$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft File: 7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json) Hash identifier: v4OVyLv4ls5VCMrkqYtATGPpFv1v6oMajSYRWLlJkqM= Subject key identifier: DB:79:C9:0F:FB:13:A9:D3:64:59:80:E6:50:FF:EA:A4:22:1D:EC:FB Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 0199326D30BED4FECDFFCD89E77DAA6B3230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft Manifest number: 16C1 Signing time: Wed 10 Sep 2025 07:00:40 +0000 Manifest this update: Wed 10 Sep 2025 07:00:40 +0000 Manifest next update: Thu 11 Sep 2025 07:00:40 +0000 Files and hashes: 1: 2As0Mp8svkA_acr8TjpzRvXcyRw.roa (hash: x7SMSN6/Nb1zQXVVEV5INFQjFMZ3I+mES8tTWRbKxME=) 2: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (hash: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=) 3: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (hash: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=) 4: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (hash: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=) 5: 7mljAx2MPE8ckRZfqaa9qIHwI78.roa (hash: QoswDUBIDzIT7x/nZLY3TWZiOCoIUk8QVtrt2GI34Tc=) 6: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: +ZpdREWIpoBljVqjqJEfDWdwaj50sKc6rkZjuBSSe+Q=) 7: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (hash: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=) 8: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (hash: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=) 9: VevE1Qkku5OCuflEElcF548SkKs.roa (hash: OO4osqCuMqLt/NPspapEtGPa5x8FCuxawiZlsDGiwlo=) 10: X6QCTOwOC8y3vNqfakDVWl14x2E.roa (hash: ntyGFIij13k4RvM2mOeeSG9K/6TRfBr3RSElp30qqF4=) 11: f6xp71AmSGD06YY2IrJqZ9soec4.roa (hash: P2ngCAMEJOf4Ce1vVcWfg+Kihos97gOGnSUxltJgsDU=) 12: i0UtjKhThBAIzRT1eJL3hD2Ywmk.roa (hash: BKlQ/77pz1u1TCDlrGybeS13ax7xeZWbK2z+UAz10UA=) 13: nxONRr35yfVjJyyHJ14q4Tj1wU4.roa (hash: +bkryBLmQu7w4ldoQCmP9JbDgt+kLUslVyNWfoUmV6M=) 14: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (hash: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=) 15: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (hash: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:32:6d:30:be:d4:fe:cd:ff:cd:89:e7:7d:aa:6b:32:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Sep 10 07:00:40 2025 GMT Not After : Sep 11 07:00:40 2025 GMT Subject: CN=db79c90ffb13a9d3645980e650ffeaa4221decfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:dc:04:70:c3:3c:c6:d1:8b:95:da:16:b3: 04:d9:18:54:90:f3:3c:f5:91:13:62:db:78:ac:ea: cb:6a:1d:0d:5f:af:a8:d6:e5:5f:c8:ed:61:53:ab: 0f:29:bc:b2:21:07:c2:b4:b7:60:ef:b8:a9:ef:8b: 3b:ca:a3:7a:2f:21:ed:db:f8:f7:ac:23:a1:9e:9d: 06:2d:96:20:31:f2:1d:87:d6:82:d3:64:33:f6:03: 60:c7:25:a1:14:8c:57:d9:25:54:68:c0:b0:90:57: 27:94:11:83:80:d4:15:97:bf:e0:af:88:c3:69:f1: 4c:25:0d:90:f5:42:d1:05:77:c1:20:4f:b8:35:9b: cd:cd:c4:17:2b:36:77:60:e8:eb:38:19:b3:37:e9: 90:af:d9:51:ba:6c:c3:4e:07:7b:03:c6:f0:a1:53: bf:f8:5b:a5:8b:d5:36:2e:c5:56:04:f4:13:57:c1: 52:26:a8:87:41:28:ce:b2:e0:81:02:7d:a5:e7:71: ad:26:7c:be:d0:c5:ab:7f:dd:b2:71:48:3c:ce:28: d9:e8:7a:30:a5:56:81:c0:74:14:83:60:68:21:d1: e4:8b:82:6e:b2:7c:8b:b0:72:9d:a4:65:2b:c2:ea: 65:21:89:7f:25:eb:91:b6:7c:30:7f:31:84:54:39: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:79:C9:0F:FB:13:A9:D3:64:59:80:E6:50:FF:EA:A4:22:1D:EC:FB X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:aa:bf:9b:f0:52:ff:ff:c1:2c:83:f5:e7:29:29:a3:3c:71: dc:05:d0:d9:12:67:42:ef:05:62:ae:75:58:ef:56:4a:a0:48: 53:7d:4d:21:ea:71:4c:9f:f0:b7:99:49:95:e9:3f:3f:63:71: 7d:81:c0:a4:93:85:df:1f:7a:52:2c:aa:4f:8f:e5:5b:52:a7: 63:a8:af:f7:22:a7:ff:af:38:f9:3d:33:1c:da:94:46:86:24: 5c:0c:61:6c:ae:3c:4e:65:83:07:85:62:da:59:90:3f:c6:cf: d3:b4:ff:53:10:56:18:a4:dd:ea:61:cc:e6:a6:1d:61:d2:1b: 6c:9e:2d:b7:67:98:49:ff:57:18:fe:94:11:f3:14:ea:20:43: d9:57:05:ee:18:79:8b:85:07:63:63:6e:e8:5e:2b:f8:7b:28: 19:fe:08:26:42:b9:53:86:7d:42:d2:d2:83:2d:85:3b:44:3e: 3b:ea:74:88:97:a4:17:42:0a:c6:c6:04:aa:93:73:40:87:38: 0e:2a:3f:97:b0:48:eb:d4:04:aa:ef:7d:21:fe:2d:16:f5:77: d2:f2:28:4f:7e:97:f6:a2:60:90:ba:fe:2d:7c:8c:11:6e:2f: eb:e2:d4:9c:0b:54:a4:75:62:df:65:53:3b:54:70:06:04:cb: a0:b1:ed:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkybTC+1P7N/82J532qazIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjUwOTEwMDcwMDQwWhcNMjUwOTExMDcwMDQwWjAzMTEwLwYDVQQD EyhkYjc5YzkwZmZiMTNhOWQzNjQ1OTgwZTY1MGZmZWFhNDIyMWRlY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0jcBHDDPMbRi5XaFrME2RhUkPM8 9ZETYtt4rOrLah0NX6+o1uVfyO1hU6sPKbyyIQfCtLdg77ip74s7yqN6LyHt2/j3 rCOhnp0GLZYgMfIdh9aC02Qz9gNgxyWhFIxX2SVUaMCwkFcnlBGDgNQVl7/gr4jD afFMJQ2Q9ULRBXfBIE+4NZvNzcQXKzZ3YOjrOBmzN+mQr9lRumzDTgd7A8bwoVO/ +Fuli9U2LsVWBPQTV8FSJqiHQSjOsuCBAn2l53GtJny+0MWrf92ycUg8zijZ6How pVaBwHQUg2BoIdHki4JusnyLsHKdpGUrwuplIYl/JeuRtnwwfzGEVDkKGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt5yQ/7E6nTZFmA5lD/6qQiHez7MB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKq/m/BS ///BLIP15ykpozxx3AXQ2RJnQu8FYq51WO9WSqBIU31NIepxTJ/wt5lJlek/P2Nx fYHApJOF3x96UiyqT4/lW1KnY6iv9yKn/684+T0zHNqURoYkXAxhbK48TmWDB4Vi 2lmQP8bP07T/UxBWGKTd6mHM5qYdYdIbbJ4tt2eYSf9XGP6UEfMU6iBD2VcF7hh5 i4UHY2Nu6F4r+HsoGf4IJkK5U4Z9QtLSgy2FO0Q+O+p0iJekF0IKxsYEqpNzQIc4 Dio/l7BI69QEqu99If4tFvV30vIoT36X9qJgkLr+LXyMEW4v6+LUnAtUpHVi32VT O1RwBgTLoLHtrw== -----END CERTIFICATE-----Generated at Wed Sep 10 08:47:58 2025 by rpki-client