$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: FK3YTtnVOy3nTDC5klZNdbtBl1/75ZhgB/zdWp29XEk= Subject key identifier: B6:C8:6E:CA:59:45:5D:08:D2:D4:58:80:74:DA:C8:A1:9A:1E:AE:4D Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019919F711CE234F45C5DED4D9904000E81A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1676 Signing time: Fri 05 Sep 2025 13:00:46 +0000 Manifest this update: Fri 05 Sep 2025 13:00:46 +0000 Manifest next update: Sat 06 Sep 2025 13:00:46 +0000 Files and hashes: 1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=) 2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=) 3: 94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa (hash: T/WAoLxo0PnxVr7nnlx3pomYG3O8lrRy6KTbycXayvo=) 4: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=) 5: G1_7-l6SOhcMGwm4Q4QRU0G0dg4.roa (hash: QXiiZ3VfyX8LoKEFp1jr8ZJ1hSMXw8WJGVPoXN5t20w=) 6: L7IG9Ln6m_zfp5UQKVs9myh5Dc0.roa (hash: jvI7jkzEKQADjdVqEl4h9ucF4+e+Qcpdc9H60hR13Xg=) 7: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=) 8: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=) 9: OryNoX3UGMIcnoUd_MsLiDY7bng.roa (hash: o+SjC06El+Rv9wA0fL1qtJp9DJ4Kq5lIbfs8S2VVaKI=) 10: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: 9wzmGfjpSCG0sg7Q8kRJ9MbVhWq061GnAmj2wfWKmlY=) 11: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=) 12: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=) 13: oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa (hash: ZaFy/IgwDL83LKh9KTxH1aabJGJHABexBAR3ZVnZnVk=) 14: qGk1e2SSj7a867DIFcXEQy9VRwk.roa (hash: FczogQCjHMZiK1Ux2uZ685nsTVBLAXheYXkPGrZoEcc=) 15: qKcCLtEG432D5WJB88yhMQT2crs.roa (hash: DjjEwdV67kxPopToL5gQtYQLfwXVH8iDrqBq6qd58Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:19:f7:11:ce:23:4f:45:c5:de:d4:d9:90:40:00:e8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Sep 5 13:00:46 2025 GMT Not After : Sep 6 13:00:46 2025 GMT Subject: CN=b6c86eca59455d08d2d4588074dac8a19a1eae4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:1f:c7:c5:a6:8a:64:1d:c9:be:ea:50:a9: a4:0e:cd:ac:44:e4:cf:58:10:c1:ab:0f:e6:43:08: a8:42:d6:80:91:c0:75:b5:db:28:89:80:f0:8b:a7: 6a:e5:82:3b:cc:36:71:51:eb:8f:54:56:5b:fa:93: 19:32:84:10:f1:5d:af:af:45:98:2e:a5:25:4e:94: a2:7c:27:79:97:74:f1:ce:13:bc:bb:55:12:b3:34: cb:fe:1a:96:63:b9:ea:8f:45:4f:22:a4:40:18:96: 4c:ed:94:eb:76:82:8b:25:b1:d3:97:1e:cd:45:59: eb:d5:3b:e1:9e:d1:d7:06:a2:21:91:4c:75:78:96: 5b:77:a6:c5:97:70:03:d0:3d:75:ce:88:74:81:3f: 6f:3c:03:63:fd:dd:06:57:cb:ef:7c:78:bb:87:d9: b5:0a:35:e7:11:f3:2b:b4:c7:22:13:b3:63:b2:8a: 51:81:6d:3b:fd:b6:de:18:f8:1e:70:68:2f:6d:92: b0:5c:c6:d1:a6:6f:65:23:53:ae:2b:59:e9:8e:f4: 7e:55:f7:90:e0:f6:23:7e:36:b0:b5:6c:c6:ae:7b: 55:d1:1d:cf:56:b5:5d:37:a8:4e:1e:83:c1:72:a0: 29:d7:8d:a0:2b:11:67:44:2b:13:98:36:5d:31:47: 34:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C8:6E:CA:59:45:5D:08:D2:D4:58:80:74:DA:C8:A1:9A:1E:AE:4D X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a1:0d:ed:1c:cd:63:87:a4:cc:5d:fa:68:98:72:3c:c2:ca: d8:55:74:82:e0:8c:2c:19:9d:4c:78:a0:55:a2:b0:f5:18:79: bd:ce:6d:37:91:34:8a:10:b1:18:eb:90:01:d4:58:8a:50:d3: 71:46:65:74:d6:25:72:40:fd:1d:60:b3:65:04:61:0e:50:f7: 30:bf:36:d1:ed:ee:13:ce:a9:1b:55:4e:65:3d:4d:61:d4:b3: 9a:e0:c7:77:01:8a:e6:68:71:3f:2f:49:4a:1a:a7:a0:e7:b2: d4:60:15:c5:51:a2:35:df:94:bd:f3:dc:c7:33:f0:59:19:ce: 75:0b:eb:67:81:a5:e7:61:bb:25:2c:12:97:07:28:05:e4:05: f1:96:cb:0e:7a:dc:0a:c8:74:37:81:8d:d5:a0:da:95:8b:c0: 97:61:9e:08:19:15:80:16:35:9f:78:ce:c6:9f:96:a9:c2:e2: 41:1a:19:9a:2d:30:15:f1:ff:6f:c3:ba:b2:38:bb:10:2f:dd: 2a:ed:c7:71:dd:c1:27:1a:f9:07:f9:fa:47:4e:68:41:a6:9a: 86:f1:6b:fa:91:ad:2a:c1:43:c6:53:79:a7:c7:7f:26:63:99: b2:a2:00:7d:a4:6a:eb:78:01:50:a6:08:81:07:4f:93:d3:1a: 03:33:18:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkZ9xHOI09Fxd7U2ZBAAOgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjUwOTA1MTMwMDQ2WhcNMjUwOTA2MTMwMDQ2WjAzMTEwLwYDVQQD EyhiNmM4NmVjYTU5NDU1ZDA4ZDJkNDU4ODA3NGRhYzhhMTlhMWVhZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrcfx8WmimQdyb7qUKmkDs2sROTP WBDBqw/mQwioQtaAkcB1tdsoiYDwi6dq5YI7zDZxUeuPVFZb+pMZMoQQ8V2vr0WY LqUlTpSifCd5l3TxzhO8u1USszTL/hqWY7nqj0VPIqRAGJZM7ZTrdoKLJbHTlx7N RVnr1TvhntHXBqIhkUx1eJZbd6bFl3AD0D11zoh0gT9vPANj/d0GV8vvfHi7h9m1 CjXnEfMrtMciE7NjsopRgW07/bbeGPgecGgvbZKwXMbRpm9lI1OuK1npjvR+VfeQ 4PYjfjawtWzGrntV0R3PVrVdN6hOHoPBcqAp142gKxFnRCsTmDZdMUc09wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbIbspZRV0I0tRYgHTayKGaHq5NMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKEN7RzN Y4ekzF36aJhyPMLK2FV0guCMLBmdTHigVaKw9Rh5vc5tN5E0ihCxGOuQAdRYilDT cUZldNYlckD9HWCzZQRhDlD3ML820e3uE86pG1VOZT1NYdSzmuDHdwGK5mhxPy9J ShqnoOey1GAVxVGiNd+UvfPcxzPwWRnOdQvrZ4Gl52G7JSwSlwcoBeQF8ZbLDnrc Csh0N4GN1aDalYvAl2GeCBkVgBY1n3jOxp+WqcLiQRoZmi0wFfH/b8O6sji7EC/d Ku3Hcd3BJxr5B/n6R05oQaaahvFr+pGtKsFDxlN5p8d/JmOZsqIAfaRq63gBUKYI gQdPk9MaAzMYGA== -----END CERTIFICATE-----Generated at Fri Sep 5 17:49:02 2025 by rpki-client