$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: dwEFxgyKNvHR5okpb5VGrMrg084tNQnMCR9ZOcXV+Z0= Subject key identifier: A0:26:D5:45:19:AE:0E:9B:BD:FC:18:71:C5:CE:7F:57:DE:AF:9E:1D Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019A164ED329ABF686730888DD5FC94B2AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0D4A Signing time: Fri 24 Oct 2025 13:00:55 +0000 Manifest this update: Fri 24 Oct 2025 13:00:55 +0000 Manifest next update: Sat 25 Oct 2025 13:00:55 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: Htzoa1E1xwlgRwH189KGEsPdAFtHhGtv4zM/AtR3U0g=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: Y-G-2eU8guxGK6-egpUuNnN5bxQ.roa (hash: JW4itdi7iIIqZg7XFpTOGoDZRoJgyjCRWVBtmPDf1+s=) 8: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 9: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 10: e5_v6xhlzRioNu7pPqcxgbio8VU.roa (hash: EvR0dlLjUmhrdpl6WksG3VAhbOibMVCgk2a2YuzEtmw=) 11: eRiR4NgIZ_-6ixM1jewwpaWhdtk.roa (hash: WXxK+4k/CLSD9EX98U8J2JMpmdRrgwBoAZnDHy+6A6Q=) 12: ijWfv5FDZoOJVxEIffezGQJrhR0.roa (hash: zEEQyBwCgCA9r+zAOqpHAUGqUtdbLfczPPM/Bv/7v6A=) 13: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 14: tW9IFrprtjHgSmO1yq_ovXKLygM.roa (hash: cUYJx2WeqQgX3iPrT/0TOqbvPPoUtMmCsb4eRH/r/A0=) 15: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 16: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:16:4e:d3:29:ab:f6:86:73:08:88:dd:5f:c9:4b:2a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Oct 24 13:00:55 2025 GMT Not After : Oct 25 13:00:55 2025 GMT Subject: CN=a026d54519ae0e9bbdfc1871c5ce7f57deaf9e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:ff:a2:d0:1b:37:38:91:88:2f:90:0f:48: 06:2f:58:2f:50:c3:ee:35:92:7d:e3:98:70:47:ac: f1:3a:64:65:9f:71:31:79:84:b9:38:92:ad:3b:cf: ea:f9:21:9e:30:b2:c5:83:eb:58:fb:47:b4:f9:ea: 1c:63:81:9b:4a:cf:b0:da:25:16:e9:7f:d7:ac:7d: 5c:05:85:51:24:9d:d3:cf:13:d2:c3:00:97:fe:26: f5:e7:81:3a:cc:24:e8:1a:63:92:17:b6:59:4f:49: e6:a2:a7:14:e0:8b:46:03:9b:1a:f7:b4:49:b6:38: 03:c9:3c:eb:b9:cd:1d:8d:b9:f8:4b:3d:31:f8:ec: 8e:54:93:5b:11:d0:71:71:b9:a0:b2:62:63:b4:86: 58:68:a1:d8:e7:c4:50:8c:f2:67:9c:ed:f0:fa:8a: f6:d5:ce:7c:8e:99:3a:7b:f6:4f:8b:78:88:27:df: 44:05:42:b8:65:89:ca:29:19:25:2b:91:a3:ff:d9: 7f:8f:c1:f3:ad:b0:e0:65:a7:c4:bd:87:54:07:0d: a4:91:83:05:03:10:cf:ee:f0:06:0e:a7:33:5a:b6: 6a:4e:22:03:cb:04:e5:72:d9:56:58:6c:c7:98:be: a8:00:60:5a:97:a3:6f:06:a7:88:28:33:3b:e9:2d: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:26:D5:45:19:AE:0E:9B:BD:FC:18:71:C5:CE:7F:57:DE:AF:9E:1D X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e2:a8:d4:11:17:ee:9c:22:da:a1:d2:96:db:05:4b:81:54: 17:22:2c:9b:0f:7e:b7:46:4c:08:3d:9e:aa:95:32:5a:7e:bd: 16:f1:d9:92:b8:0b:e2:53:55:cc:be:dc:0c:12:65:b9:9a:ff: 2d:b7:fc:7d:0e:7c:61:90:84:fb:76:83:72:bc:fd:03:5e:f6: ba:37:15:c1:8b:1c:5d:df:59:0d:db:43:be:19:4b:b8:c5:66: 03:f0:bf:2a:8d:ec:94:02:7d:d6:ce:99:c2:5b:17:a2:7c:ad: ae:e8:d5:55:78:94:bd:20:cd:82:e3:ec:8c:cf:78:76:f0:9b: e8:b6:f5:c3:3f:b6:27:d3:34:05:77:c9:e2:2e:44:0a:c7:dd: 04:69:23:70:e7:24:9a:80:fb:75:63:32:eb:9d:82:08:b8:38: d3:03:a3:21:66:eb:6c:81:d4:35:56:30:39:c5:ee:af:94:06: 69:7f:bf:ae:05:13:8b:01:40:e8:08:b8:6c:36:d9:f0:b2:95: 46:a9:46:79:b3:3f:56:5f:58:d2:be:db:0b:e2:8d:9c:4b:8d: ba:fc:48:c4:46:a7:55:0c:9a:63:57:2b:ca:68:54:fb:15:2f: 7b:8d:d2:f4:64:9d:ae:39:d4:4d:77:7e:7c:69:99:d1:3e:ca: 3a:5d:2c:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoWTtMpq/aGcwiI3V/JSyr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMDI0MTMwMDU1WhcNMjUxMDI1MTMwMDU1WjAzMTEwLwYDVQQD EyhhMDI2ZDU0NTE5YWUwZTliYmRmYzE4NzFjNWNlN2Y1N2RlYWY5ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUz/otAbNziRiC+QD0gGL1gvUMPu NZJ945hwR6zxOmRln3ExeYS5OJKtO8/q+SGeMLLFg+tY+0e0+eocY4GbSs+w2iUW 6X/XrH1cBYVRJJ3TzxPSwwCX/ib154E6zCToGmOSF7ZZT0nmoqcU4ItGA5sa97RJ tjgDyTzruc0djbn4Sz0x+OyOVJNbEdBxcbmgsmJjtIZYaKHY58RQjPJnnO3w+or2 1c58jpk6e/ZPi3iIJ99EBUK4ZYnKKRklK5Gj/9l/j8HzrbDgZafEvYdUBw2kkYMF AxDP7vAGDqczWrZqTiIDywTlctlWWGzHmL6oAGBal6NvBqeIKDM76S0JtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAm1UUZrg6bvfwYccXOf1fer54dMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOKo1BEX 7pwi2qHSltsFS4FUFyIsmw9+t0ZMCD2eqpUyWn69FvHZkrgL4lNVzL7cDBJluZr/ Lbf8fQ58YZCE+3aDcrz9A172ujcVwYscXd9ZDdtDvhlLuMVmA/C/Ko3slAJ91s6Z wlsXonytrujVVXiUvSDNguPsjM94dvCb6Lb1wz+2J9M0BXfJ4i5ECsfdBGkjcOck moD7dWMy652CCLg40wOjIWbrbIHUNVYwOcXur5QGaX+/rgUTiwFA6Ai4bDbZ8LKV RqlGebM/Vl9Y0r7bC+KNnEuNuvxIxEanVQyaY1crymhU+xUve43S9GSdrjnUTXd+ fGmZ0T7KOl0ssA== -----END CERTIFICATE-----Generated at Fri Oct 24 19:06:05 2025 by rpki-client