$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: UeKj7M3i48HHgyWHAwsPN9j+/Suctg1G6FF5lDDgr4s= Subject key identifier: 4B:80:7C:57:15:09:B3:82:48:DB:00:B2:A0:42:F4:8D:39:32:6B:75 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019A1A6247883BDF3E7BA5AA5A32E6955227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 12A7 Signing time: Sat 25 Oct 2025 08:00:39 +0000 Manifest this update: Sat 25 Oct 2025 08:00:39 +0000 Manifest next update: Sun 26 Oct 2025 08:00:39 +0000 Files and hashes: 1: 0ycMJPi_Xp0v_c9cpvBYlEdPtFU.roa (hash: Os3eVNAHF9/fRsHKPcTnAbVY5k0UMaLvCpLK8GHyLns=) 2: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=) 3: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=) 4: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=) 5: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=) 6: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=) 7: ZAx7Azq9YHnuLtmsAGgkpQ9XaQk.roa (hash: Nv+QAFomBrYRU4aOf9OpKKgjZFP6zJcF4QMA/O4RLyo=) 8: cGP_gRD-iBTmMU6jmRktcee-Lfo.roa (hash: wwltlEMfjaaWf1NiPcGDf2EH6nVadz8p372jM5CZNuE=) 9: fwGs4NKWy2qwwFHvzAhS_0HSwWc.roa (hash: xpyUK/0mWO28W5ZFHD9SD69xhudYUF35PPRLXFMXs6I=) 10: kskuiZFZ4qnR7ertADOXhwQ9Oco.roa (hash: ZSYBr6SFSDGeJPdXMk2oIUoftKHvv6I70l0Yr4tHKxk=) 11: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: 2AKLyAj/6wDQt06Mq29fzaOLGDU2XDMkOgyoI8Uzm4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 02:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1a:62:47:88:3b:df:3e:7b:a5:aa:5a:32:e6:95:52:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Oct 25 08:00:39 2025 GMT Not After : Oct 26 08:00:39 2025 GMT Subject: CN=4b807c571509b38248db00b2a042f48d39326b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2d:f2:fd:fb:ca:d8:3e:f7:8c:0f:c4:89:10: af:d5:30:29:a0:a3:88:d2:3d:0e:d6:e1:5a:54:74: 19:ac:84:71:3f:79:6d:98:b6:5d:27:af:21:66:61: fa:6a:5f:14:13:58:79:f1:8a:e3:86:b6:e0:39:95: 09:d2:7b:da:aa:b3:68:6d:c8:23:d5:61:d1:66:ee: 6c:99:1f:8f:c0:db:6d:78:15:0c:6c:b0:65:a9:72: 63:18:f4:17:9b:bd:f8:a9:b6:a5:60:45:cb:01:bb: b5:69:82:00:56:2e:b9:19:4f:f1:46:93:49:3f:ff: c8:ef:44:81:06:c0:66:c5:e1:b0:e1:3a:ce:95:7d: cb:92:4c:b6:03:e4:92:a4:27:51:93:4c:64:a8:e6: 48:f1:49:07:9d:fc:07:9d:5f:d8:6a:e5:23:b8:f5: e7:b5:46:83:06:ce:ca:88:04:6f:a7:15:0a:f8:89: fe:f2:10:64:87:87:ea:79:14:00:4f:ce:b3:da:cc: ed:c5:b5:97:27:4c:38:d8:68:b5:20:8c:75:56:02: a0:af:a5:18:b0:27:0c:0e:6b:0b:5c:69:06:5d:16: cd:a6:67:33:7e:16:34:eb:d5:1e:87:67:ad:c9:76: ae:52:7f:db:6a:cf:9b:9a:ab:84:a4:0a:08:f7:60: 58:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:80:7C:57:15:09:B3:82:48:DB:00:B2:A0:42:F4:8D:39:32:6B:75 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:97:4d:c4:20:cb:b6:ba:0b:d4:8b:0e:74:d6:b5:4e:e2:5f: 58:b9:af:b9:20:67:3f:79:55:a6:ec:4e:a8:79:82:2a:a8:7a: 1c:2a:fd:17:74:98:2e:24:68:ec:24:8c:77:e8:87:9d:02:aa: b7:b5:75:60:8d:cf:b1:4e:cf:8f:4f:62:ed:fd:99:b3:17:9c: 80:c1:b2:a0:12:0f:74:95:dc:92:06:6a:32:ae:5b:9b:98:8c: 4b:d3:91:c5:b8:7f:37:e3:c8:03:40:07:85:c6:08:67:d5:b9: 7a:40:22:9b:06:b3:6c:a7:00:a3:4e:8e:b6:00:79:ca:12:64: c1:e2:c6:5f:fa:4e:0d:2f:f6:b8:17:1e:83:04:fd:ab:09:fc: aa:20:49:2e:53:4a:9e:7e:ca:6e:d1:6a:8c:f4:d9:2e:22:f7: 87:a7:bd:00:ac:bb:bd:90:d8:13:8a:8a:6f:86:05:82:31:2b: 70:e1:22:e5:6a:09:5a:e6:40:91:bf:23:8b:f2:c5:db:8e:bc: 6e:5f:b1:08:a6:3a:af:bb:0b:cc:c2:e6:0c:27:d4:40:1a:e8: 0d:f0:9b:4d:b9:30:15:2e:26:7b:66:c9:4b:0d:78:a3:49:bf: e1:df:98:f0:3e:47:03:7c:2e:3a:d2:ff:54:a4:85:5e:f7:ca: 7f:29:ec:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoaYkeIO98+e6WqWjLmlVInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjUxMDI1MDgwMDM5WhcNMjUxMDI2MDgwMDM5WjAzMTEwLwYDVQQD Eyg0YjgwN2M1NzE1MDliMzgyNDhkYjAwYjJhMDQyZjQ4ZDM5MzI2Yjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi3y/fvK2D73jA/EiRCv1TApoKOI 0j0O1uFaVHQZrIRxP3ltmLZdJ68hZmH6al8UE1h58YrjhrbgOZUJ0nvaqrNobcgj 1WHRZu5smR+PwNtteBUMbLBlqXJjGPQXm734qbalYEXLAbu1aYIAVi65GU/xRpNJ P//I70SBBsBmxeGw4TrOlX3Lkky2A+SSpCdRk0xkqOZI8UkHnfwHnV/YauUjuPXn tUaDBs7KiARvpxUK+In+8hBkh4fqeRQAT86z2sztxbWXJ0w42Gi1IIx1VgKgr6UY sCcMDmsLXGkGXRbNpmczfhY069Ueh2etyXauUn/bas+bmquEpAoI92BYmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuAfFcVCbOCSNsAsqBC9I05Mmt1MB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpdNxCDL troL1IsOdNa1TuJfWLmvuSBnP3lVpuxOqHmCKqh6HCr9F3SYLiRo7CSMd+iHnQKq t7V1YI3PsU7Pj09i7f2ZsxecgMGyoBIPdJXckgZqMq5bm5iMS9ORxbh/N+PIA0AH hcYIZ9W5ekAimwazbKcAo06OtgB5yhJkweLGX/pODS/2uBcegwT9qwn8qiBJLlNK nn7KbtFqjPTZLiL3h6e9AKy7vZDYE4qKb4YFgjErcOEi5WoJWuZAkb8ji/LF2468 bl+xCKY6r7sLzMLmDCfUQBroDfCbTbkwFS4me2bJSw14o0m/4d+Y8D5HA3wuOtL/ VKSFXvfKfynsFg== -----END CERTIFICATE-----Generated at Sat Oct 25 10:42:03 2025 by rpki-client