$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: RVp57xxyDiFoLJkC1UiwMAU0A89BKZDMqAkDtW/Rrr0= Subject key identifier: A6:D8:82:93:8F:6A:69:93:CC:49:E3:54:1F:14:89:76:33:2F:9F:62 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 0198387222C9758A53B95039FA6E5F5B46EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 1609 Signing time: Wed 23 Jul 2025 18:01:00 +0000 Manifest this update: Wed 23 Jul 2025 18:01:00 +0000 Manifest next update: Thu 24 Jul 2025 18:01:00 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: 3O2iMBEKkY7OP1I7wGvzhaRIjt7MXhLvCr/MfNcxFJc=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 14:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:38:72:22:c9:75:8a:53:b9:50:39:fa:6e:5f:5b:46:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jul 23 18:01:00 2025 GMT Not After : Jul 24 18:01:00 2025 GMT Subject: CN=a6d882938f6a6993cc49e3541f148976332f9f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:9d:d7:72:d3:02:cd:ff:85:5a:5b:61:e2: 62:21:c0:26:94:8c:c6:62:53:18:ac:aa:ff:0b:ed: 32:33:13:54:cb:46:b1:16:8a:a3:40:e5:39:b1:6b: 3b:18:75:61:06:f1:8f:0b:69:a3:ee:e2:3a:bf:ff: 8d:93:69:2a:45:77:5e:59:d1:31:41:8f:53:77:f7: 3e:c6:1c:47:f9:f9:5e:7a:44:2d:f4:64:4c:14:0e: 91:85:f6:61:d3:bb:53:98:cb:ce:0f:3e:a8:3a:8a: 1e:7f:3c:4f:6e:46:5f:c2:82:d5:82:05:d1:ca:d0: e9:6d:9a:aa:fa:99:bd:56:59:ce:76:9a:3b:cf:60: c3:a2:fc:79:72:98:13:e0:d9:2b:6e:13:6c:c8:b2: 0f:6f:fb:1b:45:71:88:72:0b:75:e8:f5:dd:de:f7: 19:c4:5f:40:0c:19:82:f4:7d:d7:2f:0b:8f:e7:d0: 6d:2d:01:4b:da:f7:16:93:90:b9:4a:e9:19:00:bd: 32:b6:6b:08:77:3a:ff:2b:67:12:53:c3:a0:a6:6f: f6:c5:9d:dd:9b:19:2d:dc:ce:cf:1b:16:41:4c:d4: 04:76:64:ad:20:e9:5e:d8:2f:00:ee:b1:30:51:f4: fd:43:d9:5b:ce:61:40:07:4f:65:51:18:43:b2:6e: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D8:82:93:8F:6A:69:93:CC:49:E3:54:1F:14:89:76:33:2F:9F:62 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d9:5b:dc:52:5a:42:40:2e:fa:f3:ec:66:dd:47:64:f9:65: f8:54:67:25:41:92:ba:56:24:85:a9:00:84:ed:89:2c:01:ed: da:83:bb:72:99:4b:60:48:2c:03:af:17:7d:07:52:1d:79:11: b1:51:72:74:07:fc:42:65:23:b3:e9:fb:cc:29:dc:01:89:0a: 6b:a4:43:26:3f:c8:ec:ff:13:ab:3d:7a:91:c1:88:49:2f:e4: 59:70:27:2e:63:90:64:e6:96:5a:2a:6e:18:41:7c:57:a1:41: 45:f5:3e:84:41:d0:92:86:3e:cb:a9:47:7b:a6:72:32:26:66: 6e:e3:57:48:92:c7:f0:e4:e1:90:84:50:15:fa:89:ae:9d:ac: 00:39:60:06:b7:ad:61:ea:6c:c8:1b:e1:42:88:76:c2:2f:de: f2:e8:ff:0a:ce:c3:a3:7a:cb:66:f5:b8:1f:69:56:32:6f:e2: 46:9c:5e:45:e3:0f:47:50:43:a6:3d:3c:eb:47:30:0a:b5:a1: 13:ca:c1:8d:66:ac:c8:01:87:be:ef:4f:f4:61:d8:4b:97:9c: a9:5c:2e:5a:68:fa:cd:eb:7a:d2:7e:9a:2e:6e:a9:f7:21:b3: 6a:55:f7:81:bd:b0:69:33:96:f1:90:39:03:a7:8f:a7:64:f5: 95:8f:ea:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg4ciLJdYpTuVA5+m5fW0bsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwNzIzMTgwMTAwWhcNMjUwNzI0MTgwMTAwWjAzMTEwLwYDVQQD EyhhNmQ4ODI5MzhmNmE2OTkzY2M0OWUzNTQxZjE0ODk3NjMzMmY5ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwid13LTAs3/hVpbYeJiIcAmlIzG YlMYrKr/C+0yMxNUy0axFoqjQOU5sWs7GHVhBvGPC2mj7uI6v/+Nk2kqRXdeWdEx QY9Td/c+xhxH+fleekQt9GRMFA6RhfZh07tTmMvODz6oOooefzxPbkZfwoLVggXR ytDpbZqq+pm9VlnOdpo7z2DDovx5cpgT4NkrbhNsyLIPb/sbRXGIcgt16PXd3vcZ xF9ADBmC9H3XLwuP59BtLQFL2vcWk5C5SukZAL0ytmsIdzr/K2cSU8Ogpm/2xZ3d mxkt3M7PGxZBTNQEdmStIOle2C8A7rEwUfT9Q9lbzmFAB09lURhDsm7dLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbYgpOPammTzEnjVB8UiXYzL59iMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNlb3FJa QkAu+vPsZt1HZPll+FRnJUGSulYkhakAhO2JLAHt2oO7cplLYEgsA68XfQdSHXkR sVFydAf8QmUjs+n7zCncAYkKa6RDJj/I7P8Tqz16kcGISS/kWXAnLmOQZOaWWipu GEF8V6FBRfU+hEHQkoY+y6lHe6ZyMiZmbuNXSJLH8OThkIRQFfqJrp2sADlgBret YepsyBvhQoh2wi/e8uj/Cs7Do3rLZvW4H2lWMm/iRpxeReMPR1BDpj0860cwCrWh E8rBjWasyAGHvu9P9GHYS5ecqVwuWmj6zet60n6aLm6p9yGzalX3gb2waTOW8ZA5 A6ePp2T1lY/qWA== -----END CERTIFICATE-----Generated at Wed Jul 23 23:19:52 2025 by rpki-client