=) 19: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=) 20: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: uahXmkanvKTjeJNYPY0wDnEzbJ9yi0bgi2o9bfR3rPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0c:01:ba:38:84:80:52:cc:f0:b4:1f:0d:12:53:d2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Oct 22 13:00:30 2025 GMT Not After : Oct 23 13:00:30 2025 GMT Subject: CN=7b85cd5922b55416398ee9813be045c0a34b8644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:b9:9b:5d:ea:3f:5e:36:22:23:e8:1b:69: 11:3c:af:c5:bd:c6:ab:42:9f:1b:c4:38:91:29:a8: 94:a1:2a:f2:53:12:71:6b:64:69:98:e3:d6:ec:60: 59:2d:10:92:29:c4:59:2c:ad:74:3a:31:98:99:78: d4:aa:5e:83:2c:f3:1e:3d:92:41:c1:11:d1:f2:1b: e8:73:0e:16:9c:db:44:0c:da:6a:da:0e:1a:6b:37: 2d:b1:9b:7d:38:88:e3:6f:1e:72:c2:89:ef:a0:f3: 3f:94:5a:90:8f:f1:17:55:91:82:fe:f7:86:07:99: 2b:5f:1e:51:24:42:e2:da:a0:d2:2e:87:09:35:33: 0c:d9:d3:18:0c:a2:8e:38:f0:ce:4d:79:7b:fc:e9: b9:6b:55:2c:c0:64:f3:bd:93:2e:86:8c:76:5f:bf: 87:8c:49:e6:96:49:ca:38:a6:ab:57:6e:e4:d8:a9: c4:fd:d4:44:73:ff:13:34:ca:64:77:94:9d:be:a3: f6:3e:69:bc:b6:e0:a9:80:d0:c0:82:ef:20:36:6a: 0d:08:a3:39:bd:1e:cc:54:4f:66:b2:fe:c0:a1:d4: 18:bc:54:0e:84:0a:4b:86:ac:61:88:6f:aa:31:4d: 80:7c:91:06:12:1c:12:60:f1:f1:e7:1b:94:40:30: 68:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:85:CD:59:22:B5:54:16:39:8E:E9:81:3B:E0:45:C0:A3:4B:86:44 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:28:f2:94:dc:cc:76:88:e8:ce:79:ac:3b:c8:45:83:4e:93: c4:55:88:44:2a:44:4b:02:72:9b:89:9c:17:a8:69:c9:90:ad: 0d:99:b8:1b:76:ab:ab:c9:1a:37:9a:e0:15:05:0e:7a:0d:d7: 11:4b:4d:62:c9:9f:03:3d:e4:a8:1b:20:95:f2:0a:d6:3e:89: 34:8c:50:6e:5c:64:01:2d:ca:db:bb:e9:af:24:60:29:2b:0b: f3:10:fa:59:2d:b9:3c:ea:ba:b4:4c:e6:b2:e5:9b:df:2b:b2: ac:c4:8f:d4:a4:6c:25:d6:36:f6:b2:e8:d9:4f:64:43:e3:10: cb:f8:37:1a:ae:10:19:a6:9e:fa:91:b0:9f:a3:a6:39:97:ab: d0:45:8b:50:36:d6:f0:53:28:b9:81:0e:89:3a:1c:2b:e3:67: 7c:b9:b7:3f:d4:06:dd:b0:8c:f1:d9:76:83:91:86:1d:f4:20: 5b:02:14:65:73:5d:f0:2d:e7:d8:dd:ca:7c:7e:0f:30:55:d9: 55:76:6b:f9:d2:7f:18:1a:84:0b:3d:8d:58:29:e9:22:56:a5: 71:a9:5d:77:0a:d8:fa:55:7b:75:df:d4:5b:b5:aa:75:7e:7f: 82:3a:d4:34:70:4e:a8:83:6f:9d:85:08:b7:82:7f:4c:f6:cc: 9b:b3:c3:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoMAbo4hIBSzPC0Hw0SU9IkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUxMDIyMTMwMDMwWhcNMjUxMDIzMTMwMDMwWjAzMTEwLwYDVQQD Eyg3Yjg1Y2Q1OTIyYjU1NDE2Mzk4ZWU5ODEzYmUwNDVjMGEzNGI4NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhW5m13qP142IiPoG2kRPK/Fvcar Qp8bxDiRKaiUoSryUxJxa2RpmOPW7GBZLRCSKcRZLK10OjGYmXjUql6DLPMePZJB wRHR8hvocw4WnNtEDNpq2g4aazctsZt9OIjjbx5ywonvoPM/lFqQj/EXVZGC/veG B5krXx5RJELi2qDSLocJNTMM2dMYDKKOOPDOTXl7/Om5a1UswGTzvZMuhox2X7+H jEnmlknKOKarV27k2KnE/dREc/8TNMpkd5SdvqP2Pmm8tuCpgNDAgu8gNmoNCKM5 vR7MVE9msv7AodQYvFQOhApLhqxhiG+qMU2AfJEGEhwSYPHx5xuUQDBoqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuFzVkitVQWOY7pgTvgRcCjS4ZEMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSjylNzM dojoznmsO8hFg06TxFWIRCpESwJym4mcF6hpyZCtDZm4G3arq8kaN5rgFQUOeg3X EUtNYsmfAz3kqBsglfIK1j6JNIxQblxkAS3K27vpryRgKSsL8xD6WS25POq6tEzm suWb3yuyrMSP1KRsJdY29rLo2U9kQ+MQy/g3Gq4QGaae+pGwn6OmOZer0EWLUDbW 8FMouYEOiTocK+NnfLm3P9QG3bCM8dl2g5GGHfQgWwIUZXNd8C3n2N3KfH4PMFXZ VXZr+dJ/GBqECz2NWCnpIlalcalddwrY+lV7dd/UW7WqdX5/gjrUNHBOqINvnYUI t4J/TPbMm7PDFg== -----END CERTIFICATE-----Generated at Wed Oct 22 22:54:56 2025 by rpki-client