$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: 5MgdBovG5GQk4oFQg7neLzSQ706O0S/GDjHpYdhJMMQ= Subject key identifier: B3:3D:2E:D0:98:E0:09:89:D0:1A:B4:78:5D:1D:28:EA:12:71:F3:0A Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 01982859E1D77F15168558156E54BECA938B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 164A Signing time: Sun 20 Jul 2025 15:00:35 +0000 Manifest this update: Sun 20 Jul 2025 15:00:35 +0000 Manifest next update: Mon 21 Jul 2025 15:00:35 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 4: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 5: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 6: ORny9zSgmvPNlHA0GSjf-fW7JAM.roa (hash: 2mt1E0mw+ncsqd4MDmo2JIYlDgVM2APWu07de1NTQyk=) 7: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 8: TAdP0yKv9NpfjSbhNts0juEkm1U.roa (hash: dvn2DfwTU0n63QcUIMIBNntGEWr2G1UXma7Nhu8Iurs=) 9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: 42SgyVAGqvVbUfS7R4USMpMaMGjJf2B2dhNZf+Y7knQ=) 12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 14: hKxNfLTH0X80Ow-eROTxbGbiZe4.roa (hash: hZv0Z8Cj/PVONdIYD1TEXdIoPUW4dHy+qq7CiSqIhck=) 15: peQXZljVycjXahMLHOgebWKzO6c.roa (hash: 6nDgFHnTrpxmQJyrmsK88oc050AwIyK1nEAS/RY/l94=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:28:59:e1:d7:7f:15:16:85:58:15:6e:54:be:ca:93:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jul 20 15:00:35 2025 GMT Not After : Jul 21 15:00:35 2025 GMT Subject: CN=b33d2ed098e00989d01ab4785d1d28ea1271f30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:cb:fd:00:e0:c8:76:88:83:29:e0:2c:c4: cb:61:d4:b4:08:0f:31:d8:03:6f:47:8c:ff:42:44: 7b:b8:16:1c:e6:53:f6:28:8d:d9:ca:4b:2a:a1:9a: 93:10:56:5b:e4:76:8a:94:3c:04:a6:69:c4:9e:a3: ea:fd:ec:7f:29:54:23:60:f0:af:34:a3:47:e9:7d: e2:56:76:4e:1f:19:f7:67:11:49:82:9d:e0:c4:92: ea:7e:d6:1c:21:77:90:2d:f1:0d:5c:cb:ba:8c:51: 06:ee:e1:ef:da:29:22:97:0f:86:6b:f0:b0:09:a1: 06:18:72:52:14:88:a9:df:b6:3a:7f:77:20:63:5b: 98:d5:ae:0a:53:3b:70:51:be:54:67:f3:07:60:d4: 36:c1:f9:06:27:04:d9:3f:0d:a4:30:06:05:62:8f: 36:7c:4f:1a:eb:52:6b:b6:ca:88:10:8f:f1:dd:b8: e2:0b:58:6e:76:8f:69:61:55:33:ed:86:16:28:c7: 3d:52:30:96:79:fe:af:b4:4b:0a:ff:82:2f:ed:19: 47:c0:b4:6e:f8:9c:42:02:44:d4:5d:89:8e:1d:4a: ff:3f:41:e8:39:62:f6:72:38:a0:71:04:ed:ec:92: 1d:dd:e9:ed:7b:de:64:77:a1:a3:d3:3a:c0:9f:ab: b3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3D:2E:D0:98:E0:09:89:D0:1A:B4:78:5D:1D:28:EA:12:71:F3:0A X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:98:a4:50:90:ee:ce:3a:2d:e5:27:b4:f3:93:ac:c8:1c:96: f2:0f:cc:3d:ca:e9:98:9f:b4:2a:b5:1e:67:4a:8d:e0:c0:c5: 14:60:88:7d:ba:bb:20:87:0c:ad:32:3f:8b:f0:bf:35:70:b6: d9:aa:f9:75:e5:48:87:4b:f2:32:90:f5:08:19:58:ee:63:da: 2b:65:79:49:4a:d4:22:27:f8:88:85:d3:c3:af:97:ec:81:0b: 3e:1d:82:0e:28:af:d5:08:92:f1:69:32:4e:b8:89:e2:ca:8b: 25:e8:d9:e1:c0:09:bb:bc:c5:ba:e7:d4:9d:91:84:bd:0c:c4: 0c:0a:94:c7:f2:3e:ed:c3:f7:00:a6:eb:ac:ed:a4:be:e8:58: d1:2d:23:95:9e:03:8f:c4:54:54:36:59:29:e1:83:14:26:0d: 69:69:ce:84:19:c9:fd:3c:54:64:11:65:dc:34:3a:6d:4d:5f: c0:0d:0c:77:88:cd:13:e3:4f:5f:e6:e0:45:9c:bb:47:10:e2: e8:d0:be:49:52:26:49:b6:c5:66:e4:34:3b:79:6f:7b:3a:7f: e1:eb:19:d5:f5:2e:85:21:8a:47:35:35:59:3e:90:b3:3c:ba: d2:6c:cd:fa:2e:15:3d:36:18:58:eb:dc:0b:41:e3:32:7b:6d: b8:6a:ba:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgoWeHXfxUWhVgVblS+ypOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUwNzIwMTUwMDM1WhcNMjUwNzIxMTUwMDM1WjAzMTEwLwYDVQQD EyhiMzNkMmVkMDk4ZTAwOTg5ZDAxYWI0Nzg1ZDFkMjhlYTEyNzFmMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EbL/QDgyHaIgyngLMTLYdS0CA8x 2ANvR4z/QkR7uBYc5lP2KI3ZyksqoZqTEFZb5HaKlDwEpmnEnqPq/ex/KVQjYPCv NKNH6X3iVnZOHxn3ZxFJgp3gxJLqftYcIXeQLfENXMu6jFEG7uHv2ikilw+Ga/Cw CaEGGHJSFIip37Y6f3cgY1uY1a4KUztwUb5UZ/MHYNQ2wfkGJwTZPw2kMAYFYo82 fE8a61JrtsqIEI/x3bjiC1hudo9pYVUz7YYWKMc9UjCWef6vtEsK/4Iv7RlHwLRu +JxCAkTUXYmOHUr/P0HoOWL2cjigcQTt7JId3ente95kd6Gj0zrAn6uzVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLM9LtCY4AmJ0Bq0eF0dKOoScfMKMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpikUJDu zjot5Se085OsyByW8g/MPcrpmJ+0KrUeZ0qN4MDFFGCIfbq7IIcMrTI/i/C/NXC2 2ar5deVIh0vyMpD1CBlY7mPaK2V5SUrUIif4iIXTw6+X7IELPh2CDiiv1QiS8Wky TriJ4sqLJejZ4cAJu7zFuufUnZGEvQzEDAqUx/I+7cP3AKbrrO2kvuhY0S0jlZ4D j8RUVDZZKeGDFCYNaWnOhBnJ/TxUZBFl3DQ6bU1fwA0Md4jNE+NPX+bgRZy7RxDi 6NC+SVImSbbFZuQ0O3lvezp/4esZ1fUuhSGKRzU1WT6Qszy60mzN+i4VPTYYWOvc C0HjMnttuGq6qw== -----END CERTIFICATE-----Generated at Sun Jul 20 16:24:50 2025 by rpki-client