$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: YOwxlHBCZAU9Eip5mlAHOb3Na6OeYsW90tASf01wQeQ= Subject key identifier: 40:01:72:15:10:21:06:5F:B2:9B:C6:AA:16:9E:0C:DB:28:F1:1D:CD Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019942F294B9155AA500AB1BEFF2E8E74731 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 1693 Signing time: Sat 13 Sep 2025 12:00:17 +0000 Manifest this update: Sat 13 Sep 2025 12:00:17 +0000 Manifest next update: Sun 14 Sep 2025 12:00:17 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: R0vAydxo5QtgRMaTDuTDNbERtJ6h3WPQaXJWoXrFcCU=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Sep 2025 11:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:42:f2:94:b9:15:5a:a5:00:ab:1b:ef:f2:e8:e7:47:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Sep 13 12:00:17 2025 GMT Not After : Sep 14 12:00:17 2025 GMT Subject: CN=400172151021065fb29bc6aa169e0cdb28f11dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:8f:f3:3b:96:b0:b5:59:ba:fd:cb:2f:97: ab:82:dd:73:c0:cd:43:9f:a8:b8:e4:de:5d:ac:4e: 0f:ea:c7:ce:75:71:80:85:f5:70:81:7e:e1:dd:31: 86:e1:32:29:b6:34:9e:e3:65:6d:be:87:cd:c4:eb: a4:79:9b:b1:6c:41:85:10:55:60:9a:67:85:49:95: 88:f1:91:73:ae:c4:64:f4:87:4f:91:c3:47:df:e9: a4:c5:2f:78:af:61:48:d0:81:ed:66:a4:30:1f:4a: 00:0e:97:7f:98:97:d3:d1:fc:2f:e3:98:a1:66:82: 09:55:be:d3:b8:54:7a:93:ef:c1:9d:f5:1e:4e:07: 03:64:83:c0:6b:c4:8e:1c:c7:dc:f9:af:ba:8c:ec: a6:ff:4e:98:49:8b:af:41:38:da:cd:f0:22:c4:22: 82:ec:68:c5:fc:b4:3a:72:db:a6:08:55:70:ba:c4: a2:f4:c0:eb:14:34:aa:55:50:87:5e:2c:a8:65:15: fd:4a:64:da:d4:71:9f:bf:d9:1e:2e:0f:91:d8:bb: a1:73:c9:b6:45:62:24:a6:e0:0d:50:95:c6:78:6c: fe:ed:21:52:3e:be:30:1a:52:7d:2e:67:86:78:4b: 92:d0:15:3b:c6:62:4a:b5:ca:7b:84:87:ca:66:b1: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:01:72:15:10:21:06:5F:B2:9B:C6:AA:16:9E:0C:DB:28:F1:1D:CD X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:da:bf:d5:2e:71:15:3f:8d:87:ec:0a:4f:6c:14:2d:6b:e3: 0f:5b:f4:41:f6:f9:c5:4c:d7:2c:21:64:71:42:4b:41:f7:ef: 8e:42:24:84:81:fa:68:7a:8e:f9:f4:8c:c5:e1:fe:7f:77:33: 24:c9:61:5a:66:9c:94:24:0a:e3:b5:7a:f5:12:c1:35:cd:51: fd:ca:56:41:54:78:5f:05:f6:5b:0d:f6:4d:3d:53:d5:58:c7: a9:88:5e:ac:4e:cb:38:de:7b:41:7b:3d:fb:9d:c1:49:24:df: 98:e9:49:b4:11:cc:2e:01:d5:06:9e:43:e5:49:3b:d4:2e:5f: d5:e3:6b:96:67:8c:7b:9f:98:52:8f:3a:2b:1f:e2:be:0c:17: e1:b0:82:3b:e4:2e:3b:75:3f:26:0e:c3:ad:0c:bb:a7:6f:e2: c7:8c:3b:a2:05:e0:92:64:79:53:c9:d7:0b:bd:c7:da:a0:36: c6:36:13:92:ed:76:3d:b6:60:ce:fd:c9:e3:9b:8e:52:8a:e6: 43:6f:6c:f1:c9:20:06:7b:0c:5c:93:05:49:af:e6:89:fa:91: 1c:28:3c:90:18:97:7a:11:76:3d:0f:ca:c2:39:1b:f9:49:32: bb:0c:09:5c:c4:14:cf:0c:72:f9:cf:d1:76:d2:40:03:47:51: 79:6d:45:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlC8pS5FVqlAKsb7/Lo50cxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwOTEzMTIwMDE3WhcNMjUwOTE0MTIwMDE3WjAzMTEwLwYDVQQD Eyg0MDAxNzIxNTEwMjEwNjVmYjI5YmM2YWExNjllMGNkYjI4ZjExZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdmP8zuWsLVZuv3LL5ergt1zwM1D n6i45N5drE4P6sfOdXGAhfVwgX7h3TGG4TIptjSe42VtvofNxOukeZuxbEGFEFVg mmeFSZWI8ZFzrsRk9IdPkcNH3+mkxS94r2FI0IHtZqQwH0oADpd/mJfT0fwv45ih ZoIJVb7TuFR6k+/BnfUeTgcDZIPAa8SOHMfc+a+6jOym/06YSYuvQTjazfAixCKC 7GjF/LQ6ctumCFVwusSi9MDrFDSqVVCHXiyoZRX9SmTa1HGfv9keLg+R2Luhc8m2 RWIkpuANUJXGeGz+7SFSPr4wGlJ9LmeGeEuS0BU7xmJKtcp7hIfKZrED2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEABchUQIQZfspvGqhaeDNso8R3NMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz9q/1S5x FT+Nh+wKT2wULWvjD1v0Qfb5xUzXLCFkcUJLQffvjkIkhIH6aHqO+fSMxeH+f3cz JMlhWmaclCQK47V69RLBNc1R/cpWQVR4XwX2Ww32TT1T1VjHqYherE7LON57QXs9 +53BSSTfmOlJtBHMLgHVBp5D5Uk71C5f1eNrlmeMe5+YUo86Kx/ivgwX4bCCO+Qu O3U/Jg7DrQy7p2/ix4w7ogXgkmR5U8nXC73H2qA2xjYTku12PbZgzv3J45uOUorm Q29s8ckgBnsMXJMFSa/mifqRHCg8kBiXehF2PQ/Kwjkb+UkyuwwJXMQUzwxy+c/R dtJAA0dReW1FJQ== -----END CERTIFICATE-----Generated at Sat Sep 13 16:18:01 2025 by rpki-client