$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft File: XYjk96MCQSwxaju1mc3SBCtf9IU.mft (raw, json) Hash identifier: Y9Gq71GgrqkO9tK95FX0B0Jn2nyIFLQt1/BkzE+npMc= Subject key identifier: 6A:87:8D:5E:DB:66:5E:7D:1D:45:23:EC:E0:90:08:0C:F4:55:7F:43 Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019A1685146A1954A459914EE6D2E5F62385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft Manifest number: 0FAC Signing time: Fri 24 Oct 2025 14:00:11 +0000 Manifest this update: Fri 24 Oct 2025 14:00:11 +0000 Manifest next update: Sat 25 Oct 2025 14:00:11 +0000 Files and hashes: 1: 1-bwt-sVuHj2c1KUgvFOOTFr_wP0.roa (hash: vaM0UnsCz+iyN9isVQ5NHTCh+M3bWKEqtb4oXckwJCg=) 2: 1-cEBstEK4SU0dua7ZoPT6Lv2YCY.roa (hash: IJ/Q1Cnzvg38mR9RVgpBCQ8ziEW3LxTFXnOf5Hk9jS4=) 3: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (hash: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=) 4: 78xxgqrUmWNYqyTBai4EBjEu91c.roa (hash: uaxnNjtNBpTRzoh32nK5xrY4z5VdPqEqJ8DG/HTyvMk=) 5: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (hash: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=) 6: VrYsvXiCDPnj40E2Yaxc1ZuyCs4.roa (hash: bW2MMX9UsQfvfk+kfYlnSI5Q8jrUxC2hBN7648mrq4E=) 7: XYjk96MCQSwxaju1mc3SBCtf9IU.crl (hash: VZ0goEzh4XcH4WCZ0BGYKF52Gmp9FNk67n+rtRYt4FA=) 8: aZqtIonciFbuAVeQ2dXFcdSrl4g.roa (hash: LOznQAw3X1WlgdY+GocAYdknvW8uQDaOqbi4GNngdfI=) 9: cJe1S1V6AJPi9cAb4NzNx8lYwsM.roa (hash: GvfkxRZe0U5ol3ibfBiprjfKJMC7pwJKVVJRhQvSq/g=) 10: ekIp6fDV1LgphH3Gi1AHo6rI6Cs.roa (hash: cb15BXttM7ZNQB0xO/TZjjNsA01W0R9hxNFRQ8FNS94=) 11: l7iZbiV7r6tXyFTfuUPxFcrsM4M.roa (hash: G7fwAbhY4dToat2MKtWl3kp+QqFAqtJoJEL3kRG4KEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:16:85:14:6a:19:54:a4:59:91:4e:e6:d2:e5:f6:23:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Oct 24 14:00:11 2025 GMT Not After : Oct 25 14:00:11 2025 GMT Subject: CN=6a878d5edb665e7d1d4523ece090080cf4557f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:64:65:c7:4a:ca:fe:f4:98:e6:51:f2:4c: cc:de:9b:9e:24:17:65:45:ce:2e:d0:6b:1a:22:28: 50:e0:bd:9c:d7:e1:8b:df:24:74:ba:10:31:99:1c: 22:42:b7:2d:b4:86:0c:01:4a:28:43:c1:d6:eb:c0: 51:28:e0:ed:5a:53:94:e7:77:29:75:20:8a:0a:d1: 1b:51:f2:b5:5e:1c:05:f6:4d:2a:33:2f:a6:a2:f3: 61:0a:e4:94:69:90:a3:06:20:b9:94:00:a4:1c:48: 62:48:e7:69:55:f6:43:bf:f8:b5:21:98:29:61:ad: b4:31:8f:72:d9:b0:e7:1c:39:46:a8:c8:ff:31:32: 66:59:89:80:96:bb:da:d9:b0:32:47:3a:62:e4:f1: ca:a5:26:36:f9:2a:88:e2:b4:0b:65:c5:04:fe:13: 00:74:18:55:54:ed:80:93:c9:e9:8d:c7:d1:35:48: b0:b3:f1:6e:aa:99:b1:1a:70:ec:6d:14:b1:3f:2d: 5d:31:be:76:92:e2:a8:a7:9d:8f:6f:44:94:9b:5e: 28:4e:a2:2a:88:35:3f:3f:a4:25:69:12:64:ea:20: ea:39:5b:12:4c:69:36:bc:7c:2b:7b:e1:b5:8b:d5: 5e:35:67:fe:3d:eb:f2:d2:73:78:25:85:2d:d6:61: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:87:8D:5E:DB:66:5E:7D:1D:45:23:EC:E0:90:08:0C:F4:55:7F:43 X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:58:33:2c:3b:f3:7c:f5:a8:66:c3:76:ab:58:c2:f4:11:99: 18:86:ab:dd:1b:6b:61:c4:5e:39:eb:c8:37:f5:70:0a:f3:c8: d1:73:47:4b:1f:bb:02:80:83:a9:80:8c:eb:6c:00:4e:b8:62: 37:29:b3:a1:79:7a:99:e9:f2:99:07:f3:2a:18:f0:94:34:3c: 17:be:e5:4d:04:20:a2:02:1d:fc:0f:bb:e9:4a:3d:e7:24:c2: cc:d5:50:79:74:45:af:c3:90:14:08:8b:70:61:a9:3d:f1:89: 38:1b:c7:d3:ac:dc:83:ce:15:02:f6:15:3d:8b:dc:dc:be:65: b0:76:fd:6a:6a:d7:26:22:62:a3:14:24:7a:b1:ba:a4:c5:b3: 26:a5:15:2d:fe:94:a9:bd:d6:0c:e5:44:56:73:c7:21:39:b0: 67:c6:ee:5c:b8:8f:45:5a:ee:ba:1e:3d:dd:44:e2:fb:5d:e4: 64:e0:9e:9a:df:75:46:29:95:2e:08:4e:f9:a7:5d:fc:1c:e3: 41:5b:df:12:25:1f:62:32:b3:af:46:4e:40:c9:55:2d:9c:3a: 25:25:e3:23:c2:b9:0a:41:31:8e:ce:11:63:60:55:f5:fe:26: 4f:bf:30:5a:21:c3:b0:2c:f4:08:f6:b8:00:da:24:6d:53:76: 0f:95:cb:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoWhRRqGVSkWZFO5tLl9iOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjUxMDI0MTQwMDExWhcNMjUxMDI1MTQwMDExWjAzMTEwLwYDVQQD Eyg2YTg3OGQ1ZWRiNjY1ZTdkMWQ0NTIzZWNlMDkwMDgwY2Y0NTU3ZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24pkZcdKyv70mOZR8kzM3pueJBdl Rc4u0GsaIihQ4L2c1+GL3yR0uhAxmRwiQrcttIYMAUooQ8HW68BRKODtWlOU53cp dSCKCtEbUfK1XhwF9k0qMy+movNhCuSUaZCjBiC5lACkHEhiSOdpVfZDv/i1IZgp Ya20MY9y2bDnHDlGqMj/MTJmWYmAlrva2bAyRzpi5PHKpSY2+SqI4rQLZcUE/hMA dBhVVO2Ak8npjcfRNUiws/FuqpmxGnDsbRSxPy1dMb52kuKop52Pb0SUm14oTqIq iDU/P6QlaRJk6iDqOVsSTGk2vHwre+G1i9VeNWf+Pevy0nN4JYUt1mHERQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqHjV7bZl59HUUj7OCQCAz0VX9DMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVgzLDvz fPWoZsN2q1jC9BGZGIar3RtrYcReOevIN/VwCvPI0XNHSx+7AoCDqYCM62wATrhi NymzoXl6menymQfzKhjwlDQ8F77lTQQgogId/A+76Uo95yTCzNVQeXRFr8OQFAiL cGGpPfGJOBvH06zcg84VAvYVPYvc3L5lsHb9amrXJiJioxQkerG6pMWzJqUVLf6U qb3WDOVEVnPHITmwZ8buXLiPRVruuh493UTi+13kZOCemt91RimVLghO+add/Bzj QVvfEiUfYjKzr0ZOQMlVLZw6JSXjI8K5CkExjs4RY2BV9f4mT78wWiHDsCz0CPa4 ANokbVN2D5XL5Q== -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:32 2025 by rpki-client