$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: PbHMxjNQB+P/YqjgVVJ1UdgVkDBqdiJwiFHpxdKZS1s= Subject key identifier: BA:F8:A3:0C:13:38:04:7F:3C:50:C2:80:8B:21:47:CA:DF:9B:A0:C2 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 01984AAF4556CECD4151C5CFA2030CE55AEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 1617 Signing time: Sun 27 Jul 2025 07:00:57 +0000 Manifest this update: Sun 27 Jul 2025 07:00:57 +0000 Manifest next update: Mon 28 Jul 2025 07:00:57 +0000 Files and hashes: 1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=) 2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=) 3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=) 4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=) 5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=) 6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=) 7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=) 8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=) 9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=) 10: VoBqKFmkzHKUMH66kT01ur4Okdk.roa (hash: wrQGRmCWA6MmV9E979fU5JGLxSuHzNsXWbXUIKZWDCY=) 11: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=) 12: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: 4Z1LwOUMUiPCE9SYxdaey9eZLk4osAy4RehTsUlsw9c=) 13: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=) 14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:af:45:56:ce:cd:41:51:c5:cf:a2:03:0c:e5:5a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Jul 27 07:00:57 2025 GMT Not After : Jul 28 07:00:57 2025 GMT Subject: CN=baf8a30c1338047f3c50c2808b2147cadf9ba0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:db:59:9c:fc:67:da:5e:28:e4:cf:91:3d:ff: f9:24:75:b8:a4:88:37:3e:a7:71:7c:6b:16:ab:01: 10:8f:9a:56:6b:80:39:6c:17:f9:49:c0:a3:2d:89: 49:1a:40:4d:f6:57:44:a2:15:93:47:b7:3c:fc:af: e2:64:68:01:94:41:4e:3c:22:d5:48:12:04:91:a9: c9:d8:77:3b:af:9f:3f:47:11:bc:c5:20:ba:b9:3c: 1b:8c:cf:f6:bb:1c:58:47:b4:a6:c5:1e:46:18:e7: 78:73:ca:02:b0:63:56:c9:cf:6c:e8:6e:f5:e3:1b: 8d:f2:33:ef:fa:96:07:43:46:14:3d:1f:02:96:c7: 05:5a:45:3b:51:30:d2:14:58:9d:40:e8:da:d7:97: 50:7a:cd:a8:1f:6c:c0:79:de:73:8d:16:17:7e:88: e9:27:81:84:e3:eb:b7:90:08:65:8c:93:e4:5b:a0: b5:59:25:e5:86:67:d0:1f:d9:d4:2d:b8:6f:7e:88: 1a:b8:d7:a9:54:8d:21:f1:a6:96:9b:1e:e3:98:0d: 8b:83:d2:39:9e:74:04:cf:cf:62:e8:4c:49:67:c3: ff:be:bc:62:c1:d3:52:1d:97:be:b6:9d:a7:e3:7b: 39:16:5f:c9:08:5e:e3:4c:cb:c9:19:ae:3f:d8:1b: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F8:A3:0C:13:38:04:7F:3C:50:C2:80:8B:21:47:CA:DF:9B:A0:C2 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:69:3b:2e:d9:55:08:8b:25:be:cc:f4:08:23:0b:9c:5b:d1: 1d:8a:d8:fa:dd:eb:ca:23:e6:f6:52:a7:6c:68:79:6f:0f:af: 6c:aa:a1:aa:38:3d:13:22:bd:aa:52:9a:28:c4:d9:fb:d4:2f: 9b:c9:db:b6:99:2e:16:0f:10:12:a7:b0:db:35:c7:b6:d3:4e: ff:47:b9:c6:f4:06:dd:48:cd:f3:77:5b:2f:ba:b1:55:fa:12: 24:d1:54:48:f6:5c:ff:7f:8e:58:71:88:9e:44:11:55:58:76: b0:01:e1:fe:fa:9e:28:e9:5f:91:b3:89:04:cc:8e:ef:46:1b: ff:8a:4c:42:94:03:2f:0c:46:f4:88:de:47:6a:f2:05:65:19: 7f:17:4c:43:ed:c4:d9:e3:10:bc:31:d2:f5:06:aa:53:b0:90: 4c:16:28:85:7b:30:21:87:e1:08:49:2e:93:ed:0f:30:0a:99: 62:d4:88:6c:74:68:04:78:f1:e3:b4:11:3c:0c:42:0c:0b:98: b2:71:12:dd:e4:f7:31:92:2f:83:d8:d6:da:3d:db:87:e8:bb: 32:e3:90:df:c9:cc:4f:ea:01:77:ec:84:ac:34:e3:99:09:9b: 2a:5c:2b:c7:e3:ee:10:3f:14:b1:93:9e:33:f1:17:a9:65:8d: 7a:c4:de:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKr0VWzs1BUcXPogMM5VrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjUwNzI3MDcwMDU3WhcNMjUwNzI4MDcwMDU3WjAzMTEwLwYDVQQD EyhiYWY4YTMwYzEzMzgwNDdmM2M1MGMyODA4YjIxNDdjYWRmOWJhMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ttZnPxn2l4o5M+RPf/5JHW4pIg3 PqdxfGsWqwEQj5pWa4A5bBf5ScCjLYlJGkBN9ldEohWTR7c8/K/iZGgBlEFOPCLV SBIEkanJ2Hc7r58/RxG8xSC6uTwbjM/2uxxYR7SmxR5GGOd4c8oCsGNWyc9s6G71 4xuN8jPv+pYHQ0YUPR8ClscFWkU7UTDSFFidQOja15dQes2oH2zAed5zjRYXfojp J4GE4+u3kAhljJPkW6C1WSXlhmfQH9nULbhvfogauNepVI0h8aaWmx7jmA2Lg9I5 nnQEz89i6ExJZ8P/vrxiwdNSHZe+tp2n43s5Fl/JCF7jTMvJGa4/2BuHEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr4owwTOAR/PFDCgIshR8rfm6DCMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2k7LtlV CIslvsz0CCMLnFvRHYrY+t3ryiPm9lKnbGh5bw+vbKqhqjg9EyK9qlKaKMTZ+9Qv m8nbtpkuFg8QEqew2zXHttNO/0e5xvQG3UjN83dbL7qxVfoSJNFUSPZc/3+OWHGI nkQRVVh2sAHh/vqeKOlfkbOJBMyO70Yb/4pMQpQDLwxG9IjeR2ryBWUZfxdMQ+3E 2eMQvDHS9QaqU7CQTBYohXswIYfhCEkuk+0PMAqZYtSIbHRoBHjx47QRPAxCDAuY snES3eT3MZIvg9jW2j3bh+i7MuOQ38nMT+oBd+yErDTjmQmbKlwrx+PuED8UsZOe M/EXqWWNesTeoA== -----END CERTIFICATE-----Generated at Sun Jul 27 10:24:59 2025 by rpki-client