$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft File: x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json) Hash identifier: fZQLEP6LvhTMgSebTJmgcWWvCgvHYWQ7pBol1K7EJgg= Subject key identifier: F3:CD:9F:CB:82:39:0F:66:BA:46:07:D7:C2:22:29:63:F7:B9:D3:39 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 01991D2EF9DDBD1605CBFE06E118ADBF1103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft Manifest number: 119F Signing time: Sat 06 Sep 2025 04:00:41 +0000 Manifest this update: Sat 06 Sep 2025 04:00:41 +0000 Manifest next update: Sun 07 Sep 2025 04:00:41 +0000 Files and hashes: 1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=) 2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=) 3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=) 4: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=) 5: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (hash: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=) 6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=) 7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=) 8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=) 9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=) 10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=) 11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=) 12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=) 13: fyZQsu5bzOst03Al5FJRpvSLsoo.roa (hash: MRRTMhVAXN/buVo3idrb+5O9n9y8Lo0sdRtwg3OeKfA=) 14: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=) 15: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=) 16: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=) 17: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=) 18: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=) 19: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=) 20: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=) 21: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: J24bNwm4UPYrugdzDa3hfmXUU+RrCOebDwJYHxbxWhk=) 22: zvVbccPOezRcenUxgZYT6IshvbM.roa (hash: 012XCVnoNirJiTB9TmAZ50WFMIRiHKAXPZ8XS3U9P3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1d:2e:f9:dd:bd:16:05:cb:fe:06:e1:18:ad:bf:11:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Sep 6 04:00:41 2025 GMT Not After : Sep 7 04:00:41 2025 GMT Subject: CN=f3cd9fcb82390f66ba4607d7c2222963f7b9d339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:a4:93:d7:3b:0a:8c:60:04:71:49:bc:1e: 26:aa:b0:e8:02:fb:8c:3f:a6:96:c9:df:aa:9d:89: 1e:a7:4d:d4:9b:45:97:fb:93:99:06:e9:15:c8:d9: ad:8e:0a:3d:1b:11:71:7f:48:2d:81:42:20:dd:e0: 2b:43:18:a4:17:de:be:ad:31:2d:cb:ba:a7:83:59: 71:10:5b:83:07:c2:be:f3:eb:4e:84:49:89:d1:b8: d3:34:96:7f:6a:17:2b:df:8c:1e:7f:fe:59:d2:0f: 0f:bc:bc:9e:16:47:fa:f1:80:46:e0:23:98:8b:ad: 87:ba:bf:8f:fa:72:ae:b8:92:d0:3e:95:ee:de:40: ca:16:1d:03:20:1e:d6:30:17:16:fe:f6:d5:b7:9a: bc:ac:b0:4a:0f:ef:e3:89:fc:35:dc:79:a3:41:03: 50:ff:29:be:88:d3:c5:d5:be:b9:27:bd:33:ca:e3: 35:7d:1b:8e:8a:dd:45:80:ba:28:83:6e:d7:23:c6: 8d:f0:ec:ac:cc:aa:e3:3b:8c:9b:25:53:c8:e8:0c: 20:b7:b0:55:11:31:52:df:82:7b:7b:32:35:e0:49: 1e:cb:61:9c:8f:f2:a9:09:3a:55:be:0a:33:39:4e: 53:23:08:a6:78:61:0b:fc:38:0c:88:b4:27:99:14: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:9F:CB:82:39:0F:66:BA:46:07:D7:C2:22:29:63:F7:B9:D3:39 X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fc:8c:70:18:d6:16:0c:77:fd:fa:5c:a0:74:27:9f:3c:26: e0:f8:9d:e7:d0:d1:a8:ea:58:3f:86:fb:7f:d6:1b:a2:d8:01: 16:aa:48:2d:6f:fd:82:fa:76:e4:ea:8e:39:2f:dd:0e:b9:11: da:49:51:c9:fc:16:65:dd:7b:99:c9:37:fd:49:c6:a2:41:fe: db:61:1d:9e:10:b8:59:7a:a1:fe:5b:a6:56:cd:0f:95:d6:83: 8b:02:cb:04:86:84:b9:91:7f:17:1f:54:4b:d8:72:27:11:c0: 77:ae:cf:f0:bb:a9:ed:9b:3f:42:3f:0b:ca:d8:99:3a:8b:8d: 00:02:e3:02:72:4b:57:03:cb:90:8c:ab:c0:f7:52:a8:b8:1e: 85:54:3d:c1:b2:6a:83:fd:8c:8c:88:a2:62:f5:54:f3:0e:57: 52:0f:c2:75:a7:48:24:48:03:4f:e3:4d:b1:72:01:2e:11:88: c9:9e:3f:a8:99:d2:78:8b:8e:44:0a:ad:e5:90:3f:55:86:d6: 3b:95:03:d5:3d:4e:fb:11:1c:e9:56:b4:1c:be:06:e7:6d:dc: 87:7d:f5:ce:9f:73:64:c8:f5:54:86:ef:27:f6:43:1a:90:85: 94:3e:ca:c3:f7:6c:55:98:ca:eb:b1:c1:43:73:a1:9d:3b:d4: f7:16:d7:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkdLvndvRYFy/4G4RitvxEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjUwOTA2MDQwMDQxWhcNMjUwOTA3MDQwMDQxWjAzMTEwLwYDVQQD EyhmM2NkOWZjYjgyMzkwZjY2YmE0NjA3ZDdjMjIyMjk2M2Y3YjlkMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYikk9c7CoxgBHFJvB4mqrDoAvuM P6aWyd+qnYkep03Um0WX+5OZBukVyNmtjgo9GxFxf0gtgUIg3eArQxikF96+rTEt y7qng1lxEFuDB8K+8+tOhEmJ0bjTNJZ/ahcr34wef/5Z0g8PvLyeFkf68YBG4COY i62Hur+P+nKuuJLQPpXu3kDKFh0DIB7WMBcW/vbVt5q8rLBKD+/jifw13HmjQQNQ /ym+iNPF1b65J70zyuM1fRuOit1FgLoog27XI8aN8OyszKrjO4ybJVPI6Awgt7BV ETFS34J7ezI14Ekey2Gcj/KpCTpVvgozOU5TIwimeGEL/DgMiLQnmRS7UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPNn8uCOQ9mukYH18IiKWP3udM5MB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvyMcBjW Fgx3/fpcoHQnnzwm4Pid59DRqOpYP4b7f9YbotgBFqpILW/9gvp25OqOOS/dDrkR 2klRyfwWZd17mck3/UnGokH+22EdnhC4WXqh/lumVs0PldaDiwLLBIaEuZF/Fx9U S9hyJxHAd67P8Lup7Zs/Qj8LytiZOouNAALjAnJLVwPLkIyrwPdSqLgehVQ9wbJq g/2MjIiiYvVU8w5XUg/CdadIJEgDT+NNsXIBLhGIyZ4/qJnSeIuORAqt5ZA/VYbW O5UD1T1O+xEc6Va0HL4G523ch331zp9zZMj1VIbvJ/ZDGpCFlD7Kw/dsVZjK67HB Q3OhnTvU9xbXjQ== -----END CERTIFICATE-----Generated at Sat Sep 6 11:45:53 2025 by rpki-client