$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: jEpf4Aew2oRDInQ+sD2pGHCu5Uav/keO8DHSnIzjE5Q= Subject key identifier: 17:9F:B9:E9:24:24:E9:E0:9A:4F:5E:EB:70:A3:2E:6A:3C:42:5D:3A Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 01991B774C16B6A891C043C9E2BAABABBAB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 1272 Signing time: Fri 05 Sep 2025 20:00:27 +0000 Manifest this update: Fri 05 Sep 2025 20:00:27 +0000 Manifest next update: Sat 06 Sep 2025 20:00:27 +0000 Files and hashes: 1: 2EnX4m92s0lhKmWE_sTzMD4Ayro.roa (hash: gA57KxZUSDCVnGJyJOSYKPN5gZzPfcQGEC6QQbL5A80=) 2: 3-Grh5jLZ10JU7OBJD1tp_47eyY.roa (hash: 2c45XwsvJy+h7TqtuH/GlyKMkqIf7Xkil5OLxUtEjls=) 3: 3O-PquqRfbA6nwdvb9qh_AlphQI.roa (hash: ui7wdGtAkSn5jSbzg9QOpRGaOjEkXjjG4DHPpDLyVM8=) 4: 9tG_IZuU5_cUB2VxB4_mFuzbZWA.roa (hash: PfJNVhJ2t/gHrswGCAzyuF/aOd+UybWj7m8V6C9TjnM=) 5: DNKZJXST2kGoKjhKfNecPwD9F3A.roa (hash: hRAyyWzBrmRGz8fLB2bN07ZS6ISPKILq/slATox9sto=) 6: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (hash: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=) 7: Ge_uX_W3v6Qv50Vw5ae1VK51UEU.roa (hash: XNzqWOUJb1G6BusqTwhK231Qfjyjj7xbS2sFfNlRRIY=) 8: HTr5rydQdFHu-uCLJk2lOL3Ir2E.roa (hash: i32saCx4DgxcZ7o3IHdv+kvs+bAPQrDg12HNZKhQfo4=) 9: RHQDwKu8R1BiqVyY2Tjg4hHJAWc.roa (hash: b8HvAiKDPdfzzLQtID64DX+UXDDGwjs7bi1PBPQ+P/8=) 10: S5KO8C6dpLpIBB9rsyHHcn-4u_I.roa (hash: GnxbHhgk1bq/0XdOXrBEvFBmYvy78byA1Jqa/a7A7bI=) 11: WabN-J1FDu6W3p8yB6HeIVyu7fM.roa (hash: 4LNC/qP52AV9uC8vUXLHv0auNiYxyYlw8sJ9ArCTUpg=) 12: XE7cRB6SWvPtqodUbBU29gAlxy0.roa (hash: VEw1GCPGuZXegW9h5elGs3pbrIScm0hRkL6R6Vn1RLY=) 13: brk2eWKkbDOeEGphbM_FR9qqM9A.roa (hash: yHMenONPVTRm7WPjBi5HPXl1TTgaMoeCdfTRvLQgfGk=) 14: ct5jXmRV16i6fK8y9z-vqgBC-eM.roa (hash: YwoZM0/dlMDJEjxF3IHm0bkS1+bWwqNb2ETiYm2dLk0=) 15: d3sFY8_J7LBIPwIhb4dAzqL5atM.roa (hash: Jn5pB2LDPV82LCwM4xQJY+PpwwF3+IHXMhIfwqqGyG4=) 16: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: ctSdqvQuBTe27y1yKtDZK8+7d3LZ6Vt8fGQku5UTYMs=) 17: hV3esBXd7kWM19SwGoTWr4W2RYo.roa (hash: nkuIcdLSR2rDjqKAyaaEtGABcGXULTJNPUbi1fRjd+w=) 18: hqcWZscvMvxfFB8QI_S-D4mwSnM.roa (hash: ffNiaNjp7TZpp1BEsr11TAWkOb9RQ/w06b89HrPSZY4=) 19: iHqHOmwrVyrtHOqJBGU-h4gTPGE.roa (hash: LgyVv3T9GhaxHLbeG0cUmNnr3zf3ppvzWIBGJwHUSNg=) 20: iPUqVolhLmbwFocDgLV6ncA_LRs.roa (hash: Vf7btw8BxFTBWWeh1+kJas/26jHzb0LOznlp7bXnAAo=) 21: j4qMrNazE4U-55TjMmv1LIDcc_A.roa (hash: Gj4NvJCKAdxN+LOAFljaCnKHiV1lpQyFMbBfJ0I+GNM=) 22: mshsch9jvLRWMOkW640opDKVZ6U.roa (hash: BsoqjBrJxvmkPWcY+fPLitNMqJrGGEQ6Lx9nbs/IguA=) 23: mss18FIq4ydcYebAHYX2pd8ocjk.roa (hash: J88GfjksI+w3VtUia6Hq+rhitJHHRkLoOK14jy8vrfc=) 24: n8beE_tI7GeE5JTD0amAF0WQp1M.roa (hash: iiReayb/lEPVoMVcPoo7tc123PhSZyon0Hw4QE2B2Jc=) 25: nwvxh4Kq6QGnrSG8dHlSPWKzWS8.roa (hash: oWPee3Z5fruu6Qydv3LTw9u+9tD+meWbQsYByk2qusI=) 26: pWuQiH7oCzI0HQTOK5N0XFIvpC0.roa (hash: i9S7NxmicTLIf3yhZDDOTywtRB20Rf0o941WAv3hGkY=) 27: phdVSjC8d7P_IPR9pfuqF3ibJeQ.roa (hash: LdfALFSTfppofahy/V7vrDSqtAjnA1jl4Wz8tBm0yaQ=) 28: qhqAQR22JaN9sFDstmAnfgH6jD4.roa (hash: DYrIqHwNjcGZSEbGFvg0f1ZcKdSDEK96zCtPjprY0u8=) 29: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (hash: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=) 30: vSFUAztM4xg8pnCN2uvJ0r0ZpOY.roa (hash: lfAk2RkoT9Z6h0Jxb78c4RLN4P2hpHz0D8+Q/p7nmkA=) 31: vWcgLORNYaxn8oW87i0UFzUEE_0.roa (hash: H32EyNsUB/y926E/9Y3FItCi0tRX+tClcrtmQ4SkcBw=) 32: yArUxJuVZr7ZjsAQ50iIy89Di3E.roa (hash: FYImSGmHMUN8RyvNxZTCDINMDJQGeXHDQkBay1ZLpaA=) 33: yyxJQ5XATA8lfc_O-A0MIq50viw.roa (hash: b3vHgrn6G4FC+/ORCr2nTAcwUFNQFEM4kTv5ph/7kMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 17:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1b:77:4c:16:b6:a8:91:c0:43:c9:e2:ba:ab:ab:ba:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Sep 5 20:00:27 2025 GMT Not After : Sep 6 20:00:27 2025 GMT Subject: CN=179fb9e92424e9e09a4f5eeb70a32e6a3c425d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:66:90:b6:e7:d5:55:cb:d9:3e:55:8e:8a:d0: 2f:02:4f:c9:44:27:5d:fb:ee:04:f5:da:70:e8:dd: 66:3d:4e:f4:f4:83:a6:12:1b:9b:83:3a:70:55:6d: f9:46:24:1f:dc:51:ad:73:b4:14:0b:98:0b:d6:43: 7d:72:f7:a9:98:02:73:4e:69:34:6c:3d:ca:56:7a: 90:d2:42:df:85:fb:34:59:42:28:d8:af:d1:cc:5d: 77:e5:27:be:9a:25:03:61:41:b6:d8:5d:f3:34:20: 5e:b9:71:13:17:e4:8f:e5:6a:2c:c0:56:72:cf:65: da:b5:64:e8:75:43:a9:64:2f:44:2e:a6:64:3b:10: d5:6e:a8:9e:39:42:14:b5:a7:c5:3f:b3:4a:8a:b7: cd:5e:a3:29:86:c8:aa:18:5a:1c:3b:ef:40:55:bc: 04:b0:3f:85:17:8d:44:22:4d:fc:ba:2c:c9:0a:78: d4:80:7d:ef:7d:3d:e5:34:36:f3:c5:fd:78:2f:a0: 30:81:61:7c:35:7b:04:23:50:ee:26:cd:ff:c4:a0: 3a:95:aa:5c:2a:89:8e:27:f7:e3:ec:ed:f9:a8:a4: c4:50:42:52:94:63:41:bd:61:d8:6f:b7:e5:96:7f: 8f:99:35:b5:6d:46:02:b9:a2:dc:ab:0d:b6:f1:6a: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9F:B9:E9:24:24:E9:E0:9A:4F:5E:EB:70:A3:2E:6A:3C:42:5D:3A X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7c:ed:e4:05:03:c1:39:7a:54:91:07:ee:c8:35:b1:ca:c2: 91:3f:26:52:4c:c9:67:4f:a0:35:49:1b:99:10:52:10:3b:1e: 10:76:af:b7:d9:02:0d:01:6d:be:16:4d:c1:17:a7:ee:05:48: 28:28:62:36:0e:c7:7f:66:8f:30:65:6c:f2:08:be:e4:e2:3c: c5:b7:0d:30:63:cb:33:ad:ec:5a:25:9b:fb:f0:bd:c4:59:98: c2:8e:92:f6:de:a8:c4:e3:58:e7:e1:13:21:31:c3:cf:91:d9: 65:d7:e5:d8:88:84:3b:8a:a8:aa:bb:63:0b:d5:51:0f:49:1e: 47:1e:4d:f4:97:64:83:ea:35:6a:83:bc:7c:1f:c1:12:89:6b: 1c:57:ee:ef:d4:77:a6:a0:68:51:31:fc:dd:3e:31:b4:52:5c: 0b:ee:fd:5e:83:e5:6d:0e:7a:32:c8:93:52:a9:57:44:6b:a0: c0:f3:f9:ed:1a:ff:ba:06:45:23:e7:a1:2e:6a:25:81:f6:bf: 2a:aa:ce:f4:6b:85:7e:16:a1:25:6b:a1:a3:7c:02:e4:b1:ae: b4:a2:cd:4c:f6:13:6d:0b:33:4f:a3:61:dc:5e:22:fc:3f:17: b4:1a:df:4e:a8:55:35:fb:cd:35:43:e4:c0:6a:64:43:ff:b0: 6c:58:5c:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkbd0wWtqiRwEPJ4rqrq7q4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjUwOTA1MjAwMDI3WhcNMjUwOTA2MjAwMDI3WjAzMTEwLwYDVQQD EygxNzlmYjllOTI0MjRlOWUwOWE0ZjVlZWI3MGEzMmU2YTNjNDI1ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5maQtufVVcvZPlWOitAvAk/JRCdd ++4E9dpw6N1mPU709IOmEhubgzpwVW35RiQf3FGtc7QUC5gL1kN9cvepmAJzTmk0 bD3KVnqQ0kLfhfs0WUIo2K/RzF135Se+miUDYUG22F3zNCBeuXETF+SP5WoswFZy z2XatWTodUOpZC9ELqZkOxDVbqieOUIUtafFP7NKirfNXqMphsiqGFocO+9AVbwE sD+FF41EIk38uizJCnjUgH3vfT3lNDbzxf14L6AwgWF8NXsEI1DuJs3/xKA6lapc KomOJ/fj7O35qKTEUEJSlGNBvWHYb7flln+PmTW1bUYCuaLcqw228WoQ2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBefuekkJOngmk9e63CjLmo8Ql06MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnzt5AUD wTl6VJEH7sg1scrCkT8mUkzJZ0+gNUkbmRBSEDseEHavt9kCDQFtvhZNwRen7gVI KChiNg7Hf2aPMGVs8gi+5OI8xbcNMGPLM63sWiWb+/C9xFmYwo6S9t6oxONY5+ET ITHDz5HZZdfl2IiEO4qoqrtjC9VRD0keRx5N9Jdkg+o1aoO8fB/BEolrHFfu79R3 pqBoUTH83T4xtFJcC+79XoPlbQ56MsiTUqlXRGugwPP57Rr/ugZFI+ehLmolgfa/ KqrO9GuFfhahJWuho3wC5LGutKLNTPYTbQszT6Nh3F4i/D8XtBrfTqhVNfvNNUPk wGpkQ/+wbFhcPw== -----END CERTIFICATE-----Generated at Sat Sep 6 02:20:24 2025 by rpki-client