$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: K4lolsf1p6goKnxKvlb+7cUBWGAGF8gE7YW/kzJUmTU= Subject key identifier: 06:62:9C:41:8B:5E:02:63:25:06:02:9E:FC:E3:00:3C:B7:60:7A:78 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 01992CD93311293A9C7D37CB79F2A328795D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 16AE Signing time: Tue 09 Sep 2025 05:00:55 +0000 Manifest this update: Tue 09 Sep 2025 05:00:55 +0000 Manifest next update: Wed 10 Sep 2025 05:00:55 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: MFsAIGGhjwkS7QqCImE8k8j0fHE.roa (hash: agrbR9N2CmVo23L0pspB3pCZ8XyUH28RrwKnFVhuak4=) 8: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 9: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 10: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 11: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: lgbMH0NwU8atQ6XBGwBoV9ZM3u1YrNM5heNQG/NCkJc=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:d9:33:11:29:3a:9c:7d:37:cb:79:f2:a3:28:79:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Sep 9 05:00:55 2025 GMT Not After : Sep 10 05:00:55 2025 GMT Subject: CN=06629c418b5e02632506029efce3003cb7607a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:68:d2:a1:ca:8a:98:40:11:df:93:e8:a9: 6f:a1:52:7e:06:ec:5d:4a:59:eb:65:c0:ec:7a:40: 56:59:e6:c1:cf:e0:d1:95:2e:1d:71:90:2a:16:c1: 11:bc:34:d3:ed:4b:59:e2:3b:3d:c8:cc:af:c1:e6: 1b:1c:ce:99:a4:f6:f7:a8:49:9f:71:d9:d7:73:30: fa:3f:e5:bb:e6:1b:99:c0:c5:34:b4:44:58:14:93: ab:df:3f:b4:d6:3b:2b:51:fe:08:43:28:c0:f7:fa: 26:19:db:ad:6d:09:df:ae:f0:17:14:53:50:32:f6: 3f:fb:54:38:8a:ae:08:28:39:ff:92:31:48:25:bd: b7:db:35:a1:80:53:1d:ae:37:7b:a1:e0:6f:1d:95: b8:0b:19:02:ca:0b:11:93:2c:ea:2f:d9:78:b0:38: 40:d0:8d:74:25:be:80:3b:46:c3:86:b8:e0:96:63: 29:e6:bb:ec:b8:b3:75:77:54:41:92:09:b6:0e:cc: 17:fc:a1:5c:71:f9:68:e7:a5:15:d9:6a:64:19:53: f3:e3:44:5f:66:a8:9e:b5:a3:30:ca:10:22:51:14: d0:96:1f:e2:78:85:33:23:c3:8e:eb:2f:47:2f:d0: c3:5a:f4:9d:e7:81:c3:a2:bc:71:0c:ad:72:26:6d: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:62:9C:41:8B:5E:02:63:25:06:02:9E:FC:E3:00:3C:B7:60:7A:78 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:84:c0:17:4b:43:f3:6c:28:9f:84:6e:a4:53:73:55:c9:d6: d3:57:af:62:3c:e5:38:9c:0b:bd:03:ef:26:2c:2a:af:da:af: 69:06:25:2b:f1:39:82:eb:19:71:59:d1:42:b9:f1:22:95:86: 53:18:66:c4:45:13:bb:c1:83:ac:49:32:54:a0:04:8c:d9:48: b6:40:f8:0b:34:b8:c1:80:35:03:bf:8f:f6:a4:a1:b0:25:c9: 45:01:f0:51:ea:6d:49:00:cb:5e:43:71:ad:95:3d:91:71:8a: 5f:73:0e:8c:56:9a:06:13:57:87:79:e6:6b:3a:ca:cf:c4:f3: cc:ea:85:3c:51:4c:43:bc:85:93:03:e7:92:37:6e:06:65:63: 65:08:69:3b:38:4c:70:0a:88:a2:f2:c4:d4:39:53:f5:e0:28: af:aa:9c:d8:d4:6a:bb:5d:23:40:2f:b9:8a:3f:44:e0:86:d6: 13:f7:51:6a:e2:80:e6:13:7c:84:65:c0:f0:43:1d:9b:af:3f: 1d:ec:e9:cb:b5:c2:1a:06:6f:0f:19:8b:47:da:7e:ea:48:85: 9a:44:70:52:6b:b5:53:ca:a3:62:fc:48:aa:9c:1c:bd:69:2d: cd:3c:fc:eb:97:e6:9f:6a:8b:90:88:dc:a5:f4:34:44:41:e0: d6:e2:0c:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZks2TMRKTqcfTfLefKjKHldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUwOTA5MDUwMDU1WhcNMjUwOTEwMDUwMDU1WjAzMTEwLwYDVQQD EygwNjYyOWM0MThiNWUwMjYzMjUwNjAyOWVmY2UzMDAzY2I3NjA3YTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXho0qHKiphAEd+T6KlvoVJ+Buxd SlnrZcDsekBWWebBz+DRlS4dcZAqFsERvDTT7UtZ4js9yMyvweYbHM6ZpPb3qEmf cdnXczD6P+W75huZwMU0tERYFJOr3z+01jsrUf4IQyjA9/omGdutbQnfrvAXFFNQ MvY/+1Q4iq4IKDn/kjFIJb232zWhgFMdrjd7oeBvHZW4CxkCygsRkyzqL9l4sDhA 0I10Jb6AO0bDhrjglmMp5rvsuLN1d1RBkgm2DswX/KFccflo56UV2WpkGVPz40Rf ZqietaMwyhAiURTQlh/ieIUzI8OO6y9HL9DDWvSd54HDorxxDK1yJm3MeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZinEGLXgJjJQYCnvzjADy3YHp4MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYTAF0tD 82won4RupFNzVcnW01evYjzlOJwLvQPvJiwqr9qvaQYlK/E5gusZcVnRQrnxIpWG UxhmxEUTu8GDrEkyVKAEjNlItkD4CzS4wYA1A7+P9qShsCXJRQHwUeptSQDLXkNx rZU9kXGKX3MOjFaaBhNXh3nmazrKz8TzzOqFPFFMQ7yFkwPnkjduBmVjZQhpOzhM cAqIovLE1DlT9eAor6qc2NRqu10jQC+5ij9E4IbWE/dRauKA5hN8hGXA8EMdm68/ Hezpy7XCGgZvDxmLR9p+6kiFmkRwUmu1U8qjYvxIqpwcvWktzTz865fmn2qLkIjc pfQ0REHg1uIMag== -----END CERTIFICATE-----Generated at Tue Sep 9 08:58:12 2025 by rpki-client