$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: AYnGw84mGA82hUQ6926ES9XGzUNBXPJS9EREvSUtrvU= Subject key identifier: 9E:B5:51:6C:91:69:AE:E9:88:71:B4:14:75:88:8F:D0:E0:6A:B1:FE Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 01984708D6F39D73B7FC1532F957887CAA62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1621 Signing time: Sat 26 Jul 2025 14:00:18 +0000 Manifest this update: Sat 26 Jul 2025 14:00:18 +0000 Manifest next update: Sun 27 Jul 2025 14:00:18 +0000 Files and hashes: 1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=) 2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: cPIFj4emJFvwe8Upx_l04Smq82M.roa (hash: vDJnCBY3/Xu6IQlzRF0lLRZwveQcZyy7umYRTs07PBM=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: VicvGk0TEn35rl3psnC55HIziEOJqOEw7zCtBRoYTcQ=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:47:08:d6:f3:9d:73:b7:fc:15:32:f9:57:88:7c:aa:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Jul 26 14:00:18 2025 GMT Not After : Jul 27 14:00:18 2025 GMT Subject: CN=9eb5516c9169aee98871b41475888fd0e06ab1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:db:ec:a2:47:04:41:ac:b9:92:e1:61:03: 11:75:a4:d3:e9:97:8b:82:8f:d7:f0:d2:c3:f2:c8: 58:a9:d4:48:66:65:a5:3d:1d:9f:4d:87:a8:0e:4b: e7:52:4c:3e:0c:b4:7e:0e:c4:3c:b7:67:8a:29:47: e6:07:ba:ac:04:7a:a7:b3:70:74:3c:df:a2:23:0f: 03:5a:50:d3:a5:e3:97:66:87:3a:2d:02:90:55:55: 3f:18:88:58:1f:02:2f:67:94:f9:76:35:3f:31:20: 0e:6c:fc:ea:4e:21:b7:1f:15:18:bb:17:5b:42:bf: 7f:8d:80:54:70:46:ae:98:e7:14:fa:14:33:fe:82: 6c:1b:38:d2:d6:b1:71:f3:72:24:a8:8b:8c:a6:b8: 09:bd:f6:5e:32:b0:1c:dc:35:94:aa:0b:d1:43:f2: 77:9b:8d:9e:ac:96:d3:fb:9b:24:04:2f:72:a2:1f: 5b:14:5a:98:86:f2:58:dc:e9:a3:b0:a8:e0:92:8a: dc:e1:9d:6d:bc:25:5f:10:b9:54:3f:29:8a:c4:4c: 2e:b1:cb:af:9c:71:d6:24:82:93:81:8d:f1:47:7c: a6:11:b2:c3:79:f2:7a:eb:75:0e:2e:f3:20:d7:cb: 8c:0a:fb:21:28:68:3f:69:25:92:e1:af:be:2c:55: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B5:51:6C:91:69:AE:E9:88:71:B4:14:75:88:8F:D0:E0:6A:B1:FE X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e3:a8:bf:00:92:3e:c9:8e:95:45:78:a0:27:47:b7:74:43: 50:58:23:22:6d:51:99:0a:6d:48:9e:b4:98:2a:54:05:e6:2f: 64:58:c9:7e:9f:c7:ae:19:76:2a:a1:1c:7c:2f:8b:20:54:c8: 56:f0:54:1d:a4:8d:ba:9a:f0:86:c8:b2:ce:d5:47:04:bd:dc: 99:05:7c:85:c7:c9:19:b4:27:63:bb:77:f6:bc:41:ea:b1:e6: fc:18:3a:88:e4:8b:8e:51:f8:ad:e6:f1:b6:cb:1c:fd:64:c5: ef:c6:83:58:97:cd:67:7c:69:f2:b7:3d:8b:9b:52:8a:e7:80: f0:9a:93:df:55:c1:97:ef:a4:82:d4:1c:d7:67:4e:1b:44:e0: ec:a9:57:97:5c:93:46:82:63:7d:8c:1a:83:e1:7d:79:43:cd: 08:5d:d8:06:86:e2:41:06:e6:b3:34:d2:ff:4d:0d:3e:cc:dd: 4d:8b:41:58:b9:b6:0b:b2:82:57:cf:81:f0:84:9c:2f:81:e3: 96:f1:e8:90:8a:66:b8:e9:0d:05:02:7a:b1:6b:f3:1c:59:4f: b2:fd:d9:54:0f:a2:61:ee:3a:f0:41:73:eb:19:6e:cf:21:2d: 44:de:04:a6:7e:41:a1:ca:43:69:35:90:c4:f4:b7:6a:07:ea: 18:9e:e8:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhHCNbznXO3/BUy+VeIfKpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUwNzI2MTQwMDE4WhcNMjUwNzI3MTQwMDE4WjAzMTEwLwYDVQQD Eyg5ZWI1NTE2YzkxNjlhZWU5ODg3MWI0MTQ3NTg4OGZkMGUwNmFiMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK3b7KJHBEGsuZLhYQMRdaTT6ZeL go/X8NLD8shYqdRIZmWlPR2fTYeoDkvnUkw+DLR+DsQ8t2eKKUfmB7qsBHqns3B0 PN+iIw8DWlDTpeOXZoc6LQKQVVU/GIhYHwIvZ5T5djU/MSAObPzqTiG3HxUYuxdb Qr9/jYBUcEaumOcU+hQz/oJsGzjS1rFx83IkqIuMprgJvfZeMrAc3DWUqgvRQ/J3 m42erJbT+5skBC9yoh9bFFqYhvJY3OmjsKjgkorc4Z1tvCVfELlUPymKxEwuscuv nHHWJIKTgY3xR3ymEbLDefJ663UOLvMg18uMCvshKGg/aSWS4a++LFWgSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ61UWyRaa7piHG0FHWIj9DgarH+MB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuOovwCS PsmOlUV4oCdHt3RDUFgjIm1RmQptSJ60mCpUBeYvZFjJfp/Hrhl2KqEcfC+LIFTI VvBUHaSNuprwhsiyztVHBL3cmQV8hcfJGbQnY7t39rxB6rHm/Bg6iOSLjlH4rebx tssc/WTF78aDWJfNZ3xp8rc9i5tSiueA8JqT31XBl++kgtQc12dOG0Tg7KlXl1yT RoJjfYwag+F9eUPNCF3YBobiQQbmszTS/00NPszdTYtBWLm2C7KCV8+B8IScL4Hj lvHokIpmuOkNBQJ6sWvzHFlPsv3ZVA+iYe468EFz6xluzyEtRN4Epn5BocpDaTWQ xPS3agfqGJ7ojA== -----END CERTIFICATE-----Generated at Sat Jul 26 20:42:49 2025 by rpki-client