$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: dm6QrDWAQek7nUE3szNL+yUlU6HNZa/Rj78asz402uw= Subject key identifier: 58:0F:11:98:3F:56:CA:1F:A8:F5:4B:2B:83:F8:44:E1:74:98:9E:49 Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 0199323643C676DEF4FDEDE53AECB17BEBA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 1692 Signing time: Wed 10 Sep 2025 06:00:41 +0000 Manifest this update: Wed 10 Sep 2025 06:00:41 +0000 Manifest next update: Thu 11 Sep 2025 06:00:41 +0000 Files and hashes: 1: 0Oc2gUlOBhHggQCKLFtd_Q9SZu8.roa (hash: lO8VRv7zTZ1lZGexXwpCSSefCLh4/ylUfznYotZ/r9I=) 2: 1-SnnIDOhH63HQ_N0BxypNJP3QjU.roa (hash: fAjpmK6Zca137o7vGKPycBeoqRjl3sX6zuEiOW/w6J8=) 3: 1-tVuMhvJHoeYNSWvwIs4Uj-ZhRk.roa (hash: ZcAfnmmPqdN3AkoVqXCV/iL8CT5WscJ/XlK/uMPt5lg=) 4: 1yKKrsNupGDzzD03jZOpe8iPhUA.roa (hash: HrCCQdsLhhK0Dd1/JhgsMNYCYEDcKrntK3e2NJtO0xE=) 5: 64sC994hi2WYh6eTSxEzaxlZ1_8.roa (hash: B08XbDrWOA66KC5S+jrPQzf/aaibB9EmnAg/mlaAA/4=) 6: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (hash: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=) 7: 8fRQ2gaaSUyxlPfMmZU6YlBuF9s.roa (hash: J9iYhZ57NpzmVPmwg60w1m9TXW93kheuWUSOq5fqcNo=) 8: CYNZ0RAHrT9vV8_0mrfX5LM1kug.roa (hash: O/PKWyYrv2+2Dwkphq4C7HezWG7bAEi2rS0D+m+yIdU=) 9: MhqcPUVWdGpPrfIWk_ee5vpXfV4.roa (hash: VZyy53zNRKBJnQR8hOjgwk1ZMB+3U3h7IQWl1MMyJAE=) 10: OnRHsiqDeR9lPOPphyyOmOlqHJI.roa (hash: sc+Pmya8TqVV8sQvDFxWsBcLjxza8djqPlBaIMjD3rA=) 11: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (hash: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=) 12: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (hash: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=) 13: a-yIKeqgoYQNBR0ZqftsK2VKwtA.roa (hash: rYqhW3CVRIKIDuB7VC8t0ykZxEcqYyXyUHcCODKusRw=) 14: aEX6iGvtmMCBLbcN3D9lR9wWfYs.roa (hash: ck3g/sMwdLbMyNkBAAhpjxk0gLfl6oyVxwY3SE1wY/I=) 15: clP1LLso4z020v4QpmTmPRbZSto.roa (hash: lQLaEJcBPi63juWNagsHVyBgAJjdQuoynWou1IAm/GM=) 16: cvexNa_0mj6FW8KZpLGAFQIE4OA.roa (hash: iCleYEjTV16uifIQzD0T3cEabw9bGQHX0EZMLPEVxN4=) 17: e6KXF5wF0vO-qqTzdKeyh2Ean8Y.roa (hash: KHUWWv5iYnIrkVVVgtcwtIxqcrf8XOGEsuNQcxfs8gw=) 18: iX51NeJFLA8hZbYydiWCSJNdBac.roa (hash: feK/rKksTFQbgNdFYUDfTjFuIeyOIK8QXCIqWjoXBaI=) 19: l5nptPnNKKQFhoiS91lJWqnWlyE.roa (hash: e570cnA3CxKqJo/gWfnmYUg3TNwae9HIQvRpHl8vuuY=) 20: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (hash: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=) 21: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (hash: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=) 22: mclNf4bSFt9zruWTpd4m4MEyVzM.roa (hash: XlAEFr1TWS3BT/lafylN5Pl3NVyaBtZCZ/ZvLEzRc/k=) 23: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (hash: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=) 24: piCyct0NVy-piTUDW9-m-zFaGCY.roa (hash: vC+LbNogTxwCzmTJZpmElrpfct/lmLrelfVwT361cKc=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: c7x/ycy/ybqcXkBqJlApvioHg5Qxk0Xi44QaXvWQNfc=) 26: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (hash: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:32:36:43:c6:76:de:f4:fd:ed:e5:3a:ec:b1:7b:eb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Sep 10 06:00:41 2025 GMT Not After : Sep 11 06:00:41 2025 GMT Subject: CN=580f11983f56ca1fa8f54b2b83f844e174989e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ff:b2:63:1b:2a:1d:42:ff:ad:3a:c5:09:5d: 88:f7:62:e6:e5:52:05:e9:ed:47:32:65:6d:83:b2: 54:10:63:d3:d2:59:e6:d8:84:6b:58:d7:fe:a5:d7: 60:16:a6:54:34:97:e8:68:bf:76:7e:be:ad:c9:d4: a9:7e:00:29:3c:77:46:90:0e:45:fc:6f:19:c6:48: ed:7d:b1:f7:44:30:b4:d7:1c:d3:04:ad:e4:ae:a5: 31:45:39:05:53:f3:a3:b6:01:1b:82:64:65:45:a1: a9:d7:98:05:12:59:73:70:f5:4f:a8:95:ba:c4:a9: c3:c6:5f:b8:1f:b9:12:73:2d:9e:d0:d2:f1:e9:7b: af:92:70:d4:dd:bc:51:d0:5c:46:e8:d6:f1:56:5a: 1f:a7:a2:55:83:8a:e3:ef:af:59:3a:03:36:4b:a0: 31:7d:ec:bd:dc:2e:92:61:73:66:da:3d:61:12:d8: dc:08:65:ff:0e:7b:fc:b0:21:55:ce:4d:eb:1c:9e: 19:41:4b:05:b8:7e:1f:f2:0f:a9:df:a1:f4:85:b4: d8:89:eb:19:2c:e2:f8:34:6b:df:9f:f9:c9:f5:b1: c3:a3:df:d9:60:c6:dc:b9:42:98:a3:32:fb:b8:a6: f4:40:73:ef:50:31:ee:06:92:4e:d8:fa:49:31:0a: 7b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0F:11:98:3F:56:CA:1F:A8:F5:4B:2B:83:F8:44:E1:74:98:9E:49 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ea:69:98:62:a5:74:68:8c:36:2f:a1:41:b1:7c:ba:02:3b: d1:dd:cc:5b:65:09:34:4d:bd:e6:7d:75:1a:d0:ef:91:97:41: 74:b7:86:4f:ef:06:4f:7b:75:8a:b0:08:b9:50:dc:4b:cf:5b: 03:7f:c5:46:5c:cc:a2:87:de:6b:c6:a2:a9:34:25:94:fe:30: 5b:8e:2d:9b:36:8b:91:b3:8f:0b:f6:53:f4:2e:63:9b:12:ae: 49:86:c5:de:0d:44:4f:37:b5:b6:e6:f5:20:e4:c6:32:bf:4a: 68:93:e3:c7:ca:77:e0:b9:57:75:6a:76:c0:ff:36:d5:f0:d7: 1a:38:e3:c5:94:ec:aa:50:3f:e8:85:c1:f4:e5:f4:70:09:54: 56:c1:cd:38:b7:da:3c:c3:3b:02:0d:42:3f:8d:57:f4:ea:8d: bf:fa:d2:f9:bc:8c:b1:86:93:1d:7b:72:7c:15:9e:b6:64:23: 7c:f0:70:41:c5:11:29:b8:63:84:67:20:92:64:16:4a:bd:fb: ba:c9:a8:c3:e6:19:43:59:7c:fb:54:33:4f:ed:3c:34:76:de: f3:16:07:f9:46:2c:57:6e:90:6f:d3:0e:84:df:6d:0c:77:b0: 40:e8:42:83:6d:e9:8f:1e:b8:4f:1f:1a:50:b3:8e:a5:de:ee: 64:49:f8:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkyNkPGdt70/e3lOuyxe+unMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjUwOTEwMDYwMDQxWhcNMjUwOTExMDYwMDQxWjAzMTEwLwYDVQQD Eyg1ODBmMTE5ODNmNTZjYTFmYThmNTRiMmI4M2Y4NDRlMTc0OTg5ZTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv+yYxsqHUL/rTrFCV2I92Lm5VIF 6e1HMmVtg7JUEGPT0lnm2IRrWNf+pddgFqZUNJfoaL92fr6tydSpfgApPHdGkA5F /G8ZxkjtfbH3RDC01xzTBK3krqUxRTkFU/OjtgEbgmRlRaGp15gFEllzcPVPqJW6 xKnDxl+4H7kScy2e0NLx6XuvknDU3bxR0FxG6NbxVlofp6JVg4rj769ZOgM2S6Ax fey93C6SYXNm2j1hEtjcCGX/Dnv8sCFVzk3rHJ4ZQUsFuH4f8g+p36H0hbTYiesZ LOL4NGvfn/nJ9bHDo9/ZYMbcuUKYozL7uKb0QHPvUDHuBpJO2PpJMQp7mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgPEZg/VsofqPVLK4P4ROF0mJ5JMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuppmGKl dGiMNi+hQbF8ugI70d3MW2UJNE295n11GtDvkZdBdLeGT+8GT3t1irAIuVDcS89b A3/FRlzMoofea8aiqTQllP4wW44tmzaLkbOPC/ZT9C5jmxKuSYbF3g1ETze1tub1 IOTGMr9KaJPjx8p34LlXdWp2wP821fDXGjjjxZTsqlA/6IXB9OX0cAlUVsHNOLfa PMM7Ag1CP41X9OqNv/rS+byMsYaTHXtyfBWetmQjfPBwQcURKbhjhGcgkmQWSr37 usmow+YZQ1l8+1QzT+08NHbe8xYH+UYsV26Qb9MOhN9tDHewQOhCg23pjx64Tx8a ULOOpd7uZEn4Cg== -----END CERTIFICATE-----Generated at Wed Sep 10 13:27:09 2025 by rpki-client