$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: G7Hsf1SUK2IVbvJynDh573Yvt0CDmQZqfpsZmJ9Lub4= Subject key identifier: E9:4A:F8:C7:A8:2D:8D:E7:67:93:DD:D3:D7:91:34:B5:57:ED:0B:2E Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 0197D2BCB6E0974D2D8245DA5202D0F4A921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0EE5 Signing time: Fri 04 Jul 2025 00:01:12 +0000 Manifest this update: Fri 04 Jul 2025 00:01:12 +0000 Manifest next update: Sat 05 Jul 2025 00:01:12 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: L9MnAInaj6dVVxijFo/itzJjYrGWP3SPssntQtvD6lI=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:d2:bc:b6:e0:97:4d:2d:82:45:da:52:02:d0:f4:a9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jul 4 00:01:12 2025 GMT Not After : Jul 5 00:01:12 2025 GMT Subject: CN=e94af8c7a82d8de76793ddd3d79134b557ed0b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:63:bf:44:3e:65:30:f6:33:37:a7:b9:98: bf:ea:41:fd:e7:7a:f7:a3:d5:c3:45:40:75:d9:ca: 22:53:28:b7:e6:35:64:1b:36:59:65:cc:49:a5:3b: 1f:d9:fa:9d:69:a0:8b:2e:29:81:aa:8f:6e:55:ec: 7b:76:cc:d6:93:89:76:d7:4d:0c:3e:a5:ea:08:81: d1:77:07:33:46:42:5b:7c:c9:14:95:70:4b:b9:c9: 4e:cc:98:2b:5f:9f:aa:81:c4:06:96:92:7a:c6:c1: 91:bc:a2:fb:bc:80:d9:3b:15:56:2c:d4:16:5e:52: 6e:ca:e2:00:ee:aa:e6:0f:85:a9:e0:e4:fb:9f:d5: 52:66:fe:82:cb:5f:81:4f:e1:7d:ab:e2:c7:b5:e8: 6f:66:3a:f2:87:04:fd:7d:d8:00:7b:9b:24:ac:01: 93:37:fc:5c:96:2c:15:b5:03:02:11:bf:d8:42:6a: cb:1a:42:f8:bc:b3:22:ba:5b:f8:d7:81:7f:1f:5d: 5f:c3:ed:17:5d:8a:2a:a0:31:97:5f:bc:2d:c5:10: ab:d5:62:f9:ec:b1:44:a6:f1:55:90:45:02:9d:60: 62:b7:3e:5a:fc:8b:7f:22:3e:36:85:66:9b:bd:b3: a7:75:ce:52:46:2e:4d:b3:39:54:8b:0e:10:5b:44: 75:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4A:F8:C7:A8:2D:8D:E7:67:93:DD:D3:D7:91:34:B5:57:ED:0B:2E X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:92:2a:35:d8:af:42:c4:4c:2b:d4:90:ce:1b:04:04:8a:4e: 5b:b8:37:15:2d:0d:d7:bc:c8:46:d8:8e:cb:7f:ec:02:7e:96: 23:b0:4f:9e:15:71:c3:d9:9f:64:9f:5a:07:fa:fb:49:37:92: fd:35:81:14:c3:c3:af:5b:8b:25:31:5b:69:02:78:70:8a:b4: 0b:38:56:d7:c7:95:f7:46:fe:bf:35:2d:7a:4b:c4:02:08:11: e7:65:0e:54:3d:72:43:21:b6:bf:8c:3d:db:54:d2:d2:ed:9c: 92:b8:9a:d0:56:48:f0:e2:6f:a4:33:0e:c1:3d:4a:b8:5d:48: fd:30:5e:9b:d0:8e:9f:f6:91:75:7f:70:f4:bb:ec:94:a6:bb: 1e:fa:e1:4b:52:6b:2e:72:2c:2b:4f:e0:e1:e6:dd:6d:ab:a5: 11:6d:68:2f:42:34:eb:ca:d2:1f:00:ca:18:c5:a3:07:25:f7: 47:59:48:64:59:4c:11:31:28:fc:e6:7c:f0:d3:30:ac:44:24: 27:5a:39:93:29:86:de:29:cf:fd:3c:54:1f:e5:71:28:06:88: ab:c8:00:f9:65:18:ce:fc:3e:5d:5f:c6:6d:ab:02:eb:24:e3: 27:91:f6:e0:85:a0:cd:30:bb:b0:49:c5:d2:23:5f:dc:ad:0b: a7:89:fc:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfSvLbgl00tgkXaUgLQ9KkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUwNzA0MDAwMTEyWhcNMjUwNzA1MDAwMTEyWjAzMTEwLwYDVQQD EyhlOTRhZjhjN2E4MmQ4ZGU3Njc5M2RkZDNkNzkxMzRiNTU3ZWQwYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYxjv0Q+ZTD2MzenuZi/6kH953r3 o9XDRUB12coiUyi35jVkGzZZZcxJpTsf2fqdaaCLLimBqo9uVex7dszWk4l2100M PqXqCIHRdwczRkJbfMkUlXBLuclOzJgrX5+qgcQGlpJ6xsGRvKL7vIDZOxVWLNQW XlJuyuIA7qrmD4Wp4OT7n9VSZv6Cy1+BT+F9q+LHtehvZjryhwT9fdgAe5skrAGT N/xcliwVtQMCEb/YQmrLGkL4vLMiulv414F/H11fw+0XXYoqoDGXX7wtxRCr1WL5 7LFEpvFVkEUCnWBitz5a/It/Ij42hWabvbOndc5SRi5NszlUiw4QW0R1DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlK+MeoLY3nZ5Pd09eRNLVX7QsuMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5IqNdiv QsRMK9SQzhsEBIpOW7g3FS0N17zIRtiOy3/sAn6WI7BPnhVxw9mfZJ9aB/r7STeS /TWBFMPDr1uLJTFbaQJ4cIq0CzhW18eV90b+vzUtekvEAggR52UOVD1yQyG2v4w9 21TS0u2ckria0FZI8OJvpDMOwT1KuF1I/TBem9COn/aRdX9w9LvslKa7HvrhS1Jr LnIsK0/g4ebdbaulEW1oL0I068rSHwDKGMWjByX3R1lIZFlMETEo/OZ88NMwrEQk J1o5kymG3inP/TxUH+VxKAaIq8gA+WUYzvw+XV/GbasC6yTjJ5H24IWgzTC7sEnF 0iNf3K0Lp4n8DA== -----END CERTIFICATE-----Generated at Fri Jul 4 03:46:59 2025 by rpki-client