$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: tR4GM6F0kxOpHMHicl3kOnJR82r2xJPtqkDmlggh1mI= Subject key identifier: 34:8C:20:3E:84:D4:FA:5A:18:CB:FA:18:86:96:A4:13:98:AE:40:63 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01992DEBED522401CB13773199FF6666F23A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0D0C Signing time: Tue 09 Sep 2025 10:01:00 +0000 Manifest this update: Tue 09 Sep 2025 10:01:00 +0000 Manifest next update: Wed 10 Sep 2025 10:01:00 +0000 Files and hashes: 1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=) 2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: 0bWXFNrgES3izxi38xtQjKi57RDaQAy2LkCrXOh+SxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:eb:ed:52:24:01:cb:13:77:31:99:ff:66:66:f2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Sep 9 10:01:00 2025 GMT Not After : Sep 10 10:01:00 2025 GMT Subject: CN=348c203e84d4fa5a18cbfa188696a41398ae4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:08:77:3b:5d:ff:ed:50:07:5f:79:ac:de:7b: b5:73:bd:50:d0:11:13:81:40:35:c6:c5:7b:c4:f3: 0d:5a:8b:55:f7:fd:2e:dc:dd:24:bf:eb:60:6a:d9: 08:22:31:7a:f4:bf:e9:8c:2b:94:99:7e:bf:d9:4f: f0:f2:72:1a:bd:6b:59:bf:51:49:2e:b9:ef:31:bb: a1:ce:ce:8a:f6:83:01:e6:79:56:0c:d7:56:04:6e: 62:63:54:35:86:f7:3e:b3:10:c0:1a:bf:f2:a7:88: 91:9d:e5:14:14:70:d3:85:ea:96:a7:63:41:28:a0: 7f:5e:b9:b3:17:e6:de:15:d9:8d:b9:60:0f:02:7a: c2:a4:b6:f3:31:5a:04:82:49:ef:d0:bb:fd:ef:23: 48:62:1d:0f:3b:47:ff:c9:33:af:41:41:1f:72:88: fe:57:55:14:4f:5b:55:2f:02:42:e5:aa:89:07:60: 44:f7:b7:1e:43:95:0b:18:0d:5f:04:d1:b7:09:73: d9:c8:3f:70:22:53:21:40:ab:78:4e:d2:96:04:81: 3c:27:aa:ce:50:13:81:d1:77:86:75:f4:3d:bc:49: 12:ac:b2:12:1d:6f:ef:95:e9:59:79:e9:b5:54:f0: 7d:7a:42:a3:bd:e4:47:67:b9:e0:00:fc:d2:a1:83: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8C:20:3E:84:D4:FA:5A:18:CB:FA:18:86:96:A4:13:98:AE:40:63 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:5a:2e:e9:24:5e:06:8f:3a:62:e9:1a:9a:80:ef:de:57: 0e:44:3e:0c:18:59:2d:a8:85:84:f0:9a:c8:ac:c3:d7:ee:89: 27:26:e3:f9:20:09:e1:2a:e2:25:2b:a6:e8:ca:09:cd:cf:74: e2:59:c3:28:01:91:e9:3f:6a:4c:5d:e2:98:79:f8:01:7b:a9: 72:28:07:26:5a:f0:c1:88:67:d7:4e:70:64:14:13:de:f8:23: b4:58:ec:0f:49:85:56:c7:76:67:3d:65:f1:0b:86:a4:40:ee: 9c:8b:92:11:cf:3d:ab:ba:52:4f:82:ec:71:4e:4a:fe:3f:cd: f7:65:75:66:78:a1:9d:5e:51:2b:89:33:98:48:67:ba:71:67: fe:48:47:2c:c4:48:c0:b4:d7:20:40:1c:13:cf:a7:53:f6:18: 3c:7f:56:f6:da:7a:66:2a:88:8d:45:a9:6f:09:a8:ea:e7:2b: 5e:cc:54:b3:00:55:6c:fd:01:31:74:ae:ec:67:03:4a:32:27: db:e0:68:5d:05:d7:4c:b1:c7:ed:96:aa:7a:bc:79:31:5c:89: f2:b0:d0:bb:65:d5:27:31:de:37:0e:15:30:b4:2e:67:47:d1: 5d:02:fa:3b:9e:13:0c:14:27:a9:3f:fa:71:e3:46:b2:eb:50: 19:0d:0c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkt6+1SJAHLE3cxmf9mZvI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUwOTA5MTAwMTAwWhcNMjUwOTEwMTAwMTAwWjAzMTEwLwYDVQQD EygzNDhjMjAzZTg0ZDRmYTVhMThjYmZhMTg4Njk2YTQxMzk4YWU0MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgh3O13/7VAHX3ms3nu1c71Q0BET gUA1xsV7xPMNWotV9/0u3N0kv+tgatkIIjF69L/pjCuUmX6/2U/w8nIavWtZv1FJ LrnvMbuhzs6K9oMB5nlWDNdWBG5iY1Q1hvc+sxDAGr/yp4iRneUUFHDTheqWp2NB KKB/XrmzF+beFdmNuWAPAnrCpLbzMVoEgknv0Lv97yNIYh0PO0f/yTOvQUEfcoj+ V1UUT1tVLwJC5aqJB2BE97ceQ5ULGA1fBNG3CXPZyD9wIlMhQKt4TtKWBIE8J6rO UBOB0XeGdfQ9vEkSrLISHW/vlelZeem1VPB9ekKjveRHZ7ngAPzSoYNkAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSMID6E1PpaGMv6GIaWpBOYrkBjMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgctaLukk XgaPOmLpGpqA795XDkQ+DBhZLaiFhPCayKzD1+6JJybj+SAJ4SriJSum6MoJzc90 4lnDKAGR6T9qTF3imHn4AXupcigHJlrwwYhn105wZBQT3vgjtFjsD0mFVsd2Zz1l 8QuGpEDunIuSEc89q7pST4LscU5K/j/N92V1ZnihnV5RK4kzmEhnunFn/khHLMRI wLTXIEAcE8+nU/YYPH9W9tp6ZiqIjUWpbwmo6ucrXsxUswBVbP0BMXSu7GcDSjIn 2+BoXQXXTLHH7Zaqerx5MVyJ8rDQu2XVJzHeNw4VMLQuZ0fRXQL6O54TDBQnqT/6 ceNGsutQGQ0MQg== -----END CERTIFICATE-----Generated at Tue Sep 9 18:42:31 2025 by rpki-client