$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: JwcO9PZSNNseMQ7TAxDcl8J5KTQ/sB8p1h778V51RKk= Subject key identifier: 7F:8A:8E:9E:4C:D9:C8:22:33:04:1C:03:0D:80:6B:8A:69:F0:35:81 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01992BC6EBB6CA6E0052B744C4055C61A2DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 168B Signing time: Tue 09 Sep 2025 00:01:20 +0000 Manifest this update: Tue 09 Sep 2025 00:01:20 +0000 Manifest next update: Wed 10 Sep 2025 00:01:20 +0000 Files and hashes: 1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=) 2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=) 3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=) 4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=) 5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=) 6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=) 7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=) 8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=) 9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=) 10: AKM5h6Ix-3LMoRtdGUA19KyVLio.roa (hash: P77lNcJ0zrzNLtgfjbd4pt0XLBw/55/N1ocxrR5mz8k=) 11: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=) 12: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=) 13: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=) 14: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=) 15: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=) 16: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=) 17: PfuePBqyE9oSuvuOqPl2yYw0_nM.roa (hash: I912gPvDq9Xcn/nApuI3hIUcz4zJdPzL8TmlGrNFHYI=) 18: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=) 19: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=) 20: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=) 21: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=) 22: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=) 23: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=) 24: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=) 25: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=) 26: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=) 27: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=) 28: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=) 29: fOCG8GZHTaRDntl_g9LNFOGmkqw.roa (hash: bR9905Jw5jekH7I9Vxe1eqFMLaQsdQXCVYQbjYCAIBw=) 30: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=) 31: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=) 32: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=) 33: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: ztyT4ktlqflSWEhKbE02WzX4HJwh4+y2HUCceTPrUMU=) 35: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2b:c6:eb:b6:ca:6e:00:52:b7:44:c4:05:5c:61:a2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Sep 9 00:01:20 2025 GMT Not After : Sep 10 00:01:20 2025 GMT Subject: CN=7f8a8e9e4cd9c82233041c030d806b8a69f03581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:b6:d2:fd:3f:64:be:53:b4:48:f9:28:03: f7:93:67:0a:77:79:62:f9:b1:bb:85:ff:1c:9d:c2: 41:6e:8f:9b:0b:a7:62:40:ef:f4:28:3e:44:0d:a7: 09:88:65:5b:10:44:7e:9b:75:b6:02:4d:a6:7a:8d: c7:0f:1e:d0:ee:df:ff:c1:c3:be:ca:b3:df:1e:4a: fa:5e:fc:8b:7e:f5:1f:19:e4:62:7c:a5:9f:20:ff: a8:0d:a1:dc:3f:0c:61:9e:c8:13:da:fe:19:88:1f: 0c:e3:e1:9e:36:08:4d:f1:df:fc:cd:db:74:27:60: 1e:e4:78:9f:67:28:e5:05:00:fd:43:6d:dc:5a:ca: ec:7c:e5:0b:f2:32:04:43:26:fc:8d:9a:7d:31:3d: f7:9a:22:04:24:8e:fa:2d:cc:23:06:4b:c0:a9:9a: fb:3e:07:9c:6b:fe:81:3a:9e:b1:74:d6:8f:da:ef: 05:08:6a:23:1f:ec:b9:3c:46:e5:31:74:b7:30:e1: 90:86:e7:91:80:2a:a3:02:5a:32:c5:6d:5f:8c:18: 0a:d4:ea:3d:b2:b2:90:c1:46:b4:49:81:06:82:83: ce:8a:ac:08:69:cd:94:dc:08:79:de:a4:58:a1:3c: 08:b2:20:f8:ee:9d:de:bd:df:b7:9e:76:66:e4:ce: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8A:8E:9E:4C:D9:C8:22:33:04:1C:03:0D:80:6B:8A:69:F0:35:81 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c0:ee:86:d2:01:34:23:05:7a:e9:88:0d:09:8c:18:23:c6: eb:43:fc:b7:7e:64:c7:cd:b3:cc:b1:76:cb:cd:03:3a:89:c0: 76:95:0b:99:2e:3a:23:ad:e3:1e:9b:35:f3:4a:01:f4:45:5e: 69:2b:2c:c8:fd:b5:16:fa:15:e3:04:1a:1b:9e:c1:0e:d6:ac: db:ed:b0:73:d6:26:d5:95:bf:39:d8:d9:0e:41:e4:90:66:2f: 98:16:a1:35:2e:79:be:46:79:b5:c0:cc:70:51:f6:61:44:61: a2:c3:6b:62:9c:f3:61:53:8a:fd:5a:e9:19:43:56:4c:21:f3: 1d:53:60:0a:c7:a4:af:35:e4:4d:8d:16:f6:a1:95:57:7e:80: 97:97:a0:12:29:9b:6f:5c:1c:9c:3f:9e:90:11:ca:fc:08:3f: b2:1f:84:a0:ab:c4:0f:88:b0:d4:2c:cf:06:ff:8a:6f:0b:02: 83:ca:74:37:23:e0:49:e5:6d:14:cd:e5:ee:24:18:8b:b3:05: a4:43:b1:e8:ac:af:af:ed:07:10:cf:94:09:95:21:21:47:54: 83:3a:cb:f6:70:67:67:7d:4d:7a:c2:83:b7:76:75:a9:cb:27: 52:49:54:5e:2f:89:98:4e:8a:3d:d3:d4:0e:9c:cf:2d:ab:99: fc:05:e8:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkrxuu2ym4AUrdExAVcYaLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjUwOTA5MDAwMTIwWhcNMjUwOTEwMDAwMTIwWjAzMTEwLwYDVQQD Eyg3ZjhhOGU5ZTRjZDljODIyMzMwNDFjMDMwZDgwNmI4YTY5ZjAzNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5K20v0/ZL5TtEj5KAP3k2cKd3li +bG7hf8cncJBbo+bC6diQO/0KD5EDacJiGVbEER+m3W2Ak2meo3HDx7Q7t//wcO+ yrPfHkr6XvyLfvUfGeRifKWfIP+oDaHcPwxhnsgT2v4ZiB8M4+GeNghN8d/8zdt0 J2Ae5HifZyjlBQD9Q23cWsrsfOUL8jIEQyb8jZp9MT33miIEJI76LcwjBkvAqZr7 Pgeca/6BOp6xdNaP2u8FCGojH+y5PEblMXS3MOGQhueRgCqjAloyxW1fjBgK1Oo9 srKQwUa0SYEGgoPOiqwIac2U3Ah53qRYoTwIsiD47p3evd+3nnZm5M58eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+Kjp5M2cgiMwQcAw2Aa4pp8DWBMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsDuhtIB NCMFeumIDQmMGCPG60P8t35kx82zzLF2y80DOonAdpULmS46I63jHps180oB9EVe aSssyP21FvoV4wQaG57BDtas2+2wc9Ym1ZW/OdjZDkHkkGYvmBahNS55vkZ5tcDM cFH2YURhosNrYpzzYVOK/VrpGUNWTCHzHVNgCsekrzXkTY0W9qGVV36Al5egEimb b1wcnD+ekBHK/Ag/sh+EoKvED4iw1CzPBv+KbwsCg8p0NyPgSeVtFM3l7iQYi7MF pEOx6Kyvr+0HEM+UCZUhIUdUgzrL9nBnZ31NesKDt3Z1qcsnUklUXi+JmE6KPdPU DpzPLauZ/AXoSA== -----END CERTIFICATE-----Generated at Tue Sep 9 07:08:34 2025 by rpki-client