$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: E534olqTgweD0ZfhTR3liKI5gPOpxU1t8Lw5psHSFhc= Subject key identifier: 46:92:4F:AC:1F:28:96:EE:30:C8:84:2C:E7:A6:52:91:A5:01:A0:AA Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019A228A9FDD640FCD6A69D0375A3ED13B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1705 Signing time: Sun 26 Oct 2025 22:01:41 +0000 Manifest this update: Sun 26 Oct 2025 22:01:41 +0000 Manifest next update: Mon 27 Oct 2025 22:01:41 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: Cy31gEtZLXWWzkpOwNhPXmXgafO7nxrh5pHWC2YNj6E=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:22:8a:9f:dd:64:0f:cd:6a:69:d0:37:5a:3e:d1:3b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Oct 26 22:01:41 2025 GMT Not After : Oct 27 22:01:41 2025 GMT Subject: CN=46924fac1f2896ee30c8842ce7a65291a501a0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:16:d9:22:53:44:65:48:73:fb:e8:dc:20: 2a:fb:31:56:99:93:4f:a1:02:4a:33:5b:ee:41:a1: cf:e1:ce:62:cf:a0:fa:c7:35:3b:84:7c:03:29:4b: ab:50:44:a5:51:a5:24:db:ac:b8:ce:52:33:43:31: ee:41:bd:34:a6:d6:a8:2c:48:68:bb:33:70:41:c2: 01:07:97:a5:60:52:9c:57:11:38:33:75:5a:1b:52: 4a:aa:9c:ea:6d:8c:a3:f2:3b:8d:0b:93:3a:a9:49: 91:46:17:36:0d:96:f0:40:91:41:1c:df:93:99:be: d5:8b:c0:13:72:7a:49:f4:70:6a:03:93:36:21:ba: 30:fe:1e:6c:e3:88:3b:68:db:ab:26:9c:7e:68:7b: 52:70:20:5b:51:92:eb:4d:ae:08:bc:58:3c:80:e4: e4:fa:65:95:e3:77:81:bf:4d:49:59:e9:29:78:3a: 56:ec:0a:4a:88:0c:59:2b:6a:f9:ce:65:d7:ff:20: 6f:0c:95:55:1c:06:e1:34:dd:04:7c:58:a7:2a:56: 6d:9f:3a:79:2b:a4:95:24:7a:ca:a1:91:b7:c1:b8: 8b:98:cc:6b:7d:1b:52:35:67:67:72:6f:26:85:c8: 95:bb:11:b7:63:10:29:02:6a:7c:d6:b9:f9:fb:e5: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:92:4F:AC:1F:28:96:EE:30:C8:84:2C:E7:A6:52:91:A5:01:A0:AA X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:11:ec:57:94:4a:2f:bc:2c:91:c0:19:a7:23:4c:c9:9c:91: d1:f0:74:94:50:a3:1e:1b:84:9c:54:a4:89:8b:f3:03:8f:8e: 25:76:2c:1b:8b:6c:5c:46:89:9e:58:38:f4:12:38:8a:e9:08: a6:ce:9a:10:17:7e:a8:3c:a3:55:55:62:4b:19:85:ed:14:3f: 45:40:86:e2:dc:8b:fe:4a:37:52:a2:55:c8:2c:b1:b2:20:ad: 29:8a:0a:6a:24:07:11:8a:b8:32:ed:27:9b:a4:89:ac:c6:69: 8a:f5:c8:e6:82:1b:ab:dc:e3:36:a3:0d:e8:26:eb:f2:2f:ab: e2:4a:b7:3f:10:2e:d9:52:5b:02:a5:a3:2b:59:53:95:e1:52: 30:ab:87:c6:5c:ea:3c:dc:7d:0d:9a:85:3e:ef:e8:64:a0:82: ff:82:59:23:ed:1d:38:b5:0c:87:46:46:36:8d:f8:c4:0a:4c: 18:da:c3:d5:53:fb:3c:08:e8:1e:c7:a2:11:3f:a8:71:68:f5: 8b:4e:88:07:ac:5c:68:93:19:c2:50:14:98:0a:2a:a0:a5:8d: 14:73:2f:e6:c4:63:a7:ec:73:f6:86:ed:55:b7:3b:f1:c6:29: e3:6d:3c:03:27:75:db:59:c3:98:60:14:f2:32:9e:87:ab:56: da:7c:9e:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoiip/dZA/NamnQN1o+0TtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUxMDI2MjIwMTQxWhcNMjUxMDI3MjIwMTQxWjAzMTEwLwYDVQQD Eyg0NjkyNGZhYzFmMjg5NmVlMzBjODg0MmNlN2E2NTI5MWE1MDFhMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRsW2SJTRGVIc/vo3CAq+zFWmZNP oQJKM1vuQaHP4c5iz6D6xzU7hHwDKUurUESlUaUk26y4zlIzQzHuQb00ptaoLEho uzNwQcIBB5elYFKcVxE4M3VaG1JKqpzqbYyj8juNC5M6qUmRRhc2DZbwQJFBHN+T mb7Vi8ATcnpJ9HBqA5M2Ibow/h5s44g7aNurJpx+aHtScCBbUZLrTa4IvFg8gOTk +mWV43eBv01JWekpeDpW7ApKiAxZK2r5zmXX/yBvDJVVHAbhNN0EfFinKlZtnzp5 K6SVJHrKoZG3wbiLmMxrfRtSNWdncm8mhciVuxG3YxApAmp81rn5++V0pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaST6wfKJbuMMiELOemUpGlAaCqMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxHsV5RK L7wskcAZpyNMyZyR0fB0lFCjHhuEnFSkiYvzA4+OJXYsG4tsXEaJnlg49BI4iukI ps6aEBd+qDyjVVViSxmF7RQ/RUCG4tyL/ko3UqJVyCyxsiCtKYoKaiQHEYq4Mu0n m6SJrMZpivXI5oIbq9zjNqMN6Cbr8i+r4kq3PxAu2VJbAqWjK1lTleFSMKuHxlzq PNx9DZqFPu/oZKCC/4JZI+0dOLUMh0ZGNo34xApMGNrD1VP7PAjoHseiET+ocWj1 i06IB6xcaJMZwlAUmAoqoKWNFHMv5sRjp+xz9obtVbc78cYp4208Ayd121nDmGAU 8jKeh6tW2nyeKg== -----END CERTIFICATE-----Generated at Mon Oct 27 04:21:07 2025 by rpki-client