$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft File: 7XfmuSWzt6eruSiF1V1zPcX6YtI.mft (raw, json) Hash identifier: kUUKZSUXIOR65feea44q2J75yzXFwWyL4woW4lwlh5o= Subject key identifier: F7:F1:78:14:43:F1:8E:70:80:45:CC:31:F8:34:41:D3:37:59:B9:0B Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 01988FFE915D693311808FC11604B4075784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft Manifest number: 0F47 Signing time: Sat 09 Aug 2025 18:01:21 +0000 Manifest this update: Sat 09 Aug 2025 18:01:21 +0000 Manifest next update: Sun 10 Aug 2025 18:01:21 +0000 Files and hashes: 1: 1-CO-fvpLt-7xcDizbV9I34n9dPg.roa (hash: 65azsLcm+e9fC1eLww5W9pplp0n/3BVkvu0yEBHI1/s=) 2: 2SMgTvrgi0QtK86QVDF0HeNX37g.roa (hash: bXncWfdYuf1oB9hHOXL5B9gbBLNuO9YCT7mJOYaH4PA=) 3: 7XfmuSWzt6eruSiF1V1zPcX6YtI.crl (hash: ZVD4M2ki5JBL9bgGGBF2UILwXVFXy+OV5XUAHS/e4D8=) 4: 7hd2sIUznI41DIGnvdgKPC_VoHM.roa (hash: 3DEd/e9i/VsK7C0PBuZvR6e5ADJXMsKAg6zB1qI4fVA=) 5: 7s1vlMSfOJKnVeCwaN8pm_OILY0.roa (hash: C7906cZU8aCKXOyLJviN3x2QEg+urUVyv2wDiZLVQrg=) 6: GllXyrQCVpAoVUeLqzuPLHA6iuM.roa (hash: sj/xvHaYGyX/JCJyYziN03CArrbvqUYjlOC14gtyPO0=) 7: HW3yz8X7qxTo7UfeqkWq12X_8DY.roa (hash: Sg386YREgnkLIDryYsuZ5WxU45X+cAEuTL3x1T+HdFI=) 8: H_cb2iywkPGRQSLwNVkOTqdUTug.roa (hash: 2dTUvBGdK5D//WJ0qxOg9jP8DQIrOveZv5qM/ewz0G8=) 9: Rgvu8EMlSRTOVq8D6ZWnIaACnnM.roa (hash: bF3sARn5mB454VweHfQrOsXgNq9FwlfNQVAiUDVNcCM=) 10: THoss3qX9ggNaIx9MssWt8dF9cs.roa (hash: lddYscsC9WWXqXk/CKT6eni3Y6p0rpSS4tBt83PgI6s=) 11: _Mfy4Kst9sDDePWmWOtIuWubLWs.roa (hash: cvaNgH9cPXLtV9CpswHyu4gb3PwQnex2hsIpgXmioos=) 12: _dj93V8CgTr4WtPvkeAuwUmW2TE.roa (hash: ZN3MQ6SbuQBeM8qd6E8KM2I3KZr5yEBWX0GSlucExQY=) 13: fDWbip1-YNcvwFB10wWogqS6hpg.roa (hash: 0bycX6lJtic2qo3rY1WaTtAanYsxsXCfO/8R29cbxyU=) 14: lMG-MbpwKixzG9irxD_nVMIqhAQ.roa (hash: uC6Epy1/dmwLAA2Y1Uy00aYyeSC9OBBxmLjF43DAq6Q=) 15: lryZPvbj4yExvdlOIp2SCrWeSCY.roa (hash: FCRNygfVB0sk9T6/Ss2lAq6vxOZw7f+qQ3cAYEeERzM=) 16: mLyW0Pb3zSMLnJ2LcHvqcLtKvME.roa (hash: 7biTWCMX8dd/Yb4YGy3RGmQNgsca/j6VVKHXZnWFEY4=) 17: ocSPuPJzak2nhLrF7PE9QuyF6_o.roa (hash: S2R+rxn3ei+reQbvszIhMRwiS0WPW2r3/iSwtXY8D2g=) 18: xTPblglr4TYoyJotTqPI-C0T4s4.roa (hash: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=) 19: y08vt-6XfGq4rmWBd5xWgiqilPE.roa (hash: Aq7IiQBdCPg8kz97DvBqBJmTkJ1OIzksvzSyrjSG9R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8f:fe:91:5d:69:33:11:80:8f:c1:16:04:b4:07:57:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Aug 9 18:01:21 2025 GMT Not After : Aug 10 18:01:21 2025 GMT Subject: CN=f7f1781443f18e708045cc31f83441d33759b90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:27:b3:b8:df:cb:26:5d:70:13:3d:9a:68: f2:c9:a0:0b:e3:4e:51:cd:19:05:2d:38:59:0a:9c: 3d:12:40:2f:50:4b:18:54:4a:98:96:0d:4a:fc:0c: 8e:3c:c9:a5:99:c6:fa:35:f5:e3:39:4b:98:5c:03: bf:57:d1:93:d0:bc:e0:6d:4b:58:85:35:f3:e7:33: 19:70:ab:13:ad:0e:4f:af:1c:50:04:c2:2c:4e:0d: 51:b1:52:c2:98:6d:07:8d:10:5b:23:d4:29:54:0e: dc:04:ac:05:56:69:18:71:91:35:61:fe:80:57:4d: 25:45:6d:11:33:ac:f0:6a:ab:45:d7:92:ff:d0:4e: a1:03:4f:c0:90:81:c3:3b:80:08:d3:6f:24:36:c0: 9f:91:8a:1a:49:43:5a:82:94:fa:c9:69:b2:c9:16: 57:67:66:f2:a7:92:9f:17:d3:99:5a:22:65:96:49: c6:71:b6:a2:15:cb:b3:e9:3e:59:ee:d7:d9:85:b5: fa:fc:aa:25:e1:32:35:e4:77:09:34:bb:90:1d:6e: a2:d9:9d:72:84:ca:e8:d5:93:0f:6e:83:19:ea:99: 58:c2:a8:61:a1:1e:ec:45:70:f0:95:af:3c:c3:ba: f8:37:b1:b2:a3:64:f2:da:ea:72:80:9d:e4:d6:bf: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F1:78:14:43:F1:8E:70:80:45:CC:31:F8:34:41:D3:37:59:B9:0B X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:21:d6:28:12:db:2a:4e:bc:a7:8b:ec:66:3e:8c:1a:b0:ad: e0:bd:11:2f:04:08:42:47:14:af:22:a6:84:88:00:dc:40:ab: c9:c4:3c:39:80:39:99:4a:19:86:10:5e:32:f9:c0:4a:86:86: 53:10:74:b0:54:97:a1:88:15:68:de:fa:15:6f:00:7e:09:14: 81:f3:05:fc:8e:72:20:0c:e7:a5:89:75:bc:d4:b3:b3:19:42: 0f:72:cd:a5:b5:55:66:95:d3:62:5c:c4:8a:c0:9b:6a:b1:54: 66:bb:70:ac:c5:24:5e:95:ef:5d:c4:ac:4e:66:b2:89:f4:2b: 27:75:45:b8:ed:f2:c0:a6:45:f4:0d:54:f5:a2:ad:94:f9:1b: 45:50:68:d7:cc:92:2b:fd:fb:be:0a:f9:f8:67:b2:93:d8:b0: bc:50:9a:2d:14:f9:8b:e3:4e:da:09:1b:46:a4:93:64:5d:cc: 47:51:7f:50:f3:28:1f:d5:72:ec:55:37:5b:63:99:37:db:f7: e9:70:76:26:1f:ba:19:6c:bb:e3:98:41:4e:63:2e:f9:68:20: 9d:29:67:12:f9:44:1b:c2:f3:50:e2:91:95:a8:4c:f3:2b:d6: c1:fd:c6:0e:e0:06:23:ca:fa:84:97:60:b4:c4:d2:fa:e4:08: 4b:a2:9c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiP/pFdaTMRgI/BFgS0B1eEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjUwODA5MTgwMTIxWhcNMjUwODEwMTgwMTIxWjAzMTEwLwYDVQQD EyhmN2YxNzgxNDQzZjE4ZTcwODA0NWNjMzFmODM0NDFkMzM3NTliOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEMns7jfyyZdcBM9mmjyyaAL405R zRkFLThZCpw9EkAvUEsYVEqYlg1K/AyOPMmlmcb6NfXjOUuYXAO/V9GT0LzgbUtY hTXz5zMZcKsTrQ5PrxxQBMIsTg1RsVLCmG0HjRBbI9QpVA7cBKwFVmkYcZE1Yf6A V00lRW0RM6zwaqtF15L/0E6hA0/AkIHDO4AI028kNsCfkYoaSUNagpT6yWmyyRZX Z2byp5KfF9OZWiJllknGcbaiFcuz6T5Z7tfZhbX6/Kol4TI15HcJNLuQHW6i2Z1y hMro1ZMPboMZ6plYwqhhoR7sRXDwla88w7r4N7Gyo2Ty2upygJ3k1r/HZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfxeBRD8Y5wgEXMMfg0QdM3WbkLMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyHWKBLb Kk68p4vsZj6MGrCt4L0RLwQIQkcUryKmhIgA3ECrycQ8OYA5mUoZhhBeMvnASoaG UxB0sFSXoYgVaN76FW8AfgkUgfMF/I5yIAznpYl1vNSzsxlCD3LNpbVVZpXTYlzE isCbarFUZrtwrMUkXpXvXcSsTmayifQrJ3VFuO3ywKZF9A1U9aKtlPkbRVBo18yS K/37vgr5+Geyk9iwvFCaLRT5i+NO2gkbRqSTZF3MR1F/UPMoH9Vy7FU3W2OZN9v3 6XB2Jh+6GWy745hBTmMu+WggnSlnEvlEG8LzUOKRlahM8yvWwf3GDuAGI8r6hJdg tMTS+uQIS6KcOg== -----END CERTIFICATE-----Generated at Sat Aug 9 23:28:04 2025 by rpki-client