$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft File: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft (raw, json) Hash identifier: Db/j3Tum3spgn21XPRwl+rVpZs0bsKVc5zfx2S27LTk= Subject key identifier: 6A:DB:04:A9:D9:30:CE:E3:25:98:64:5B:C3:55:E9:B7:4E:1A:6D:68 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 0198289213F72D21993D3727892087F2EBFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft Manifest number: 118C Signing time: Sun 20 Jul 2025 16:01:58 +0000 Manifest this update: Sun 20 Jul 2025 16:01:58 +0000 Manifest next update: Mon 21 Jul 2025 16:01:58 +0000 Files and hashes: 1: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (hash: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=) 2: 8X1AAWv5potLtJ4cDHAtFN78OuU.roa (hash: fnF7WvbPBcYYZyEZilnnSQmk3qWakl2qKO0bPf7iS24=) 3: 9-cNoUHfts0wQ_gvF0Ks-jvLNo8.roa (hash: 7JFrmTCKHutOWT6lIT9Dw7Z0P0VWT+jDVcU4+bfyDdY=) 4: 9IRScEfj3SqqCZ7EOjt2NIEPB5g.roa (hash: 7B8aaVI8xrqa2Oq5lpaDe7OMSSMCkYucXlVL8weJlNQ=) 5: FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl (hash: eSfzADn1do/CyR8EBMVVEFslLZ78wLVZ2mSnbOhJGLY=) 6: K26CHbWIdVhV9ZIS1wE5mr28rb0.roa (hash: +uSx+oQPM9JSjxAKGNmQEHxTCMdtnlF8PKSOcjGnM28=) 7: N2e1KwpBdyrR37kUp0a7fUH7zN8.roa (hash: JBgmHvoo9+VvXNhQsnYMPfpkAAYuKk4YvwJXglBCh0o=) 8: NSYavHGFkjW9fPOW1IOQ-kAXpiw.roa (hash: bIlwmcqM0xR+NaQTXsekU/G4W1PV6OipwVLIIvkpte8=) 9: Pqgs8GxJxd3RB-9nQ3zYGfd-UqQ.roa (hash: M6uYkLbVdZzoxMrzslJAyf+dKNKxxdwwoY8rXjymTu4=) 10: XGOuHgklPAXFF9PgAhcplLrpo5E.roa (hash: Pv9wp2//FIn+5bdveKZPF+ZeW5gxmAnJZ0pNFRghqZU=) 11: b_BH8k9dkbRKJ0Ey58ItHR33E0o.roa (hash: fq+WuygPKpc2KtNCX59PHbTRL3jzzc5JcGmz5xkPFE4=) 12: cdQEhr1O999um7MubPp-AySW3SU.roa (hash: kCWL/fzpDob5h7QESa50Y8FlUEupbCUO8I1kcI0W7jU=) 13: cyBS3fAo042cEWYq-ULKBfWmEYM.roa (hash: lGLWllBey91le8GZeS3K6F+EddIaYMAhM6BNqVcxruc=) 14: dwbrpKdHneYwi6Da8KbDgkX0CFk.roa (hash: U/aZ7WuyrXf3NvUwErTGp+ud4TsEFtx0YqpNoC5JosA=) 15: wuzk9CCXKc0u75gMM12ZdD640DE.roa (hash: MHDW4wJe5Lqvtv2PuBsd2YQdYDNcCcOJ8tbNJW5TgBw=) 16: xiRO9TKkYnG3F5XRPtGp8yJfGdk.roa (hash: jvkL9UNrV/XhDKwlKTr7+v9+oligHaLGnfb05Kn+v4s=) 17: yYlPdOxEQ-DkkikOUokHzYUMfCw.roa (hash: AgZ8YHYCCPtKRU/kCp/4/N0G8XCw377PsVS8HQ2MJ6g=) 18: z9NACTGBMvnQ5x8u-nWBN5y4I0U.roa (hash: A9IKmaXe6BPloXH02v2+6uLrN23z/PJvgf/TQcotyvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:28:92:13:f7:2d:21:99:3d:37:27:89:20:87:f2:eb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jul 20 16:01:58 2025 GMT Not After : Jul 21 16:01:58 2025 GMT Subject: CN=6adb04a9d930cee32598645bc355e9b74e1a6d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:75:b0:c6:05:6d:29:b7:bb:87:0a:5c:3e: e7:cb:62:3c:15:7e:b5:04:d9:96:7f:54:0b:0c:58: 88:b1:3a:f1:22:06:3e:2b:78:74:51:c0:97:f4:1e: ec:74:e4:ab:69:03:53:0a:9d:70:90:b5:94:29:1a: 53:d4:f7:64:1e:a5:85:2c:e7:9d:96:30:4a:e8:4b: 1e:a5:a7:46:12:15:9d:6b:75:74:1c:fe:aa:c2:b9: 25:2e:35:a8:a9:1f:93:aa:18:a9:a1:79:ec:f8:df: d2:02:d8:14:3a:c0:73:d0:bc:fc:50:c4:24:d5:21: 86:ff:69:28:70:d9:71:b6:58:3f:54:48:c2:c2:ac: e7:43:59:6a:38:61:6a:a0:a4:f7:7f:ce:2f:1b:32: c5:f7:52:f3:a8:8b:9a:1c:0d:e1:1a:13:29:a4:32: bd:14:79:01:7f:29:67:c4:55:b6:e8:24:52:d9:17: 0a:b8:9c:fe:08:cb:11:fb:d0:79:05:61:2f:3b:c1: a6:41:6a:eb:c8:88:d3:2b:0d:99:75:30:0c:89:14: 17:75:45:e3:14:d9:32:53:90:59:2a:f1:27:84:6d: 8f:cc:b9:eb:01:f0:e3:ce:cf:f8:33:cb:9d:01:f4: 3b:e7:69:fb:03:91:c6:eb:fa:13:d5:b4:43:76:93: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DB:04:A9:D9:30:CE:E3:25:98:64:5B:C3:55:E9:B7:4E:1A:6D:68 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:16:88:a3:f1:10:0e:06:57:7b:9e:26:12:40:8f:de:4f:cb: 86:9c:6e:dc:cc:45:fb:5b:cc:9d:f7:7a:b6:23:08:d2:04:93: 0f:8f:18:78:0e:bf:c5:99:e3:d8:dc:50:5a:69:f0:02:c6:f5: 79:3e:b3:0b:fc:d5:0b:0a:e3:73:1d:55:96:60:19:96:56:28: 93:da:82:04:28:c6:43:52:1d:14:6f:38:5c:52:5f:f3:66:9b: 7a:ae:45:ac:25:61:62:51:47:5a:64:4f:a0:cf:09:b0:d4:53: f8:6c:da:ff:3b:f0:25:10:92:cd:43:67:48:2e:d7:ef:9d:5e: a9:74:52:f7:22:a4:5e:8b:3d:bd:82:7d:5c:70:fb:d8:25:55: d0:5c:e4:b9:37:a8:24:fa:53:03:d2:4e:49:d0:4f:ec:fc:4c: bd:d5:92:f5:b6:93:95:09:fb:6f:c5:57:d9:e8:e8:9d:b3:82: ae:ea:4f:a1:a6:ec:a3:ad:61:31:c4:56:91:11:55:7d:1d:dc: 5e:f4:0a:a1:36:ed:c1:c2:7a:2b:9d:17:bf:61:d2:a8:6b:cc: 4c:85:ad:dc:de:8e:4f:0f:cd:7f:5d:cf:16:cd:55:03:95:ce: b5:66:3a:db:20:91:87:1b:9e:fc:b3:13:96:0f:08:3b:c2:9f: 55:bc:8b:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgokhP3LSGZPTcniSCH8uv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUwNzIwMTYwMTU4WhcNMjUwNzIxMTYwMTU4WjAzMTEwLwYDVQQD Eyg2YWRiMDRhOWQ5MzBjZWUzMjU5ODY0NWJjMzU1ZTliNzRlMWE2ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpR1sMYFbSm3u4cKXD7ny2I8FX61 BNmWf1QLDFiIsTrxIgY+K3h0UcCX9B7sdOSraQNTCp1wkLWUKRpT1PdkHqWFLOed ljBK6EsepadGEhWda3V0HP6qwrklLjWoqR+TqhipoXns+N/SAtgUOsBz0Lz8UMQk 1SGG/2kocNlxtlg/VEjCwqznQ1lqOGFqoKT3f84vGzLF91LzqIuaHA3hGhMppDK9 FHkBfylnxFW26CRS2RcKuJz+CMsR+9B5BWEvO8GmQWrryIjTKw2ZdTAMiRQXdUXj FNkyU5BZKvEnhG2PzLnrAfDjzs/4M8udAfQ752n7A5HG6/oT1bRDdpO/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrbBKnZMM7jJZhkW8NV6bdOGm1oMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxaIo/EQ DgZXe54mEkCP3k/Lhpxu3MxF+1vMnfd6tiMI0gSTD48YeA6/xZnj2NxQWmnwAsb1 eT6zC/zVCwrjcx1VlmAZllYok9qCBCjGQ1IdFG84XFJf82abeq5FrCVhYlFHWmRP oM8JsNRT+Gza/zvwJRCSzUNnSC7X751eqXRS9yKkXos9vYJ9XHD72CVV0FzkuTeo JPpTA9JOSdBP7PxMvdWS9baTlQn7b8VX2ejonbOCrupPoabso61hMcRWkRFVfR3c XvQKoTbtwcJ6K50Xv2HSqGvMTIWt3N6OTw/Nf13PFs1VA5XOtWY62yCRhxue/LMT lg8IO8KfVbyLHw== -----END CERTIFICATE-----Generated at Sun Jul 20 18:02:16 2025 by rpki-client