$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: Wy6Y3/y84TKqqO5uI4RZ8paF8e9Nnx+hV0YYInFE5Go= Subject key identifier: DD:43:7B:FE:68:CC:98:80:A2:7D:FE:5F:1B:C0:09:82:0A:F0:69:31 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019741413BD99605A0115506056012E2471D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 1589 Signing time: Thu 05 Jun 2025 18:01:23 +0000 Manifest this update: Thu 05 Jun 2025 18:01:23 +0000 Manifest next update: Fri 06 Jun 2025 18:01:23 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: SGH/BuT3Dd08VwrVi9Im9DXpuhOA6cIYsTg0rUpTOb8=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 18:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:41:41:3b:d9:96:05:a0:11:55:06:05:60:12:e2:47:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jun 5 18:01:23 2025 GMT Not After : Jun 6 18:01:23 2025 GMT Subject: CN=dd437bfe68cc9880a27dfe5f1bc009820af06931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:80:51:e9:05:8b:a5:7d:1d:ad:46:b7:75: 6b:a4:40:96:e4:74:57:f5:3e:25:a0:46:9b:53:5c: 77:fb:39:58:db:48:80:06:03:8b:63:bb:e1:fb:86: 26:c4:10:90:99:af:be:d5:5d:cc:bf:a9:5b:80:01: 99:08:64:fb:1d:51:31:a5:35:3a:f9:5e:2f:cd:ba: 91:54:da:1f:81:8a:13:77:e7:0e:e7:b8:fa:b2:88: 63:1f:a6:b7:cc:3e:46:ac:e8:2d:5e:a2:d4:39:9e: 09:d7:ea:b5:bb:36:f5:ae:4e:e4:a8:06:74:bb:fb: fb:54:09:9a:ba:bd:fa:78:90:48:5c:71:83:1e:c4: 70:46:8f:d5:9a:23:8d:fb:a3:ec:15:39:c5:8c:24: 3a:8f:09:32:5c:54:96:6d:3c:1b:81:82:ae:3a:cb: a6:b8:01:6a:95:c2:c6:3e:85:4b:8c:88:5b:38:54: 9e:55:b6:fc:06:c7:c3:65:87:97:5e:13:fa:ab:ea: 3e:44:1f:f3:79:5e:67:d6:92:41:e2:ca:62:e0:03: ce:96:ac:df:80:c9:06:07:de:d6:c6:09:26:14:57: a9:61:62:1a:a8:41:9c:3a:41:4d:16:ae:2c:81:31: 07:e4:b9:68:fa:ff:f3:15:bc:3b:22:66:a8:ed:c4: df:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:43:7B:FE:68:CC:98:80:A2:7D:FE:5F:1B:C0:09:82:0A:F0:69:31 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:74:1d:3d:fc:7e:2a:ea:78:2b:a6:67:f7:d0:1e:d2:62: ee:99:1c:7d:09:6b:0d:8d:1f:f7:12:b4:cc:0b:ca:49:a3:58: 01:58:7f:1f:97:cd:9e:78:6f:b2:6c:77:fe:34:96:c2:20:74: b4:54:d0:c8:35:ef:87:e1:8a:72:2b:45:e0:59:8e:c6:b0:83: 88:c0:60:da:18:0f:4f:59:c6:b6:ae:dc:78:82:5d:24:6b:41: d0:ae:f4:c9:25:bd:1c:e8:9e:d7:02:24:59:05:85:9a:64:69: 9d:18:1b:b4:0d:16:b2:c1:4b:6f:ba:96:8f:f9:fe:5b:ef:67: 6a:4b:9a:0f:7a:29:ae:6e:52:50:ee:73:b7:b3:cd:e5:99:08: 11:f6:46:d9:13:9e:16:36:8f:2e:5d:f9:80:15:42:d3:06:ca: 06:b6:01:4e:7f:cf:22:72:de:20:3b:cb:ef:cf:62:c3:48:3f: d7:09:52:dc:c2:f8:14:5c:44:89:b5:ca:38:8f:6a:ff:4c:8b: 77:02:26:ca:20:65:3a:b8:e2:cb:a3:96:ee:ea:8b:fb:07:3f: 43:2a:1e:c8:f1:ab:a9:5a:32:39:ad:d7:2f:1c:7c:e8:d9:a4: fa:f7:e9:fb:02:2e:3c:13:df:7f:3e:7a:b2:bf:cb:1a:c9:64: 7c:30:03:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdBQTvZlgWgEVUGBWAS4kcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwNjA1MTgwMTIzWhcNMjUwNjA2MTgwMTIzWjAzMTEwLwYDVQQD EyhkZDQzN2JmZTY4Y2M5ODgwYTI3ZGZlNWYxYmMwMDk4MjBhZjA2OTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvqAUekFi6V9Ha1Gt3VrpECW5HRX 9T4loEabU1x3+zlY20iABgOLY7vh+4YmxBCQma++1V3Mv6lbgAGZCGT7HVExpTU6 +V4vzbqRVNofgYoTd+cO57j6sohjH6a3zD5GrOgtXqLUOZ4J1+q1uzb1rk7kqAZ0 u/v7VAmaur36eJBIXHGDHsRwRo/VmiON+6PsFTnFjCQ6jwkyXFSWbTwbgYKuOsum uAFqlcLGPoVLjIhbOFSeVbb8BsfDZYeXXhP6q+o+RB/zeV5n1pJB4spi4APOlqzf gMkGB97WxgkmFFepYWIaqEGcOkFNFq4sgTEH5Llo+v/zFbw7Imao7cTfAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1De/5ozJiAon3+XxvACYIK8GkxMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyx0HT38 firqeCumZ/fQHtJi7pkcfQlrDY0f9xK0zAvKSaNYAVh/H5fNnnhvsmx3/jSWwiB0 tFTQyDXvh+GKcitF4FmOxrCDiMBg2hgPT1nGtq7ceIJdJGtB0K70ySW9HOie1wIk WQWFmmRpnRgbtA0WssFLb7qWj/n+W+9nakuaD3oprm5SUO5zt7PN5ZkIEfZG2ROe FjaPLl35gBVC0wbKBrYBTn/PInLeIDvL789iw0g/1wlS3ML4FFxEibXKOI9q/0yL dwImyiBlOrjiy6OW7uqL+wc/QyoeyPGrqVoyOa3XLxx86Nmk+vfp+wIuPBPffz56 sr/LGslkfDADSA== -----END CERTIFICATE-----Generated at Fri Jun 6 03:55:40 2025 by rpki-client