$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: x+aMApMlVORnpmYj70XY/cWB/WlwM+5wO58YRvm7Uk4= Subject key identifier: 83:72:E0:08:CB:62:6F:5B:44:53:3E:C3:D3:EE:77:2D:98:1B:64:26 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 01992DB50BE895FF1E117C3974592602B00C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 124D Signing time: Tue 09 Sep 2025 09:01:03 +0000 Manifest this update: Tue 09 Sep 2025 09:01:03 +0000 Manifest next update: Wed 10 Sep 2025 09:01:03 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: B7-nq7_cc4f7Zt868VHWF4evtl4.roa (hash: 8XyukQXz+vjZuY6nqgv3ycX242CL7BTZXHzKPn1lLzs=) 3: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 4: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 5: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: abmbKTp/CiLzO7ANZpw0r+nCjV7FHYoWA00wA//Uw4g=) 6: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 7: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 8: f4_XIVmsIZE5Q2N24spgeU0yDjk.roa (hash: 9PnPL8Uj92c8N0K6S0DkkLyk9Siv5wZEJPC/dCt0/ys=) 9: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 10: oZha6b5w9clZtNXo-zdOnTB4ZH4.roa (hash: eJd4ltM6RY/dDJSxWZcaSV6+RgrT6iyc6q41HyI/IVc=) 11: tWNAblpSIHBRwstDjrx69LZTG3c.roa (hash: TOR0ePLyq2A8fQRU7qwOgqkqVyE2uNZxjRQtXz0qxQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:b5:0b:e8:95:ff:1e:11:7c:39:74:59:26:02:b0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Sep 9 09:01:03 2025 GMT Not After : Sep 10 09:01:03 2025 GMT Subject: CN=8372e008cb626f5b44533ec3d3ee772d981b6426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:08:77:5d:3e:bc:da:9d:6c:d5:54:ab:86: ec:10:f4:ae:23:9d:59:bc:58:86:ee:fd:91:d1:e1: fb:46:67:5b:66:1c:13:1d:d2:29:13:d1:c3:5e:97: 80:39:2e:5e:3f:a3:f8:27:7f:a1:5e:f4:0f:7c:be: b0:9e:b2:b3:44:ff:68:59:d0:18:d2:1f:b6:6b:9e: b9:26:da:b9:38:b0:f4:25:7d:b5:8b:09:23:b3:7f: ae:7d:2f:27:00:a6:ff:8b:96:d5:9a:f8:10:8a:cf: 47:16:bc:c6:59:b0:b7:2c:00:24:ee:ec:89:b1:05: 8e:f0:b4:5e:d8:fb:b6:f4:cb:89:0d:dd:62:37:05: 87:3f:67:6d:a0:d3:36:b4:ba:d4:61:6f:f3:5b:00: a3:3d:48:8a:12:92:5c:c8:48:d6:78:68:0c:f8:0e: af:2e:22:bf:3b:cc:37:bb:b7:cb:61:d5:1b:3c:46: 4c:35:88:e3:f8:2e:6c:0c:95:93:b6:be:b9:94:cd: 1a:8f:92:b5:e4:b1:eb:cf:97:c0:93:f9:cf:16:93: 48:08:eb:6e:fc:5a:d7:b5:bc:74:95:51:65:5c:ff: 7a:14:f7:da:0e:33:8d:89:87:23:6f:0f:95:a6:54: 78:29:ce:01:f6:0c:4e:2d:77:a4:26:4a:60:8a:2e: ca:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:72:E0:08:CB:62:6F:5B:44:53:3E:C3:D3:EE:77:2D:98:1B:64:26 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c6:86:e9:6a:d6:f4:6c:5f:79:c7:b8:eb:50:68:e9:e5:b5: a4:c5:e6:4b:28:b4:53:b5:72:2c:7e:ea:f2:3d:af:eb:46:a7: 37:b3:7e:ae:c0:63:64:bf:d6:74:bb:4e:a2:40:dd:99:5b:7f: 4b:41:2f:5a:fe:3b:d6:56:fc:12:bc:86:36:cb:9a:50:47:c0: e3:d4:ce:1d:a9:88:d5:0d:ce:8f:1d:06:38:b2:a0:66:46:9a: 56:69:ef:25:b6:0a:10:86:8b:49:bc:50:23:27:1a:36:72:0c: 05:a3:d0:1e:f6:17:b1:61:93:9b:e9:aa:58:3d:11:6c:ba:05: 8e:6e:68:01:42:ff:cb:c7:3d:3f:28:ab:43:ae:eb:47:3d:d3: 0e:ca:bb:89:82:3f:44:76:19:8f:6a:a4:71:b1:55:f6:af:32: f9:70:9f:3e:9a:9c:27:c3:6d:60:e6:7a:66:ec:46:5c:f4:26: 37:2e:08:85:c1:91:40:0e:a8:2f:55:a7:bc:6e:b1:42:fd:51: f1:78:e4:e3:aa:ba:b6:89:2c:79:5a:5e:52:38:aa:b1:4a:2b: cc:15:00:ba:31:d9:f4:1d:5e:fa:60:27:4a:92:49:7d:5b:14: 0c:4c:f9:08:1d:b6:96:bd:34:11:56:8e:c6:92:f5:0e:69:28: 89:28:02:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkttQvolf8eEXw5dFkmArAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwOTA5MDkwMTAzWhcNMjUwOTEwMDkwMTAzWjAzMTEwLwYDVQQD Eyg4MzcyZTAwOGNiNjI2ZjViNDQ1MzNlYzNkM2VlNzcyZDk4MWI2NDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLYId10+vNqdbNVUq4bsEPSuI51Z vFiG7v2R0eH7RmdbZhwTHdIpE9HDXpeAOS5eP6P4J3+hXvQPfL6wnrKzRP9oWdAY 0h+2a565Jtq5OLD0JX21iwkjs3+ufS8nAKb/i5bVmvgQis9HFrzGWbC3LAAk7uyJ sQWO8LRe2Pu29MuJDd1iNwWHP2dtoNM2tLrUYW/zWwCjPUiKEpJcyEjWeGgM+A6v LiK/O8w3u7fLYdUbPEZMNYjj+C5sDJWTtr65lM0aj5K15LHrz5fAk/nPFpNICOtu /FrXtbx0lVFlXP96FPfaDjONiYcjbw+VplR4Kc4B9gxOLXekJkpgii7KAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINy4AjLYm9bRFM+w9Pudy2YG2QmMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcaG6WrW 9Gxfece461Bo6eW1pMXmSyi0U7VyLH7q8j2v60anN7N+rsBjZL/WdLtOokDdmVt/ S0EvWv471lb8EryGNsuaUEfA49TOHamI1Q3Ojx0GOLKgZkaaVmnvJbYKEIaLSbxQ IycaNnIMBaPQHvYXsWGTm+mqWD0RbLoFjm5oAUL/y8c9PyirQ67rRz3TDsq7iYI/ RHYZj2qkcbFV9q8y+XCfPpqcJ8NtYOZ6ZuxGXPQmNy4IhcGRQA6oL1WnvG6xQv1R 8Xjk46q6tokseVpeUjiqsUorzBUAujHZ9B1e+mAnSpJJfVsUDEz5CB22lr00EVaO xpL1DmkoiSgCgw== -----END CERTIFICATE-----Generated at Tue Sep 9 14:22:39 2025 by rpki-client