$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: 8tavZ2bYurlSynOaaTIAkf/oGDFHnYVm4XNDTI2aA5A= Subject key identifier: BA:51:E0:BF:DB:AE:03:B0:B3:14:33:EF:CF:AA:CD:97:9B:10:3C:87 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 01992BFD2D9C518B7DFF3C28652E7E1AD96B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1691 Signing time: Tue 09 Sep 2025 01:00:36 +0000 Manifest this update: Tue 09 Sep 2025 01:00:36 +0000 Manifest next update: Wed 10 Sep 2025 01:00:36 +0000 Files and hashes: 1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=) 2: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=) 3: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=) 4: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=) 5: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=) 6: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (hash: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=) 7: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: hnSdcQkVomotrYAqfzFDasHyb4zXUN4QGUvm9OAXXCY=) 8: cId8V7j1DXooq_T1g9EFQ0FCvzw.roa (hash: QJXoETg4tOT8lLS3JnVPNBwPS3l57Eztn4NIz3Sxb1s=) 9: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=) 10: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:fd:2d:9c:51:8b:7d:ff:3c:28:65:2e:7e:1a:d9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Sep 9 01:00:36 2025 GMT Not After : Sep 10 01:00:36 2025 GMT Subject: CN=ba51e0bfdbae03b0b31433efcfaacd979b103c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:29:f0:8a:00:16:b9:75:3f:e4:29:37:4d: 2c:77:cd:c1:cf:48:ff:9c:f1:63:30:4f:a8:fb:23: 3d:78:52:81:9e:4c:55:44:d3:99:f4:40:45:b1:2d: cb:7e:8e:c8:a7:e0:d0:c2:da:b4:91:88:b0:b1:ee: 89:da:e9:f4:08:3d:75:8a:a9:23:ff:00:ff:1a:c1: 10:60:64:96:2c:37:7b:69:04:04:fa:63:e6:23:67: 70:e6:69:26:3e:28:89:61:48:f5:f9:25:72:27:88: 40:f2:2e:34:ab:e8:92:04:12:5b:48:9f:0b:15:1d: 4a:a1:96:f7:64:38:18:f4:48:f9:37:3c:1d:42:fc: c8:bb:66:ec:eb:5a:03:18:bd:2f:31:6f:cd:70:19: 28:9f:78:87:f6:4f:d9:e7:80:3f:5a:fd:85:c3:b5: cd:f0:cc:f4:69:83:9a:8b:0e:07:09:3b:76:3d:e7: 46:47:95:34:3d:90:e1:c1:67:65:5f:d1:d7:2c:7e: d3:f4:99:72:9c:64:4c:9c:f7:aa:80:1a:0c:65:aa: 8b:f7:2b:23:c0:d4:61:4e:c3:a1:12:4e:db:8b:6e: 4e:71:64:4b:3a:49:6d:97:22:1c:8b:55:12:d0:19: 9e:1c:70:54:3d:7c:e1:21:89:65:b7:a4:10:2d:f5: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:51:E0:BF:DB:AE:03:B0:B3:14:33:EF:CF:AA:CD:97:9B:10:3C:87 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:83:0e:91:6c:9c:1f:9c:19:88:ab:a2:4f:cf:ea:e7:de:9b: c3:9f:de:24:52:13:61:ac:a9:bb:e4:a0:5d:c6:49:ff:92:be: 1f:5c:42:82:7e:80:6a:5c:c3:da:e7:08:13:9f:3e:5d:d9:2e: a0:05:03:68:34:ac:a4:9b:8b:26:f2:3b:f1:78:78:66:dd:ef: e2:4e:49:3f:7e:4d:56:db:83:ac:b5:5f:d4:06:55:16:22:20: 03:99:61:0f:3a:83:f8:86:bc:5d:db:e3:a2:f9:e3:b4:85:3a: 58:af:29:c8:ea:4f:5d:28:f8:b5:52:00:b1:90:54:77:81:5a: 29:57:75:1b:9a:f3:3a:3a:1e:e0:49:33:41:50:65:cc:c2:7d: 9f:9e:7f:f0:82:15:69:72:2f:29:ea:0f:52:a0:3f:bd:49:a1: de:d1:9b:cb:3a:1c:f8:ab:11:69:ad:fb:0d:45:ed:11:d1:f7: c8:66:0b:12:13:75:ca:37:ee:8f:b6:01:94:35:92:d0:1c:4f: 49:bc:5e:00:64:46:d1:f7:d7:1c:70:27:6b:b6:79:8d:02:a7: 47:50:f9:b1:e1:ce:d1:5a:f8:ea:79:2c:fb:b9:a0:ab:82:f0: 6e:dc:c6:73:61:2c:a1:64:cd:3c:ba:76:d1:71:3c:d5:77:f7: ae:3b:e2:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkr/S2cUYt9/zwoZS5+GtlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUwOTA5MDEwMDM2WhcNMjUwOTEwMDEwMDM2WjAzMTEwLwYDVQQD EyhiYTUxZTBiZmRiYWUwM2IwYjMxNDMzZWZjZmFhY2Q5NzliMTAzYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozQp8IoAFrl1P+QpN00sd83Bz0j/ nPFjME+o+yM9eFKBnkxVRNOZ9EBFsS3Lfo7Ip+DQwtq0kYiwse6J2un0CD11iqkj /wD/GsEQYGSWLDd7aQQE+mPmI2dw5mkmPiiJYUj1+SVyJ4hA8i40q+iSBBJbSJ8L FR1KoZb3ZDgY9Ej5NzwdQvzIu2bs61oDGL0vMW/NcBkon3iH9k/Z54A/Wv2Fw7XN 8Mz0aYOaiw4HCTt2PedGR5U0PZDhwWdlX9HXLH7T9JlynGRMnPeqgBoMZaqL9ysj wNRhTsOhEk7bi25OcWRLOkltlyIci1US0BmeHHBUPXzhIYllt6QQLfW8XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpR4L/brgOwsxQz78+qzZebEDyHMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYMOkWyc H5wZiKuiT8/q596bw5/eJFITYaypu+SgXcZJ/5K+H1xCgn6AalzD2ucIE58+Xdku oAUDaDSspJuLJvI78Xh4Zt3v4k5JP35NVtuDrLVf1AZVFiIgA5lhDzqD+Ia8Xdvj ovnjtIU6WK8pyOpPXSj4tVIAsZBUd4FaKVd1G5rzOjoe4EkzQVBlzMJ9n55/8IIV aXIvKeoPUqA/vUmh3tGbyzoc+KsRaa37DUXtEdH3yGYLEhN1yjfuj7YBlDWS0BxP SbxeAGRG0ffXHHAna7Z5jQKnR1D5seHO0Vr46nks+7mgq4LwbtzGc2EsoWTNPLp2 0XE81Xf3rjviYA== -----END CERTIFICATE-----Generated at Tue Sep 9 09:19:43 2025 by rpki-client