$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: yEVo0cjofNe33YfCIJEj/9F3ir7xlazD9BnGsrossIM= Subject key identifier: 64:3B:7B:DA:FB:A7:EB:29:EC:59:A3:A2:02:8F:FA:7D:41:8D:97:E1 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 019749D5FBDE054113091539022F31712BF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 1592 Signing time: Sat 07 Jun 2025 10:00:49 +0000 Manifest this update: Sat 07 Jun 2025 10:00:49 +0000 Manifest next update: Sun 08 Jun 2025 10:00:49 +0000 Files and hashes: 1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=) 2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=) 3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=) 4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=) 5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=) 6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=) 7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=) 8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=) 9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=) 10: VoBqKFmkzHKUMH66kT01ur4Okdk.roa (hash: wrQGRmCWA6MmV9E979fU5JGLxSuHzNsXWbXUIKZWDCY=) 11: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=) 12: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: elC7rd59ulRLpj75Le2FnQoyiyA0sks69h+/aHdr2/o=) 13: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=) 14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:d5:fb:de:05:41:13:09:15:39:02:2f:31:71:2b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Jun 7 10:00:49 2025 GMT Not After : Jun 8 10:00:49 2025 GMT Subject: CN=643b7bdafba7eb29ec59a3a2028ffa7d418d97e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:9e:13:f1:21:33:8b:28:30:61:0e:bd:3d: fb:d9:65:fe:d1:c9:c5:26:71:82:c9:f9:86:dc:bc: 24:4a:00:f3:a3:7c:53:03:5f:e8:6c:61:47:b8:28: 84:f6:47:96:fd:f8:b6:ca:3c:55:7e:40:24:91:b6: d1:e8:9b:4d:15:3d:de:a9:14:10:e5:34:9a:e7:64: 0f:f6:a6:30:aa:cf:8c:da:1e:02:6f:c4:6e:eb:ad: 2c:eb:ae:5c:46:37:68:82:3e:7c:60:7c:07:ac:1a: a7:62:af:42:a5:db:f3:09:45:35:92:9a:69:d6:f0: e0:d5:da:74:cc:cb:88:e1:c2:fc:fa:43:e0:a7:bd: 53:37:0a:50:18:7f:bc:fe:21:32:7d:73:ae:9e:37: df:8d:7f:c2:08:c6:93:6e:c7:46:f6:01:4b:42:90: 9e:94:a7:58:90:bf:65:21:e3:e6:4b:e0:cd:de:91: 4e:73:5e:8d:36:ac:54:bd:eb:b1:23:ff:06:91:09: b9:36:1e:ab:67:67:08:27:6d:e6:4b:ee:2d:8c:8a: a0:3b:cd:24:29:b4:29:8f:e9:95:5b:53:b1:79:e8: 20:cf:c4:a8:0b:2d:f7:20:54:b6:8a:31:b4:12:20: 40:db:b8:77:7c:8b:42:c6:41:04:9c:bb:ed:2d:62: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3B:7B:DA:FB:A7:EB:29:EC:59:A3:A2:02:8F:FA:7D:41:8D:97:E1 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:8f:cd:08:73:8c:75:00:43:6d:1c:06:f4:5e:52:9f:26:ec: 6c:f4:a9:16:3c:f0:dc:61:05:8a:89:7d:2d:60:37:56:fc:09: 5f:0b:2b:af:1f:08:bc:9e:8c:fa:76:dd:46:ab:2e:3e:dd:c8: ad:39:de:84:0c:dc:b2:a8:a3:28:80:1b:dc:d5:56:48:a4:99: c5:cc:5b:f5:2f:ab:c0:27:ac:e6:b9:92:fd:1d:d3:86:b5:a8: cf:e7:93:b8:5a:30:79:2e:d8:9a:1b:a8:f9:4c:26:35:d4:c4: cd:54:9e:52:cb:57:ec:28:2a:24:d2:47:dd:de:fc:71:5d:4d: 8b:c2:05:38:06:ba:f5:e2:31:3e:c1:d8:73:85:78:50:b1:04: 0f:ed:2c:25:e2:5d:56:93:62:5f:9b:6c:ae:a7:39:f2:68:e8: dd:05:4a:ba:6b:71:3c:5c:26:f3:82:23:c3:94:f3:ac:9d:77: 98:d8:c2:db:4e:5f:1d:57:40:4b:56:ed:a1:8b:85:29:47:ce: 03:2c:88:ac:3a:fc:20:15:61:4e:b6:69:5e:53:9e:11:2b:46: 35:e5:19:6f:4d:92:15:a0:11:7e:b8:e3:82:00:20:4b:b0:01: 09:9e:85:45:ca:53:2f:16:45:e0:ca:f4:11:b3:87:fd:46:c3: 3e:39:1f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJ1fveBUETCRU5Ai8xcSv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjUwNjA3MTAwMDQ5WhcNMjUwNjA4MTAwMDQ5WjAzMTEwLwYDVQQD Eyg2NDNiN2JkYWZiYTdlYjI5ZWM1OWEzYTIwMjhmZmE3ZDQxOGQ5N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWSeE/EhM4soMGEOvT372WX+0cnF JnGCyfmG3LwkSgDzo3xTA1/obGFHuCiE9keW/fi2yjxVfkAkkbbR6JtNFT3eqRQQ 5TSa52QP9qYwqs+M2h4Cb8Ru660s665cRjdogj58YHwHrBqnYq9CpdvzCUU1kppp 1vDg1dp0zMuI4cL8+kPgp71TNwpQGH+8/iEyfXOunjffjX/CCMaTbsdG9gFLQpCe lKdYkL9lIePmS+DN3pFOc16NNqxUveuxI/8GkQm5Nh6rZ2cIJ23mS+4tjIqgO80k KbQpj+mVW1Oxeeggz8SoCy33IFS2ijG0EiBA27h3fItCxkEEnLvtLWI2XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQ7e9r7p+sp7FmjogKP+n1BjZfhMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4/NCHOM dQBDbRwG9F5SnybsbPSpFjzw3GEFiol9LWA3VvwJXwsrrx8IvJ6M+nbdRqsuPt3I rTnehAzcsqijKIAb3NVWSKSZxcxb9S+rwCes5rmS/R3ThrWoz+eTuFoweS7Ymhuo +UwmNdTEzVSeUstX7CgqJNJH3d78cV1Ni8IFOAa69eIxPsHYc4V4ULEED+0sJeJd VpNiX5tsrqc58mjo3QVKumtxPFwm84Ijw5TzrJ13mNjC205fHVdAS1btoYuFKUfO AyyIrDr8IBVhTrZpXlOeEStGNeUZb02SFaARfrjjggAgS7ABCZ6FRcpTLxZF4Mr0 EbOH/UbDPjkf1A== -----END CERTIFICATE-----Generated at Sat Jun 7 16:47:27 2025 by rpki-client