$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: bYaKfqXYjKOaG+NvXWsKdIfSNAyzrznamCQtgoMNjPQ= Subject key identifier: 03:28:58:29:B8:80:B7:A4:E3:94:64:67:09:7D:5E:DC:4B:C0:06:E3 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 0199350186F3093EB789E2517C7494961BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 168A Signing time: Wed 10 Sep 2025 19:01:56 +0000 Manifest this update: Wed 10 Sep 2025 19:01:56 +0000 Manifest next update: Thu 11 Sep 2025 19:01:56 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: pnyFmdPcXHf5fPVxecDBHBpCkLzPVkNk8JRH+xKYEPY=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 19:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:35:01:86:f3:09:3e:b7:89:e2:51:7c:74:94:96:1b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Sep 10 19:01:56 2025 GMT Not After : Sep 11 19:01:56 2025 GMT Subject: CN=03285829b880b7a4e3946467097d5edc4bc006e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:70:c5:e8:e5:20:a6:a4:1c:c0:72:dc:ea: 4a:bf:51:2f:d1:23:5f:2b:46:29:03:a7:2f:c0:05: 8c:87:1a:d2:8b:72:b9:4b:1e:e1:0c:4e:0d:a7:64: 3a:b6:a5:03:79:24:7c:48:76:48:dd:6c:64:99:98: ff:21:92:7b:cb:7d:24:c5:fc:2f:ce:61:fd:c9:35: fd:5e:1a:85:7a:bd:ba:f7:d2:e5:5f:7d:fb:82:23: 93:b3:a9:3f:c2:ed:68:40:20:3b:aa:31:ec:9a:ac: d1:14:80:1a:f7:4d:db:c5:4c:26:7e:55:60:6e:85: e3:57:3a:46:f5:c4:fc:7b:8a:ae:cf:fc:a4:f7:70: 36:d8:80:a1:aa:92:10:ed:de:41:85:1b:30:76:f4: af:88:75:1d:a3:24:e1:1c:d4:8d:b7:36:62:1f:8e: bc:57:22:ae:3a:2f:b0:6e:8d:64:a7:c8:86:8b:cc: 7f:34:a4:11:48:62:c5:68:27:04:ce:aa:25:e6:3a: 64:a1:a9:dd:c0:5e:97:94:38:ac:70:3e:02:80:7a: 59:b2:c8:97:5f:91:70:b7:9d:25:6e:77:95:7a:2a: bf:37:f4:81:06:1a:29:e4:1a:3d:97:d4:b5:a3:d3: ad:e5:85:96:1e:9a:7a:c8:9d:6f:6d:72:24:5e:bd: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:28:58:29:B8:80:B7:A4:E3:94:64:67:09:7D:5E:DC:4B:C0:06:E3 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ae:cd:36:25:e5:fe:2f:15:cb:25:04:fe:88:b5:99:12:af: f4:d7:94:32:6a:10:0c:9c:c6:b6:97:69:e0:c8:eb:6e:30:37: 37:cd:6f:bb:0f:d3:8d:2d:78:49:66:9c:f3:72:64:54:25:2f: 43:5c:be:36:19:28:e7:53:5c:a7:b0:cb:91:54:8b:43:03:85: 1d:47:84:a0:85:c7:d6:2c:c0:3b:e5:38:c9:0c:1a:09:76:0d: f8:73:76:cf:ef:85:b8:a5:fd:6f:01:47:d2:71:28:13:42:d7: 03:a5:6e:cc:1a:47:80:d0:2b:d4:2c:65:2d:ae:c1:86:ae:db: c5:33:4b:84:e2:ee:65:32:c8:11:ad:45:e6:39:fd:dd:10:f3: 95:93:3e:b3:5d:31:b3:65:0d:87:b8:d7:f6:b9:83:54:b3:04: 3b:82:9c:3f:fd:c6:72:0c:61:fc:d2:9d:24:6b:11:30:1d:e9: 19:f5:c6:4c:9f:21:42:fc:8a:81:59:c7:fa:fc:8c:6f:f2:0c: f0:81:22:52:10:9c:83:83:d9:53:61:eb:04:33:28:28:be:03: b8:ee:35:1d:c9:0a:d4:62:c2:c0:2f:9d:f8:9d:c3:9a:ff:57: c5:ff:17:3f:f6:45:8e:ef:f2:49:a9:3d:be:9f:f5:c2:fd:1e: 2a:4c:88:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk1AYbzCT63ieJRfHSUlhumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUwOTEwMTkwMTU2WhcNMjUwOTExMTkwMTU2WjAzMTEwLwYDVQQD EygwMzI4NTgyOWI4ODBiN2E0ZTM5NDY0NjcwOTdkNWVkYzRiYzAwNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ZwxejlIKakHMBy3OpKv1Ev0SNf K0YpA6cvwAWMhxrSi3K5Sx7hDE4Np2Q6tqUDeSR8SHZI3WxkmZj/IZJ7y30kxfwv zmH9yTX9XhqFer2699LlX337giOTs6k/wu1oQCA7qjHsmqzRFIAa903bxUwmflVg boXjVzpG9cT8e4quz/yk93A22IChqpIQ7d5BhRswdvSviHUdoyThHNSNtzZiH468 VyKuOi+wbo1kp8iGi8x/NKQRSGLFaCcEzqol5jpkoandwF6XlDiscD4CgHpZssiX X5Fwt50lbneVeiq/N/SBBhop5Bo9l9S1o9Ot5YWWHpp6yJ1vbXIkXr01FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMoWCm4gLek45RkZwl9XtxLwAbjMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASq7NNiXl /i8VyyUE/oi1mRKv9NeUMmoQDJzGtpdp4MjrbjA3N81vuw/TjS14SWac83JkVCUv Q1y+Nhko51Ncp7DLkVSLQwOFHUeEoIXH1izAO+U4yQwaCXYN+HN2z++FuKX9bwFH 0nEoE0LXA6VuzBpHgNAr1CxlLa7Bhq7bxTNLhOLuZTLIEa1F5jn93RDzlZM+s10x s2UNh7jX9rmDVLMEO4KcP/3Gcgxh/NKdJGsRMB3pGfXGTJ8hQvyKgVnH+vyMb/IM 8IEiUhCcg4PZU2HrBDMoKL4DuO41HckK1GLCwC+d+J3Dmv9Xxf8XP/ZFju/ySak9 vp/1wv0eKkyI3Q== -----END CERTIFICATE-----Generated at Thu Sep 11 04:32:49 2025 by rpki-client