$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: hvcxBztzPNj66A7GejvM7GNn4Hh9l+gD6grz77tUgfQ= Subject key identifier: 0C:F7:98:00:D1:32:17:51:3D:4F:1F:1B:EF:D0:A0:82:3D:04:74:E6 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 0198342753E5C1FA1700B23AE439CA3AFB8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0C4D Signing time: Tue 22 Jul 2025 22:00:49 +0000 Manifest this update: Tue 22 Jul 2025 22:00:49 +0000 Manifest next update: Wed 23 Jul 2025 22:00:49 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: 0KzfYHYAqRsjugxJQc+FE0gpNoDxUvnuqfaU0nnL5xM=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 8: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 9: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=) 10: qi0InhuXBU-ET3BQIygAjHDv7R4.roa (hash: EwPEIgFR9Y7apfRR0iJdm8aoI2On5DfKKekezl88mDo=) 11: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 12: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 13: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:27:53:e5:c1:fa:17:00:b2:3a:e4:39:ca:3a:fb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jul 22 22:00:49 2025 GMT Not After : Jul 23 22:00:49 2025 GMT Subject: CN=0cf79800d13217513d4f1f1befd0a0823d0474e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:d6:c3:36:03:7a:e7:29:bf:1a:a9:8e:d9: e8:fb:d1:07:d6:10:2a:35:9f:29:3e:43:a8:a2:8e: 31:22:38:f2:18:91:58:71:68:29:5f:bf:03:99:39: ba:d6:47:3d:a3:f5:51:4c:e3:fa:c8:61:b3:4d:25: 35:92:98:12:a2:52:0a:df:16:37:de:42:aa:a4:ab: 80:66:6d:40:86:c8:fd:ea:ca:8c:1b:ab:56:c4:c7: f2:7f:4a:20:29:b0:fd:77:65:2d:5d:e6:84:b3:5c: 35:76:40:b9:da:48:ab:36:41:74:c7:d1:28:23:11: 4d:e7:b6:24:63:e7:30:62:52:c6:c9:72:7f:da:a6: de:8e:19:f0:6d:55:18:1c:e7:42:6e:a2:55:a6:a7: 4d:8e:2c:e9:34:8c:94:0c:42:51:f8:8f:5e:04:3a: e1:b3:11:e0:1d:60:74:ef:67:2c:b6:19:7e:cd:05: a2:87:1a:1e:02:a5:01:d9:ac:67:be:e9:17:9a:a0: 83:ae:28:d5:50:f7:b9:a5:c5:b4:5d:2a:8a:69:3e: d5:57:90:b2:a0:c7:70:b0:7d:33:7d:ad:37:23:d2: 53:3f:ec:8b:55:3e:0b:21:a1:bf:7f:c3:4c:5f:1c: 5b:5e:da:e7:d3:c2:3f:ac:80:17:a4:02:a5:90:5e: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F7:98:00:D1:32:17:51:3D:4F:1F:1B:EF:D0:A0:82:3D:04:74:E6 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9d:1f:e6:f7:c2:6e:5c:4f:1a:5b:fa:d8:bb:3e:2d:5f:84: 55:dc:3c:a9:73:f2:3f:3a:71:0a:df:71:6f:e6:b8:c7:55:aa: 7d:df:03:ba:78:79:ff:41:0c:6f:a4:b6:45:81:cc:3d:1f:be: 40:98:1c:ef:e5:aa:3c:f7:90:e2:57:ee:4f:10:1e:de:1a:a8: c6:da:77:e5:77:15:38:41:2c:ed:c5:eb:36:b9:8e:8a:a4:ae: 2a:81:c0:7d:6a:b2:be:d8:d1:0c:fe:c3:20:6d:de:47:47:33: ea:2a:33:30:0d:f8:78:eb:69:0b:14:41:a4:20:1e:1e:09:58: b8:57:42:9a:20:92:55:30:70:05:7c:b8:03:1c:9c:5d:41:83: 3d:a6:3d:bc:63:8e:73:22:36:c4:f0:b9:99:fc:50:12:2a:cf: ff:f5:37:cd:c1:a3:9c:cf:d6:3d:60:47:b8:56:a0:0b:cd:8e: d2:ab:9e:c2:16:c7:ab:39:61:2e:38:1d:19:11:c2:3e:aa:5d: d7:31:f5:28:bd:cf:a3:73:80:6d:e1:7c:f0:72:ea:ab:61:0e: 67:e5:0a:3a:99:6e:ec:63:47:7e:1f:3d:41:ce:61:d6:15:fc: 18:59:39:f6:a3:4d:7f:01:b3:e2:b9:82:e0:ff:ba:fb:da:fa: 4d:17:81:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0J1PlwfoXALI65DnKOvuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUwNzIyMjIwMDQ5WhcNMjUwNzIzMjIwMDQ5WjAzMTEwLwYDVQQD EygwY2Y3OTgwMGQxMzIxNzUxM2Q0ZjFmMWJlZmQwYTA4MjNkMDQ3NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYfWwzYDeucpvxqpjtno+9EH1hAq NZ8pPkOooo4xIjjyGJFYcWgpX78DmTm61kc9o/VRTOP6yGGzTSU1kpgSolIK3xY3 3kKqpKuAZm1Ahsj96sqMG6tWxMfyf0ogKbD9d2UtXeaEs1w1dkC52kirNkF0x9Eo IxFN57YkY+cwYlLGyXJ/2qbejhnwbVUYHOdCbqJVpqdNjizpNIyUDEJR+I9eBDrh sxHgHWB072csthl+zQWihxoeAqUB2axnvukXmqCDrijVUPe5pcW0XSqKaT7VV5Cy oMdwsH0zfa03I9JTP+yLVT4LIaG/f8NMXxxbXtrn08I/rIAXpAKlkF7SkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz3mADRMhdRPU8fG+/QoII9BHTmMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZ0f5vfC blxPGlv62Ls+LV+EVdw8qXPyPzpxCt9xb+a4x1Wqfd8Dunh5/0EMb6S2RYHMPR++ QJgc7+WqPPeQ4lfuTxAe3hqoxtp35XcVOEEs7cXrNrmOiqSuKoHAfWqyvtjRDP7D IG3eR0cz6iozMA34eOtpCxRBpCAeHglYuFdCmiCSVTBwBXy4AxycXUGDPaY9vGOO cyI2xPC5mfxQEirP//U3zcGjnM/WPWBHuFagC82O0quewhbHqzlhLjgdGRHCPqpd 1zH1KL3Po3OAbeF88HLqq2EOZ+UKOplu7GNHfh89Qc5h1hX8GFk59qNNfwGz4rmC 4P+6+9r6TReBrQ== -----END CERTIFICATE-----Generated at Wed Jul 23 08:06:33 2025 by rpki-client