$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: vN2wF6t7BE1pO4ri4zC0KvBaI32RdBdFCwjiXxj70YA= Subject key identifier: 62:14:AA:F6:DE:88:87:F7:A2:BA:DB:D3:99:5B:FD:D6:83:60:BC:78 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019A1D62C97DAE36100A88B0B5B5CFF9CF4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0D88 Signing time: Sat 25 Oct 2025 22:00:04 +0000 Manifest this update: Sat 25 Oct 2025 22:00:04 +0000 Manifest next update: Sun 26 Oct 2025 22:00:04 +0000 Files and hashes: 1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=) 2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=) 7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: KFP4gCxEtLN0+4QFGN7bvEGL2f5P8NsUVG+YbBNfN/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 19:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:62:c9:7d:ae:36:10:0a:88:b0:b5:b5:cf:f9:cf:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Oct 25 22:00:04 2025 GMT Not After : Oct 26 22:00:04 2025 GMT Subject: CN=6214aaf6de8887f7a2badbd3995bfdd68360bc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a6:3e:bf:f9:11:f4:07:4e:2c:0b:cf:7d:ff: 96:7d:6a:f4:a0:8f:af:a7:9b:64:4b:cc:12:9c:f0: ab:38:85:a7:e7:ec:aa:f3:c5:44:ef:64:bc:30:19: 4b:51:86:ef:da:00:d8:96:cc:b1:71:21:54:94:25: 85:2b:65:c8:f0:f3:f0:f4:a1:5e:78:a0:de:64:24: 47:ba:c0:03:5e:27:c7:4a:c3:dd:3a:a6:cc:f7:ec: 61:8a:92:40:5c:32:83:32:bf:43:ca:62:46:58:d7: d9:a0:c7:12:26:6c:fe:06:2e:84:c3:3e:85:8f:4e: 50:4a:16:d3:ed:6c:99:10:9f:95:f5:4f:dc:35:df: c8:d8:5d:73:2d:2b:e5:58:c2:23:78:d7:21:6a:55: 64:c6:a5:44:a9:2e:93:f3:2c:cb:dc:5d:25:e2:ea: f4:47:1d:29:d3:a7:1f:f2:a0:8b:44:e2:95:ab:ac: fd:62:c5:03:85:61:07:b6:1a:db:94:78:f0:b7:ec: 9c:0c:fc:b0:c1:3b:1c:74:92:96:89:05:0b:e0:78: 27:e5:7d:12:2f:1b:40:41:0b:c8:0d:76:9c:c9:01: 6c:ab:74:71:be:25:9f:a0:f8:56:6e:1f:16:07:e2: 2d:bc:e8:fa:8b:c2:23:99:96:b6:87:b2:36:01:84: 4e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:14:AA:F6:DE:88:87:F7:A2:BA:DB:D3:99:5B:FD:D6:83:60:BC:78 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:3c:e7:4a:5d:e9:35:e6:c9:5c:47:7b:28:d5:4d:89:05:ab: 40:2f:c4:52:2c:4e:7a:38:b7:1d:fa:c2:aa:83:ae:db:8d:6e: a7:1d:93:80:8e:62:6e:ca:b7:72:fc:39:7d:0a:a7:01:aa:94: cf:d9:1e:e3:0c:f7:85:bb:39:7d:36:41:05:87:54:42:bb:89: 7e:b1:0a:8f:2c:01:f4:d2:a5:33:d0:ac:54:19:e3:a8:82:05: e4:70:43:58:f9:ef:9d:de:8f:fb:a9:b4:ee:2c:7d:89:0c:2a: ae:8e:b7:13:cd:3b:26:1a:2f:98:8c:73:e6:20:4a:6b:34:65: d0:d5:3a:8e:ab:b1:9d:25:6f:6d:3a:2f:70:57:1e:17:f3:e5: 69:3d:20:8f:78:3f:a6:6f:04:60:f9:94:31:cc:37:31:b1:81: 69:19:5b:c7:c3:eb:6e:51:87:9f:a1:4a:da:eb:08:c9:c9:65: 04:c8:19:11:89:35:33:54:78:92:cb:dc:2a:de:8a:4c:47:70: 30:d8:66:17:1c:29:cb:7e:d7:34:08:5f:4a:fe:c2:fa:c1:c3: 97:44:0f:d9:bc:c7:cb:e1:6e:66:d4:4c:cc:7b:92:cf:73:d5: 95:d0:46:92:06:e3:dd:eb:bc:06:68:f8:72:4d:ed:bd:85:df: 4d:3b:96:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZodYsl9rjYQCoiwtbXP+c9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUxMDI1MjIwMDA0WhcNMjUxMDI2MjIwMDA0WjAzMTEwLwYDVQQD Eyg2MjE0YWFmNmRlODg4N2Y3YTJiYWRiZDM5OTViZmRkNjgzNjBiYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aY+v/kR9AdOLAvPff+WfWr0oI+v p5tkS8wSnPCrOIWn5+yq88VE72S8MBlLUYbv2gDYlsyxcSFUlCWFK2XI8PPw9KFe eKDeZCRHusADXifHSsPdOqbM9+xhipJAXDKDMr9DymJGWNfZoMcSJmz+Bi6Ewz6F j05QShbT7WyZEJ+V9U/cNd/I2F1zLSvlWMIjeNchalVkxqVEqS6T8yzL3F0l4ur0 Rx0p06cf8qCLROKVq6z9YsUDhWEHthrblHjwt+ycDPywwTscdJKWiQUL4Hgn5X0S LxtAQQvIDXacyQFsq3RxviWfoPhWbh8WB+ItvOj6i8IjmZa2h7I2AYROzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIUqvbeiIf3orrb05lb/daDYLx4MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjznSl3p NebJXEd7KNVNiQWrQC/EUixOeji3HfrCqoOu241upx2TgI5ibsq3cvw5fQqnAaqU z9ke4wz3hbs5fTZBBYdUQruJfrEKjywB9NKlM9CsVBnjqIIF5HBDWPnvnd6P+6m0 7ix9iQwqro63E807JhovmIxz5iBKazRl0NU6jquxnSVvbTovcFceF/PlaT0gj3g/ pm8EYPmUMcw3MbGBaRlbx8PrblGHn6FK2usIycllBMgZEYk1M1R4ksvcKt6KTEdw MNhmFxwpy37XNAhfSv7C+sHDl0QP2bzHy+FuZtRMzHuSz3PVldBGkgbj3eu8Bmj4 ck3tvYXfTTuWvg== -----END CERTIFICATE-----Generated at Sun Oct 26 02:35:44 2025 by rpki-client