$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: fkC/MYAmrWt1fAODezorP/2rhzI38eYPuV1SRBgND8E= Subject key identifier: F8:8E:D0:08:8A:69:AD:F8:F9:E6:CA:83:F7:92:3C:AD:DE:EB:02:B6 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 0199228CFB26F2FCE0B81746D5030945BAA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 1682 Signing time: Sun 07 Sep 2025 05:01:28 +0000 Manifest this update: Sun 07 Sep 2025 05:01:28 +0000 Manifest next update: Mon 08 Sep 2025 05:01:28 +0000 Files and hashes: 1: 3mF0o8ObxMG1vPes91bWbw0tnsA.roa (hash: UJhMkfjPft/QeBcE4Z26qo9FCGStMKR3bjVpARVrtgI=) 2: 4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa (hash: /Y71/tOsnj44V3PPOqV8jyNAecsoDys+kyFhb/Na/TY=) 3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: n+2p50pB7AY6Utl7IkbKhhS3k9sXMH3rhpr3cBonGxo=) 4: DnWgBwSyPonu4ANiqDXcSFS5Sss.roa (hash: l2btTGNwK1K4Uvs9UU8E5RV5U3WcxEKUPo27wW3zozU=) 5: Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa (hash: FGt3z3IlUQQX3L4JhYd4ue2NJONgSL3qDjZtT83LgI4=) 6: YMGBAXPMmaM-UVPjn2WwHTw99Dg.roa (hash: sho3Yzk1N5vFpwylHlhAFYtjqhBGr18UkAS7r1nBk5k=) 7: Zvza_AEVzZujcB3uf3ENKXzKqQM.roa (hash: 57giD/GidN1QIt0FbCVf8xCexXWHCYg5Vqj76NoF+sc=) 8: _ERs_WqsyKBsbDNrpF7678MzuE8.roa (hash: x/e8FoqvrkwlrxEHgqowJDwm2nzTqRfGs9L2jLZX1F0=) 9: mCecvopZfXG3WIu7Fhw-f_4DPAk.roa (hash: MecNKHL4HsnfTECbSBEtAo1C5aYtC+yZbiahatmHpI0=) 10: tkwaNKS943lqIrcwP4wFPu7CmLA.roa (hash: LUFlc4a0Hl1DhNUuKnQE9p25tD0hoETIl0Xrym01FDA=) 11: xiXR5CA0LknEtnJqptzk0g7U8nI.roa (hash: hnOXUmiCqjx6p2C6Uol9CSOlJTYzXWkQvpMB/lW+MX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:8c:fb:26:f2:fc:e0:b8:17:46:d5:03:09:45:ba:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Sep 7 05:01:28 2025 GMT Not After : Sep 8 05:01:28 2025 GMT Subject: CN=f88ed0088a69adf8f9e6ca83f7923caddeeb02b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:6c:b2:dd:29:e6:b1:78:31:52:4f:b2:00: cb:c6:77:aa:34:32:87:3a:6c:0c:d5:7c:21:1f:f8: 92:a8:32:84:a3:19:67:2b:71:b9:c7:a6:8d:3d:20: e0:cd:5c:9b:57:40:5e:59:fa:49:9b:ff:bc:24:28: 1c:11:81:96:7f:07:a8:e1:5f:ad:72:db:cd:61:8d: c6:50:0c:e8:2c:f5:a5:04:fb:e7:2b:4b:e2:0f:97: 9a:5a:19:51:bc:fc:c3:37:98:54:fb:d8:a9:ca:6e: 66:57:15:94:82:e0:c3:e5:e3:af:53:34:7e:31:f3: 62:87:6c:5b:c0:85:f1:2f:99:1a:8a:da:24:6e:ff: eb:98:09:4c:99:d8:7d:a7:e9:9e:57:56:b2:f9:ce: f3:2b:b5:91:c9:95:3b:50:60:21:54:a2:d5:08:e5: ed:ec:b9:71:6b:86:a4:37:5c:c4:0d:c8:a1:48:b1: 41:8e:fe:6f:30:32:0f:0d:89:bb:5f:e5:c9:58:1b: 4f:b2:49:33:f7:18:06:43:1d:d1:01:e5:25:d7:a4: 7d:1e:2e:fb:82:e3:91:71:44:b6:1d:08:a8:cb:c8: e5:60:d3:df:73:cc:b7:8c:c7:aa:8f:91:61:2a:b1: ec:25:5d:be:f1:2f:56:94:54:16:d3:4a:86:4a:42: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8E:D0:08:8A:69:AD:F8:F9:E6:CA:83:F7:92:3C:AD:DE:EB:02:B6 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a8:29:56:1c:68:57:e7:1e:ee:52:e2:78:e0:e6:86:d9:87: 6f:fe:07:89:37:72:70:d7:ba:8d:3f:61:ec:6d:47:84:bf:06: a1:77:37:8d:1d:b4:77:bc:61:94:4d:a7:cb:f1:7a:51:69:b2: 2e:ee:f4:77:8f:be:2c:49:b7:76:0b:0d:7e:a8:de:15:de:a4: 87:b1:4e:66:14:8e:d1:49:4e:cb:8e:04:2c:8b:8f:10:76:13: f2:e8:0c:fa:ad:15:01:6f:2c:17:af:1c:c9:61:ce:cd:d0:36: b0:55:72:56:90:09:4c:3c:86:12:6d:b8:40:76:c6:b8:1a:1d: 39:b0:ca:e7:8b:5f:98:83:0e:ce:18:5a:cd:99:f3:3c:42:5c: 29:af:d9:79:e0:ae:98:3b:36:d8:e5:12:6d:68:c9:93:67:84: 76:a5:d0:38:f7:c7:34:dd:30:09:6c:f7:02:87:61:8c:5d:05: a4:8a:45:e1:3d:8c:42:ea:cd:e1:cf:28:d8:a5:2b:d0:8c:3c: 30:79:ba:ce:be:e4:c5:b0:f7:ec:2a:c1:cb:0f:82:36:d9:da: 42:09:fd:c6:c2:c0:1b:91:90:98:21:ab:46:ca:ec:a6:81:92: 50:1b:12:08:66:11:7d:e9:72:4a:b4:52:b9:8d:f3:f1:0f:c1: 26:86:d2:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkijPsm8vzguBdG1QMJRbqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjUwOTA3MDUwMTI4WhcNMjUwOTA4MDUwMTI4WjAzMTEwLwYDVQQD EyhmODhlZDAwODhhNjlhZGY4ZjllNmNhODNmNzkyM2NhZGRlZWIwMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtShsst0p5rF4MVJPsgDLxneqNDKH OmwM1XwhH/iSqDKEoxlnK3G5x6aNPSDgzVybV0BeWfpJm/+8JCgcEYGWfweo4V+t ctvNYY3GUAzoLPWlBPvnK0viD5eaWhlRvPzDN5hU+9ipym5mVxWUguDD5eOvUzR+ MfNih2xbwIXxL5kaitokbv/rmAlMmdh9p+meV1ay+c7zK7WRyZU7UGAhVKLVCOXt 7Llxa4akN1zEDcihSLFBjv5vMDIPDYm7X+XJWBtPskkz9xgGQx3RAeUl16R9Hi77 guORcUS2HQioy8jlYNPfc8y3jMeqj5FhKrHsJV2+8S9WlFQW00qGSkL+owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiO0AiKaa34+ebKg/eSPK3e6wK2MB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPagpVhxo V+ce7lLieODmhtmHb/4HiTdycNe6jT9h7G1HhL8GoXc3jR20d7xhlE2ny/F6UWmy Lu70d4++LEm3dgsNfqjeFd6kh7FOZhSO0UlOy44ELIuPEHYT8ugM+q0VAW8sF68c yWHOzdA2sFVyVpAJTDyGEm24QHbGuBodObDK54tfmIMOzhhazZnzPEJcKa/ZeeCu mDs22OUSbWjJk2eEdqXQOPfHNN0wCWz3AodhjF0FpIpF4T2MQurN4c8o2KUr0Iw8 MHm6zr7kxbD37CrByw+CNtnaQgn9xsLAG5GQmCGrRsrspoGSUBsSCGYRfelySrRS uY3z8Q/BJobSIg== -----END CERTIFICATE-----Generated at Sun Sep 7 09:50:48 2025 by rpki-client