$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: WvwtCelYDafXE0e88GlngttN72XPMSVHNf8u2oq/mcw= Subject key identifier: 5A:EE:22:9A:2B:01:0E:94:68:9C:F5:C7:CA:D7:E6:5F:65:EF:15:E4 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019827B50CA7ADF027E27E62676DC4BED12D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 11F1 Signing time: Sun 20 Jul 2025 12:00:33 +0000 Manifest this update: Sun 20 Jul 2025 12:00:33 +0000 Manifest next update: Mon 21 Jul 2025 12:00:33 +0000 Files and hashes: 1: 2EnX4m92s0lhKmWE_sTzMD4Ayro.roa (hash: gA57KxZUSDCVnGJyJOSYKPN5gZzPfcQGEC6QQbL5A80=) 2: 3-Grh5jLZ10JU7OBJD1tp_47eyY.roa (hash: 2c45XwsvJy+h7TqtuH/GlyKMkqIf7Xkil5OLxUtEjls=) 3: 3O-PquqRfbA6nwdvb9qh_AlphQI.roa (hash: ui7wdGtAkSn5jSbzg9QOpRGaOjEkXjjG4DHPpDLyVM8=) 4: 7up0r1vQiZdKC1oE9L7mvuP0p4I.roa (hash: cVjp4QTLbcnMTdi+ebHsiAxT4Sjmfp6erOaAfdsxTlE=) 5: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (hash: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=) 6: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (hash: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=) 7: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (hash: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=) 8: GvM7qMsGGY0NB0Mdwqd9KZDIh64.roa (hash: S/WeVLNJSBWvfGHQHnHShtzGzYAW49VG43Ku/JYfDys=) 9: HTr5rydQdFHu-uCLJk2lOL3Ir2E.roa (hash: i32saCx4DgxcZ7o3IHdv+kvs+bAPQrDg12HNZKhQfo4=) 10: RHQDwKu8R1BiqVyY2Tjg4hHJAWc.roa (hash: b8HvAiKDPdfzzLQtID64DX+UXDDGwjs7bi1PBPQ+P/8=) 11: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (hash: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=) 12: XE7cRB6SWvPtqodUbBU29gAlxy0.roa (hash: VEw1GCPGuZXegW9h5elGs3pbrIScm0hRkL6R6Vn1RLY=) 13: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (hash: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=) 14: d3sFY8_J7LBIPwIhb4dAzqL5atM.roa (hash: Jn5pB2LDPV82LCwM4xQJY+PpwwF3+IHXMhIfwqqGyG4=) 15: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: fa8rzLfI1tc1Jr0BUMzeCDFFl6VQe8NJd0K1/Bd4bNU=) 16: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (hash: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=) 17: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (hash: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=) 18: iHqHOmwrVyrtHOqJBGU-h4gTPGE.roa (hash: LgyVv3T9GhaxHLbeG0cUmNnr3zf3ppvzWIBGJwHUSNg=) 19: iPUqVolhLmbwFocDgLV6ncA_LRs.roa (hash: Vf7btw8BxFTBWWeh1+kJas/26jHzb0LOznlp7bXnAAo=) 20: iTLc5VqU9KTkxYI4woYxihTaS1E.roa (hash: 9Lihlb46Ba0mozz2ZnqtyUczktp8pAuj6kFBxT8olqk=) 21: lHB6GUG9tuilyPUZ-PLVSWYnHoY.roa (hash: Yz+D6XoxB1A0Y5z0UdLVnO5DkmnKnLGf5GEO6bsKFRk=) 22: mshsch9jvLRWMOkW640opDKVZ6U.roa (hash: BsoqjBrJxvmkPWcY+fPLitNMqJrGGEQ6Lx9nbs/IguA=) 23: mss18FIq4ydcYebAHYX2pd8ocjk.roa (hash: J88GfjksI+w3VtUia6Hq+rhitJHHRkLoOK14jy8vrfc=) 24: n8beE_tI7GeE5JTD0amAF0WQp1M.roa (hash: iiReayb/lEPVoMVcPoo7tc123PhSZyon0Hw4QE2B2Jc=) 25: nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa (hash: oWPee3Z5fruu6Qydv3LTw9u+9tD+meWbQsYByk2qusI=) 26: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (hash: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=) 27: phdVSjC8d7P_IPR9pfuqF3ibJeQ.roa (hash: LdfALFSTfppofahy/V7vrDSqtAjnA1jl4Wz8tBm0yaQ=) 28: qhqAQR22JaN9sFDstmAnfgH6jD4.roa (hash: DYrIqHwNjcGZSEbGFvg0f1ZcKdSDEK96zCtPjprY0u8=) 29: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (hash: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=) 30: vSFUAztM4xg8pnCN2uvJ0r0ZpOY.roa (hash: lfAk2RkoT9Z6h0Jxb78c4RLN4P2hpHz0D8+Q/p7nmkA=) 31: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (hash: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=) 32: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (hash: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=) 33: yyxJQ5XATA8lfc_O-A0MIq50viw.roa (hash: b3vHgrn6G4FC+/ORCr2nTAcwUFNQFEM4kTv5ph/7kMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:0c:a7:ad:f0:27:e2:7e:62:67:6d:c4:be:d1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jul 20 12:00:33 2025 GMT Not After : Jul 21 12:00:33 2025 GMT Subject: CN=5aee229a2b010e94689cf5c7cad7e65f65ef15e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:c0:38:bb:89:be:fd:c0:37:80:16:28:4b: 7c:f3:9f:03:a1:9c:fe:81:46:73:5a:3a:81:63:05: 03:54:a5:54:7d:96:e0:6d:74:95:2a:8d:ba:94:39: c4:73:d9:28:f0:dc:8e:c4:66:8f:c5:2b:a0:2c:01: b9:20:0a:80:28:76:24:48:02:26:63:49:f7:9c:d9: 73:d9:2f:7b:36:80:c1:92:f4:a5:26:01:f7:a0:a5: 6f:b2:98:31:d8:9a:6f:37:0b:09:f8:69:72:77:a9: b7:8c:e7:6d:02:4d:e3:56:e1:b1:ed:38:6a:96:96: 52:90:70:71:21:e7:27:c4:20:65:dd:cc:e6:cc:67: 95:f8:9c:70:d5:1a:75:bd:4b:02:b2:7c:1e:a0:b3: 77:2a:20:2a:80:b9:cf:86:67:c4:7e:31:00:fb:eb: 37:86:9f:63:e1:e1:17:1f:c1:a5:bd:6a:5a:f5:44: ca:38:db:5a:ee:c5:7b:71:9f:c6:e0:20:6b:e3:f0: cc:4e:43:de:25:52:05:e4:86:75:b6:ec:80:a8:df: 7b:42:3d:e7:3c:58:dd:4a:4a:30:a4:99:e8:bb:ee: 18:76:4d:c1:22:b7:6f:49:ec:53:98:e9:8f:d7:91: 4b:24:ae:1f:b8:29:56:bb:0c:e8:6e:13:30:e0:f8: c8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EE:22:9A:2B:01:0E:94:68:9C:F5:C7:CA:D7:E6:5F:65:EF:15:E4 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b9:0c:84:3d:13:cb:3f:73:68:dd:d9:59:c6:d8:65:fe:d6: b2:cd:fb:86:6d:7a:d2:77:0e:78:64:f3:3c:f4:1e:e9:94:5b: e1:44:55:66:b9:aa:bb:e1:af:79:5e:29:4d:1b:a3:15:43:00: 06:e9:6a:cd:8d:97:85:6b:4d:31:1a:84:03:22:33:67:77:34: 62:3b:21:5f:eb:be:4d:d2:65:c8:4f:e3:a3:8c:91:c6:c3:88: 19:59:bb:eb:f9:aa:00:25:b2:70:c0:5d:d5:fa:84:a7:b7:b4: a1:68:30:1b:7d:62:4f:e2:4f:6b:39:2d:57:1e:83:76:5d:7f: dd:dd:94:75:2f:c4:a2:3b:61:fe:fb:bb:90:e9:35:8b:0a:4c: 23:74:10:c9:86:3c:f0:fa:75:6e:f0:0b:9f:30:5f:3f:a1:d0: f7:a4:d7:ea:7f:ca:c5:2f:dc:20:43:c8:a8:ca:70:bd:9f:52: 01:32:4e:14:a2:bd:94:4a:3f:e1:a4:a9:3e:78:d7:d5:bb:26: 9e:76:2d:5c:89:ab:a0:4b:86:64:83:a4:3c:ad:08:d8:97:cd: 76:25:d8:c7:f4:25:aa:5c:22:af:a3:6f:27:2f:89:ba:2d:e5: 21:7c:2b:4e:52:b8:23:cd:f2:42:50:a1:83:be:d9:43:41:46: 28:ed:0f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntQynrfAn4n5iZ23EvtEtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjUwNzIwMTIwMDMzWhcNMjUwNzIxMTIwMDMzWjAzMTEwLwYDVQQD Eyg1YWVlMjI5YTJiMDEwZTk0Njg5Y2Y1YzdjYWQ3ZTY1ZjY1ZWYxNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRLAOLuJvv3AN4AWKEt8858DoZz+ gUZzWjqBYwUDVKVUfZbgbXSVKo26lDnEc9ko8NyOxGaPxSugLAG5IAqAKHYkSAIm Y0n3nNlz2S97NoDBkvSlJgH3oKVvspgx2JpvNwsJ+Glyd6m3jOdtAk3jVuGx7Thq lpZSkHBxIecnxCBl3czmzGeV+Jxw1Rp1vUsCsnweoLN3KiAqgLnPhmfEfjEA++s3 hp9j4eEXH8GlvWpa9UTKONta7sV7cZ/G4CBr4/DMTkPeJVIF5IZ1tuyAqN97Qj3n PFjdSkowpJnou+4Ydk3BIrdvSexTmOmP15FLJK4fuClWuwzobhMw4PjIJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFruIporAQ6UaJz1x8rX5l9l7xXkMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbkMhD0T yz9zaN3ZWcbYZf7Wss37hm160ncOeGTzPPQe6ZRb4URVZrmqu+GveV4pTRujFUMA BulqzY2XhWtNMRqEAyIzZ3c0YjshX+u+TdJlyE/jo4yRxsOIGVm76/mqACWycMBd 1fqEp7e0oWgwG31iT+JPazktVx6Ddl1/3d2UdS/Eojth/vu7kOk1iwpMI3QQyYY8 8Pp1bvALnzBfP6HQ96TX6n/KxS/cIEPIqMpwvZ9SATJOFKK9lEo/4aSpPnjX1bsm nnYtXImroEuGZIOkPK0I2JfNdiXYx/Qlqlwir6NvJy+Jui3lIXwrTlK4I83yQlCh g77ZQ0FGKO0PDQ== -----END CERTIFICATE-----Generated at Sun Jul 20 16:23:35 2025 by rpki-client