$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: lV7+kMT4eU7ZB6SslAbQMtnrSZ+MwKhitYcuV710QMs= Subject key identifier: C3:D0:47:CB:CF:A1:69:43:11:0F:B1:3A:32:05:22:F7:8C:6C:2A:77 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 01993649AF48C52E06FCFE84CFA4CF8CFCDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 1691 Signing time: Thu 11 Sep 2025 01:00:22 +0000 Manifest this update: Thu 11 Sep 2025 01:00:22 +0000 Manifest next update: Fri 12 Sep 2025 01:00:22 +0000 Files and hashes: 1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=) 2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=) 3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=) 4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=) 5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=) 6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=) 7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=) 8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=) 9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=) 10: VoBqKFmkzHKUMH66kT01ur4Okdk.roa (hash: wrQGRmCWA6MmV9E979fU5JGLxSuHzNsXWbXUIKZWDCY=) 11: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=) 12: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: DvYjH7O2Daz0intKQVuI0N55/IzwljQkqjIQoonYBQU=) 13: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=) 14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 20:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:36:49:af:48:c5:2e:06:fc:fe:84:cf:a4:cf:8c:fc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Sep 11 01:00:22 2025 GMT Not After : Sep 12 01:00:22 2025 GMT Subject: CN=c3d047cbcfa16943110fb13a320522f78c6c2a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:de:e7:4a:66:5e:d9:57:0b:a3:cf:34:d9: 76:0b:ce:98:36:3e:b6:0e:3f:87:16:85:92:b3:53: f2:e4:00:dd:77:b8:c1:4d:02:eb:f3:47:60:62:f4: ca:05:40:5d:f8:01:08:68:f1:26:c6:f2:39:7f:51: b8:37:3c:af:f5:a6:7b:64:d0:f0:70:35:bc:38:e3: 95:bd:58:6b:94:9c:06:58:c7:87:3d:e3:30:7f:12: 8d:08:4f:e5:ca:f9:d1:dd:2a:1d:30:87:2b:84:b7: 56:ec:3d:ae:fc:a1:9c:13:e7:92:18:f3:09:8f:43: 4a:fe:af:d5:e4:ce:dc:fb:e8:41:d7:c1:a3:83:8b: 28:a3:d7:0a:0b:3f:d2:9c:3d:af:fa:9e:6d:0e:7e: 78:26:e2:16:d8:da:0f:47:cf:60:a8:18:55:e8:e5: bc:82:27:ec:b0:40:c6:36:9f:7b:88:a7:ee:01:08: e6:a8:5f:ee:51:f6:10:ca:02:15:d2:93:1c:7d:68: a4:77:2a:1e:09:42:3b:9b:8d:d8:8d:6d:da:70:31: 86:07:30:91:1a:19:a1:ac:04:b3:a7:8b:87:ca:ab: 06:37:b1:e9:be:0f:df:52:d9:8d:93:74:af:5d:3f: df:a4:c8:d2:79:e4:05:72:97:2e:58:7e:c5:21:2f: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:47:CB:CF:A1:69:43:11:0F:B1:3A:32:05:22:F7:8C:6C:2A:77 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b6:ae:a2:f5:c4:d6:23:79:f0:0f:00:56:d8:9a:15:a8:82: 06:f2:97:b7:d0:b6:35:44:c8:95:ee:d8:53:0d:19:b2:44:f6: 4e:d9:48:3c:46:73:2d:be:14:86:06:a3:1a:b0:0e:4f:e5:9d: 5a:d6:65:72:fc:eb:98:ca:25:16:8a:ae:d6:b5:6d:11:bc:c6: 5d:10:09:e7:44:79:74:74:06:da:53:c0:23:a4:46:33:24:6e: a2:c6:b6:a3:e8:17:23:46:9a:f1:b1:68:5b:33:06:ce:23:32: 3b:50:8b:29:15:d0:29:75:11:67:65:06:8a:45:54:b3:00:01: 3b:a1:57:d8:ea:c9:0d:bb:14:ec:62:8b:e7:37:2c:85:9a:8b: 9b:c9:d2:bb:e0:fa:fb:4a:21:e8:ef:d2:ae:2a:9c:43:ec:02: d3:18:71:47:dc:ba:5d:b9:b4:76:f8:48:ea:26:49:81:f5:08: af:37:5d:3d:29:90:f6:30:aa:b6:b9:9a:67:e1:5c:2a:0d:a4: 35:ef:84:36:e6:8f:60:a7:f6:d6:f4:59:27:6f:a6:5f:28:4b: d8:5c:37:6a:95:23:53:0b:22:8e:c6:3c:9a:c9:87:80:c9:1a: 2b:2f:8a:92:81:c2:e5:2f:fb:77:78:f7:6e:ea:80:14:df:b2: 8a:11:37:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk2Sa9IxS4G/P6Ez6TPjPzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjUwOTExMDEwMDIyWhcNMjUwOTEyMDEwMDIyWjAzMTEwLwYDVQQD EyhjM2QwNDdjYmNmYTE2OTQzMTEwZmIxM2EzMjA1MjJmNzhjNmMyYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMLe50pmXtlXC6PPNNl2C86YNj62 Dj+HFoWSs1Py5ADdd7jBTQLr80dgYvTKBUBd+AEIaPEmxvI5f1G4Nzyv9aZ7ZNDw cDW8OOOVvVhrlJwGWMeHPeMwfxKNCE/lyvnR3SodMIcrhLdW7D2u/KGcE+eSGPMJ j0NK/q/V5M7c++hB18Gjg4soo9cKCz/SnD2v+p5tDn54JuIW2NoPR89gqBhV6OW8 gifssEDGNp97iKfuAQjmqF/uUfYQygIV0pMcfWikdyoeCUI7m43YjW3acDGGBzCR GhmhrASzp4uHyqsGN7Hpvg/fUtmNk3SvXT/fpMjSeeQFcpcuWH7FIS+ONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPQR8vPoWlDEQ+xOjIFIveMbCp3MB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrauovXE 1iN58A8AVtiaFaiCBvKXt9C2NUTIle7YUw0ZskT2TtlIPEZzLb4UhgajGrAOT+Wd WtZlcvzrmMolFoqu1rVtEbzGXRAJ50R5dHQG2lPAI6RGMyRuosa2o+gXI0aa8bFo WzMGziMyO1CLKRXQKXURZ2UGikVUswABO6FX2OrJDbsU7GKL5zcshZqLm8nSu+D6 +0oh6O/SriqcQ+wC0xhxR9y6Xbm0dvhI6iZJgfUIrzddPSmQ9jCqtrmaZ+FcKg2k Ne+ENuaPYKf21vRZJ2+mXyhL2Fw3apUjUwsijsY8msmHgMkaKy+KkoHC5S/7d3j3 buqAFN+yihE3dQ== -----END CERTIFICATE-----Generated at Thu Sep 11 06:16:12 2025 by rpki-client