$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: 8N63fxUTuJkSmpu7uq2SSQDtVIJCPR7PqZYhGaIODWE= Subject key identifier: BB:57:94:0C:A5:BD:AA:E8:F3:3A:BF:94:E9:2E:C0:D6:18:E0:59:F5 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01974A43F9B52792AA73317308A75CBC386C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0C0F Signing time: Sat 07 Jun 2025 12:00:58 +0000 Manifest this update: Sat 07 Jun 2025 12:00:58 +0000 Manifest next update: Sun 08 Jun 2025 12:00:58 +0000 Files and hashes: 1: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 2: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 3: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 4: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 5: NTeC-NbINKuWXIN2JRj2jE73cMQ.roa (hash: usN4QfuBj821Bx/aBMyN171iAsEpZjNXNiVf16Jr2OA=) 6: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 7: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 8: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 9: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 10: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 11: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 12: mp_P58smkepPURIQ0OWZxTjk7YU.roa (hash: dgthwSpZuKmO50yEykTctg4zGl2a/soBiZBn4MrCwdc=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: GtyjVKoGe7C9MKvHWzby7LdstlhrrOfrr/g+0yV5ijs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:43:f9:b5:27:92:aa:73:31:73:08:a7:5c:bc:38:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jun 7 12:00:58 2025 GMT Not After : Jun 8 12:00:58 2025 GMT Subject: CN=bb57940ca5bdaae8f33abf94e92ec0d618e059f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:1f:84:85:77:2d:69:9e:df:87:1c:60:c6: 8f:e0:74:d1:08:9a:bf:f8:0b:45:cf:62:ec:ab:4c: 25:16:be:29:dc:9d:50:5b:4f:8d:fb:78:d4:8b:93: 4e:99:96:f5:d4:b7:ff:73:cd:cb:ec:84:19:40:99: 56:8a:8c:f5:3a:4b:fe:da:da:72:ea:7a:9f:0a:13: 48:70:63:75:5a:63:4d:e4:45:72:46:7b:18:f1:71: 38:1b:c4:52:5e:5b:4f:5c:13:56:c2:7a:64:11:3b: 60:62:08:38:b6:cf:ae:d4:ab:63:b2:cb:fc:a9:1e: 8c:88:2a:9b:1a:7d:7f:be:24:6e:fe:2e:8c:89:99: f6:ba:9a:e5:06:98:3e:47:0c:a2:8b:f2:1f:72:b7: c5:81:36:3b:6b:1f:f4:0b:8f:bc:83:21:9e:54:27: 62:af:70:0c:5d:5e:db:13:f9:64:e7:b7:61:d6:8a: c4:ec:3c:68:f7:e6:d2:4f:f8:bc:3f:50:c1:40:d7: 9f:8e:80:97:d2:ee:6b:e5:da:66:10:a4:33:b8:b9: e3:6f:78:53:20:19:d7:d0:e1:14:0d:23:70:0e:a7: 9e:e5:39:08:e9:f9:60:0c:8a:34:64:bc:50:17:4e: 73:05:92:6f:6a:3c:8f:26:fa:7c:73:37:65:85:93: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:57:94:0C:A5:BD:AA:E8:F3:3A:BF:94:E9:2E:C0:D6:18:E0:59:F5 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a6:85:2e:19:24:f6:26:0e:59:11:96:2c:12:db:0f:9c:a8: 8e:0c:04:fa:85:6e:b5:5a:ae:be:bf:81:4a:74:bb:a5:7a:2a: 1c:f9:b6:82:63:52:a5:36:9d:27:cd:64:65:74:c4:b5:34:cb: be:32:bd:14:fe:09:9e:67:d2:a5:f0:0a:b0:7b:b1:bd:54:dd: 01:9d:3c:1f:24:8f:41:e1:09:14:a7:a0:71:29:9a:0f:6e:25: ae:15:24:f1:de:75:47:ba:21:6c:5e:ca:0a:48:b4:f7:7a:51: c9:5b:6b:b0:86:a7:fd:7d:2b:95:cb:ee:59:32:3f:a9:11:34: 44:90:d9:e8:49:c8:dc:9b:03:a1:4d:f4:21:c5:d0:84:ec:1d: b0:81:8d:6c:eb:34:34:63:df:24:40:49:61:8a:72:53:c7:17: 7e:38:2f:28:bc:83:45:9b:d0:3d:15:35:d2:6e:8f:8e:fc:c0: a6:d3:81:af:d3:f1:c2:12:22:1c:18:a3:95:7a:b2:2e:88:7f: 8f:12:33:60:68:59:f4:7a:8a:a8:e3:93:f4:7e:e5:35:df:5c: ab:ae:39:b5:f1:54:25:b1:94:74:43:ba:53:36:a6:53:54:4a: 40:89:31:68:73:2e:41:46:87:77:c6:d0:70:63:97:db:42:00: 16:96:94:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKQ/m1J5KqczFzCKdcvDhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUwNjA3MTIwMDU4WhcNMjUwNjA4MTIwMDU4WjAzMTEwLwYDVQQD EyhiYjU3OTQwY2E1YmRhYWU4ZjMzYWJmOTRlOTJlYzBkNjE4ZTA1OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYsfhIV3LWme34ccYMaP4HTRCJq/ +AtFz2Lsq0wlFr4p3J1QW0+N+3jUi5NOmZb11Lf/c83L7IQZQJlWioz1Okv+2tpy 6nqfChNIcGN1WmNN5EVyRnsY8XE4G8RSXltPXBNWwnpkETtgYgg4ts+u1Ktjssv8 qR6MiCqbGn1/viRu/i6MiZn2uprlBpg+Rwyii/IfcrfFgTY7ax/0C4+8gyGeVCdi r3AMXV7bE/lk57dh1orE7Dxo9+bST/i8P1DBQNefjoCX0u5r5dpmEKQzuLnjb3hT IBnX0OEUDSNwDqee5TkI6flgDIo0ZLxQF05zBZJvajyPJvp8czdlhZPQswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtXlAylvaro8zq/lOkuwNYY4Fn1MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqaFLhkk 9iYOWRGWLBLbD5yojgwE+oVutVquvr+BSnS7pXoqHPm2gmNSpTadJ81kZXTEtTTL vjK9FP4JnmfSpfAKsHuxvVTdAZ08HySPQeEJFKegcSmaD24lrhUk8d51R7ohbF7K Cki093pRyVtrsIan/X0rlcvuWTI/qRE0RJDZ6EnI3JsDoU30IcXQhOwdsIGNbOs0 NGPfJEBJYYpyU8cXfjgvKLyDRZvQPRU10m6PjvzAptOBr9PxwhIiHBijlXqyLoh/ jxIzYGhZ9HqKqOOT9H7lNd9cq645tfFUJbGUdEO6UzamU1RKQIkxaHMuQUaHd8bQ cGOX20IAFpaU0g== -----END CERTIFICATE-----Generated at Sat Jun 7 14:36:32 2025 by rpki-client