$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: QC87KG/yGzDndCCu+EubxYyB82OP52lD99tMNW/NUEw= Subject key identifier: 3C:F2:5D:B2:14:94:10:DC:34:58:2B:B0:25:92:9E:30:D5:71:8C:01 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019A1E3EEDDB4E2D69678EF00BA9C3C57053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 172B Signing time: Sun 26 Oct 2025 02:00:31 +0000 Manifest this update: Sun 26 Oct 2025 02:00:31 +0000 Manifest next update: Mon 27 Oct 2025 02:00:31 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: MFsAIGGhjwkS7QqCImE8k8j0fHE.roa (hash: agrbR9N2CmVo23L0pspB3pCZ8XyUH28RrwKnFVhuak4=) 8: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 9: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 10: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 11: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: OmnGGy4riaZ+Nk/PluqQNCjaVDUdVU2yqhZcRbgxoKs=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1e:3e:ed:db:4e:2d:69:67:8e:f0:0b:a9:c3:c5:70:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Oct 26 02:00:31 2025 GMT Not After : Oct 27 02:00:31 2025 GMT Subject: CN=3cf25db2149410dc34582bb025929e30d5718c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:e8:54:94:e5:03:2f:76:e8:ab:c2:8d:8f: ec:0b:be:5e:12:03:1a:a0:90:5a:8e:9b:70:9c:fc: 33:d8:f2:68:ae:49:3e:13:cd:c5:d0:a1:d7:01:11: e0:6d:99:22:7c:8c:dd:cd:e2:88:4e:58:3b:74:31: af:70:27:c9:f2:42:82:1e:88:41:b4:f7:4f:1a:43: f1:47:39:c2:01:0d:f9:ad:5e:a0:fc:be:23:a1:02: c6:e7:ef:28:32:12:ee:e5:42:a5:ad:55:ae:85:75: e4:fa:88:ea:d7:58:df:a7:c2:8f:96:52:1a:f7:95: 26:37:42:71:6e:95:9a:56:41:d4:9a:d2:37:5c:b7: 37:22:93:ac:8a:26:91:d4:d1:61:2c:70:30:31:68: 55:0c:d4:16:fa:1a:3a:6b:9a:13:9a:a7:7c:06:72: 45:f5:b0:22:67:3e:8a:57:f9:2c:3e:a1:1e:a8:af: b0:d3:f1:bc:52:6b:21:43:89:60:9e:aa:c2:e2:c6: a9:4b:07:ae:8f:7c:7b:4e:02:b9:9a:6b:30:c4:23: 33:d6:6d:6d:7a:6e:b2:23:63:e9:7c:9a:76:31:da: de:5e:1f:6f:3d:e2:7e:49:7a:bd:f8:0d:e3:ad:87: dc:d6:ba:1c:32:f0:22:a9:4a:d2:b6:0b:ee:a3:0b: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F2:5D:B2:14:94:10:DC:34:58:2B:B0:25:92:9E:30:D5:71:8C:01 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fa:1f:27:39:0b:48:ef:e5:7b:b6:95:12:09:5a:8d:81:19: ee:5b:1a:79:e3:54:b0:28:ca:ae:71:cc:91:b4:be:1a:7b:72: b3:d3:86:80:56:b3:3f:44:c0:42:c4:b0:2a:24:07:28:d8:67: 13:be:d3:98:27:5f:a2:e9:5f:47:9e:5a:17:2e:11:e4:21:9d: e7:b2:e6:d5:f5:ab:80:49:04:40:ba:e5:68:e7:c6:ae:4b:55: 3d:5f:7d:9f:ff:ca:6f:68:c3:bf:38:fe:51:83:c0:e5:93:34: d6:99:8e:7a:a9:82:fc:51:09:fd:44:60:92:f6:81:b5:2b:84: 92:69:b0:48:86:f7:30:b9:60:bb:8d:5c:7f:26:f8:e6:6c:89: c9:06:86:bc:b5:98:7c:d1:21:35:28:4a:5d:1f:c3:c2:68:19: 0b:77:87:ab:0f:db:5e:da:84:bb:08:e6:cb:5e:98:d8:7b:60: cb:75:7e:3f:73:81:77:9b:4b:55:6d:3c:af:ab:70:14:18:1e: 80:49:6f:da:0c:96:2f:a3:fe:48:45:11:51:22:05:d8:d5:24: b1:93:ef:96:ac:2a:08:bd:2f:61:11:f9:ec:6e:23:ae:49:72: d7:1a:0a:c1:00:18:a0:0c:40:12:88:9b:f0:ec:c5:7f:ea:f6: 87:f5:b9:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoePu3bTi1pZ47wC6nDxXBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUxMDI2MDIwMDMxWhcNMjUxMDI3MDIwMDMxWjAzMTEwLwYDVQQD EygzY2YyNWRiMjE0OTQxMGRjMzQ1ODJiYjAyNTkyOWUzMGQ1NzE4YzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7DoVJTlAy926KvCjY/sC75eEgMa oJBajptwnPwz2PJorkk+E83F0KHXARHgbZkifIzdzeKITlg7dDGvcCfJ8kKCHohB tPdPGkPxRznCAQ35rV6g/L4joQLG5+8oMhLu5UKlrVWuhXXk+ojq11jfp8KPllIa 95UmN0JxbpWaVkHUmtI3XLc3IpOsiiaR1NFhLHAwMWhVDNQW+ho6a5oTmqd8BnJF 9bAiZz6KV/ksPqEeqK+w0/G8UmshQ4lgnqrC4sapSweuj3x7TgK5mmswxCMz1m1t em6yI2PpfJp2MdreXh9vPeJ+SXq9+A3jrYfc1rocMvAiqUrStgvuowtWLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzyXbIUlBDcNFgrsCWSnjDVcYwBMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/ofJzkL SO/le7aVEglajYEZ7lsaeeNUsCjKrnHMkbS+Gntys9OGgFazP0TAQsSwKiQHKNhn E77TmCdfoulfR55aFy4R5CGd57Lm1fWrgEkEQLrlaOfGrktVPV99n//Kb2jDvzj+ UYPA5ZM01pmOeqmC/FEJ/URgkvaBtSuEkmmwSIb3MLlgu41cfyb45myJyQaGvLWY fNEhNShKXR/DwmgZC3eHqw/bXtqEuwjmy16Y2Htgy3V+P3OBd5tLVW08r6twFBge gElv2gyWL6P+SEURUSIF2NUksZPvlqwqCL0vYRH57G4jrkly1xoKwQAYoAxAEoib 8OzFf+r2h/W5Nw== -----END CERTIFICATE-----Generated at Sun Oct 26 08:19:12 2025 by rpki-client