$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: aPNfJ4Xbjd+yYUdEFDGHgIMxBYp1CS+LExYxuVQWjNM= Subject key identifier: 9D:7B:56:9D:CB:09:46:70:B8:DE:DA:2D:AD:F2:E6:B8:73:F5:F4:5B Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019A300E4F0DC284E7579A12E4228F7C6937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 1711 Signing time: Wed 29 Oct 2025 13:00:35 +0000 Manifest this update: Wed 29 Oct 2025 13:00:35 +0000 Manifest next update: Thu 30 Oct 2025 13:00:35 +0000 Files and hashes: 1: 28ZcXxr21V3g8tkNu2SthAHESpQ.roa (hash: h2FWZ11G0T+okbMyTkF9rdPiR2xC/SmDqr6XsOWCmBI=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: V+4fpNkwIJYKlzqP3lvINTwvMON1sn1p3A9tT3lnIsI=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OD8FF3bzXgR90_KVqhd9MLzHmAw.roa (hash: jzLxdDmjDJ4y9FgIRz0UlTc/mjLkyHig2G3vYZkTFSM=) 6: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 7: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 8: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 9: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 10: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 15: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 16: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Oct 2025 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:30:0e:4f:0d:c2:84:e7:57:9a:12:e4:22:8f:7c:69:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Oct 29 13:00:35 2025 GMT Not After : Oct 30 13:00:35 2025 GMT Subject: CN=9d7b569dcb094670b8deda2dadf2e6b873f5f45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:b9:51:26:7b:af:e4:f5:a1:3a:d2:65:0c: 95:03:4d:84:48:a8:bf:83:f8:19:cc:8e:8c:17:f5: 69:ee:43:5f:b4:40:73:05:df:05:a1:8a:45:ce:82: 13:a7:f4:52:ce:db:e8:b2:fe:28:8d:21:b1:c1:31: 69:e2:44:1b:34:1d:8e:c6:85:8c:73:d3:56:9b:21: 76:25:6e:6c:80:b8:7b:33:d1:55:b2:8a:7b:e0:94: 4d:50:e8:5a:1b:6b:e8:34:ff:bf:ab:1b:5a:36:2f: cb:c1:09:df:07:24:f8:3a:e9:a6:f1:0e:dd:5b:a8: ae:84:99:ce:0c:c7:e3:b6:6f:ec:37:1e:e4:11:38: 0d:f2:4f:f8:85:ad:45:ab:e6:37:5f:f8:88:cc:d9: 18:22:7f:9a:37:43:39:9f:d9:76:01:d2:f6:e2:73: d3:a0:5a:c0:38:7f:58:cd:28:25:68:d0:55:24:35: 37:d6:ab:45:23:10:de:2a:ad:10:aa:a0:fa:5d:e1: c7:f9:34:72:cc:74:37:06:b2:53:76:77:4f:06:9f: fc:ba:33:bf:a5:6c:e7:79:f6:63:d3:99:2e:43:0b: ce:6d:78:49:7e:bc:ce:3b:8f:3d:92:09:4d:61:2c: 7d:8a:de:b6:1d:05:b1:a6:3f:f9:08:33:94:cb:ee: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7B:56:9D:CB:09:46:70:B8:DE:DA:2D:AD:F2:E6:B8:73:F5:F4:5B X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:aa:55:5a:84:84:94:07:ef:23:b7:e1:20:f0:da:4f:bd:ef: cd:4f:8a:b3:fc:6d:ce:60:df:4a:3d:03:bd:63:59:1f:91:eb: 39:64:3d:fc:f3:6d:90:2d:8c:20:03:83:3e:26:4f:2c:17:e0: b2:48:d7:58:9e:66:3d:72:bf:86:77:ab:b2:40:63:30:10:0a: 73:8d:e0:bb:e5:cc:fd:18:15:cf:49:ec:bd:14:23:99:fc:c3: 36:f5:5b:87:aa:f9:c5:fd:54:dd:d9:60:0f:05:12:04:53:0e: dd:3f:92:a0:a0:8e:05:b7:04:9d:9b:ab:1c:ff:80:c2:6b:07: 05:f4:5e:98:de:d7:9b:b1:14:98:78:30:33:2b:69:82:d9:84: 48:f4:4e:f9:2a:80:d7:04:30:46:4b:ca:89:f0:35:98:9c:c2: e9:9d:cf:f0:e4:c4:af:1e:f5:e8:38:36:31:ec:f3:84:2a:4a: 9a:77:e9:29:6d:a5:47:f6:99:ba:5b:e0:a9:3d:0b:b8:57:ec: fc:be:b2:19:64:fc:11:5b:70:de:d5:d1:63:cd:82:0b:7d:7b: 59:6d:54:9e:03:4e:15:47:1a:6a:35:e2:62:13:1c:19:a8:06: ce:cf:6b:62:a9:df:ac:e3:c6:69:02:a2:a1:31:b8:fd:a5:b6: eb:de:2d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZowDk8NwoTnV5oS5CKPfGk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUxMDI5MTMwMDM1WhcNMjUxMDMwMTMwMDM1WjAzMTEwLwYDVQQD Eyg5ZDdiNTY5ZGNiMDk0NjcwYjhkZWRhMmRhZGYyZTZiODczZjVmNDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWO5USZ7r+T1oTrSZQyVA02ESKi/ g/gZzI6MF/Vp7kNftEBzBd8FoYpFzoITp/RSztvosv4ojSGxwTFp4kQbNB2OxoWM c9NWmyF2JW5sgLh7M9FVsop74JRNUOhaG2voNP+/qxtaNi/LwQnfByT4Oumm8Q7d W6iuhJnODMfjtm/sNx7kETgN8k/4ha1Fq+Y3X/iIzNkYIn+aN0M5n9l2AdL24nPT oFrAOH9YzSglaNBVJDU31qtFIxDeKq0QqqD6XeHH+TRyzHQ3BrJTdndPBp/8ujO/ pWznefZj05kuQwvObXhJfrzOO489kglNYSx9it62HQWxpj/5CDOUy+4K9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ17Vp3LCUZwuN7aLa3y5rhz9fRbMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKpVWoSE lAfvI7fhIPDaT73vzU+Ks/xtzmDfSj0DvWNZH5HrOWQ9/PNtkC2MIAODPiZPLBfg skjXWJ5mPXK/hnerskBjMBAKc43gu+XM/RgVz0nsvRQjmfzDNvVbh6r5xf1U3dlg DwUSBFMO3T+SoKCOBbcEnZurHP+AwmsHBfRemN7Xm7EUmHgwMytpgtmESPRO+SqA 1wQwRkvKifA1mJzC6Z3P8OTErx716Dg2MezzhCpKmnfpKW2lR/aZulvgqT0LuFfs /L6yGWT8EVtw3tXRY82CC317WW1UngNOFUcaajXiYhMcGagGzs9rYqnfrOPGaQKi oTG4/aW2694tdg== -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:52 2025 by rpki-client