$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft File: dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json) Hash identifier: YryGnSRidexwgXfMLCbstpsQvBVjOqrKAwT8JzKk1ys= Subject key identifier: F7:B7:F2:D0:4E:8C:81:A3:D7:FD:9E:94:E5:32:1F:0A:30:F9:21:66 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 01983D29F0768446320D50C9CD4F653D8A6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft Manifest number: 160B Signing time: Thu 24 Jul 2025 16:00:15 +0000 Manifest this update: Thu 24 Jul 2025 16:00:15 +0000 Manifest next update: Fri 25 Jul 2025 16:00:15 +0000 Files and hashes: 1: 6DEouzxjjNK_68sFR-t4CPN-SS8.roa (hash: Oi8D+F91F2i7lr20xSQLbZgZOtgMLQbrK5SvQlzaitc=) 2: DIuSabtBbR2nQm3WZSy9ze7IVZg.roa (hash: 2rVX0GGpPvWmCFxQ7xML0aabrAFCH5UZoizKMnJ47/I=) 3: GcwznvOYgf-O_ItmFmcLriyXzrs.roa (hash: GxJFlw75s4yOkIPA50toNBLYc/0teNDfXWriesa0E04=) 4: HyUq2HM4kVyO5I9xjv23WW5w1ic.roa (hash: OoUZqAFbwPuNe3DMemRAFjc9wb0LotNFxJCnVpSwfHc=) 5: LYviAp3PxmjO3NYT62eUwATXCDA.roa (hash: cNgFyZaC7ifnpFT8pGCK7760nWd6v3gVDQo7PYoFJbc=) 6: MEvLBKznYJtmItKD78ssXi4mzoQ.roa (hash: pEF4lHoNxgZxriIYsg2W9oGgnigGshpc2ELBfuOnvBk=) 7: QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa (hash: NRo/K62fCGXaYZyQldEoQlP95+Ec/K3+eWLflyYVYMA=) 8: Saq3VYHlza0IcEZF1whMhjsSAlA.roa (hash: iAqLC/j/inixhiy0KGKP177bZAzmIcZH/0FDe0WAUeQ=) 9: VOSDfxHvYjtBiBTe909ZadJMtPA.roa (hash: dQcuzaMdOD+0BiceMsluO5RG0GYGErSY43MYPGJaOdo=) 10: VVGAKlexZnslyaxsj979p9-1tLc.roa (hash: zSg/YLF7G2TzXt0TnTqPgj/B+dgWPQfBczFUSMDRTig=) 11: YWpo66YDW4G278af10SMQAtiOHo.roa (hash: Y9X0J6r0SDlIe4fmcLli4bcOvBDBEcbJdPc8zKihBto=) 12: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: 16HWZ5paOj3t3/qGlKmbKx9D5PaC2LqNNR0UsTVlbPE=) 13: kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa (hash: PiaTCFnxlB3VR92lDDt5EbEtyX7/8S00PG5z/8wHps0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 14:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3d:29:f0:76:84:46:32:0d:50:c9:cd:4f:65:3d:8a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jul 24 16:00:15 2025 GMT Not After : Jul 25 16:00:15 2025 GMT Subject: CN=f7b7f2d04e8c81a3d7fd9e94e5321f0a30f92166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:4c:30:1f:64:56:a9:8d:87:d6:aa:2b:c7: da:3c:7d:c4:1f:44:88:12:58:00:c4:1e:52:64:55: 6c:bb:c4:01:bb:e4:71:1e:59:0d:4c:ec:a0:dd:46: ab:f5:cf:77:bd:7d:a1:90:ee:2d:20:f1:ca:c0:e6: 0c:3e:b1:bd:15:19:3c:55:70:1f:d2:83:fc:be:c3: a7:ac:f8:a2:27:ea:69:93:a1:7e:69:c5:77:43:22: 82:2e:52:75:8c:17:15:8c:cb:e2:34:78:35:f1:57: 5d:45:66:65:b8:18:b2:96:b5:c3:f2:c9:f5:d5:7d: 2b:ab:91:1e:17:10:73:5c:56:a2:c3:94:eb:79:9c: c0:66:a9:9c:b6:c8:f4:c1:e9:1e:df:a0:c1:6f:69: 0c:65:26:bf:48:de:51:e4:e7:2a:a0:0b:c0:ca:ac: 4d:b2:0e:14:53:3c:4c:79:ad:cd:12:da:fe:bc:a5: 30:59:b3:3d:62:13:e5:ac:a7:84:46:6a:3a:cf:33: 55:db:f2:6d:6f:e6:e0:a1:c8:20:9a:82:2d:29:2c: 18:9c:32:34:9c:6e:40:76:50:3a:c5:88:62:46:72: d7:29:99:d4:5d:8e:5d:ec:3a:b5:34:41:94:49:03: bf:b6:24:5a:44:7c:2f:6f:d6:97:16:10:0a:1c:54: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:F2:D0:4E:8C:81:A3:D7:FD:9E:94:E5:32:1F:0A:30:F9:21:66 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b8:45:7b:c9:76:68:bd:14:93:2d:fe:7f:bc:4c:e3:80:4b: 01:98:51:69:dc:a3:4c:c0:a0:25:c4:78:a3:a2:9c:e8:35:4a: a8:78:4e:25:78:c0:b7:46:cd:5c:7d:52:3d:0c:5d:7f:fa:8f: 44:74:59:cc:b1:d5:2e:b4:4f:91:54:37:e5:06:34:81:d7:32: 98:f6:7f:ed:06:c4:84:e8:22:3c:2a:e3:01:40:9a:19:04:98: 6b:2c:e1:6d:4d:12:0c:0f:62:09:27:3c:57:aa:6c:d9:1e:14: 3d:da:6e:2a:9a:a9:7c:ce:d9:03:29:fe:6f:ec:31:57:e2:82: cc:fc:f4:5d:e3:cb:70:67:38:2f:fb:95:6b:fa:7a:f4:e2:8a: 9d:b1:c2:20:d5:14:62:fd:66:16:80:35:61:95:8e:19:fb:f0: 49:b8:3c:9c:27:e4:b3:ea:e5:fe:a1:4f:a3:0a:f8:13:00:6a: 46:3c:34:de:b9:ab:ee:5e:2c:83:54:ac:9d:9c:ee:66:18:bf: b0:28:d5:02:2b:6a:b7:e9:45:3e:3f:09:b1:bf:70:aa:5b:54: de:f1:ca:64:70:24:e7:11:50:4f:c6:ea:ad:61:f8:b0:c9:ba: da:6d:82:d8:03:65:dd:80:ce:87:63:b7:54:37:c6:62:10:85: ed:bc:0b:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg9KfB2hEYyDVDJzU9lPYptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjUwNzI0MTYwMDE1WhcNMjUwNzI1MTYwMDE1WjAzMTEwLwYDVQQD EyhmN2I3ZjJkMDRlOGM4MWEzZDdmZDllOTRlNTMyMWYwYTMwZjkyMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+JMMB9kVqmNh9aqK8faPH3EH0SI ElgAxB5SZFVsu8QBu+RxHlkNTOyg3Uar9c93vX2hkO4tIPHKwOYMPrG9FRk8VXAf 0oP8vsOnrPiiJ+ppk6F+acV3QyKCLlJ1jBcVjMviNHg18VddRWZluBiylrXD8sn1 1X0rq5EeFxBzXFaiw5TreZzAZqmctsj0weke36DBb2kMZSa/SN5R5OcqoAvAyqxN sg4UUzxMea3NEtr+vKUwWbM9YhPlrKeERmo6zzNV2/Jtb+bgocggmoItKSwYnDI0 nG5AdlA6xYhiRnLXKZnUXY5d7Dq1NEGUSQO/tiRaRHwvb9aXFhAKHFSvnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPe38tBOjIGj1/2elOUyHwow+SFmMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLhFe8l2 aL0Uky3+f7xM44BLAZhRadyjTMCgJcR4o6Kc6DVKqHhOJXjAt0bNXH1SPQxdf/qP RHRZzLHVLrRPkVQ35QY0gdcymPZ/7QbEhOgiPCrjAUCaGQSYayzhbU0SDA9iCSc8 V6ps2R4UPdpuKpqpfM7ZAyn+b+wxV+KCzPz0XePLcGc4L/uVa/p69OKKnbHCINUU Yv1mFoA1YZWOGfvwSbg8nCfks+rl/qFPowr4EwBqRjw03rmr7l4sg1SsnZzuZhi/ sCjVAitqt+lFPj8Jsb9wqltU3vHKZHAk5xFQT8bqrWH4sMm62m2C2ANl3YDOh2O3 VDfGYhCF7bwLmQ== -----END CERTIFICATE-----Generated at Thu Jul 24 23:38:01 2025 by rpki-client