$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: lAaOFfsNPVGFeI4Y6nDbwVKelUtG9fjVB70x46i5Ims= Subject key identifier: 0D:3B:0D:D0:5D:8B:92:BC:78:EF:2B:2B:56:94:03:97:3A:D1:05:9E Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 01994F2E5539AED9162C7CE16130A40C2B3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0FAA Signing time: Mon 15 Sep 2025 21:01:00 +0000 Manifest this update: Mon 15 Sep 2025 21:01:00 +0000 Manifest next update: Tue 16 Sep 2025 21:01:00 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: y6kdUaHlfm4Q/N/9nl3OA+S5Ze69iSmIdheB97fRilQ=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 13:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:4f:2e:55:39:ae:d9:16:2c:7c:e1:61:30:a4:0c:2b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Sep 15 21:01:00 2025 GMT Not After : Sep 16 21:01:00 2025 GMT Subject: CN=0d3b0dd05d8b92bc78ef2b2b569403973ad1059e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:58:b6:97:ab:7e:26:b4:e2:38:13:ce:e5: d3:e9:94:b2:e4:53:64:4d:68:c6:56:03:10:1e:bb: aa:e6:52:80:f5:76:3a:55:15:10:21:27:00:b0:c7: 39:39:32:39:80:58:41:62:a5:c3:59:3d:40:6b:63: 9f:81:96:0d:06:46:17:ca:1c:2e:0b:69:32:09:fb: 45:d5:37:f6:02:a9:d2:22:78:ba:c6:8b:d3:32:7d: 99:c6:1a:ad:15:ab:ce:f4:03:04:3f:ff:8d:cf:c8: 1c:11:c5:63:6d:36:2a:8c:d5:56:62:34:6b:f7:6c: 74:74:01:9e:93:49:0e:07:8d:f6:6f:4d:b1:37:94: e2:e7:08:64:15:a0:14:ce:4b:d8:63:71:f9:85:77: f9:fa:e6:4d:88:41:cd:da:d9:c1:7a:19:d4:8b:2d: d0:77:41:4d:3b:f9:a8:63:94:14:df:70:36:e8:ba: 7c:df:18:35:cc:63:71:28:aa:f2:ba:b0:77:d2:f1: e5:b4:5b:9b:e0:39:12:ad:db:57:db:d4:44:75:94: 57:d5:fc:3b:28:45:fe:a9:77:68:97:a6:a1:3a:f0: 6f:60:6f:ac:98:d5:ce:d3:de:d1:30:40:8e:30:cc: 39:0e:cd:a1:a2:90:ed:b3:7a:47:d7:c4:b0:57:25: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3B:0D:D0:5D:8B:92:BC:78:EF:2B:2B:56:94:03:97:3A:D1:05:9E X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4b:4b:a5:15:ae:91:50:e2:4c:d3:b1:ba:17:e7:27:ae:6d: 5a:18:49:a4:ba:94:91:50:1f:2d:ec:31:72:7c:16:31:ec:0a: cb:fe:56:e4:57:70:d0:b8:2b:f0:91:94:e9:c9:ec:62:37:4a: 6d:1f:33:27:08:22:c2:58:64:1d:9f:ab:5f:8f:d3:81:29:8d: 3c:10:08:af:d5:f6:5e:5c:d5:5b:d5:b0:6a:2f:6b:ac:59:bb: 65:75:be:12:2e:8d:b9:1d:12:73:8f:a5:b3:7d:a4:55:55:4f: 3f:b3:c8:72:f5:03:0a:a7:de:de:9a:11:c8:33:ba:d7:c5:a6: 08:9f:db:1e:0f:9e:ed:77:c2:d9:0b:58:f2:e4:55:85:26:5a: c1:34:ef:b6:c2:0d:6e:b1:3c:54:8d:c1:69:4f:f3:ae:d0:30: 72:3e:f1:11:24:76:b2:b3:fb:0b:2d:11:de:de:0a:11:42:b6: b0:d5:7e:2e:aa:1b:e9:25:cf:73:f9:ed:2f:c7:fd:ce:82:09: 41:c7:d2:71:e1:33:cf:53:0a:c0:96:af:26:88:b1:98:ff:33: 66:c5:1d:80:f4:cf:68:9f:e7:4d:c1:1d:c5:2d:c9:75:c3:80: db:a4:69:56:d5:7b:51:ff:2a:9b:ea:80:8e:73:53:db:75:e6: 01:70:d6:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlPLlU5rtkWLHzhYTCkDCs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUwOTE1MjEwMTAwWhcNMjUwOTE2MjEwMTAwWjAzMTEwLwYDVQQD EygwZDNiMGRkMDVkOGI5MmJjNzhlZjJiMmI1Njk0MDM5NzNhZDEwNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qNYtperfia04jgTzuXT6ZSy5FNk TWjGVgMQHruq5lKA9XY6VRUQIScAsMc5OTI5gFhBYqXDWT1Aa2OfgZYNBkYXyhwu C2kyCftF1Tf2AqnSIni6xovTMn2ZxhqtFavO9AMEP/+Nz8gcEcVjbTYqjNVWYjRr 92x0dAGek0kOB432b02xN5Ti5whkFaAUzkvYY3H5hXf5+uZNiEHN2tnBehnUiy3Q d0FNO/moY5QU33A26Lp83xg1zGNxKKryurB30vHltFub4DkSrdtX29REdZRX1fw7 KEX+qXdol6ahOvBvYG+smNXO097RMECOMMw5Ds2hopDts3pH18SwVyWVrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA07DdBdi5K8eO8rK1aUA5c60QWeMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUtLpRWu kVDiTNOxuhfnJ65tWhhJpLqUkVAfLewxcnwWMewKy/5W5Fdw0Lgr8JGU6cnsYjdK bR8zJwgiwlhkHZ+rX4/TgSmNPBAIr9X2XlzVW9Wwai9rrFm7ZXW+Ei6NuR0Sc4+l s32kVVVPP7PIcvUDCqfe3poRyDO618WmCJ/bHg+e7XfC2QtY8uRVhSZawTTvtsIN brE8VI3BaU/zrtAwcj7xESR2srP7Cy0R3t4KEUK2sNV+Lqob6SXPc/ntL8f9zoIJ QcfSceEzz1MKwJavJoixmP8zZsUdgPTPaJ/nTcEdxS3JdcOA26RpVtV7Uf8qm+qA jnNT23XmAXDWnA== -----END CERTIFICATE-----Generated at Mon Sep 15 22:54:20 2025 by rpki-client