$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: PO6lQf/XKezD6XxyKuJj1M++wROMqU+1xj42JpjIRDY= Subject key identifier: 0C:88:7A:40:9E:5E:9C:1D:90:CC:D0:75:69:6E:C2:4F:C5:14:4B:D6 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019A307C55184D78B25A0E9038E477D09251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 171F Signing time: Wed 29 Oct 2025 15:00:45 +0000 Manifest this update: Wed 29 Oct 2025 15:00:45 +0000 Manifest next update: Thu 30 Oct 2025 15:00:45 +0000 Files and hashes: 1: 2TxyjhsmXIUBo8Zo1YorHOQd5m4.roa (hash: G16L4uDJVkxkt6HibPGk4SuOrzYueNtQRs61VLc/3UQ=) 2: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 3: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 4: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 5: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 6: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 7: X6_TjtQwmeuK02HsdtBqExL53Ns.roa (hash: iFX22eM+S+PXpdOb7LkHEMy7skJnpdQtVRXSFjP8GCY=) 8: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: r3j8YTX75lou1Zzzc3GhF1rEPxlbAzygq3nqNLg+aFo=) 9: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 10: ZmCMretj_IKNhbhPW7MGGPPg6QY.roa (hash: 4kecTGFd/jV1xEOhbuwNVp/CnF9j4BLYU+5l4DsS6Q4=) 11: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 12: bef2KuKcJAMamvz0TVXs-qJ_V7A.roa (hash: XsMssR0GRIHZKbVFvC5zdkQCQ8TXXybVYnAS1M8uGbw=) 13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 14: hryCAnXILF_v7a6M_L6UbzP1x0E.roa (hash: KffgzjGeNv+fdBscER8L1iiMJC1SCTAbWKtpEJoIDmc=) 15: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 16: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 17: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Oct 2025 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:30:7c:55:18:4d:78:b2:5a:0e:90:38:e4:77:d0:92:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Oct 29 15:00:45 2025 GMT Not After : Oct 30 15:00:45 2025 GMT Subject: CN=0c887a409e5e9c1d90ccd075696ec24fc5144bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:d5:4a:fd:67:ca:4e:f6:5a:6f:dd:00:e0: 54:2d:a1:1b:c0:17:bc:ce:1c:17:1c:12:91:56:10: 20:2e:10:17:aa:19:b0:01:ad:16:40:45:9d:17:8d: f0:24:26:fc:b6:bb:5f:c5:fb:16:88:dc:59:44:f8: 83:85:21:84:51:a7:b9:cf:c2:63:f4:16:25:6e:bf: cf:59:47:26:49:fd:95:48:ef:25:12:d7:a6:e5:25: 24:7c:35:fc:c8:cd:64:03:7a:86:a3:e7:73:d4:b9: f2:cb:0b:a5:db:67:55:86:e2:33:ca:5c:87:b8:9d: 00:6e:7a:c5:fb:34:f5:0f:13:0b:e1:ac:7c:a5:9a: 3d:66:b3:32:0c:d5:fb:84:62:a5:b8:ca:d2:0f:31: 1b:8c:36:c4:f1:36:71:d7:0d:15:73:36:86:f7:db: 25:c0:38:56:ed:9a:0d:2c:c3:17:c9:89:a8:c9:62: 2e:65:fb:17:cc:08:44:2c:23:65:c9:14:b9:96:b8: 57:0c:ab:3a:80:21:0b:2b:81:42:05:b9:2e:24:bd: ce:88:fc:f9:7c:05:79:10:ac:ea:03:10:cc:31:d5: 47:81:34:bd:fb:f5:0c:84:06:04:cf:91:3d:2b:18: c7:a9:18:50:a1:02:ed:79:d0:ba:fb:e6:ee:c7:09: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:7A:40:9E:5E:9C:1D:90:CC:D0:75:69:6E:C2:4F:C5:14:4B:D6 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f2:78:81:bb:d3:c5:f4:5b:36:2a:38:09:99:b1:22:28:9d: d6:ff:a6:fc:ec:3b:16:d7:cb:85:f4:8c:86:57:8a:9a:9f:33: 27:fb:1e:eb:1c:f0:a7:0c:ed:44:a3:f9:72:b3:bd:fd:e0:a0: 45:65:09:06:4d:24:94:4f:76:db:5d:49:58:c0:90:ea:b9:5f: b5:24:87:88:1e:44:59:04:1e:89:c5:be:1d:c3:a8:73:5c:ce: 15:b4:b3:52:be:1e:13:ab:fa:bf:5c:27:15:6f:25:10:ed:7c: 67:85:e8:30:18:d0:21:a4:7f:ab:ee:d1:d2:bd:7c:0c:87:fe: 6b:10:b6:74:54:7b:b7:97:a5:c0:e5:6c:d0:46:8b:a0:86:f0: e2:fe:1b:6b:30:14:ce:a8:bd:12:2a:58:71:35:94:56:c2:a0: 5b:0a:15:8e:7e:7c:93:ef:44:c5:a4:52:c3:17:fb:4c:ad:2d: fb:ca:7c:5f:20:8c:98:65:45:b8:31:c9:2c:ae:df:c2:71:52: 15:f4:34:97:8a:ae:d1:73:76:22:0c:73:2f:11:9e:ff:11:3a: b0:9c:9c:b6:48:28:e9:5e:22:b7:98:1c:a1:1f:db:9f:fc:be: f4:c1:c8:e2:4d:c5:f2:56:5d:69:ed:62:57:13:7b:68:41:c0: 92:de:a5:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZowfFUYTXiyWg6QOOR30JJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUxMDI5MTUwMDQ1WhcNMjUxMDMwMTUwMDQ1WjAzMTEwLwYDVQQD EygwYzg4N2E0MDllNWU5YzFkOTBjY2QwNzU2OTZlYzI0ZmM1MTQ0YmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0LVSv1nyk72Wm/dAOBULaEbwBe8 zhwXHBKRVhAgLhAXqhmwAa0WQEWdF43wJCb8trtfxfsWiNxZRPiDhSGEUae5z8Jj 9BYlbr/PWUcmSf2VSO8lEtem5SUkfDX8yM1kA3qGo+dz1Lnyywul22dVhuIzylyH uJ0AbnrF+zT1DxML4ax8pZo9ZrMyDNX7hGKluMrSDzEbjDbE8TZx1w0VczaG99sl wDhW7ZoNLMMXyYmoyWIuZfsXzAhELCNlyRS5lrhXDKs6gCELK4FCBbkuJL3OiPz5 fAV5EKzqAxDMMdVHgTS9+/UMhAYEz5E9KxjHqRhQoQLtedC6++buxwm9JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyIekCeXpwdkMzQdWluwk/FFEvWMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/J4gbvT xfRbNio4CZmxIiid1v+m/Ow7FtfLhfSMhleKmp8zJ/se6xzwpwztRKP5crO9/eCg RWUJBk0klE92211JWMCQ6rlftSSHiB5EWQQeicW+HcOoc1zOFbSzUr4eE6v6v1wn FW8lEO18Z4XoMBjQIaR/q+7R0r18DIf+axC2dFR7t5elwOVs0EaLoIbw4v4bazAU zqi9EipYcTWUVsKgWwoVjn58k+9ExaRSwxf7TK0t+8p8XyCMmGVFuDHJLK7fwnFS FfQ0l4qu0XN2IgxzLxGe/xE6sJyctkgo6V4it5gcoR/bn/y+9MHI4k3F8lZdae1i VxN7aEHAkt6lfA== -----END CERTIFICATE-----Generated at Wed Oct 29 21:05:01 2025 by rpki-client