$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: YsQOEoHNf556D4RXHHVszhaBQupmSJuxLTa9mAotnpA= Subject key identifier: 90:CB:EC:F7:3C:60:EF:16:D2:B5:83:E0:5A:F3:34:C9:D4:A7:AC:9B Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 019838A8428AFA24BCADCCB0F25F1EA821A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 16CE Signing time: Wed 23 Jul 2025 19:00:07 +0000 Manifest this update: Wed 23 Jul 2025 19:00:07 +0000 Manifest next update: Thu 24 Jul 2025 19:00:07 +0000 Files and hashes: 1: 00MgoZoYQtZGwQrOezTGMFJxBeQ.roa (hash: yEhoJZzpLJl/SN7s0GnAIUxYjWxoW/1J4yfFxR29F7o=) 2: 0waCNtq623y30FPN4t5CxrAksBs.roa (hash: 2qVKwqhc20jaDouIvaSsuwQlVRapkalpWhyUvjLi4gU=) 3: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=) 4: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=) 5: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: lMNMsX+dksn0gQMEuYYFPgUbem1t5fkRmg6Cnjp+QXM=) 6: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (hash: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=) 7: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=) 8: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=) 9: ke7Pxta8VpaoIZehaqEkUOxJVjY.roa (hash: /w8HaARGeZYUDrzIiinqB3uzBNqHoroNWtdxiuibk3g=) 10: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=) 11: pJ5WVqz27sc4GN_2TdiId1RFRS8.roa (hash: G9CNm7jTF73M1GlxFCdHMqAq+/05g/o+kvhEPuf5Cdo=) 12: pgY7a6E6tgPcuDGaJ9In9AClvQU.roa (hash: LI5gLLz864YQ5E9OGWp9/KKXRdmX9ZlNd6zL73F9k74=) 13: rYkIBSsRNavFwbtfDt9Y3qPesBM.roa (hash: Rqd+xNB46kJQh1LZ5zx+MAagSbbDG6ZgTB47AmX8Xbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 19:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:a8:42:8a:fa:24:bc:ad:cc:b0:f2:5f:1e:a8:21:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Jul 23 19:00:07 2025 GMT Not After : Jul 24 19:00:07 2025 GMT Subject: CN=90cbecf73c60ef16d2b583e05af334c9d4a7ac9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:a5:c2:56:63:1f:b7:f7:6f:9c:10:88:96: 13:a9:56:17:ba:67:90:b5:9c:45:56:6c:f9:d3:9c: b9:2e:ea:c8:fc:b2:81:36:42:c5:31:a4:f0:33:27: 8b:de:99:ce:0d:94:fa:4e:a6:0e:f2:26:fd:61:06: 2a:06:57:b9:fa:2e:d5:6d:72:69:ab:d6:4a:26:52: 43:97:c3:3b:2b:2e:35:fa:0e:91:3f:8e:08:a4:96: 82:08:72:b6:be:e5:08:96:b0:e7:4f:ca:36:7d:8c: c8:ad:11:bb:ce:b0:a9:83:a3:d1:25:d7:c1:8e:ce: 65:32:83:30:76:2c:f7:bc:dd:40:25:44:9c:9a:dc: 9e:c0:eb:e0:65:f4:bd:71:ca:79:fc:da:9b:44:7d: 15:f9:c7:f4:14:fa:41:51:eb:01:d2:23:a5:01:b0: cf:64:5f:5b:90:00:71:ff:e4:4d:44:3f:03:b1:d8: 7b:7e:ab:56:0a:46:f5:09:bd:07:66:09:a9:27:48: 55:23:c1:76:2b:ba:3d:1f:f2:fe:71:31:1c:d7:0e: a0:93:8f:26:aa:33:bf:2b:63:6d:cd:1d:ff:b1:00: 58:25:12:70:ab:cb:9b:f3:5c:d7:ab:4e:6d:2c:77: c3:8f:f0:d8:89:21:af:30:af:ec:22:56:7b:ae:92: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CB:EC:F7:3C:60:EF:16:D2:B5:83:E0:5A:F3:34:C9:D4:A7:AC:9B X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2e:79:42:98:c8:0e:93:6a:0c:f2:9e:1e:ec:3e:d0:ec:ce: 0d:93:c1:aa:fd:7f:ee:d3:8d:13:20:41:3c:62:a8:d1:78:af: a4:ba:93:ed:60:a6:60:37:3f:d6:be:d7:dc:6b:06:e7:49:0a: f5:ac:7c:a7:74:74:12:01:35:9a:06:7b:0c:08:7c:9d:7e:62: 8e:19:2d:21:e8:a5:a4:9b:d7:75:4f:40:03:74:c0:3d:50:b5: b6:59:4a:56:88:2b:07:42:1f:f4:f5:70:b0:72:81:a0:a2:3e: 61:a8:1b:9b:2d:5b:bc:da:45:7f:5e:f6:91:bf:4c:9d:43:ee: ac:ef:69:4c:db:7d:4d:ea:95:48:93:6a:84:72:12:5b:af:18: b7:4f:61:f1:cf:e6:03:95:0f:9f:c7:8e:f4:1c:41:04:1c:ac: 31:05:e0:b1:05:de:8e:3a:a3:71:ad:d4:ec:9d:6a:eb:e9:3d: cc:ff:cc:ed:90:b5:f9:bf:13:c6:17:d0:12:30:ee:7f:73:c3: e0:31:20:8b:f5:ac:b1:ec:10:20:2f:aa:0d:a7:af:a0:d0:33: e6:8a:22:c9:39:47:44:e7:16:03:cd:af:b1:55:65:ae:c2:00: 54:0d:13:c2:08:6d:87:80:06:93:a5:92:b7:5f:3f:4f:15:c6: 4e:0f:7e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4qEKK+iS8rcyw8l8eqCGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjUwNzIzMTkwMDA3WhcNMjUwNzI0MTkwMDA3WjAzMTEwLwYDVQQD Eyg5MGNiZWNmNzNjNjBlZjE2ZDJiNTgzZTA1YWYzMzRjOWQ0YTdhYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQelwlZjH7f3b5wQiJYTqVYXumeQ tZxFVmz505y5LurI/LKBNkLFMaTwMyeL3pnODZT6TqYO8ib9YQYqBle5+i7VbXJp q9ZKJlJDl8M7Ky41+g6RP44IpJaCCHK2vuUIlrDnT8o2fYzIrRG7zrCpg6PRJdfB js5lMoMwdiz3vN1AJUScmtyewOvgZfS9ccp5/NqbRH0V+cf0FPpBUesB0iOlAbDP ZF9bkABx/+RNRD8Dsdh7fqtWCkb1Cb0HZgmpJ0hVI8F2K7o9H/L+cTEc1w6gk48m qjO/K2NtzR3/sQBYJRJwq8ub81zXq05tLHfDj/DYiSGvMK/sIlZ7rpKUnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDL7Pc8YO8W0rWD4FrzNMnUp6ybMB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy55QpjI DpNqDPKeHuw+0OzODZPBqv1/7tONEyBBPGKo0XivpLqT7WCmYDc/1r7X3GsG50kK 9ax8p3R0EgE1mgZ7DAh8nX5ijhktIeilpJvXdU9AA3TAPVC1tllKVogrB0If9PVw sHKBoKI+Yagbmy1bvNpFf172kb9MnUPurO9pTNt9TeqVSJNqhHISW68Yt09h8c/m A5UPn8eO9BxBBBysMQXgsQXejjqjca3U7J1q6+k9zP/M7ZC1+b8TxhfQEjDuf3PD 4DEgi/WssewQIC+qDaevoNAz5ooiyTlHROcWA82vsVVlrsIAVA0Twghth4AGk6WS t18/TxXGTg9+3w== -----END CERTIFICATE-----Generated at Wed Jul 23 23:58:42 2025 by rpki-client