$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: JgOZCJa3+Bpz19/XFVmU4bQBx1ieXZjwYDwDsn4H2bE= Subject key identifier: 9A:F0:19:B5:DE:92:D9:79:56:9A:64:99:3D:5F:8B:1E:6A:99:D1:A9 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 01975459919069F4089EB7AF924CD3429B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 15A0 Signing time: Mon 09 Jun 2025 11:00:45 +0000 Manifest this update: Mon 09 Jun 2025 11:00:45 +0000 Manifest next update: Tue 10 Jun 2025 11:00:45 +0000 Files and hashes: 1: 06heLpkhPZDIbobUdBVrEl7tRaM.roa (hash: 1VfnXVrmD1QJCPPP0yoMA9t0Y95B+NtzKULxpukikqQ=) 2: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (hash: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=) 3: 2UEZeQMv3u7nKCLMsn-kJQbzyY4.roa (hash: lI5z0s/7ZN7zZA61IW19Tt/6g5sIa09LDb2XlFTMdSw=) 4: 528KTEkQew3OKB0sdZbyrpr76lo.roa (hash: vzEojXovmM1vbii6xpgBaXVLuyQKtmvj4cwlpTlnTnA=) 5: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 6: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 7: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 8: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 9: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 10: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: JJ/2dN7AhZj4AZOZPwbKxPXxPkz1+lkVjcI5yDQGj9Q=) 11: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 12: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 13: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 14: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 15: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 16: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Jun 2025 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:54:59:91:90:69:f4:08:9e:b7:af:92:4c:d3:42:9b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jun 9 11:00:45 2025 GMT Not After : Jun 10 11:00:45 2025 GMT Subject: CN=9af019b5de92d979569a64993d5f8b1e6a99d1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:e1:36:aa:94:1a:b7:a3:45:5a:bd:0b:40: 15:46:4c:6e:ae:39:66:6b:39:e6:f7:57:1f:41:09: 91:e0:6a:9c:75:50:7b:d9:81:c8:52:1e:16:25:7d: 06:b6:6c:f1:fe:d2:52:2a:7b:e2:e5:81:36:a6:80: ee:fd:67:4e:26:3b:fc:32:0d:57:b9:3b:d3:3f:40: df:7b:3c:25:54:f6:ce:91:16:a7:25:19:61:ad:eb: 73:55:fc:fe:8f:8f:9e:b7:bc:76:26:b8:db:48:97: 65:0f:c5:71:21:b3:dd:46:ec:57:20:98:00:78:18: 44:ff:ba:ef:ba:68:7f:b1:1d:6f:0c:d3:62:b6:7e: 9c:6e:00:f5:72:13:d0:f9:70:b9:cf:d5:3c:86:b4: 38:66:ce:50:f9:b2:11:5b:4c:75:46:47:81:05:54: 33:e4:2b:91:cd:4c:b4:ab:a2:ac:c7:28:38:45:a0: a4:be:13:e0:8f:a8:0e:5c:19:c6:e9:45:d4:40:b0: 8a:3f:b6:1b:e5:29:22:bf:ee:42:71:74:0c:c6:84: 35:77:fe:8f:ad:74:0d:e1:12:37:5d:95:1e:ce:57: 90:d5:26:e6:44:38:14:29:37:fa:4d:11:1c:f7:b7: 61:9d:07:45:51:a3:62:21:d9:b0:b1:b0:c6:62:8e: 83:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F0:19:B5:DE:92:D9:79:56:9A:64:99:3D:5F:8B:1E:6A:99:D1:A9 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1e:fa:ed:11:28:8b:44:93:64:74:6d:1e:76:46:8d:6b:6b: 29:46:4c:96:85:52:05:44:71:b4:ab:7b:7b:a4:ff:f1:44:e5: 92:a2:c0:96:4d:dd:ce:89:9b:79:c7:f1:cb:a9:96:5b:8b:6a: 40:f5:de:96:eb:68:e3:b9:30:f6:04:64:b2:63:f4:e1:95:9e: 5a:fe:a5:2c:f6:f0:e5:79:47:c6:61:e8:8c:3b:5d:ca:a7:75: cd:4e:8a:d9:2b:41:70:87:9c:d1:43:27:0c:03:59:0f:d8:f0: 29:c5:64:4d:7e:75:75:f1:70:8e:c7:c8:3e:57:5c:db:e5:24: 9e:fb:dc:26:77:cc:79:48:e9:82:cc:02:ea:0e:ae:a0:44:d4: b3:ab:2e:6a:f8:04:56:1c:95:b0:fc:bb:03:95:c9:df:d8:5c: 15:80:71:01:e1:42:32:79:4e:3e:31:3b:2c:96:ea:76:50:47: 29:9f:5b:16:cb:0c:f0:cb:16:8f:28:ef:f4:47:7b:91:50:af: 57:80:1c:b2:8a:3e:29:87:16:d4:aa:15:39:72:e9:81:bf:c4: ce:8d:69:e2:a5:a5:c9:6d:fa:2f:a3:54:bb:03:4e:d7:cb:4c: 2e:ad:13:2e:dc:57:3b:cb:2f:64:bb:83:57:ad:4d:22:e3:19: 66:12:05:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdUWZGQafQInrevkkzTQptCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUwNjA5MTEwMDQ1WhcNMjUwNjEwMTEwMDQ1WjAzMTEwLwYDVQQD Eyg5YWYwMTliNWRlOTJkOTc5NTY5YTY0OTkzZDVmOGIxZTZhOTlkMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5jhNqqUGrejRVq9C0AVRkxurjlm aznm91cfQQmR4GqcdVB72YHIUh4WJX0Gtmzx/tJSKnvi5YE2poDu/WdOJjv8Mg1X uTvTP0DfezwlVPbOkRanJRlhretzVfz+j4+et7x2JrjbSJdlD8VxIbPdRuxXIJgA eBhE/7rvumh/sR1vDNNitn6cbgD1chPQ+XC5z9U8hrQ4Zs5Q+bIRW0x1RkeBBVQz 5CuRzUy0q6Ksxyg4RaCkvhPgj6gOXBnG6UXUQLCKP7Yb5Skiv+5CcXQMxoQ1d/6P rXQN4RI3XZUezleQ1SbmRDgUKTf6TREc97dhnQdFUaNiIdmwsbDGYo6D3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrwGbXektl5VppkmT1fix5qmdGpMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQx767REo i0STZHRtHnZGjWtrKUZMloVSBURxtKt7e6T/8UTlkqLAlk3dzombecfxy6mWW4tq QPXeluto47kw9gRksmP04ZWeWv6lLPbw5XlHxmHojDtdyqd1zU6K2StBcIec0UMn DANZD9jwKcVkTX51dfFwjsfIPldc2+UknvvcJnfMeUjpgswC6g6uoETUs6suavgE VhyVsPy7A5XJ39hcFYBxAeFCMnlOPjE7LJbqdlBHKZ9bFssM8MsWjyjv9Ed7kVCv V4Acsoo+KYcW1KoVOXLpgb/Ezo1p4qWlyW36L6NUuwNO18tMLq0TLtxXO8svZLuD V61NIuMZZhIF2g== -----END CERTIFICATE-----Generated at Mon Jun 9 14:38:27 2025 by rpki-client