$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: jZxxIJ0KeCnk9K44xmlz/AiAGkoJAwxSOgGKJrmiRsw= Subject key identifier: 51:6B:30:C6:2A:92:F3:F6:59:1A:80:28:6A:2F:56:9C:74:A5:FE:41 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 01991D6648DA1FA8DFFDE61C2B1D71D7F95B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0CC8 Signing time: Sat 06 Sep 2025 05:01:06 +0000 Manifest this update: Sat 06 Sep 2025 05:01:06 +0000 Manifest next update: Sun 07 Sep 2025 05:01:06 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: G71Br1/hEA1uUwHl1EuAKkYueezSZqtYKSqpELaurtY=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: X5OzyWwR6e_iv7BJerwYAhi05yE.roa (hash: WQkHcwkvY5O0XXXO4mcoATlRp4Zx9rwZXcKZe+qcN54=) 8: Y-G-2eU8guxGK6-egpUuNnN5bxQ.roa (hash: JW4itdi7iIIqZg7XFpTOGoDZRoJgyjCRWVBtmPDf1+s=) 9: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 10: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 11: eRiR4NgIZ_-6ixM1jewwpaWhdtk.roa (hash: WXxK+4k/CLSD9EX98U8J2JMpmdRrgwBoAZnDHy+6A6Q=) 12: k04OOwBCYwVKNNo3iCfh1jOc82Q.roa (hash: zGKAKX/nmarWVLX9nim6dXgrSYRFp/a235WxfB2aC/U=) 13: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=) 14: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 15: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 16: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1d:66:48:da:1f:a8:df:fd:e6:1c:2b:1d:71:d7:f9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Sep 6 05:01:06 2025 GMT Not After : Sep 7 05:01:06 2025 GMT Subject: CN=516b30c62a92f3f6591a80286a2f569c74a5fe41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:c3:a3:ed:4b:29:b8:82:b3:d0:21:8d:52: a6:05:bc:da:29:c9:84:c2:ee:11:f2:e3:96:1f:c0: c8:57:09:14:f5:c6:99:d3:85:bd:cd:39:06:8f:3b: 31:ed:8a:1e:03:7e:f8:d8:4f:f8:bb:86:da:b8:96: 7b:e1:d1:df:21:71:81:75:d9:8b:29:c2:c7:3e:cb: 3d:8f:1f:31:bc:f7:33:a2:67:94:37:b8:a4:78:8a: 91:ae:13:9f:8b:44:c6:b2:d7:bd:ce:fd:9d:6b:cb: 0c:30:26:80:3c:08:5a:19:5f:dc:ce:a1:94:94:16: 0b:8d:a5:c9:7d:5d:14:ae:92:c9:c6:0d:8f:e0:4e: c5:7b:f6:5d:14:b2:6e:47:19:e5:25:57:89:db:d2: af:3a:c9:ba:ab:80:14:06:5a:bb:ad:5b:d9:67:ad: af:41:21:cf:34:9e:4f:40:ce:22:8c:ba:5b:18:a4: 62:09:c3:11:45:24:f6:24:9e:93:6e:a6:22:84:3c: 14:12:62:00:6f:b2:2f:4e:41:8c:20:34:1c:06:d3: c7:97:b3:5f:1a:e4:ae:b1:f2:6e:a1:4a:9b:1a:39: 6e:59:b9:8a:f2:5c:2e:33:d4:a1:21:dd:7f:8e:33: 74:37:50:be:86:cb:38:8a:28:15:f2:3b:34:a8:a8: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6B:30:C6:2A:92:F3:F6:59:1A:80:28:6A:2F:56:9C:74:A5:FE:41 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:28:90:e8:7e:6b:68:3e:1b:51:76:2f:60:0b:79:78:38:4f: b4:46:10:3f:6e:67:ed:99:5c:74:e1:ac:de:71:22:f0:b3:dc: 7f:ee:25:77:bc:1d:9f:17:cb:71:63:95:33:3f:ae:17:4d:17: 99:d1:83:c9:b6:a4:36:ed:86:22:d3:80:9a:26:d4:69:a1:42: 58:4d:13:94:61:6a:91:bb:be:cd:3b:73:d6:0e:a2:6d:af:8f: d7:0b:65:4d:1f:f6:1a:8b:ee:8f:33:f1:23:ea:d4:94:40:65: 8f:92:a8:46:56:40:cb:81:dc:28:76:0e:0d:f4:a2:5b:80:71: 94:eb:23:52:65:69:0c:b8:01:0f:34:1e:81:c4:e0:d8:3a:48: 5a:fe:3f:65:48:55:b2:55:57:d1:27:85:01:cb:bd:b0:a4:3a: cc:48:a8:6c:f2:70:4d:5a:14:87:e7:7a:e7:6f:0b:cc:53:d6: 2f:13:91:2a:39:b9:42:ff:d9:90:56:61:b4:dd:9d:47:80:ed: 27:01:77:2b:0a:aa:84:ab:dd:b9:01:79:f4:d2:2f:3c:87:39: ce:74:25:17:65:ce:43:80:3e:7a:9a:be:0e:9e:96:52:6e:5e: e8:26:45:13:88:c2:d4:79:f3:e1:0a:3c:43:ab:47:a9:19:0e: 7a:19:8d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkdZkjaH6jf/eYcKx1x1/lbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUwOTA2MDUwMTA2WhcNMjUwOTA3MDUwMTA2WjAzMTEwLwYDVQQD Eyg1MTZiMzBjNjJhOTJmM2Y2NTkxYTgwMjg2YTJmNTY5Yzc0YTVmZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/HDo+1LKbiCs9AhjVKmBbzaKcmE wu4R8uOWH8DIVwkU9caZ04W9zTkGjzsx7YoeA3742E/4u4bauJZ74dHfIXGBddmL KcLHPss9jx8xvPczomeUN7ikeIqRrhOfi0TGste9zv2da8sMMCaAPAhaGV/czqGU lBYLjaXJfV0UrpLJxg2P4E7Fe/ZdFLJuRxnlJVeJ29KvOsm6q4AUBlq7rVvZZ62v QSHPNJ5PQM4ijLpbGKRiCcMRRST2JJ6TbqYihDwUEmIAb7IvTkGMIDQcBtPHl7Nf GuSusfJuoUqbGjluWbmK8lwuM9ShId1/jjN0N1C+hss4iigV8js0qKgpowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFrMMYqkvP2WRqAKGovVpx0pf5BMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiiQ6H5r aD4bUXYvYAt5eDhPtEYQP25n7ZlcdOGs3nEi8LPcf+4ld7wdnxfLcWOVMz+uF00X mdGDybakNu2GItOAmibUaaFCWE0TlGFqkbu+zTtz1g6iba+P1wtlTR/2GovujzPx I+rUlEBlj5KoRlZAy4HcKHYODfSiW4BxlOsjUmVpDLgBDzQegcTg2DpIWv4/ZUhV slVX0SeFAcu9sKQ6zEiobPJwTVoUh+d6528LzFPWLxORKjm5Qv/ZkFZhtN2dR4Dt JwF3KwqqhKvduQF59NIvPIc5znQlF2XOQ4A+epq+Dp6WUm5e6CZFE4jC1Hnz4Qo8 Q6tHqRkOehmNQg== -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:41 2025 by rpki-client