$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: hdVYIp6yZlfNJWmTreCXx/FBbeeFVgAL5Eo0BRK5Q2k= Subject key identifier: 8A:BA:F5:84:4F:C8:70:87:D8:68:86:B3:0A:26:B3:DD:ED:01:C4:00 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 0197383DFACA2DD01228B3E0D8F1BA246218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0E95 Signing time: Wed 04 Jun 2025 00:01:15 +0000 Manifest this update: Wed 04 Jun 2025 00:01:15 +0000 Manifest next update: Thu 05 Jun 2025 00:01:15 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: cQnthYBxY0oc2r77PLxTVv8izwPeV9lAWq9mgoElrwc=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:38:3d:fa:ca:2d:d0:12:28:b3:e0:d8:f1:ba:24:62:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jun 4 00:01:15 2025 GMT Not After : Jun 5 00:01:15 2025 GMT Subject: CN=8abaf5844fc87087d86886b30a26b3dded01c400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:b8:4f:6b:2c:8b:c8:2d:7b:35:6d:6d:b8: 5f:48:d9:3e:ff:1c:98:df:7e:53:7c:0a:b8:00:79: 1f:5a:3f:e8:29:d2:32:b7:a2:f2:6e:f8:4e:4c:16: 56:36:55:f4:73:74:ad:68:42:73:a4:54:19:0b:5e: eb:59:72:c5:11:b3:f9:c0:00:a7:08:09:65:3f:c0: 20:c2:0a:6d:64:67:b3:b4:d1:66:07:5b:4f:92:d4: 76:d4:1a:7e:93:1e:fb:d5:7d:3c:97:0e:98:00:83: f1:c5:4a:bf:14:28:da:62:e8:87:e2:24:b0:48:3c: 48:04:83:49:c6:e9:49:24:3f:7c:68:6c:ca:22:45: 2e:65:75:0e:70:dd:93:9a:f5:8e:39:e7:9d:a6:db: b2:49:98:09:41:4b:e1:84:f2:a3:9c:33:6a:65:0b: 1a:ea:e1:6f:2e:54:c7:34:eb:33:e4:54:7b:c4:77: c8:9e:25:7f:25:e7:99:ad:84:be:00:32:64:fd:b0: b9:7a:67:5a:3d:e7:5d:62:2d:a4:6c:cd:02:17:14: 10:b5:da:84:c1:36:4d:3d:51:20:b1:25:58:c3:bb: 9d:a4:a2:5d:e4:9f:94:02:b1:db:cf:88:c0:d5:72: 84:3e:9f:7f:bb:24:46:04:ce:37:7e:6b:e1:35:7b: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BA:F5:84:4F:C8:70:87:D8:68:86:B3:0A:26:B3:DD:ED:01:C4:00 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d6:12:bf:fa:7c:a3:a5:78:0d:b2:e1:ce:fc:05:42:e8:83: f2:33:cb:ba:49:60:ff:77:e5:d0:c9:0e:da:17:8a:f6:2f:33: e6:11:58:bf:1f:5f:70:5f:d9:5c:c0:b8:3e:be:20:4e:91:ff: 08:4d:96:67:47:85:5e:58:29:47:86:7c:63:4f:fe:8f:aa:09: 57:87:6c:35:e5:fe:58:e4:04:59:02:37:cf:a1:1b:a9:64:54: 65:cc:90:58:77:f7:aa:52:d8:d4:42:a9:61:ed:f2:8d:76:51: 74:5f:85:cd:e3:9a:10:1f:9c:2f:59:a0:98:c4:d3:7d:5c:02: 89:7c:7d:d6:97:0b:d5:e9:28:3d:2e:cf:b4:2b:80:a4:f9:37: 26:ee:5c:24:73:27:b3:bd:61:16:24:1a:8b:f9:36:53:8e:cf: 31:55:f5:1a:a5:df:65:66:35:d5:d2:1c:4b:b7:34:a2:70:25: 2f:31:58:40:91:72:42:26:0b:23:6b:52:97:d7:79:09:fe:2c: d5:96:fb:1a:15:ee:2f:91:6d:fb:32:31:85:99:1e:90:87:2c: e0:73:31:19:d8:dc:09:93:51:bf:9f:15:8a:e1:45:ba:d4:e8: e6:5e:bf:86:7a:8a:37:b8:0c:93:51:6b:f7:20:b2:79:a4:54: 93:3e:17:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc4PfrKLdASKLPg2PG6JGIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUwNjA0MDAwMTE1WhcNMjUwNjA1MDAwMTE1WjAzMTEwLwYDVQQD Eyg4YWJhZjU4NDRmYzg3MDg3ZDg2ODg2YjMwYTI2YjNkZGVkMDFjNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoO4T2ssi8gtezVtbbhfSNk+/xyY 335TfAq4AHkfWj/oKdIyt6LybvhOTBZWNlX0c3StaEJzpFQZC17rWXLFEbP5wACn CAllP8AgwgptZGeztNFmB1tPktR21Bp+kx771X08lw6YAIPxxUq/FCjaYuiH4iSw SDxIBINJxulJJD98aGzKIkUuZXUOcN2TmvWOOeedptuySZgJQUvhhPKjnDNqZQsa 6uFvLlTHNOsz5FR7xHfIniV/JeeZrYS+ADJk/bC5emdaPeddYi2kbM0CFxQQtdqE wTZNPVEgsSVYw7udpKJd5J+UArHbz4jA1XKEPp9/uyRGBM43fmvhNXsANwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq69YRPyHCH2GiGswoms93tAcQAMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNYSv/p8 o6V4DbLhzvwFQuiD8jPLuklg/3fl0MkO2heK9i8z5hFYvx9fcF/ZXMC4Pr4gTpH/ CE2WZ0eFXlgpR4Z8Y0/+j6oJV4dsNeX+WOQEWQI3z6EbqWRUZcyQWHf3qlLY1EKp Ye3yjXZRdF+FzeOaEB+cL1mgmMTTfVwCiXx91pcL1ekoPS7PtCuApPk3Ju5cJHMn s71hFiQai/k2U47PMVX1GqXfZWY11dIcS7c0onAlLzFYQJFyQiYLI2tSl9d5Cf4s 1Zb7GhXuL5Ft+zIxhZkekIcs4HMxGdjcCZNRv58ViuFFutTo5l6/hnqKN7gMk1Fr 9yCyeaRUkz4XfA== -----END CERTIFICATE-----Generated at Wed Jun 4 11:28:28 2025 by rpki-client