$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: g4fH2LamG1zVTL3zOtBp5Z7zC+oq2nXz727hadhQpZ8= Subject key identifier: 5A:2D:D3:73:1F:FE:AB:F3:A7:02:05:BB:21:39:EC:B2:48:AF:20:A1 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 0198CDCA74022C6E5D38E5A9C6FAB92F395D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0F67 Signing time: Thu 21 Aug 2025 18:00:53 +0000 Manifest this update: Thu 21 Aug 2025 18:00:53 +0000 Manifest next update: Fri 22 Aug 2025 18:00:53 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: 2oF96MTrkFEdOVB8TNU877XhP/L55sjxFLrqcRa476I=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Aug 2025 17:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:cd:ca:74:02:2c:6e:5d:38:e5:a9:c6:fa:b9:2f:39:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Aug 21 18:00:53 2025 GMT Not After : Aug 22 18:00:53 2025 GMT Subject: CN=5a2dd3731ffeabf3a70205bb2139ecb248af20a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:90:8d:d0:cb:23:24:62:4b:ea:4a:1b:28: 66:8d:d5:e8:f5:93:97:02:75:85:74:ae:f1:8c:73: 47:45:2b:c4:ed:41:f7:28:83:5c:71:c2:43:7a:fb: df:dd:02:84:39:c0:8f:d9:fa:9f:d8:b0:90:f0:73: 1d:59:ee:0e:d5:e3:75:ac:ec:62:6a:50:78:15:b6: 69:e6:f9:cc:97:b3:ec:b0:5b:a5:27:17:4a:44:19: 53:38:46:0b:05:97:c8:68:a4:c2:03:fd:dc:a1:fe: 1b:1e:de:8c:3c:5f:4c:fb:ae:7b:52:6c:ce:bb:b0: 47:81:59:d6:32:38:30:1f:fc:67:43:c2:49:c7:2e: 8f:cd:fc:5d:8b:11:dc:f5:d7:1c:f7:06:cb:60:99: 99:fc:e3:e9:d8:79:87:4a:62:95:14:1b:be:72:c3: 73:46:79:5d:d4:b7:f1:5a:d7:94:a5:36:8d:6a:0a: ed:9b:0d:2a:63:7c:f4:a4:64:72:2a:dc:cc:6f:58: 2f:79:6c:fc:dc:3d:3d:37:d1:41:c3:ad:7b:75:7c: cc:88:6f:89:bd:ce:ba:b4:a5:a7:e3:75:7c:b3:16: dc:3d:1b:a8:74:41:8b:12:ed:2e:f8:8f:56:05:c2: a8:4f:ca:02:d2:17:dd:49:11:d4:09:50:4e:6e:ea: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2D:D3:73:1F:FE:AB:F3:A7:02:05:BB:21:39:EC:B2:48:AF:20:A1 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ec:a3:dd:0c:6b:43:e3:52:84:d4:de:6f:67:aa:f9:de:4c: bc:43:da:43:5e:2c:d5:46:30:0f:48:3e:c7:63:a7:64:71:c1: f4:b4:30:c5:0c:5a:4e:65:9f:1c:ca:ca:5e:02:b6:78:d7:30: 50:81:2e:dc:28:39:9d:62:1b:0a:40:47:cf:8d:27:aa:8f:e7: 48:d5:d9:a3:c4:17:7c:3a:0e:99:1c:12:79:36:7a:55:7c:4e: e1:cc:14:4b:59:7c:4a:cd:34:6e:f2:b2:40:fa:d8:d1:9b:98: 12:f8:0d:2a:d1:46:d1:2d:55:35:19:eb:a0:73:64:3b:e6:5b: 1c:fb:e7:68:4d:f4:9f:50:27:9a:2a:56:d5:20:06:93:35:c7: 81:43:49:7d:00:3a:ba:2a:79:9a:17:eb:29:29:a0:fa:1c:ce: 49:ba:02:8b:7f:e0:f3:0a:65:2b:b3:4a:c8:3e:c5:83:5d:2a: 78:a0:58:68:da:17:06:ee:70:1a:ec:39:a1:ae:4f:02:97:8b: ef:15:1f:e8:33:90:2d:6e:21:dd:9d:cb:56:d7:f8:a0:c8:6c: 0a:38:f7:71:3a:fa:83:58:f3:e1:40:57:c1:e1:0f:20:b8:47: 62:df:ed:b3:2a:a0:1d:23:28:35:57:29:f7:b2:22:56:46:1c: 91:84:84:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjNynQCLG5dOOWpxvq5LzldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUwODIxMTgwMDUzWhcNMjUwODIyMTgwMDUzWjAzMTEwLwYDVQQD Eyg1YTJkZDM3MzFmZmVhYmYzYTcwMjA1YmIyMTM5ZWNiMjQ4YWYyMGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLWQjdDLIyRiS+pKGyhmjdXo9ZOX AnWFdK7xjHNHRSvE7UH3KINcccJDevvf3QKEOcCP2fqf2LCQ8HMdWe4O1eN1rOxi alB4FbZp5vnMl7PssFulJxdKRBlTOEYLBZfIaKTCA/3cof4bHt6MPF9M+657UmzO u7BHgVnWMjgwH/xnQ8JJxy6PzfxdixHc9dcc9wbLYJmZ/OPp2HmHSmKVFBu+csNz Rnld1LfxWteUpTaNagrtmw0qY3z0pGRyKtzMb1gveWz83D09N9FBw617dXzMiG+J vc66tKWn43V8sxbcPRuodEGLEu0u+I9WBcKoT8oC0hfdSRHUCVBOburGIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFot03Mf/qvzpwIFuyE57LJIryChMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOyj3Qxr Q+NShNTeb2eq+d5MvEPaQ14s1UYwD0g+x2OnZHHB9LQwxQxaTmWfHMrKXgK2eNcw UIEu3Cg5nWIbCkBHz40nqo/nSNXZo8QXfDoOmRwSeTZ6VXxO4cwUS1l8Ss00bvKy QPrY0ZuYEvgNKtFG0S1VNRnroHNkO+ZbHPvnaE30n1AnmipW1SAGkzXHgUNJfQA6 uip5mhfrKSmg+hzOSboCi3/g8wplK7NKyD7Fg10qeKBYaNoXBu5wGuw5oa5PApeL 7xUf6DOQLW4h3Z3LVtf4oMhsCjj3cTr6g1jz4UBXweEPILhHYt/tsyqgHSMoNVcp 97IiVkYckYSE9g== -----END CERTIFICATE-----Generated at Thu Aug 21 21:37:16 2025 by rpki-client