$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: nNjKD8+wnAeQ/5BP2Gsk9NxN7Bebtmexqo5hpgOdQ28= Subject key identifier: 6C:10:41:80:D5:B2:1B:56:9F:15:FB:83:57:E9:71:38:DD:9B:D2:91 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 01984AE57D52E368A1E6266934952AD36733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 15A0 Signing time: Sun 27 Jul 2025 08:00:10 +0000 Manifest this update: Sun 27 Jul 2025 08:00:10 +0000 Manifest next update: Mon 28 Jul 2025 08:00:10 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: Q4BLVnTtEyoC8eHyhkcteKoeJ6A.roa (hash: edQEuSj12spKEsnnwc1oyC8FT8MhVl13a4ooOoJq0ys=) 10: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: 9DZ9kANFsafj8tHU5X56PPiX9ND7R9O4KOgAAfjegv8=) 12: jbUG9pTk9em_fTHbjoEIhua3pK0.roa (hash: 4tGn3tkK46T9dFOLGdw2zw9ukjnxUtA/PXFwlS5np88=) 13: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 14: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 15: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 16: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) 17: zg1raSPKfpMRz7s0HIi-A3JYptA.roa (hash: kmxhHZd/GJPpQ6FeMLmxw983rJJvr08+WYaMz1jD/YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:e5:7d:52:e3:68:a1:e6:26:69:34:95:2a:d3:67:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jul 27 08:00:10 2025 GMT Not After : Jul 28 08:00:10 2025 GMT Subject: CN=6c104180d5b21b569f15fb8357e97138dd9bd291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:22:c5:9b:3e:ab:33:2f:c9:5e:af:9e:56:33: 9b:5a:7e:2b:f2:b1:ea:75:9d:75:0b:16:2d:2e:6f: 35:50:6c:d8:d8:1a:9d:87:2e:0b:3c:b2:bb:95:52: c3:e1:e1:e0:35:5a:c5:8b:88:7f:b3:ca:4f:25:01: 8a:3e:55:29:8f:38:03:18:b0:0a:fd:fe:06:93:96: 09:96:37:f1:25:ba:23:b0:d6:52:66:df:84:05:3c: 66:32:e6:66:3b:75:00:49:f4:9d:09:a2:f1:6d:93: c0:bb:b6:ee:29:a4:3e:41:05:2a:33:0e:59:cd:4f: f2:84:4c:dc:f1:2f:90:1e:a7:52:9b:c7:e8:b8:bb: c1:9d:46:02:9d:7c:29:92:0f:a9:4f:04:9f:46:03: 25:22:97:09:f0:69:84:30:77:98:0e:4a:d4:4a:43: 44:35:67:ca:61:90:fb:7b:c6:51:44:54:78:34:c2: 16:42:9f:80:21:d9:dc:74:6b:d7:61:7d:d2:55:56: e1:44:83:a5:85:16:7b:7a:c3:67:da:e5:50:6d:11: ac:f9:38:56:b9:b2:b1:b0:6d:69:16:ee:c5:b3:9f: d8:51:83:16:39:08:b4:ed:96:f0:9a:19:c5:25:bc: 16:bd:b7:5a:27:e6:6f:04:a2:39:72:91:e9:99:8e: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:10:41:80:D5:B2:1B:56:9F:15:FB:83:57:E9:71:38:DD:9B:D2:91 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f3:cf:04:2a:0c:4e:d0:9e:25:61:41:cd:ea:bd:93:c4:42: 30:74:13:ec:3a:9e:f9:65:fd:c8:6d:97:66:d4:c8:d9:36:db: 32:a6:63:b7:81:b7:9b:b6:87:fa:0d:8d:ed:b3:96:34:24:a6: ce:1a:27:4a:4f:4c:4a:b6:aa:64:61:63:69:c3:32:5f:59:59: be:a2:4f:96:33:cb:2c:49:30:7d:c6:be:23:1e:5b:40:ec:e4: 8e:6e:e4:35:4e:89:0c:33:a0:90:ae:07:ac:1d:0f:09:48:43: aa:2e:94:c3:fc:c1:2a:d7:c3:38:c9:a0:bb:81:22:0f:e2:66: 35:c5:48:04:be:d2:b9:36:ef:a5:eb:7c:c8:db:49:ed:fb:0f: 55:c5:c7:86:e2:b3:a9:46:74:15:7b:66:c6:49:24:ee:8e:cc: 35:e9:d3:26:e7:1e:90:e3:60:2f:b3:81:8f:52:71:9b:1d:f3: 34:da:41:5b:36:d2:58:b8:7f:7c:e1:85:13:1c:a7:b2:97:0c: 7c:b3:bf:fe:5f:28:e2:f1:1d:43:1c:dd:cf:01:96:95:18:a2: 74:07:46:e4:80:5f:76:c1:4b:38:4e:84:94:2e:94:a7:2d:42: 4c:15:3a:80:21:7f:16:df:d0:e4:85:84:a1:b1:fd:b6:7e:3c: c5:d8:a2:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhK5X1S42ih5iZpNJUq02czMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUwNzI3MDgwMDEwWhcNMjUwNzI4MDgwMDEwWjAzMTEwLwYDVQQD Eyg2YzEwNDE4MGQ1YjIxYjU2OWYxNWZiODM1N2U5NzEzOGRkOWJkMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CLFmz6rMy/JXq+eVjObWn4r8rHq dZ11CxYtLm81UGzY2Bqdhy4LPLK7lVLD4eHgNVrFi4h/s8pPJQGKPlUpjzgDGLAK /f4Gk5YJljfxJbojsNZSZt+EBTxmMuZmO3UASfSdCaLxbZPAu7buKaQ+QQUqMw5Z zU/yhEzc8S+QHqdSm8fouLvBnUYCnXwpkg+pTwSfRgMlIpcJ8GmEMHeYDkrUSkNE NWfKYZD7e8ZRRFR4NMIWQp+AIdncdGvXYX3SVVbhRIOlhRZ7esNn2uVQbRGs+ThW ubKxsG1pFu7Fs5/YUYMWOQi07ZbwmhnFJbwWvbdaJ+ZvBKI5cpHpmY47RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwQQYDVshtWnxX7g1fpcTjdm9KRMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevPPBCoM TtCeJWFBzeq9k8RCMHQT7Dqe+WX9yG2XZtTI2TbbMqZjt4G3m7aH+g2N7bOWNCSm zhonSk9MSraqZGFjacMyX1lZvqJPljPLLEkwfca+Ix5bQOzkjm7kNU6JDDOgkK4H rB0PCUhDqi6Uw/zBKtfDOMmgu4EiD+JmNcVIBL7SuTbvpet8yNtJ7fsPVcXHhuKz qUZ0FXtmxkkk7o7MNenTJucekONgL7OBj1Jxmx3zNNpBWzbSWLh/fOGFExynspcM fLO//l8o4vEdQxzdzwGWlRiidAdG5IBfdsFLOE6ElC6Upy1CTBU6gCF/Ft/Q5IWE obH9tn48xdiipw== -----END CERTIFICATE-----Generated at Sun Jul 27 10:37:21 2025 by rpki-client