$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: h8W/zK66yqprwPY2XUbRXAnEzTmMpaiNwxeCoQgB1tM= Subject key identifier: 0F:D3:05:A9:A5:92:01:16:E5:DA:AF:52:ED:25:69:9B:05:5D:88:BF Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 0197488C00D49930228F732362FD514D50E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0BD3 Signing time: Sat 07 Jun 2025 04:00:24 +0000 Manifest this update: Sat 07 Jun 2025 04:00:24 +0000 Manifest next update: Sun 08 Jun 2025 04:00:24 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: AOSmrgyKmqEiMswk4Oe8idIiFCaqtalDOSjDssO9xks=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 8: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 9: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=) 10: qi0InhuXBU-ET3BQIygAjHDv7R4.roa (hash: EwPEIgFR9Y7apfRR0iJdm8aoI2On5DfKKekezl88mDo=) 11: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 12: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 13: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 04:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:48:8c:00:d4:99:30:22:8f:73:23:62:fd:51:4d:50:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jun 7 04:00:24 2025 GMT Not After : Jun 8 04:00:24 2025 GMT Subject: CN=0fd305a9a5920116e5daaf52ed25699b055d88bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:41:bc:13:aa:32:0d:6a:3c:48:3b:d8:2b:6e: d5:1c:48:88:66:3b:64:64:9e:62:2d:05:4c:e3:28: 81:75:d4:30:93:15:7e:b2:03:06:74:44:b4:88:67: 36:20:bd:e5:9f:93:0c:11:8e:30:5a:c4:d0:2a:06: 4a:d9:fa:71:7d:be:75:a0:50:c7:e2:0c:cd:27:57: 8b:e6:cf:7f:7a:5c:a3:f3:73:25:59:de:eb:9a:a7: d5:4c:c0:32:f0:99:df:79:ec:ce:66:7d:94:6f:32: ce:52:ee:7d:76:49:82:5c:a5:4a:e9:25:b7:e7:37: e9:ab:bb:00:c8:44:9d:4e:2b:e8:58:be:32:10:3d: 80:90:1d:86:1b:57:d7:6c:47:56:66:03:99:16:d1: 46:9b:fe:b7:b8:37:e2:8b:ff:82:99:ec:7d:36:2b: 43:61:a8:2f:6a:31:61:54:32:07:f1:c1:15:80:8a: bd:27:74:3e:bd:93:b9:1c:81:d1:63:8a:11:42:6d: bc:6f:5b:15:fe:e5:24:6f:f0:a0:6a:64:58:c7:c0: 9c:01:d6:5a:98:f1:44:9a:79:59:c8:07:e7:6b:ec: cf:e3:08:0b:97:61:41:c3:28:7a:ea:05:f6:aa:93: e6:3e:7f:d1:56:95:fb:4f:12:24:f7:62:12:d3:9e: 88:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D3:05:A9:A5:92:01:16:E5:DA:AF:52:ED:25:69:9B:05:5D:88:BF X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bd:da:07:08:e0:99:1c:8b:3c:4d:c7:b1:19:02:42:2f:18: 9e:80:9e:ae:e8:5f:84:8f:ec:04:53:ed:f5:ae:f7:c2:29:1d: 21:58:ab:65:f6:08:53:6a:36:19:40:c2:f9:07:34:55:57:52: f3:71:08:01:37:43:ed:86:8c:38:41:80:46:79:8f:6a:b8:56: 6a:8d:ea:39:0c:3f:77:dc:3d:e7:54:2d:2d:99:ea:ea:1c:f0: 0b:dd:67:c7:47:22:ff:30:07:1b:78:ff:83:49:83:8e:90:01: ca:04:89:75:c2:fa:6e:73:db:57:b6:a5:f3:d5:46:35:53:43: 6a:d2:82:4e:2d:6d:28:ae:7d:c4:ff:ba:62:ca:8a:ae:67:b9: a1:80:73:3b:0c:6d:2c:13:5d:fc:31:6f:51:b3:97:9c:a3:6d: f2:b4:ec:06:89:1d:f8:b1:ae:51:95:c5:ba:a5:16:3f:ec:62: 9a:97:63:fe:c7:26:21:f3:78:16:19:99:7d:3e:1a:00:80:7e: 4a:2d:48:02:f3:e3:48:b3:80:4a:91:c1:83:d5:a0:28:00:9e: 8b:93:dc:d0:c6:81:ad:dc:27:ff:f9:25:01:b4:29:c2:79:93: 76:00:b6:74:54:76:cc:27:0c:ef:38:f5:51:dc:42:b4:08:9e: 69:c9:c7:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdIjADUmTAij3MjYv1RTVDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUwNjA3MDQwMDI0WhcNMjUwNjA4MDQwMDI0WjAzMTEwLwYDVQQD EygwZmQzMDVhOWE1OTIwMTE2ZTVkYWFmNTJlZDI1Njk5YjA1NWQ4OGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUG8E6oyDWo8SDvYK27VHEiIZjtk ZJ5iLQVM4yiBddQwkxV+sgMGdES0iGc2IL3ln5MMEY4wWsTQKgZK2fpxfb51oFDH 4gzNJ1eL5s9/elyj83MlWd7rmqfVTMAy8JnfeezOZn2UbzLOUu59dkmCXKVK6SW3 5zfpq7sAyESdTivoWL4yED2AkB2GG1fXbEdWZgOZFtFGm/63uDfii/+Cmex9NitD YagvajFhVDIH8cEVgIq9J3Q+vZO5HIHRY4oRQm28b1sV/uUkb/CgamRYx8CcAdZa mPFEmnlZyAfna+zP4wgLl2FBwyh66gX2qpPmPn/RVpX7TxIk92IS056IfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/TBamlkgEW5dqvUu0laZsFXYi/MB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL3aBwjg mRyLPE3HsRkCQi8YnoCeruhfhI/sBFPt9a73wikdIVirZfYIU2o2GUDC+Qc0VVdS 83EIATdD7YaMOEGARnmParhWao3qOQw/d9w951QtLZnq6hzwC91nx0ci/zAHG3j/ g0mDjpABygSJdcL6bnPbV7al89VGNVNDatKCTi1tKK59xP+6YsqKrme5oYBzOwxt LBNd/DFvUbOXnKNt8rTsBokd+LGuUZXFuqUWP+ximpdj/scmIfN4FhmZfT4aAIB+ Si1IAvPjSLOASpHBg9WgKACei5Pc0MaBrdwn//klAbQpwnmTdgC2dFR2zCcM7zj1 UdxCtAieacnHKw== -----END CERTIFICATE-----Generated at Sat Jun 7 12:25:25 2025 by rpki-client