$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: s6nWNDNkHSEWVtMbjnUiLW1qEYrweoBXTQ0PyU/SVSc= Subject key identifier: F2:55:90:6B:6E:63:BC:40:60:AA:AB:11:36:23:F2:40:81:44:80:80 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019A251CE48B7301907A708742F20B23696A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1713 Signing time: Mon 27 Oct 2025 10:00:41 +0000 Manifest this update: Mon 27 Oct 2025 10:00:41 +0000 Manifest next update: Tue 28 Oct 2025 10:00:41 +0000 Files and hashes: 1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=) 2: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=) 3: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=) 4: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=) 5: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=) 6: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (hash: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=) 7: XVtsR7QApMnuJxBGbKhRiugNLuM.roa (hash: mBXTHq+MNZP6clXD4om9o4T9lzXQfLi50+F1yKfLWMA=) 8: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: /fWMRRnOV1/4NtY6qSTH3IayipSwHi7nWQ44EyWgPoM=) 9: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=) 10: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 08:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:25:1c:e4:8b:73:01:90:7a:70:87:42:f2:0b:23:69:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Oct 27 10:00:41 2025 GMT Not After : Oct 28 10:00:41 2025 GMT Subject: CN=f255906b6e63bc4060aaab113623f24081448080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:1a:45:b4:d2:ed:6c:76:4d:55:57:9f:cb: e0:0f:86:c3:c7:a0:40:b9:a4:14:59:96:02:95:f2: 1a:14:35:85:60:7b:0a:0e:3a:dd:dd:7b:11:a2:19: 45:80:69:35:bf:5f:5e:b3:1d:89:e7:e7:e5:c7:f2: d5:84:89:eb:e6:1f:51:12:d4:64:c2:f9:44:9c:4e: 6a:60:a4:78:19:4a:3e:4f:28:b4:74:5e:7f:63:98: a3:51:1e:93:34:ef:f6:27:70:e3:17:bb:6e:42:73: 8f:77:ef:16:d1:60:3a:e1:48:55:90:fd:53:3c:0f: 85:f2:84:4b:32:93:75:6a:09:2f:6f:cf:9a:13:28: c4:f1:a0:c8:8d:69:65:3e:f3:da:ed:6e:a2:70:9a: 9d:0f:4e:39:1f:9f:d0:4d:bc:f3:44:52:96:bb:04: a6:84:40:17:6c:0d:85:80:2e:44:17:e2:eb:a5:a2: ec:32:22:73:e2:2b:b6:d6:ae:d0:9c:15:aa:74:2d: c1:5e:8e:d0:64:59:77:2b:2d:db:76:d1:16:8c:65: 99:c4:b5:d5:28:e4:ad:ec:53:bb:f6:5e:61:d6:80: 24:b8:93:ea:56:e6:a7:af:a5:0c:4a:c8:7c:2b:6a: d8:02:01:12:2a:a9:2a:16:19:96:bc:f0:e7:27:a9: c3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:55:90:6B:6E:63:BC:40:60:AA:AB:11:36:23:F2:40:81:44:80:80 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a6:ae:6a:99:2e:9e:73:4a:57:60:2d:2c:3c:09:57:71:1d: 72:61:e2:34:cf:23:f5:0c:72:f4:6f:6b:d1:64:ba:03:8d:e5: b3:e9:51:71:5b:43:a5:29:1e:b4:da:96:47:ab:c8:15:f6:5a: 0d:98:b3:e8:b1:19:d9:56:27:cc:83:14:e8:43:35:3b:d8:5a: f3:56:a3:87:20:38:78:ad:3a:43:72:74:e0:3c:e4:44:2d:27: e6:dc:3b:38:fe:05:59:47:e4:fb:d7:bd:1f:8b:fa:27:c6:e6: b3:f3:15:75:f3:6e:66:fe:58:5b:9f:be:11:c4:6b:c6:32:f0: ee:15:1a:2b:b5:09:5b:9a:ea:97:1b:97:04:65:08:18:bb:fe: be:f8:ee:3d:3f:c7:e1:e0:75:29:68:aa:5f:6f:6f:d8:f1:37: bf:89:3f:c4:b2:20:81:b7:37:24:d5:b0:60:30:49:d6:52:cf: 59:3a:41:36:0a:85:d6:18:e6:6c:e5:66:7d:ec:42:4a:bd:f5: 8a:03:b9:cb:7a:78:55:92:19:39:c8:26:0f:60:42:40:a3:0f: 80:b9:c5:be:39:ec:cd:ca:60:df:df:ac:3a:57:77:b4:6a:38: 65:eb:6d:c9:8a:6d:49:b3:5e:77:69:40:3c:4a:ee:9a:4f:af: 7d:9b:a6:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZolHOSLcwGQenCHQvILI2lqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUxMDI3MTAwMDQxWhcNMjUxMDI4MTAwMDQxWjAzMTEwLwYDVQQD EyhmMjU1OTA2YjZlNjNiYzQwNjBhYWFiMTEzNjIzZjI0MDgxNDQ4MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunwaRbTS7Wx2TVVXn8vgD4bDx6BA uaQUWZYClfIaFDWFYHsKDjrd3XsRohlFgGk1v19esx2J5+flx/LVhInr5h9REtRk wvlEnE5qYKR4GUo+Tyi0dF5/Y5ijUR6TNO/2J3DjF7tuQnOPd+8W0WA64UhVkP1T PA+F8oRLMpN1agkvb8+aEyjE8aDIjWllPvPa7W6icJqdD045H5/QTbzzRFKWuwSm hEAXbA2FgC5EF+LrpaLsMiJz4iu21q7QnBWqdC3BXo7QZFl3Ky3bdtEWjGWZxLXV KOSt7FO79l5h1oAkuJPqVuanr6UMSsh8K2rYAgESKqkqFhmWvPDnJ6nDswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJVkGtuY7xAYKqrETYj8kCBRICAMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKauapku nnNKV2AtLDwJV3EdcmHiNM8j9Qxy9G9r0WS6A43ls+lRcVtDpSketNqWR6vIFfZa DZiz6LEZ2VYnzIMU6EM1O9ha81ajhyA4eK06Q3J04DzkRC0n5tw7OP4FWUfk+9e9 H4v6J8bms/MVdfNuZv5YW5++EcRrxjLw7hUaK7UJW5rqlxuXBGUIGLv+vvjuPT/H 4eB1KWiqX29v2PE3v4k/xLIggbc3JNWwYDBJ1lLPWTpBNgqF1hjmbOVmfexCSr31 igO5y3p4VZIZOcgmD2BCQKMPgLnFvjnszcpg39+sOld3tGo4ZettyYptSbNed2lA PErumk+vfZumLw== -----END CERTIFICATE-----Generated at Mon Oct 27 14:50:19 2025 by rpki-client