$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: CNavH4i6ABJHb6mNg12vhGb4Ezg8q0qy17kmDwK+iyo= Subject key identifier: AD:34:A6:12:61:2D:21:6F:BA:70:F8:A7:10:5A:E5:5E:6A:A1:C0:43 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019A1918D785D827900E3D8B3F5D7D262880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 12C7 Signing time: Sat 25 Oct 2025 02:00:49 +0000 Manifest this update: Sat 25 Oct 2025 02:00:49 +0000 Manifest next update: Sun 26 Oct 2025 02:00:49 +0000 Files and hashes: 1: 4RKx0TPWpjyqFnYw_5DcC4r--8c.roa (hash: EeJxEgHcgX2POFtcheGSjZ/nSQoAG58B2CWKgWaFLHU=) 2: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 3: B7-nq7_cc4f7Zt868VHWF4evtl4.roa (hash: 8XyukQXz+vjZuY6nqgv3ycX242CL7BTZXHzKPn1lLzs=) 4: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: 7B6QlrrQJH91hwthluxdexidER7CHjnX8JRrx5Hcdeg=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: f4_XIVmsIZE5Q2N24spgeU0yDjk.roa (hash: 9PnPL8Uj92c8N0K6S0DkkLyk9Siv5wZEJPC/dCt0/ys=) 10: oZha6b5w9clZtNXo-zdOnTB4ZH4.roa (hash: eJd4ltM6RY/dDJSxWZcaSV6+RgrT6iyc6q41HyI/IVc=) 11: tWNAblpSIHBRwstDjrx69LZTG3c.roa (hash: TOR0ePLyq2A8fQRU7qwOgqkqVyE2uNZxjRQtXz0qxQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:18:d7:85:d8:27:90:0e:3d:8b:3f:5d:7d:26:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Oct 25 02:00:49 2025 GMT Not After : Oct 26 02:00:49 2025 GMT Subject: CN=ad34a612612d216fba70f8a7105ae55e6aa1c043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:45:68:54:56:56:9b:c7:c1:39:62:d4:a3: 5e:26:5e:88:c7:b6:98:02:c7:d1:5d:8b:1a:6b:82: fd:de:f1:9d:cb:69:36:72:9b:db:a6:70:31:11:e7: 62:1d:45:21:a1:ba:45:fc:88:47:38:20:a0:32:b0: 49:66:b4:57:81:2c:3f:15:eb:1f:31:a5:80:b9:f0: 9e:d0:24:2a:3b:78:20:ec:1a:4c:ec:08:b2:94:e1: bb:f1:dd:bd:36:b6:ba:39:31:68:fa:c7:7b:93:bd: b5:15:25:53:f9:27:a2:7b:f8:ae:a6:91:37:be:c9: 7d:30:58:4c:c2:a0:00:e4:90:57:e0:b2:f3:50:fa: 33:ab:d0:39:f0:52:22:d1:72:82:c5:6b:99:a9:7d: d1:8e:67:1e:77:0a:cf:9b:ba:9c:dd:32:a6:e3:28: c9:a7:1f:51:d9:14:90:c5:41:b3:fa:30:94:6c:d2: 94:a8:d7:d9:29:2a:70:80:92:d8:52:83:5e:cd:5c: 2b:d1:a9:93:7a:1a:d8:b0:e0:0e:91:63:4e:9d:a7: 55:da:08:e2:1a:b3:06:9b:6d:3c:58:1e:9c:27:45: 92:6e:ca:8e:cd:66:cf:df:05:2b:1f:8e:3f:5c:c6: 42:57:13:41:67:a6:e8:ba:4a:62:a3:1b:48:5e:fd: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:A6:12:61:2D:21:6F:BA:70:F8:A7:10:5A:E5:5E:6A:A1:C0:43 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:42:54:af:7e:52:25:07:ff:ca:57:70:22:e6:d4:2d:74:d1: 7e:3b:6f:2c:99:fe:08:0c:6b:ea:14:1e:73:aa:8c:a5:50:5f: 69:7b:d9:8a:51:f9:21:e8:17:17:d0:26:72:57:f5:c3:34:1d: 42:f2:a4:4c:89:d3:0a:d6:e4:cb:c5:c3:ba:77:91:e4:54:98: 86:72:6b:16:dd:86:72:94:c8:b5:1a:e4:05:2a:e0:1d:4a:0f: fd:56:1b:d4:66:e4:63:6a:aa:ca:33:fc:7a:b4:f8:98:44:f3: 0f:56:18:25:08:93:4f:05:a6:27:17:55:b4:cb:98:5d:d8:1f: 13:a8:ac:5d:55:5d:de:7f:7e:a2:5f:5c:2d:c7:45:1a:51:0b: 8c:d7:d2:98:18:a2:0f:6f:f9:9a:ec:7f:90:3c:a7:09:dc:6b: fc:31:01:df:3c:72:60:d4:8c:8d:24:c2:5a:4a:64:ba:5a:e9: 57:9c:78:b3:60:73:39:34:83:a9:34:c1:2c:f5:e7:75:69:3a: 4a:d8:d9:19:4f:36:4c:d0:18:c6:37:16:d8:27:e4:8e:4b:c9: a6:e7:e2:73:6f:e3:b8:69:de:37:4b:98:55:7b:91:77:ed:e2: dc:b4:ff:5d:c0:bb:c6:3b:62:0d:18:b9:18:1f:b8:3f:7c:6f: 2e:7b:c4:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZGNeF2CeQDj2LP119JiiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUxMDI1MDIwMDQ5WhcNMjUxMDI2MDIwMDQ5WjAzMTEwLwYDVQQD EyhhZDM0YTYxMjYxMmQyMTZmYmE3MGY4YTcxMDVhZTU1ZTZhYTFjMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveJFaFRWVpvHwTli1KNeJl6Ix7aY AsfRXYsaa4L93vGdy2k2cpvbpnAxEediHUUhobpF/IhHOCCgMrBJZrRXgSw/Fesf MaWAufCe0CQqO3gg7BpM7AiylOG78d29Nra6OTFo+sd7k721FSVT+Seie/iuppE3 vsl9MFhMwqAA5JBX4LLzUPozq9A58FIi0XKCxWuZqX3RjmcedwrPm7qc3TKm4yjJ px9R2RSQxUGz+jCUbNKUqNfZKSpwgJLYUoNezVwr0amTehrYsOAOkWNOnadV2gji GrMGm208WB6cJ0WSbsqOzWbP3wUrH44/XMZCVxNBZ6boukpioxtIXv3lBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK00phJhLSFvunD4pxBa5V5qocBDMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkJUr35S JQf/yldwIubULXTRfjtvLJn+CAxr6hQec6qMpVBfaXvZilH5IegXF9Amclf1wzQd QvKkTInTCtbky8XDuneR5FSYhnJrFt2GcpTItRrkBSrgHUoP/VYb1GbkY2qqyjP8 erT4mETzD1YYJQiTTwWmJxdVtMuYXdgfE6isXVVd3n9+ol9cLcdFGlELjNfSmBii D2/5mux/kDynCdxr/DEB3zxyYNSMjSTCWkpkulrpV5x4s2BzOTSDqTTBLPXndWk6 StjZGU82TNAYxjcW2CfkjkvJpufic2/juGneN0uYVXuRd+3i3LT/XcC7xjtiDRi5 GB+4P3xvLnvESQ== -----END CERTIFICATE-----Generated at Sat Oct 25 09:42:29 2025 by rpki-client