$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: hvcFDe/LwuitPnaage055nBcAPc087ZOEu92Qp9SjCc= Subject key identifier: 19:F7:AD:74:4F:1D:44:15:94:AF:A6:B8:9F:51:35:37:7C:35:EF:6B Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019763CC423FE23E07B2A81FC1C11D955FFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 15A8 Signing time: Thu 12 Jun 2025 11:00:20 +0000 Manifest this update: Thu 12 Jun 2025 11:00:20 +0000 Manifest next update: Fri 13 Jun 2025 11:00:20 +0000 Files and hashes: 1: 06heLpkhPZDIbobUdBVrEl7tRaM.roa (hash: 1VfnXVrmD1QJCPPP0yoMA9t0Y95B+NtzKULxpukikqQ=) 2: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (hash: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=) 3: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=) 4: 528KTEkQew3OKB0sdZbyrpr76lo.roa (hash: vzEojXovmM1vbii6xpgBaXVLuyQKtmvj4cwlpTlnTnA=) 5: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 6: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 7: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 8: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 9: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: 5CLwBr8ZBSlZSg0MAGztAxQLQq8k7PxX5D5+FoLKUnY=) 11: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 12: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 14: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 15: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 16: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Jun 2025 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:63:cc:42:3f:e2:3e:07:b2:a8:1f:c1:c1:1d:95:5f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jun 12 11:00:20 2025 GMT Not After : Jun 13 11:00:20 2025 GMT Subject: CN=19f7ad744f1d441594afa6b89f5135377c35ef6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:7e:42:16:91:9d:96:75:b9:5f:9e:10:80: d4:7a:01:5d:85:0d:d7:2a:ad:ee:db:fd:0d:45:5a: c9:9a:9f:bc:e2:80:f9:8c:ff:92:a6:29:e9:47:7a: ce:0a:6f:a8:26:32:50:37:21:5f:0a:42:2a:38:29: ae:e2:b8:95:88:24:82:83:8a:79:a8:a9:fb:fc:83: 58:6f:1d:a9:71:3d:18:0a:7e:39:8a:35:47:37:09: db:59:1a:b3:d8:6d:49:22:27:24:3a:7d:eb:51:5a: 8c:96:94:6e:97:b3:75:a3:f2:ed:d2:97:3e:1b:1f: 67:bc:df:cd:5d:e6:a3:2d:f1:9d:98:a4:b8:c3:41: f6:8d:f7:81:89:d9:4b:ed:4b:9c:ca:c0:b2:7c:5f: 8c:e2:e9:3e:54:ab:16:f4:b9:7e:d4:c9:71:de:c1: 1b:23:24:4b:9f:4b:08:7e:4f:c3:2d:ea:29:53:42: ea:d2:c3:6e:22:0c:6a:01:06:fe:ec:92:bf:78:b1: dc:25:97:59:e9:56:7c:89:d9:27:aa:54:bb:d9:1e: d9:55:66:b3:44:2f:ac:83:cb:ce:39:d2:46:37:11: cd:5c:22:0d:74:80:d7:23:da:3c:aa:53:cd:95:cf: 1b:e3:d7:5a:6e:26:54:5a:10:a7:45:88:fa:a5:b1: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F7:AD:74:4F:1D:44:15:94:AF:A6:B8:9F:51:35:37:7C:35:EF:6B X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ef:5f:d3:c3:fc:e3:cb:a2:73:b1:31:43:17:c4:eb:62:1e: c9:5d:15:d3:9e:79:60:bb:cf:ea:c8:6b:25:97:33:69:13:9f: c1:f5:93:09:8a:e9:d3:93:a8:20:bf:95:fb:89:c4:66:ca:c5: 45:96:7e:b9:72:77:74:03:3d:e0:c8:9f:dc:bb:12:1b:70:61: a9:36:ef:35:55:9b:a9:c4:3e:c2:5a:d7:c8:fc:70:09:d6:fe: 1c:eb:5a:87:6b:33:01:17:88:6f:64:68:60:49:c0:7c:77:de: b5:fa:b5:f0:e1:b9:0d:36:7a:ec:30:2e:82:5f:61:2e:b4:bf: 3d:05:90:46:57:d4:eb:d8:a3:b0:e3:3c:8e:57:56:08:39:5b: e5:61:b9:09:87:52:e0:e2:db:33:94:c6:f1:11:f2:8c:c0:9e: 58:cb:64:16:c1:60:c6:88:cc:47:0a:7f:01:f2:17:54:fd:97: d7:8f:a1:5a:1e:f6:0a:5c:a0:1d:23:45:20:55:7a:65:38:3e: 65:37:20:d0:b3:9c:87:87:c2:34:59:5a:25:b0:88:95:f3:31: 4d:b6:cc:2a:0a:98:76:1d:d0:06:79:60:d3:99:bc:6f:11:80: df:96:d5:1d:06:a6:e7:90:f3:a0:73:d1:b7:71:5c:e2:2d:9e: 71:f1:16:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdjzEI/4j4HsqgfwcEdlV/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUwNjEyMTEwMDIwWhcNMjUwNjEzMTEwMDIwWjAzMTEwLwYDVQQD EygxOWY3YWQ3NDRmMWQ0NDE1OTRhZmE2Yjg5ZjUxMzUzNzdjMzVlZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeV+QhaRnZZ1uV+eEIDUegFdhQ3X Kq3u2/0NRVrJmp+84oD5jP+SpinpR3rOCm+oJjJQNyFfCkIqOCmu4riViCSCg4p5 qKn7/INYbx2pcT0YCn45ijVHNwnbWRqz2G1JIickOn3rUVqMlpRul7N1o/Lt0pc+ Gx9nvN/NXeajLfGdmKS4w0H2jfeBidlL7UucysCyfF+M4uk+VKsW9Ll+1Mlx3sEb IyRLn0sIfk/DLeopU0Lq0sNuIgxqAQb+7JK/eLHcJZdZ6VZ8idknqlS72R7ZVWaz RC+sg8vOOdJGNxHNXCINdIDXI9o8qlPNlc8b49dabiZUWhCnRYj6pbF8ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBn3rXRPHUQVlK+muJ9RNTd8Ne9rMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlO9f08P8 48uic7ExQxfE62IeyV0V0555YLvP6shrJZczaROfwfWTCYrp05OoIL+V+4nEZsrF RZZ+uXJ3dAM94Mif3LsSG3BhqTbvNVWbqcQ+wlrXyPxwCdb+HOtah2szAReIb2Ro YEnAfHfetfq18OG5DTZ67DAugl9hLrS/PQWQRlfU69ijsOM8jldWCDlb5WG5CYdS 4OLbM5TG8RHyjMCeWMtkFsFgxojMRwp/AfIXVP2X14+hWh72ClygHSNFIFV6ZTg+ ZTcg0LOch4fCNFlaJbCIlfMxTbbMKgqYdh3QBnlg05m8bxGA35bVHQam55DzoHPR t3Fc4i2ecfEWBw== -----END CERTIFICATE-----Generated at Thu Jun 12 17:53:47 2025 by rpki-client