$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: KMCpR9p3U9a+Ng0edI605jIS98qdQchACDktR9odmAI= Subject key identifier: B4:2C:A2:7E:A0:50:19:E5:33:3F:99:62:6D:80:3A:1F:1E:95:ED:D5 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 0197D24EF248EA698DE44506AAA7CC782D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0497 Signing time: Thu 03 Jul 2025 22:01:18 +0000 Manifest this update: Thu 03 Jul 2025 22:01:18 +0000 Manifest next update: Fri 04 Jul 2025 22:01:18 +0000 Files and hashes: 1: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=) 2: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=) 3: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=) 4: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=) 5: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=) 6: FNiNdr2A7OQKs4Lh8NIXmrr0CpY.roa (hash: lzfjAZjaBGiVtNnSHHAFnCh/6pNb/eM+js/obHoKL1U=) 7: Gw2mbsE_MoMLk8qNwEEX0NgcNl8.roa (hash: 1jUFBnLBvfA4uzicHOhc17W0Ci/2g8HkC2YbueNHc3Q=) 8: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=) 9: KAJR7Az03SttMk_zWkKXtcY_Zv4.roa (hash: mPYizTtCYKtuALtzDruuWZjX6sFa/cj7Bo/6GSj1GAA=) 10: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=) 11: RWE60Ns1mQje11llf2ihFVQVFic.roa (hash: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=) 12: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=) 13: X3NTuCf8D13AYgUPH0jE9Gc-Rrg.roa (hash: v8Rr9ZsrHuEDv3syJydpQAvo5+aMcYPzfv0BjI3dYDQ=) 14: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=) 15: aTQ9uPvlYXPGnc1NBIxSpUA_uWQ.roa (hash: wcqKHdv1cBQdtNdt0vRlo2xRW2l4SQSz+bX91RIGAkI=) 16: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=) 17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: tq3uyhaR9v3KxsWiFaPpwhXwZJGxiN3Xqcp69aq6RZo=) 18: grdt8mgDzKnb-AIa5iVppNSJziE.roa (hash: YgndpH0ES5lTVzS9HaDo0++Ke9eabHkve02TiNj7Qmg=) 19: m3kbgVGInZoxkGlQeAONX97frV4.roa (hash: 8gUwO/0n4gQZPZEJMORDD8t/sRehPTtCRHIzAdAWNug=) 20: q9KAfK0rDP6HvDAvu6yCONcHo1A.roa (hash: rpaTArlwk3d6poFJ0BsdJJajMgWajOTxcwUJ1/mYsyQ=) 21: toMHEB280KETNfSWfwGdAQlBHIo.roa (hash: /78AEGOua5BdiHCzMqoUcFzXGSUc4tOmrRCkCS8IUTo=) 22: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 17:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:d2:4e:f2:48:ea:69:8d:e4:45:06:aa:a7:cc:78:2d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jul 3 22:01:18 2025 GMT Not After : Jul 4 22:01:18 2025 GMT Subject: CN=b42ca27ea05019e5333f99626d803a1f1e95edd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:31:26:8b:e1:df:f6:85:ce:48:9e:85:f1: fd:f6:8d:72:46:8e:5f:bd:4a:56:a6:38:f4:ee:2d: 13:5a:a3:a7:55:f8:fd:85:18:06:0f:fb:74:ad:7f: 2f:54:d1:4a:f5:af:64:cb:2b:45:d7:b0:cd:ca:49: 18:a8:79:3f:33:5c:4e:bf:2a:c1:b9:40:73:be:5a: eb:08:5f:ca:e6:9c:d5:63:76:d5:72:c2:b7:39:71: d0:1f:74:54:d1:e8:ac:bc:b5:5f:44:60:a6:b1:6a: cd:d5:7c:55:c1:10:09:01:94:7c:93:b0:1e:fa:b8: 3a:38:79:6c:15:68:24:be:1c:07:59:35:20:82:56: e3:a2:a3:a5:7a:4a:ea:84:d2:28:88:29:50:1c:b5: 33:d5:3b:2b:80:23:fa:91:ce:4c:12:7a:88:fc:b8: 98:9d:0f:4f:8e:75:a0:d5:e3:d6:81:5a:55:a2:71: 12:23:f1:b3:d9:ef:a1:d8:71:ac:d6:92:85:4d:a1: ef:87:ba:ad:8b:74:a4:8a:68:b1:0e:60:dc:6d:29: c5:92:fa:56:4d:9a:8c:77:87:97:d8:c1:97:d1:f9: 29:d7:27:44:49:95:71:9e:65:2a:9b:1c:c7:69:d5: db:fb:d8:f4:62:1f:ee:4b:ce:5d:e7:ca:43:64:3c: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2C:A2:7E:A0:50:19:E5:33:3F:99:62:6D:80:3A:1F:1E:95:ED:D5 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:56:84:93:20:b5:83:d9:b1:7a:27:e2:94:24:87:2e:8f:33: b4:0c:16:3c:17:e6:20:91:f9:f4:02:a2:9c:b2:86:1c:85:29: fc:8e:5b:6b:12:4b:96:72:52:b6:d3:4b:5d:ac:b1:12:c1:c6: d6:c5:17:d0:a0:a5:d9:ba:9a:03:1a:0e:87:45:f7:af:5a:61: 86:56:5d:35:81:77:9b:9e:01:e2:ec:de:97:52:cd:6e:a1:d9: a0:a1:15:8e:b7:8f:4b:58:bb:ca:0b:a9:f4:b4:2c:61:51:e0: f9:68:f3:f8:fe:76:95:f9:e6:fa:ff:f8:b2:14:12:e0:9c:db: 82:85:fa:e6:6c:3d:32:d0:21:00:8d:e5:48:e4:56:72:2b:21: 19:39:e4:c6:5b:80:76:00:af:62:2f:c6:53:b4:4f:41:d2:ec: f7:57:21:bf:54:c6:5c:b9:46:7b:4c:81:ac:95:3d:02:ee:ec: d0:91:f5:44:9a:ac:0b:03:b9:74:ef:58:71:93:f2:bb:50:2e: 1d:50:6a:c4:09:84:f0:e3:10:68:c4:a3:b3:2f:a7:32:92:56: 93:77:22:f3:ee:44:09:3a:54:c6:b7:69:31:56:d9:85:30:00: f5:ba:3d:68:df:a8:59:9a:fb:53:c0:74:a2:88:6f:8b:bf:55: 89:bc:2d:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfSTvJI6mmN5EUGqqfMeC0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUwNzAzMjIwMTE4WhcNMjUwNzA0MjIwMTE4WjAzMTEwLwYDVQQD EyhiNDJjYTI3ZWEwNTAxOWU1MzMzZjk5NjI2ZDgwM2ExZjFlOTVlZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZExJovh3/aFzkiehfH99o1yRo5f vUpWpjj07i0TWqOnVfj9hRgGD/t0rX8vVNFK9a9kyytF17DNykkYqHk/M1xOvyrB uUBzvlrrCF/K5pzVY3bVcsK3OXHQH3RU0eisvLVfRGCmsWrN1XxVwRAJAZR8k7Ae +rg6OHlsFWgkvhwHWTUgglbjoqOlekrqhNIoiClQHLUz1TsrgCP6kc5MEnqI/LiY nQ9PjnWg1ePWgVpVonESI/Gz2e+h2HGs1pKFTaHvh7qti3SkimixDmDcbSnFkvpW TZqMd4eX2MGX0fkp1ydESZVxnmUqmxzHadXb+9j0Yh/uS85d58pDZDzXzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQson6gUBnlMz+ZYm2AOh8ele3VMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVaEkyC1 g9mxeifilCSHLo8ztAwWPBfmIJH59AKinLKGHIUp/I5baxJLlnJSttNLXayxEsHG 1sUX0KCl2bqaAxoOh0X3r1phhlZdNYF3m54B4uzel1LNbqHZoKEVjrePS1i7ygup 9LQsYVHg+Wjz+P52lfnm+v/4shQS4JzbgoX65mw9MtAhAI3lSORWcishGTnkxluA dgCvYi/GU7RPQdLs91chv1TGXLlGe0yBrJU9Au7s0JH1RJqsCwO5dO9YcZPyu1Au HVBqxAmE8OMQaMSjsy+nMpJWk3ci8+5ECTpUxrdpMVbZhTAA9bo9aN+oWZr7U8B0 oohvi79VibwtZg== -----END CERTIFICATE-----Generated at Fri Jul 4 02:14:08 2025 by rpki-client