$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: YbSzmEAR6eJICv+6JqLZ+DM0UPz38+Kn99FpiSt+0jM= Subject key identifier: E5:EA:D6:0C:7F:7C:38:5A:BC:D4:5F:89:A4:97:15:CB:E5:0A:98:BB Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 0199239AFE8B67D027B76BD98EF193139683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 169A Signing time: Sun 07 Sep 2025 09:56:24 +0000 Manifest this update: Sun 07 Sep 2025 09:56:24 +0000 Manifest next update: Mon 08 Sep 2025 09:56:24 +0000 Files and hashes: 1: 8wmzxLkSyC63kJ8KsfaDTFp3590.roa (hash: yPTonCp/pr9ZtUUWsN3hsTJ0gebdbrNTrrkzT5j7S00=) 2: CeX7E3fZXVsdPANui7LEojY4jyY.roa (hash: knL0+PqLOBqomAg/sncBbQWcoQB5Mmxq54ysIaZdoTY=) 3: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=) 4: Kg2E44WbCS4yTdLjrBUGsaS33HY.roa (hash: aRXCQBjOK2Xnaq6p1kUfl1+5mTae9HIybqh0Ip+XXpU=) 5: KjfFyOLmI5Y-Fq3IJGJb1nMkWrw.roa (hash: dsyIJdjGGjYMZZypRKzK4uCSH1nfwhGbxjgBMyCf/gs=) 6: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=) 7: LxDX7O3eQGaJYExU85kcexK4__Q.roa (hash: rErxx7Om3Ta/mvJcqv+K5/2MJQzhGaZ1sKgBE7WSm3c=) 8: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=) 9: NznSTmaNmRlH_azHj2PejtUv32Y.roa (hash: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=) 10: SQq8_rpvdfY7BXFUyrphnnlL84o.roa (hash: vSJi9Ykpxa0TPPtAkLzqMYrT9acxNfMsWIZzD/ELaTo=) 11: YE_8Q539qrOyfC5oyhUVoyOy4ag.roa (hash: oHkMs+tZBddaOUP4lVpil5PdfdqqYPzLTk5OrRN655Y=) 12: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=) 13: _8zCTGBJxw-u7lVEsPTjCM3nWwA.roa (hash: LjXxLmtwWhA2Mlf9B9WEsLpzMalKSd7C+ucRfQqnP4k=) 14: _YRU7gsUw7AnTGw-h2hVshCcJZw.roa (hash: UcrlnWWaVRHvoC0MHPAo0D7Go62USxqpkzcfjfXtLfc=) 15: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=) 16: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=) 17: fl8rnacXy3y9RR72Ckv0yy_-8A0.roa (hash: QlQ79ekyqU3zQDGrsHiwAcV6R8Y7CsOQW9QiHoruZS0=) 18: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=) 19: tVkzOGYvm9Ue0p1DtZsOv0Qo5ww.roa (hash: 1l4DY4og67nsoecheqcUHwFJJl1I+VZAOse9iPXrkJI=) 20: uFUEGSfPHjgulVJP0gmjr5Io5BE.roa (hash: N+zSHr/8E6EDAHMdhe9NDa8SXOzYh6T68xumfpCPwis=) 21: wj33JoQLWARvqka0yZK45_1318I.roa (hash: TfGyszRr6br7JzJj6n9Z5YtEXoLaFYdaPq8IN1vIPao=) 22: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: MdZAWdf1R09ygYOj33dHM9r7pdOsVVHTwHBnmZRgRlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:23:9a:fe:8b:67:d0:27:b7:6b:d9:8e:f1:93:13:96:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Sep 7 09:56:24 2025 GMT Not After : Sep 8 09:56:24 2025 GMT Subject: CN=e5ead60c7f7c385abcd45f89a49715cbe50a98bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:52:81:82:9f:57:c4:7e:38:b3:f2:e2:2b: 1f:be:e1:6a:9d:e6:23:0a:30:6f:d2:f0:b2:71:06: 56:33:7f:e2:1d:ca:6f:2d:d6:ae:76:d0:b4:17:fe: 57:10:3d:4f:e7:04:0e:c4:e3:f2:38:c4:f5:54:95: cd:3f:b6:27:cc:11:9b:ff:df:b5:d2:fa:87:bc:97: 97:90:8e:7e:6b:d8:52:84:30:b2:bc:a2:8f:52:d8: 40:a2:b6:64:39:14:19:40:51:52:40:bb:ff:42:a1: 5a:3d:0c:de:f5:1d:98:03:a4:67:b4:a5:e8:0a:20: 79:e8:5b:65:76:07:8e:e7:2a:c6:0f:1a:17:39:5b: 61:82:cb:7d:08:18:9a:6f:0c:02:0d:93:a6:2b:4a: 3c:92:ae:41:dd:6d:a5:8b:a6:49:9b:3d:ed:dc:d6: 5f:e1:ac:e5:a2:55:be:f8:9b:ab:95:b0:32:6b:ba: a1:ad:71:89:02:90:1f:54:97:d3:71:a1:16:60:b2: f1:13:13:2f:14:d9:6b:52:9d:e4:8e:95:58:1c:a2: d6:99:9f:56:ad:38:0f:99:ac:fe:a0:0d:d2:82:4c: 54:9e:ae:ec:60:3a:6a:31:2a:94:b5:b3:ab:9e:37: e6:41:3c:1c:82:fd:9c:7f:09:77:e3:e4:d5:0d:5f: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:D6:0C:7F:7C:38:5A:BC:D4:5F:89:A4:97:15:CB:E5:0A:98:BB X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:22:ad:58:15:fb:2d:ef:5d:c4:d8:d2:29:16:2b:94:17:6c: 03:19:c5:85:c0:f8:af:ef:00:4b:e4:d6:9a:0a:bd:dc:30:21: 38:1f:7a:33:e7:8e:24:4b:88:94:3d:05:d1:05:05:c5:b5:30: ee:7f:bc:f4:c9:df:90:b2:0e:0a:22:dc:e2:94:49:a4:6e:4e: 5b:01:f6:cc:6a:f2:63:9d:30:6d:61:3e:b9:c9:af:09:2b:14: 58:25:0e:3b:28:91:1b:83:1f:03:c9:10:2e:49:1c:c3:15:84: 42:49:c2:b7:bf:f0:06:12:8a:21:9e:57:d7:65:9a:ad:2d:6f: e3:6c:a2:59:d2:a1:be:3a:fa:19:e2:d3:25:4d:32:ac:75:d1: 6c:df:c2:9f:07:0e:e1:da:2b:18:68:f5:7e:52:8f:39:2f:31: b2:1b:8c:55:e9:a8:ff:22:a2:46:63:f2:88:3b:fa:e8:30:bb: e2:a3:02:cf:01:17:56:5f:5e:e1:60:43:84:e6:bb:39:cc:6f: 8b:63:27:df:75:3d:c5:96:60:f8:68:da:3b:74:8f:c3:41:2c: 72:8c:ef:50:38:31:04:49:f8:a2:0a:87:27:82:fe:dd:0c:85: 92:10:c0:6c:49:82:ae:df:69:64:91:62:ae:01:ee:df:42:25: 39:7c:dd:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkjmv6LZ9Ant2vZjvGTE5aDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUwOTA3MDk1NjI0WhcNMjUwOTA4MDk1NjI0WjAzMTEwLwYDVQQD EyhlNWVhZDYwYzdmN2MzODVhYmNkNDVmODlhNDk3MTVjYmU1MGE5OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUJSgYKfV8R+OLPy4isfvuFqneYj CjBv0vCycQZWM3/iHcpvLdaudtC0F/5XED1P5wQOxOPyOMT1VJXNP7YnzBGb/9+1 0vqHvJeXkI5+a9hShDCyvKKPUthAorZkORQZQFFSQLv/QqFaPQze9R2YA6RntKXo CiB56FtldgeO5yrGDxoXOVthgst9CBiabwwCDZOmK0o8kq5B3W2li6ZJmz3t3NZf 4azlolW++JurlbAya7qhrXGJApAfVJfTcaEWYLLxExMvFNlrUp3kjpVYHKLWmZ9W rTgPmaz+oA3SgkxUnq7sYDpqMSqUtbOrnjfmQTwcgv2cfwl34+TVDV+m9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXq1gx/fDhavNRfiaSXFcvlCpi7MB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSKtWBX7 Le9dxNjSKRYrlBdsAxnFhcD4r+8AS+TWmgq93DAhOB96M+eOJEuIlD0F0QUFxbUw 7n+89MnfkLIOCiLc4pRJpG5OWwH2zGryY50wbWE+ucmvCSsUWCUOOyiRG4MfA8kQ LkkcwxWEQknCt7/wBhKKIZ5X12WarS1v42yiWdKhvjr6GeLTJU0yrHXRbN/CnwcO 4dorGGj1flKPOS8xshuMVemo/yKiRmPyiDv66DC74qMCzwEXVl9e4WBDhOa7Ocxv i2Mn33U9xZZg+GjaO3SPw0EscozvUDgxBEn4ogqHJ4L+3QyFkhDAbEmCrt9pZJFi rgHu30IlOXzdVQ== -----END CERTIFICATE-----Generated at Sun Sep 7 14:46:15 2025 by rpki-client